This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5NeGnNOGcx4hVnebd1KeR5YzoZk.roa File: 5NeGnNOGcx4hVnebd1KeR5YzoZk.roa (raw, json) Hash identifier: /YAFeQnudc6p6Y6okhc5eWpuqGkZAIKZjA6Tx3mntfc= Subject key identifier: E4:D7:86:9C:D3:86:73:1E:21:56:77:9B:77:52:9E:47:96:33:A1:99 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB941EA9721B8ECD697024636AA41C Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5NeGnNOGcx4hVnebd1KeR5YzoZk.roa Signing time: Fri 02 Jan 2026 08:20:52 +0000 ROA not before: Fri 02 Jan 2026 08:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214208 IP address blocks: 151.242.23.0/24 maxlen: 24 151.242.84.0/24 maxlen: 24 151.242.171.0/24 maxlen: 24 151.243.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:94:1e:a9:72:1b:8e:cd:69:70:24:63:6a:a4:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4d7869cd386731e2156779b77529e479633a199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ed:ab:09:95:c3:c2:34:60:c8:4a:49:5d:29: 4c:d5:45:db:f0:f5:76:00:71:30:c5:b3:5a:04:08: 36:98:c2:f8:2c:11:52:f8:0c:55:20:b6:6f:71:e1: ab:eb:b4:02:54:0d:b3:e8:d2:be:20:7b:5a:61:89: a2:33:07:0c:3f:f7:c3:19:6a:1f:9c:1a:91:22:a7: da:67:4b:eb:f3:b7:f2:5f:59:dd:c3:ce:a2:02:4b: 25:cf:4e:0e:56:d3:5d:10:40:aa:bc:aa:2a:33:9d: 91:98:4c:7c:e1:cf:98:8d:e4:d1:5c:3e:07:b8:b2: 78:fe:a5:ea:9a:8b:ff:d8:c1:47:1d:ee:f6:63:26: 33:c1:b1:f4:a0:a1:c3:f3:01:ef:e5:36:69:26:b3: c5:f4:53:d5:15:3b:84:87:ad:ff:2d:be:ae:7d:78: 01:55:4a:db:ed:e8:92:1d:67:e5:b4:63:c4:68:e5: da:a5:7d:85:f9:aa:28:09:1a:97:87:32:30:47:a8: 8e:f9:5b:3d:12:fb:c5:06:22:9c:14:b8:cf:b8:36: e1:25:63:9e:cf:20:56:18:00:ba:6e:ac:62:b1:61: e3:46:a1:ef:fb:28:92:cf:94:37:1a:24:a9:f9:52: fe:d3:94:dc:e1:f6:51:cc:49:b4:2a:39:46:6d:16: d9:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:D7:86:9C:D3:86:73:1E:21:56:77:9B:77:52:9E:47:96:33:A1:99 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5NeGnNOGcx4hVnebd1KeR5YzoZk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.23.0/24 151.242.84.0/24 151.242.171.0/24 151.243.124.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:21:15:4e:08:78:9e:a7:f9:f0:ab:0d:0b:5b:11:ec:e0:7f: 25:54:e8:c3:66:9d:9f:51:05:32:a6:1a:4a:26:c4:b2:76:4b: b5:cd:ec:4d:50:e5:b6:70:f2:78:f7:0e:6a:90:5b:c4:3c:72: 2f:07:64:61:63:8c:94:0a:09:d0:ec:88:da:19:7e:2a:e4:75: c1:c7:36:54:03:38:9d:ef:e1:62:72:35:79:32:a7:a8:d1:8a: 9e:69:e6:15:25:6f:27:ce:15:c6:91:56:31:fd:3b:8e:40:5d: e2:d3:b1:d7:84:1a:e6:50:8a:68:a7:b3:10:35:72:d1:6d:d2: f9:3e:dc:72:d1:a0:44:13:10:21:7f:0f:cf:6d:f5:ed:d5:49: 2b:02:ff:41:ab:62:3c:e2:ab:07:15:3a:74:bc:6e:ca:b8:59: 7b:01:78:65:50:27:8d:24:10:dd:ed:ce:51:07:c7:8b:76:1e: 64:99:36:c8:c5:11:c6:c4:f2:40:63:fa:90:f5:44:bd:31:9d: 88:91:67:28:02:0e:c4:6e:1a:a6:0e:e6:f2:61:2c:6f:7e:ca: f9:5b:d9:bc:90:48:43:e8:ec:a5:c6:41:6c:59:2b:cf:75:b8: 54:0b:cd:0f:2b:ff:05:b9:f5:bb:5b:a5:2c:90:56:eb:5b:24: 14:13:d5:97 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9y5QeqXIbjs1pcCRjaqQcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGQ3ODY5Y2QzODY3MzFlMjE1Njc3OWI3NzUyOWU0Nzk2MzNhMTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO2rCZXDwjRgyEpJXSlM1UXb8PV2 AHEwxbNaBAg2mML4LBFS+AxVILZvceGr67QCVA2z6NK+IHtaYYmiMwcMP/fDGWof nBqRIqfaZ0vr87fyX1ndw86iAkslz04OVtNdEECqvKoqM52RmEx84c+YjeTRXD4H uLJ4/qXqmov/2MFHHe72YyYzwbH0oKHD8wHv5TZpJrPF9FPVFTuEh63/Lb6ufXgB VUrb7eiSHWfltGPEaOXapX2F+aooCRqXhzIwR6iO+Vs9EvvFBiKcFLjPuDbhJWOe zyBWGAC6bqxisWHjRqHv+yiSz5Q3GiSp+VL+05Tc4fZRzEm0KjlGbRbZ4wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOTXhpzThnMeIVZ3m3dSnkeWM6GZMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvNU5lR25OT0djeDRoVm5lYmQxS2VSNVl6b1prLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/IXAwQA l/JUAwQAl/KrAwQAl/N8MA0GCSqGSIb3DQEBCwUAA4IBAQCLIRVOCHiep/nwqw0L WxHs4H8lVOjDZp2fUQUyphpKJsSydku1zexNUOW2cPJ49w5qkFvEPHIvB2RhY4yU CgnQ7IjaGX4q5HXBxzZUAzid7+FicjV5Mqeo0YqeaeYVJW8nzhXGkVYx/TuOQF3i 07HXhBrmUIpop7MQNXLRbdL5Ptxy0aBEExAhfw/PbfXt1UkrAv9Bq2I84qsHFTp0 vG7KuFl7AXhlUCeNJBDd7c5RB8eLdh5kmTbIxRHGxPJAY/qQ9US9MZ2IkWcoAg7E bhqmDubyYSxvfsr5W9m8kEhD6OylxkFsWSvPdbhUC80PK/8FufW7W6UskFbrWyQU E9WX -----END CERTIFICATE-----Generated at Sun Jan 18 06:29:12 2026 by rpki-client