This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4yQDS6u9MkXi6RZu5qzTNirRpyY.roa File: 4yQDS6u9MkXi6RZu5qzTNirRpyY.roa (raw, json) Hash identifier: +iFnk8A94WjET/aS6Ntcnntw2J3D71tFqAnLPz6LHWY= Subject key identifier: E3:24:03:4B:AB:BD:32:45:E2:E9:16:6E:E6:AC:D3:36:2A:D1:A7:26 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019C10122A765497B21C2899A05C79053FF7 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4yQDS6u9MkXi6RZu5qzTNirRpyY.roa Signing time: Fri 30 Jan 2026 18:02:31 +0000 ROA not before: Fri 30 Jan 2026 18:02:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9457 IP address blocks: 151.246.129.0/24 maxlen: 24 151.246.157.0/24 maxlen: 24 151.247.79.0/24 maxlen: 24 151.247.95.0/24 maxlen: 24 151.247.100.0/24 maxlen: 24 151.247.111.0/24 maxlen: 24 151.247.174.0/24 maxlen: 24 151.247.176.0/24 maxlen: 24 151.247.178.0/24 maxlen: 24 151.247.180.0/24 maxlen: 24 151.247.237.0/24 maxlen: 24 151.247.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 06:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:10:12:2a:76:54:97:b2:1c:28:99:a0:5c:79:05:3f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 30 18:02:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e324034babbd3245e2e9166ee6acd3362ad1a726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:47:22:f8:30:07:a1:ae:4f:27:54:52:7e:1b: 78:c1:d8:35:df:6c:f5:82:5d:48:33:a2:44:b2:cb: 31:69:e3:ae:fd:da:a5:5f:62:d4:87:24:38:8a:8f: 3b:cb:c6:67:ba:13:7e:97:fb:eb:35:b4:6d:24:35: c6:a6:eb:0e:90:ce:c7:1e:a4:75:79:5f:99:1a:7b: 22:19:e7:3b:2c:b7:20:50:84:bd:bc:5f:ef:c2:63: da:73:10:60:dc:64:82:e7:f9:4c:54:c9:d0:44:7b: bb:74:86:e0:fe:4b:eb:45:41:63:a0:d3:83:92:ea: 9d:d4:bf:2a:21:4e:74:a6:31:de:48:3c:28:37:c4: cb:cc:2b:6a:4e:7b:bf:a1:6e:2c:62:30:bc:9d:18: 3b:4f:32:37:a2:2b:7c:c9:2f:38:4e:27:b2:96:a4: a6:50:b2:5f:6b:4b:2a:1b:d2:95:2b:da:96:0a:61: 41:11:b5:68:6b:84:3b:1d:53:d9:ba:a5:2a:91:9b: 40:2f:ca:fd:2b:94:f6:e4:35:e7:c8:ba:08:e6:20: c2:b1:3d:86:3d:5b:05:9d:ee:4e:6f:a3:0e:43:c7: 8d:14:51:0d:08:47:22:24:a8:0d:79:1c:ae:f1:14: fd:e6:a5:a0:7d:40:d0:61:76:f7:a8:83:be:f6:98: d3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:24:03:4B:AB:BD:32:45:E2:E9:16:6E:E6:AC:D3:36:2A:D1:A7:26 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4yQDS6u9MkXi6RZu5qzTNirRpyY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.246.129.0/24 151.246.157.0/24 151.247.79.0/24 151.247.95.0/24 