This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5cVQkaUq1v_u0IR-WecqZBD_Oms.roa File: 5cVQkaUq1v_u0IR-WecqZBD_Oms.roa (raw, json) Hash identifier: +SAbjw7Aj90BZ9byp/LcpMqbZkcciz/cTV3E99nEC9M= Subject key identifier: E5:C5:50:91:A5:2A:D6:FF:EE:D0:84:7E:59:E7:2A:64:10:FF:3A:6B Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB734436F12291FBFEC28D56708B8C Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5cVQkaUq1v_u0IR-WecqZBD_Oms.roa Signing time: Fri 02 Jan 2026 08:20:43 +0000 ROA not before: Fri 02 Jan 2026 08:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207594 IP address blocks: 151.241.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:73:44:36:f1:22:91:fb:fe:c2:8d:56:70:8b:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e5c55091a52ad6ffeed0847e59e72a6410ff3a6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b2:e6:5b:f1:b4:59:33:bd:72:d1:e4:e3:a2: 1b:78:6e:2e:e0:3a:18:9e:79:5a:d1:ab:e9:ca:16: 6c:f1:ad:e5:84:2d:e2:3c:30:3b:cb:9d:a1:09:fe: 79:53:15:a0:e6:b1:1a:ca:e3:d2:bb:02:0e:ad:9e: 63:7c:db:83:40:3d:c9:14:ab:60:8e:f4:9f:26:cd: 6a:68:59:05:3f:39:2c:53:8b:cd:36:ad:c7:a5:35: b9:c0:fa:11:c7:fc:8d:6e:99:0a:9f:0d:61:27:df: bf:85:a9:d0:6c:7d:b4:e4:3b:ae:fc:de:16:4a:44: b2:32:c6:63:a9:a9:5f:ee:29:3d:2e:0e:ba:18:cb: c3:ad:ba:32:5b:22:04:49:db:b4:6c:f6:a7:9c:0a: 0b:a1:95:2f:c5:e2:45:93:3b:3c:b0:2f:d0:96:ff: 79:f3:5a:dd:73:54:d6:8a:a4:8f:3e:c8:8d:40:b6: 67:a0:60:87:7c:70:b5:1d:93:19:d7:cc:f8:90:a5: 62:11:37:51:a8:93:f3:de:87:4b:01:15:4c:72:e9: c7:aa:4c:f9:97:17:5c:4b:ed:f2:97:53:87:22:80: 30:fc:d3:b8:fa:81:ca:a0:93:87:17:4b:d8:38:f9: da:71:f6:23:82:f9:17:b6:5e:20:cf:1f:58:fe:5b: 2f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C5:50:91:A5:2A:D6:FF:EE:D0:84:7E:59:E7:2A:64:10:FF:3A:6B X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5cVQkaUq1v_u0IR-WecqZBD_Oms.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.240.0/21 Signature Algorithm: sha256WithRSAEncryption 19:1f:8e:c5:5d:31:fd:7b:f1:d3:e1:ac:44:49:2a:3a:f5:92: 4b:26:ca:2c:e6:69:10:29:5f:d2:ed:20:9f:2b:2f:b2:cb:98: 6e:ca:81:d7:72:bf:b6:4d:2e:ef:bc:9e:9c:e9:d7:0a:68:4a: ef:e0:04:b6:61:d2:70:d6:b8:39:9a:40:c9:e5:31:48:71:5d: e1:c9:00:63:25:85:e8:ed:ab:ab:ec:25:a7:67:84:0c:00:ee: 65:ba:6e:09:aa:fa:f0:34:ff:00:01:d1:7d:32:b2:3d:3a:65: 5a:f6:e2:14:8e:77:a3:74:18:3a:30:74:85:73:d2:a2:e6:93: 65:98:36:37:3f:fa:c9:dd:6d:ab:bd:b9:dd:86:47:4e:4f:d2: 46:b0:08:52:c5:06:b6:aa:5d:87:af:7e:de:7a:13:83:96:e9: 66:0a:f0:5e:cb:c6:b7:5e:f9:32:11:f5:25:d5:2f:bd:c4:f1: 01:ca:37:9d:26:63:5a:5e:82:45:74:b1:90:de:b8:5b:56:80: ca:57:ae:9d:48:1a:24:0e:33:75:e8:b6:d5:91:66:6a:bf:71: 68:d6:2f:9d:aa:66:dc:3d:42:83:c0:1e:72:18:57:1e:14:9d: 56:00:00:b5:8b:72:d7:ad:f2:68:5b:3d:1c:fb:15:e6:1a:5d: 21:e1:58:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y3NENvEikfv+wo1WcIuMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNWM1NTA5MWE1MmFkNmZmZWVkMDg0N2U1OWU3MmE2NDEwZmYzYTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87LmW/G0WTO9ctHk46IbeG4u4DoY nnla0avpyhZs8a3lhC3iPDA7y52hCf55UxWg5rEayuPSuwIOrZ5jfNuDQD3JFKtg jvSfJs1qaFkFPzksU4vNNq3HpTW5wPoRx/yNbpkKnw1hJ9+/hanQbH205Duu/N4W SkSyMsZjqalf7ik9Lg66GMvDrboyWyIESdu0bPannAoLoZUvxeJFkzs8sC/Qlv95 81rdc1TWiqSPPsiNQLZnoGCHfHC1HZMZ18z4kKViETdRqJPz3odLARVMcunHqkz5 lxdcS+3yl1OHIoAw/NO4+oHKoJOHF0vYOPnacfYjgvkXtl4gzx9Y/lsvGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOXFUJGlKtb/7tCEflnnKmQQ/zprMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvNWNWUWthVXExdl91MElSLVdlY3FaQkRfT21zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl/HwMA0G CSqGSIb3DQEBCwUAA4IBAQAZH47FXTH9e/HT4axESSo69ZJLJsos5mkQKV/S7SCf Ky+yy5huyoHXcr+2TS7vvJ6c6dcKaErv4AS2YdJw1rg5mkDJ5TFIcV3hyQBjJYXo 7aur7CWnZ4QMAO5lum4JqvrwNP8AAdF9MrI9OmVa9uIUjnejdBg6MHSFc9Ki5pNl mDY3P/rJ3W2rvbndhkdOT9JGsAhSxQa2ql2Hr37eehODlulmCvBey8a3XvkyEfUl 1S+9xPEByjedJmNaXoJFdLGQ3rhbVoDKV66dSBokDjN16LbVkWZqv3Fo1i+dqmbc PUKDwB5yGFceFJ1WAAC1i3LXrfJoWz0c+xXmGl0h4Viu -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:06 2026 by rpki-client