This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5mZcvJSulhUhwpYRFZsl0uEKbtg.roa File: 5mZcvJSulhUhwpYRFZsl0uEKbtg.roa (raw, json) Hash identifier: i0ABR4iCKUMl3MF/JcEYywSf2TbMVMZy9m85IYmzyps= Subject key identifier: E6:66:5C:BC:94:AE:96:15:21:C2:96:11:15:9B:25:D2:E1:0A:6E:D8 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB8078E464FFACF048467EE843954E Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5mZcvJSulhUhwpYRFZsl0uEKbtg.roa Signing time: Fri 02 Jan 2026 08:20:47 +0000 ROA not before: Fri 02 Jan 2026 08:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210320 IP address blocks: 151.241.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:80:78:e4:64:ff:ac:f0:48:46:7e:e8:43:95:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6665cbc94ae961521c29611159b25d2e10a6ed8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e9:43:19:84:99:dd:0c:47:82:f8:3d:e0:7d: 77:29:bd:b4:4c:fa:82:16:42:82:a5:81:95:a5:e1: db:75:bf:77:9b:64:9d:e3:be:4d:bb:c0:cc:55:63: 23:6c:f8:bd:66:be:ee:2d:b9:b6:da:cc:9a:13:29: b8:7d:ee:fb:d5:99:7f:b8:00:4f:b8:95:05:a5:8b: f5:1e:2e:3a:96:40:8d:cb:c8:e6:a6:f9:31:b2:1b: bd:aa:b8:ef:6f:09:5d:88:15:14:c9:b2:93:ee:4e: f7:46:1f:82:f7:94:d2:c7:22:ce:89:32:36:3b:80: d6:37:de:a1:a1:11:7d:3f:0f:fc:67:b3:a2:8c:f9: aa:17:d1:0f:ec:a6:61:8d:3a:9b:1c:9b:2d:08:1f: aa:b3:a0:f6:10:22:e9:79:ce:77:fc:f8:c5:b7:9d: 6b:aa:57:1a:e6:bc:f8:24:15:7f:ca:9c:10:77:3a: 81:52:c7:24:4c:bd:02:d0:86:df:c7:2e:37:ec:ee: af:11:ae:3a:51:18:b3:e0:0c:ab:51:a3:e9:ab:08: b6:13:e2:5f:4d:6b:e3:75:0a:3f:96:71:ef:61:ad: 96:eb:8e:ae:8d:28:88:21:31:17:07:dd:aa:4e:94: 38:fe:92:6c:9c:18:b6:ca:10:8e:54:91:4c:98:8a: cd:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:66:5C:BC:94:AE:96:15:21:C2:96:11:15:9B:25:D2:E1:0A:6E:D8 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5mZcvJSulhUhwpYRFZsl0uEKbtg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.10.0/24 Signature Algorithm: sha256WithRSAEncryption 71:a7:33:1b:f2:29:35:dd:fc:0d:de:18:7a:0d:62:6c:c0:6c: 4e:e7:98:fd:c2:0e:3d:15:da:4c:7d:45:4e:f2:e7:16:55:03: a7:c6:f3:b3:35:56:8a:bc:35:43:ff:61:0d:c8:f2:89:5f:53: c1:b7:53:67:ff:5a:81:d3:12:e8:2b:e3:c8:63:17:d9:f8:24: cb:e6:25:78:de:66:40:a3:52:dc:9f:5b:9a:21:09:18:90:3e: 96:64:3f:76:90:59:f9:f9:68:e0:ef:18:e2:ea:a2:66:55:23: ce:78:a8:33:cd:d9:cd:f3:15:63:8c:64:7f:bb:a7:4f:52:01: 0c:23:ee:a8:4d:db:a7:9d:d1:b6:11:48:26:b7:8f:12:27:bd: ba:a4:eb:0f:b0:32:44:f2:66:b8:7d:ec:5c:cf:fa:c7:93:1e: 0d:e8:60:26:37:cf:29:ca:d4:a5:b5:66:ad:f5:c3:03:05:d8: ad:7f:69:9c:26:e5:d9:05:d9:e2:cb:33:e8:51:bb:1b:15:35: b0:9a:1b:59:2a:96:0f:14:49:34:14:48:74:71:53:ed:46:c8: fb:0d:16:c6:d0:d5:ed:05:2f:4b:40:a4:b3:e5:e0:7a:5a:1f: 37:46:6e:00:b7:9d:13:9f:9f:d3:93:6b:64:ff:8f:e4:47:99: 49:b1:61:65 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y4B45GT/rPBIRn7oQ5VOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjY2NWNiYzk0YWU5NjE1MjFjMjk2MTExNTliMjVkMmUxMGE2ZWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+lDGYSZ3QxHgvg94H13Kb20TPqC FkKCpYGVpeHbdb93m2Sd475Nu8DMVWMjbPi9Zr7uLbm22syaEym4fe771Zl/uABP uJUFpYv1Hi46lkCNy8jmpvkxshu9qrjvbwldiBUUybKT7k73Rh+C95TSxyLOiTI2 O4DWN96hoRF9Pw/8Z7OijPmqF9EP7KZhjTqbHJstCB+qs6D2ECLpec53/PjFt51r qlca5rz4JBV/ypwQdzqBUsckTL0C0Ibfxy437O6vEa46URiz4AyrUaPpqwi2E+Jf TWvjdQo/lnHvYa2W646ujSiIITEXB92qTpQ4/pJsnBi2yhCOVJFMmIrNSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOZmXLyUrpYVIcKWERWbJdLhCm7YMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvNW1aY3ZKU3VsaFVod3BZUkZac2wwdUVLYnRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/EKMA0G CSqGSIb3DQEBCwUAA4IBAQBxpzMb8ik13fwN3hh6DWJswGxO55j9wg49FdpMfUVO 8ucWVQOnxvOzNVaKvDVD/2ENyPKJX1PBt1Nn/1qB0xLoK+PIYxfZ+CTL5iV43mZA o1Lcn1uaIQkYkD6WZD92kFn5+Wjg7xji6qJmVSPOeKgzzdnN8xVjjGR/u6dPUgEM I+6oTdunndG2EUgmt48SJ726pOsPsDJE8ma4fexcz/rHkx4N6GAmN88pytSltWat 9cMDBditf2mcJuXZBdniyzPoUbsbFTWwmhtZKpYPFEk0FEh0cVPtRsj7DRbG0NXt BS9LQKSz5eB6Wh83Rm4At50Tn5/Tk2tk/4/kR5lJsWFl -----END CERTIFICATE-----Generated at Sat Jan 10 20:13:00 2026 by rpki-client