This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5ayxjdDJtox9ie2sqtONOb4Wu4o.roa File: 5ayxjdDJtox9ie2sqtONOb4Wu4o.roa (raw, json) Hash identifier: P/4kVPPNP/oPbNXF84p4WLhC4xu7Vf9crpNoOOoi83c= Subject key identifier: E5:AC:B1:8D:D0:C9:B6:8C:7D:89:ED:AC:AA:D3:8D:39:BE:16:BB:8A Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB83C500EF4315E6DA06927306D8FE Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5ayxjdDJtox9ie2sqtONOb4Wu4o.roa Signing time: Fri 02 Jan 2026 08:20:48 +0000 ROA not before: Fri 02 Jan 2026 08:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211415 IP address blocks: 151.241.0.0/24 maxlen: 24 151.241.2.0/24 maxlen: 24 151.241.4.0/24 maxlen: 24 151.244.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:83:c5:00:ef:43:15:e6:da:06:92:73:06:d8:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5acb18dd0c9b68c7d89edacaad38d39be16bb8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:8c:f3:03:1f:20:41:3f:1d:c7:b4:f9:e5:86: 79:51:c1:3d:58:36:24:24:32:63:a2:84:26:b8:ff: 21:06:7e:0d:f8:77:c6:67:14:4f:76:fc:4d:3a:49: 4d:a8:21:6b:5e:32:1a:05:3a:8c:6d:ad:1c:c9:d3: 43:c8:2f:ba:59:b4:61:cb:f8:49:95:65:d7:68:f3: ba:fa:9f:fd:38:5a:8b:31:5b:02:da:19:56:f5:13: 7b:26:e8:77:9b:94:3a:d0:51:50:e0:37:da:a6:0e: f1:d1:fb:57:2b:71:86:d0:fb:4b:f5:83:37:66:7b: 10:a7:38:b8:00:48:e7:e8:e0:c2:ea:d2:3a:ad:80: c1:a9:c2:13:14:f2:1d:ec:9d:79:b9:69:5e:5f:65: 48:5e:1f:5a:3a:66:ec:56:cb:9b:01:29:ba:55:c5: e2:01:cf:d7:b5:55:55:cf:58:ca:31:52:6c:ae:16: 40:19:16:89:4b:d5:c9:e8:20:23:45:c6:ae:9c:96: 9f:ac:fb:f3:5e:72:7b:a8:92:34:14:9d:23:ed:96: ce:73:99:bf:db:8b:4e:77:41:15:46:de:0f:42:d5: b5:c8:70:fd:6a:27:5d:73:dd:68:8c:ad:1a:5e:4d: a0:61:a7:5e:3b:09:11:45:6b:0f:a2:25:09:68:68: 02:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:AC:B1:8D:D0:C9:B6:8C:7D:89:ED:AC:AA:D3:8D:39:BE:16:BB:8A X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5ayxjdDJtox9ie2sqtONOb4Wu4o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.0.0/24 151.241.2.0/24 151.241.4.0/24 151.244.1.0/24 Signature Algorithm: sha256WithRSAEncryption 14:4e:a8:40:8d:78:88:65:41:95:f6:ef:93:17:42:bf:98:df: ed:4d:e9:93:40:99:70:1f:d4:2b:da:52:02:55:04:08:75:79: d6:74:8a:c1:1e:65:dd:08:85:38:10:29:08:d1:57:99:eb:dc: 06:c4:da:12:04:4a:71:51:fc:ea:9e:d1:e2:96:6e:ea:ba:32: 36:8f:59:a4:f1:24:da:7c:b9:d3:d7:8e:5b:fc:e5:8e:e2:30: 3d:11:b8:97:96:54:7f:f9:a1:bf:8e:6c:bc:de:f0:5d:d9:98: 55:07:9f:4b:90:fe:13:86:07:a2:c0:35:9e:b7:b2:1c:10:4c: 48:11:f9:47:fe:38:8b:17:20:d2:36:12:2d:e5:6f:64:ec:23: 6c:a1:db:45:f1:6b:47:95:03:2d:44:3d:e3:79:45:eb:9c:c5: 5b:c1:48:cb:34:c4:73:ab:fa:c9:49:a4:63:8f:b7:77:42:f0: 48:90:ee:e3:e1:b6:7f:f1:ca:52:bc:ef:26:56:6e:7b:74:20: e7:ef:31:bc:96:cb:9a:87:cd:2f:1b:32:47:5b:74:7f:52:86: 4e:82:0c:25:aa:49:e6:33:cd:33:f6:7d:e0:91:69:85:4b:21: 4c:b7:f0:0d:e0:30:43:59:30:6f:ba:09:55:ba:69:63:01:83: 92:51:dd:ad -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9y4PFAO9DFebaBpJzBtj+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWFjYjE4ZGQwYzliNjhjN2Q4OWVkYWNhYWQzOGQzOWJlMTZiYjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYzzAx8gQT8dx7T55YZ5UcE9WDYk JDJjooQmuP8hBn4N+HfGZxRPdvxNOklNqCFrXjIaBTqMba0cydNDyC+6WbRhy/hJ lWXXaPO6+p/9OFqLMVsC2hlW9RN7Juh3m5Q60FFQ4Dfapg7x0ftXK3GG0PtL9YM3 ZnsQpzi4AEjn6ODC6tI6rYDBqcITFPId7J15uWleX2VIXh9aOmbsVsubASm6VcXi Ac/XtVVVz1jKMVJsrhZAGRaJS9XJ6CAjRcaunJafrPvzXnJ7qJI0FJ0j7ZbOc5m/ 24tOd0EVRt4PQtW1yHD9aiddc91ojK0aXk2gYadeOwkRRWsPoiUJaGgC/QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOWssY3QybaMfYntrKrTjTm+FruKMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvNWF5eGpkREp0b3g5aWUyc3F0T05PYjRXdTRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/EAAwQA l/ECAwQAl/EEAwQAl/QBMA0GCSqGSIb3DQEBCwUAA4IBAQAUTqhAjXiIZUGV9u+T F0K/mN/tTemTQJlwH9Qr2lICVQQIdXnWdIrBHmXdCIU4ECkI0VeZ69wGxNoSBEpx UfzqntHilm7qujI2j1mk8STafLnT145b/OWO4jA9EbiXllR/+aG/jmy83vBd2ZhV B59LkP4ThgeiwDWet7IcEExIEflH/jiLFyDSNhIt5W9k7CNsodtF8WtHlQMtRD3j eUXrnMVbwUjLNMRzq/rJSaRjj7d3QvBIkO7j4bZ/8cpSvO8mVm57dCDn7zG8lsua h80vGzJHW3R/UoZOggwlqknmM80z9n3gkWmFSyFMt/AN4DBDWTBvuglVumljAYOS Ud2t -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:37 2026 by rpki-client