This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5vhCPj4FBXu2Tu3zUwkrANtywVI.roa File: 5vhCPj4FBXu2Tu3zUwkrANtywVI.roa (raw, json) Hash identifier: HbSHgErSD2xSi+E1oJMNjy0jo4XNWOt/DeFpGUA5p0A= Subject key identifier: E6:F8:42:3E:3E:05:05:7B:B6:4E:ED:F3:53:09:2B:00:DB:72:C1:52 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB2DF75D1D7F98971B49E36B1F12DF Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5vhCPj4FBXu2Tu3zUwkrANtywVI.roa Signing time: Fri 02 Jan 2026 08:20:26 +0000 ROA not before: Fri 02 Jan 2026 08:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40662 IP address blocks: 151.244.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:2d:f7:5d:1d:7f:98:97:1b:49:e3:6b:1f:12:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e6f8423e3e05057bb64eedf353092b00db72c152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7e:e7:60:02:88:11:79:72:87:21:5c:49:53: 5c:43:4d:3d:51:38:d9:53:9d:db:14:46:8e:09:d3: 30:7b:62:91:0c:74:f0:4a:0e:d9:55:c6:42:b9:53: a7:7b:8d:62:28:b3:63:44:30:0f:cb:18:0c:1b:aa: a5:db:43:79:82:60:e6:90:76:71:47:6d:3d:f7:f6: 84:6d:5e:9f:21:53:92:c9:9e:80:df:cf:d3:09:bb: 33:c8:d2:4f:95:29:80:49:1a:88:45:c2:c9:62:63: ad:37:e5:65:c4:86:a2:b3:6b:bc:ea:6f:05:34:a7: 58:82:30:7a:28:54:21:1d:2a:9b:72:78:0c:86:8e: df:1c:42:a0:1b:7e:01:be:5e:93:69:5a:0a:79:01: b0:4f:f6:e6:80:a6:cf:d9:58:63:90:22:14:94:ce: f8:d1:1b:47:d1:29:b1:44:cf:2f:40:6a:7b:2f:31: 41:f3:71:b2:06:12:60:b2:f4:b5:22:99:46:8c:b3: 29:ce:8c:5e:0f:1a:70:d0:30:5d:b0:63:10:cd:4f: c3:a6:e9:23:13:07:68:89:f3:2a:ec:84:43:76:16: d8:b0:ec:87:9a:69:db:80:d0:6d:63:92:97:2e:67: 3e:f5:86:50:a9:93:ee:8a:41:fb:7b:59:a5:0c:80: 52:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F8:42:3E:3E:05:05:7B:B6:4E:ED:F3:53:09:2B:00:DB:72:C1:52 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5vhCPj4FBXu2Tu3zUwkrANtywVI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.165.0/24 Signature Algorithm: sha256WithRSAEncryption b2:82:f8:39:ed:73:af:4c:d0:16:e2:f8:7a:fd:74:11:7d:7d: 04:c5:6d:9c:bd:d4:f7:dd:2f:a6:6a:5c:89:45:e0:3f:fa:4a: 08:dd:3e:37:6e:55:72:77:6b:0e:12:d2:05:e2:d3:6e:f1:a5: 19:76:ff:05:74:28:ed:55:53:a9:b3:67:25:46:a2:4e:05:0a: 37:f7:45:3d:5d:e9:08:58:7c:47:d7:10:8e:52:8c:9c:2d:aa: ba:45:57:76:ee:81:57:ea:3d:8b:ae:1d:e0:0e:6f:0b:16:bf: 09:38:9a:cf:99:06:b0:6c:f6:6a:a5:10:94:af:8b:92:c2:e5: 10:b2:a1:5e:81:24:ad:73:8d:fc:c5:bc:38:68:36:08:af:b7: 12:d0:48:83:0a:b6:89:c5:ec:1c:30:b1:7e:ee:d9:4e:d8:34: d7:25:be:7c:c0:4e:c7:0e:be:7e:de:a5:ec:b1:d4:57:77:09: 36:ec:fe:3e:dd:ed:ef:fb:f6:04:55:c7:11:b9:e7:53:75:ae: d3:ef:67:4a:41:10:eb:25:6e:21:b7:82:e8:cf:41:fa:c7:5f: cc:3f:b7:2d:fd:be:a0:d7:03:8b:b2:cf:ce:19:5a:e5:fd:b7: 9c:52:ff:17:a0:fc:b8:d6:ef:87:f7:3a:24:31:82:2e:47:e7: ca:01:bd:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yy33XR1/mJcbSeNrHxLfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNmY4NDIzZTNlMDUwNTdiYjY0ZWVkZjM1MzA5MmIwMGRiNzJjMTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAln7nYAKIEXlyhyFcSVNcQ009UTjZ U53bFEaOCdMwe2KRDHTwSg7ZVcZCuVOne41iKLNjRDAPyxgMG6ql20N5gmDmkHZx R2099/aEbV6fIVOSyZ6A38/TCbszyNJPlSmASRqIRcLJYmOtN+VlxIais2u86m8F NKdYgjB6KFQhHSqbcngMho7fHEKgG34Bvl6TaVoKeQGwT/bmgKbP2VhjkCIUlM74 0RtH0SmxRM8vQGp7LzFB83GyBhJgsvS1IplGjLMpzoxeDxpw0DBdsGMQzU/Dpukj EwdoifMq7IRDdhbYsOyHmmnbgNBtY5KXLmc+9YZQqZPuikH7e1mlDIBS7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOb4Qj4+BQV7tk7t81MJKwDbcsFSMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvNXZoQ1BqNEZCWHUyVHUzelV3a3JBTnR5d1ZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/SlMA0G CSqGSIb3DQEBCwUAA4IBAQCygvg57XOvTNAW4vh6/XQRfX0ExW2cvdT33S+malyJ ReA/+koI3T43blVyd2sOEtIF4tNu8aUZdv8FdCjtVVOps2clRqJOBQo390U9XekI WHxH1xCOUoycLaq6RVd27oFX6j2Lrh3gDm8LFr8JOJrPmQawbPZqpRCUr4uSwuUQ sqFegSStc438xbw4aDYIr7cS0EiDCraJxewcMLF+7tlO2DTXJb58wE7HDr5+3qXs sdRXdwk27P4+3e3v+/YEVccRuedTda7T72dKQRDrJW4ht4Loz0H6x1/MP7ct/b6g 1wOLss/OGVrl/becUv8XoPy41u+H9zokMYIuR+fKAb1r -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:50 2026 by rpki-client