This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3U8qm3ypWYAgL0qOet1clpuO0Mw.roa File: 3U8qm3ypWYAgL0qOet1clpuO0Mw.roa (raw, json) Hash identifier: dP+P8yyJ36mGSZzaE+AvsH33KQYGhvwY+N4qe0U6tNw= Subject key identifier: DD:4F:2A:9B:7C:A9:59:80:20:2F:4A:8E:7A:DD:5C:96:9B:8E:D0:CC Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB4F8EE5388E40BA6D10B458C101D0 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3U8qm3ypWYAgL0qOet1clpuO0Mw.roa Signing time: Fri 02 Jan 2026 08:20:34 +0000 ROA not before: Fri 02 Jan 2026 08:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137517 IP address blocks: 151.240.120.0/24 maxlen: 24 151.241.20.0/24 maxlen: 24 151.242.140.0/24 maxlen: 24 151.243.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4f:8e:e5:38:8e:40:ba:6d:10:b4:58:c1:01:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd4f2a9b7ca95980202f4a8e7add5c969b8ed0cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d8:9f:0e:90:c9:91:c1:ed:a1:ca:bc:47:47: 6f:5e:b3:f9:42:44:58:00:f2:20:fa:b0:b8:a4:13: 53:15:5c:ab:e4:5d:c8:c5:74:06:e0:f4:92:16:1d: e9:1b:34:11:ae:ea:68:b4:26:03:f5:8f:a4:5f:79: aa:0d:e1:08:6f:6a:d0:4b:75:98:b0:53:3a:fb:ad: 1e:b1:40:a9:bd:21:2f:e1:38:34:63:cb:58:38:1f: dc:cd:52:7e:f0:49:fb:9c:f7:17:b7:39:54:1a:3e: 19:50:dd:60:c7:f8:52:fc:5f:b5:ad:9c:1b:d8:21: 6f:c8:d9:86:8d:ca:54:31:96:81:c6:e6:90:81:39: ff:69:67:35:f5:0e:15:14:69:44:cd:e7:20:76:11: fc:ed:ed:ae:57:c8:81:5e:a4:8c:68:dc:e6:66:3f: 22:fc:3b:e4:17:ac:95:1f:e3:fe:bb:a0:f6:4c:2b: dc:78:32:11:3d:fa:45:dc:cf:bc:55:3c:8d:b2:51: d1:89:58:60:c8:81:0f:68:b6:75:09:f6:96:72:14: 1e:09:e0:29:e4:e2:9b:57:c5:39:48:cb:41:3b:90: 28:f0:3a:9e:6d:85:59:6d:39:12:ec:96:50:08:6e: c4:0a:7a:1e:a1:96:6e:b4:3f:24:66:9e:a5:92:e6: 23:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4F:2A:9B:7C:A9:59:80:20:2F:4A:8E:7A:DD:5C:96:9B:8E:D0:CC X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3U8qm3ypWYAgL0qOet1clpuO0Mw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.120.0/24 151.241.20.0/24 151.242.140.0/24 151.243.136.0/24 Signature Algorithm: sha256WithRSAEncryption 87:85:b3:7e:c3:8e:cc:4e:a7:35:66:cf:ca:66:d7:be:e9:79: 41:95:9a:84:70:2d:76:ba:15:7b:1f:42:9a:b9:81:6a:27:bb: a1:c5:69:2b:21:53:18:75:e4:6d:cd:e9:81:3c:f4:f7:28:5c: 81:ba:c5:99:3a:c4:66:91:ec:39:f5:96:3a:7c:6e:ac:8b:21: 13:65:89:ff:47:de:01:18:e6:d4:f1:ca:97:97:70:4f:38:77: dc:01:92:df:77:1f:a1:7f:f7:fc:b0:13:05:64:12:dc:5f:72: 75:18:67:22:f6:42:66:48:be:ff:c1:ae:78:d5:73:48:e5:97: 63:c8:12:31:2d:4b:a4:c3:51:0f:32:46:b3:d9:02:12:2f:d0: e6:de:d3:03:8b:e1:19:03:0b:cc:05:51:a1:70:91:83:c4:d7: da:6a:a0:02:2d:40:2e:49:fd:44:7c:70:3a:bd:e0:25:38:78: 8c:67:a8:e9:1a:fb:0a:f6:ea:a2:8d:06:59:5a:4e:04:e9:26: aa:36:3b:aa:e9:ba:4c:fe:49:01:0c:9c:66:12:b5:71:fc:bc: 9c:f6:e7:a0:2e:40:d7:0a:4c:e4:7e:2d:09:55:ec:63:77:4e: a9:c8:ac:23:00:fe:a2:01:79:e1:17:eb:23:20:ab:62:2b:3a: 9c:d8:6e:d1 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9y0+O5TiOQLptELRYwQHQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDRmMmE5YjdjYTk1OTgwMjAyZjRhOGU3YWRkNWM5NjliOGVkMGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNifDpDJkcHtocq8R0dvXrP5QkRY APIg+rC4pBNTFVyr5F3IxXQG4PSSFh3pGzQRrupotCYD9Y+kX3mqDeEIb2rQS3WY sFM6+60esUCpvSEv4Tg0Y8tYOB/czVJ+8En7nPcXtzlUGj4ZUN1gx/hS/F+1rZwb 2CFvyNmGjcpUMZaBxuaQgTn/aWc19Q4VFGlEzecgdhH87e2uV8iBXqSMaNzmZj8i /DvkF6yVH+P+u6D2TCvceDIRPfpF3M+8VTyNslHRiVhgyIEPaLZ1CfaWchQeCeAp 5OKbV8U5SMtBO5Ao8DqebYVZbTkS7JZQCG7ECnoeoZZutD8kZp6lkuYjwQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFN1PKpt8qVmAIC9KjnrdXJabjtDMMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvM1U4cW0zeXBXWUFnTDBxT2V0MWNscHVPME13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/B4AwQA l/EUAwQAl/KMAwQAl/OIMA0GCSqGSIb3DQEBCwUAA4IBAQCHhbN+w47MTqc1Zs/K Zte+6XlBlZqEcC12uhV7H0KauYFqJ7uhxWkrIVMYdeRtzemBPPT3KFyBusWZOsRm kew59ZY6fG6siyETZYn/R94BGObU8cqXl3BPOHfcAZLfdx+hf/f8sBMFZBLcX3J1 GGci9kJmSL7/wa541XNI5ZdjyBIxLUukw1EPMkaz2QISL9Dm3tMDi+EZAwvMBVGh cJGDxNfaaqACLUAuSf1EfHA6veAlOHiMZ6jpGvsK9uqijQZZWk4E6SaqNjuq6bpM /kkBDJxmErVx/Lyc9uegLkDXCkzkfi0JVexjd06pyKwjAP6iAXnhF+sjIKtiKzqc 2G7R -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:52 2026 by rpki-client