151.247.100.0/24 151.247.111.0/24 151.247.174.0/24 151.247.176.0/24 151.247.178.0/24 151.247.180.0/24 151.247.237.0/24 151.247.251.0/24 Signature Algorithm: sha256WithRSAEncryption 18:25:d5:0d:ce:76:cf:7c:bb:06:82:44:01:dc:69:fd:72:8c: 76:b9:ae:2c:f1:01:a8:cd:c1:b0:74:c3:69:dc:33:45:49:83: 8c:b7:2d:bd:06:28:8b:b8:d3:a0:d5:88:5a:e7:1d:27:7b:00: 9f:95:db:dd:5c:85:96:a8:fa:03:2e:b9:0f:04:f5:19:1f:f7: 52:99:5e:d4:42:88:d9:d0:e0:d3:63:57:00:99:0a:1b:8e:8e: a1:ff:5a:a1:24:c8:38:47:f5:56:ab:36:55:76:ff:a8:e3:f4: 23:a4:27:f9:42:f3:c6:3e:67:eb:de:cb:24:47:79:e0:b8:81: 17:17:f7:6d:d4:1b:9b:ce:44:37:af:11:74:48:0a:6d:ae:5c: 63:63:f1:20:32:a5:13:33:36:54:6f:1a:a9:e1:90:9e:4b:ba: b3:a5:3d:e4:f2:42:ed:c6:af:71:9a:4b:47:c1:47:c5:72:2a: 76:a2:c2:ab:40:72:28:e8:d3:32:ca:b3:2e:c6:5d:a1:a5:15: 0d:0c:7b:2a:d4:89:5a:25:a6:7a:b2:23:dd:fd:15:a6:3f:7b: e6:d7:5a:c3:3b:4a:4e:72:af:aa:1b:00:1a:22:b9:e3:62:f2: 14:3e:81:6f:bc:04:c8:44:de:6c:4f:99:cb:b1:e7:69:9d:16: 55:5a:02:cf -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZwQEip2VJeyHCiZoFx5BT/3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTMwMTgwMjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzI0MDM0YmFiYmQzMjQ1ZTJlOTE2NmVlNmFjZDMzNjJhZDFhNzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0ci+DAHoa5PJ1RSfht4wdg132z1 gl1IM6JEsssxaeOu/dqlX2LUhyQ4io87y8ZnuhN+l/vrNbRtJDXGpusOkM7HHqR1 eV+ZGnsiGec7LLcgUIS9vF/vwmPacxBg3GSC5/lMVMnQRHu7dIbg/kvrRUFjoNOD kuqd1L8qIU50pjHeSDwoN8TLzCtqTnu/oW4sYjC8nRg7TzI3oit8yS84TieylqSm ULJfa0sqG9KVK9qWCmFBEbVoa4Q7HVPZuqUqkZtAL8r9K5T25DXnyLoI5iDCsT2G PVsFne5Ob6MOQ8eNFFENCEciJKgNeRyu8RT95qWgfUDQYXb3qIO+9pjT0QIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFOMkA0urvTJF4ukWbuas0zYq0acmMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvNHlRRFM2dTlNa1hpNlJadTVxelROaXJScHlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAl/aBAwQA l/adAwQAl/dPAwQAl/dfAwQAl/dkAwQAl/dvAwQAl/euAwQAl/ewAwQAl/eyAwQA l/e0AwQAl/ftAwQAl/f7MA0GCSqGSIb3DQEBCwUAA4IBAQAYJdUNznbPfLsGgkQB 3Gn9cox2ua4s8QGozcGwdMNp3DNFSYOMty29BiiLuNOg1Yha5x0newCfldvdXIWW qPoDLrkPBPUZH/dSmV7UQojZ0ODTY1cAmQobjo6h/1qhJMg4R/VWqzZVdv+o4/Qj pCf5QvPGPmfr3sskR3nguIEXF/dt1BubzkQ3rxF0SAptrlxjY/EgMqUTMzZUbxqp 4ZCeS7qzpT3k8kLtxq9xmktHwUfFcip2osKrQHIo6NMyyrMuxl2hpRUNDHsq1Ila JaZ6siPd/RWmP3vm11rDO0pOcq+qGwAaIrnjYvIUPoFvvATIRN5sT5nLsedpnRZV WgLP -----END CERTIFICATE-----Generated at Tue Feb 10 12:58:59 2026 by rpki-client