This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5s3-bsRC9_yNtMUc9n0OwJ1Pw4k.roa File: 5s3-bsRC9_yNtMUc9n0OwJ1Pw4k.roa (raw, json) Hash identifier: Sbvg5MJYTt4KTUnyldPzQBrctfe/YFCFS2bPKT9eF5I= Subject key identifier: E6:CD:FE:6E:C4:42:F7:FC:8D:B4:C5:1C:F6:7D:0E:C0:9D:4F:C3:89 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCBA0C6293F733E5B299180FAC85E66 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5s3-bsRC9_yNtMUc9n0OwJ1Pw4k.roa Signing time: Fri 02 Jan 2026 08:20:55 +0000 ROA not before: Fri 02 Jan 2026 08:20:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215784 IP address blocks: 151.242.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:a0:c6:29:3f:73:3e:5b:29:91:80:fa:c8:5e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6cdfe6ec442f7fc8db4c51cf67d0ec09d4fc389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d0:3e:46:2f:55:9b:7f:e2:b1:68:39:d7:a2: cc:3f:a4:40:72:56:f6:74:48:01:02:b6:61:0e:6f: b8:05:a3:43:6d:68:9f:c0:35:7a:82:f0:8d:7f:b8: ec:3d:56:d5:f2:68:27:a5:43:85:3b:11:c2:aa:bf: 2b:ea:0c:dd:9a:7a:70:04:00:10:ab:3f:57:f1:ae: 8c:b2:78:b8:78:68:b6:10:9e:9d:5e:9a:51:86:3f: db:06:87:71:2c:35:08:30:0e:6c:60:f7:ef:72:59: e0:f2:69:54:64:9c:c2:bb:56:4b:18:dd:7e:d0:d2: 04:85:a3:18:ba:24:1c:37:99:e0:3e:d0:ed:c4:75: 90:2e:d8:94:55:74:df:4e:da:3d:b1:2a:96:c7:45: 5b:36:69:a7:fd:7b:fe:9f:e1:f6:98:4a:e2:68:fe: 5d:e8:9e:5b:84:64:8d:29:e7:b6:54:16:83:09:28: 89:c8:41:2f:fe:e4:8f:99:18:c0:da:a8:cf:7c:70: b5:4b:53:7f:31:40:46:7d:be:c0:c0:66:82:64:7c: e2:63:f5:83:c0:2a:c5:d8:8f:8e:36:ba:11:09:ca: f2:b7:16:de:38:71:59:8f:28:08:e9:df:64:38:3c: 2d:ff:87:92:bc:00:d8:7c:09:eb:c4:ed:24:a4:38: a3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:CD:FE:6E:C4:42:F7:FC:8D:B4:C5:1C:F6:7D:0E:C0:9D:4F:C3:89 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5s3-bsRC9_yNtMUc9n0OwJ1Pw4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.159.0/24 Signature Algorithm: sha256WithRSAEncryption 12:61:42:38:3e:99:0c:18:4d:85:77:2e:c2:47:ba:ad:f1:b6: 56:51:82:4c:f7:88:63:0e:f8:77:8a:84:ae:f9:75:2a:57:be: d8:b7:5f:26:5f:0a:21:c0:f4:69:85:fb:fe:79:63:90:3c:16: 0e:7e:67:0b:eb:90:6b:2a:15:3a:03:44:3f:c7:51:fc:ff:1f: 56:c6:e1:5b:4b:65:5f:11:fa:60:95:ec:26:e0:59:1c:b1:8e: 1c:f9:5f:31:8f:a3:96:c9:b6:0d:89:5a:14:1c:f0:d8:9f:24: 8d:9a:ea:ee:fc:cc:32:b9:b1:b0:19:e3:84:49:97:aa:88:c6: a0:7c:25:97:a7:c2:e6:c4:44:5f:9b:fc:a7:f3:34:ad:7d:ca: c0:f9:f1:3d:4f:cc:80:51:d1:ab:17:da:b2:2a:27:5e:e7:83: 2f:f1:3f:48:0b:61:fa:ff:71:55:d3:3a:fd:1c:11:37:aa:02: a0:48:fa:1d:df:97:6a:56:73:6e:4f:57:c1:da:21:af:9f:7a: a5:9d:9d:f0:7f:26:6a:0c:6b:cd:9b:b8:d4:40:2e:7b:7b:83: 6c:7e:3e:2c:c4:95:2e:b5:a8:47:a6:59:62:28:07:80:e0:2b: 66:4b:0d:03:a1:2a:24:2d:23:4f:7e:9b:bc:33:c6:0e:d3:43: a6:8f:2d:dd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y6DGKT9zPlspkYD6yF5mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmNkZmU2ZWM0NDJmN2ZjOGRiNGM1MWNmNjdkMGVjMDlkNGZjMzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNA+Ri9Vm3/isWg516LMP6RAclb2 dEgBArZhDm+4BaNDbWifwDV6gvCNf7jsPVbV8mgnpUOFOxHCqr8r6gzdmnpwBAAQ qz9X8a6Msni4eGi2EJ6dXppRhj/bBodxLDUIMA5sYPfvclng8mlUZJzCu1ZLGN1+ 0NIEhaMYuiQcN5ngPtDtxHWQLtiUVXTfTto9sSqWx0VbNmmn/Xv+n+H2mEriaP5d 6J5bhGSNKee2VBaDCSiJyEEv/uSPmRjA2qjPfHC1S1N/MUBGfb7AwGaCZHziY/WD wCrF2I+ONroRCcrytxbeOHFZjygI6d9kODwt/4eSvADYfAnrxO0kpDijPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFObN/m7EQvf8jbTFHPZ9DsCdT8OJMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvNXMzLWJzUkM5X3lOdE1VYzluME93SjFQdzRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/KfMA0G CSqGSIb3DQEBCwUAA4IBAQASYUI4PpkMGE2Fdy7CR7qt8bZWUYJM94hjDvh3ioSu +XUqV77Yt18mXwohwPRphfv+eWOQPBYOfmcL65BrKhU6A0Q/x1H8/x9WxuFbS2Vf Efpglewm4FkcsY4c+V8xj6OWybYNiVoUHPDYnySNmuru/MwyubGwGeOESZeqiMag fCWXp8LmxERfm/yn8zStfcrA+fE9T8yAUdGrF9qyKide54Mv8T9IC2H6/3FV0zr9 HBE3qgKgSPod35dqVnNuT1fB2iGvn3qlnZ3wfyZqDGvNm7jUQC57e4Nsfj4sxJUu tahHplliKAeA4CtmSw0DoSokLSNPfpu8M8YO00Omjy3d -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:52 2026 by rpki-client