This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5o9t35dxC_sXqNfNGmihn-2egUM.roa File: 5o9t35dxC_sXqNfNGmihn-2egUM.roa (raw, json) Hash identifier: 7mA6qK3jjTyzN7Jsktrj5WnF3zfJJt4ZNSdHyfZ4rQU= Subject key identifier: E6:8F:6D:DF:97:71:0B:FB:17:A8:D7:CD:1A:68:A1:9F:ED:9E:81:43 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCBB083C6324D9B2020B29DF13F009C Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5o9t35dxC_sXqNfNGmihn-2egUM.roa Signing time: Fri 02 Jan 2026 08:20:59 +0000 ROA not before: Fri 02 Jan 2026 08:20:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399044 IP address blocks: 151.242.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:b0:83:c6:32:4d:9b:20:20:b2:9d:f1:3f:00:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e68f6ddf97710bfb17a8d7cd1a68a19fed9e8143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e6:fc:42:f9:0b:99:3f:c7:26:57:b0:44:98: 03:ab:1a:1a:c3:3b:b3:53:06:47:1b:a3:cf:82:a7: 3e:89:73:f5:22:22:0e:fb:9f:57:06:72:47:83:e7: a8:be:ed:5c:55:73:4c:b7:23:33:57:61:5e:d5:c2: 15:ad:dd:42:4d:73:87:c9:69:e2:5a:70:52:9f:75: c9:93:5d:24:19:dc:51:9a:0b:f8:7e:67:6d:d9:d7: d0:3e:2a:90:d0:21:c4:a5:21:43:a5:30:93:26:5a: df:d9:9b:9b:ee:01:de:82:c1:56:3e:02:27:46:f4: 6f:7a:ef:d8:c2:98:53:46:86:34:0c:e4:8d:f2:a7: 19:62:67:f4:81:47:1b:ba:93:9c:39:c6:b0:69:65: 98:88:ed:b0:b4:71:9b:b2:42:35:f9:e4:9e:53:d2: 66:9d:48:d4:9e:0c:09:a7:6d:f7:4c:01:8b:19:37: ea:f9:b7:d3:a4:b9:db:bc:0a:f3:d2:4a:c8:7a:20: ea:34:ac:76:e1:54:1a:84:ba:70:9b:3d:fc:a9:d8: 46:bc:b8:65:09:8c:57:78:d8:66:8a:be:ca:3a:5d: d0:f9:d4:ec:50:61:e7:52:a0:3a:6f:59:58:71:e5: 6b:3a:f8:06:3f:b6:ff:8b:0d:79:2c:65:08:6c:ca: 0e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8F:6D:DF:97:71:0B:FB:17:A8:D7:CD:1A:68:A1:9F:ED:9E:81:43 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5o9t35dxC_sXqNfNGmihn-2egUM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.50.0/24 Signature Algorithm: sha256WithRSAEncryption a1:3f:5f:76:c0:a2:2d:85:ae:70:2a:9a:f4:6c:3a:fa:8e:57: 28:fb:f4:8e:20:62:15:ee:c5:e7:fa:ba:24:e9:68:9a:12:e3: ee:64:4f:a9:4b:3b:fe:f0:fb:9d:5f:b6:9f:ec:2a:6f:7e:65: a3:73:3b:04:97:83:f9:f5:5d:7a:07:91:b4:14:c6:aa:55:85: d0:2b:01:07:3d:4a:60:c5:43:6e:a6:0b:cf:be:0c:bb:73:41: e2:d8:aa:06:8e:b3:9f:b5:f4:5d:71:a7:bf:8b:05:ff:61:35: 67:4b:b9:f9:4c:07:9b:11:47:2a:33:b4:83:2f:12:4a:d7:79: 65:56:56:15:aa:7c:ba:03:a5:4a:33:4f:a4:e6:ad:ce:bf:c7: ad:b0:92:15:0c:ca:31:7b:81:aa:41:39:2b:57:24:cc:80:d3: fe:21:4b:5e:36:4c:c1:17:8a:f0:7a:df:1e:aa:19:b8:f2:ab: 0f:63:3f:b9:bf:2e:91:8a:39:eb:d9:20:9b:49:2d:e0:30:79: 4d:d2:fe:23:56:29:c7:b2:fe:05:cd:a6:6e:4c:43:39:1f:3b: 90:99:a2:41:4a:19:d5:9b:75:7e:61:c6:c1:a5:84:22:12:a3: 79:80:c4:e2:30:dd:f1:bc:2c:4b:b6:d0:7e:da:c3:8e:95:ff: 86:ed:5f:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y7CDxjJNmyAgsp3xPwCcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNjhmNmRkZjk3NzEwYmZiMTdhOGQ3Y2QxYTY4YTE5ZmVkOWU4MTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+b8QvkLmT/HJlewRJgDqxoawzuz UwZHG6PPgqc+iXP1IiIO+59XBnJHg+eovu1cVXNMtyMzV2Fe1cIVrd1CTXOHyWni WnBSn3XJk10kGdxRmgv4fmdt2dfQPiqQ0CHEpSFDpTCTJlrf2Zub7gHegsFWPgIn RvRveu/YwphTRoY0DOSN8qcZYmf0gUcbupOcOcawaWWYiO2wtHGbskI1+eSeU9Jm nUjUngwJp233TAGLGTfq+bfTpLnbvArz0krIeiDqNKx24VQahLpwmz38qdhGvLhl CYxXeNhmir7KOl3Q+dTsUGHnUqA6b1lYceVrOvgGP7b/iw15LGUIbMoO4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOaPbd+XcQv7F6jXzRpooZ/tnoFDMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvNW85dDM1ZHhDX3NYcU5mTkdtaWhuLTJlZ1VNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/IyMA0G CSqGSIb3DQEBCwUAA4IBAQChP192wKItha5wKpr0bDr6jlco+/SOIGIV7sXn+rok 6WiaEuPuZE+pSzv+8PudX7af7CpvfmWjczsEl4P59V16B5G0FMaqVYXQKwEHPUpg xUNupgvPvgy7c0Hi2KoGjrOftfRdcae/iwX/YTVnS7n5TAebEUcqM7SDLxJK13ll VlYVqny6A6VKM0+k5q3Ov8etsJIVDMoxe4GqQTkrVyTMgNP+IUteNkzBF4rwet8e qhm48qsPYz+5vy6Rijnr2SCbSS3gMHlN0v4jVinHsv4FzaZuTEM5HzuQmaJBShnV m3V+YcbBpYQiEqN5gMTiMN3xvCxLttB+2sOOlf+G7V// -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:03 2026 by rpki-client