This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5wzrAlXZO_Uby1weZPDro2nwlbI.roa File: 5wzrAlXZO_Uby1weZPDro2nwlbI.roa (raw, json) Hash identifier: frMAxo7Zvsq1ySGF5zfopRycNAJG+rcWTuLAqfpqERQ= Subject key identifier: E7:0C:EB:02:55:D9:3B:F5:1B:CB:5C:1E:64:F0:EB:A3:69:F0:95:B2 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB8DA7FE5404193F71AAF6B9A9B5E4 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5wzrAlXZO_Uby1weZPDro2nwlbI.roa Signing time: Fri 02 Jan 2026 08:20:50 +0000 ROA not before: Fri 02 Jan 2026 08:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213690 IP address blocks: 151.245.94.0/24 maxlen: 24 151.245.113.0/24 maxlen: 24 151.245.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:8d:a7:fe:54:04:19:3f:71:aa:f6:b9:a9:b5:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e70ceb0255d93bf51bcb5c1e64f0eba369f095b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:df:9f:fb:42:c9:51:41:d3:aa:cb:63:91:11: 0f:7c:17:82:aa:3f:73:ec:46:e3:4e:5a:ec:09:9f: d2:75:3a:9e:c2:fc:03:ca:eb:47:97:22:ae:4d:65: a6:bc:22:4c:7a:d2:a8:21:e8:a3:de:d2:7f:5d:66: 2f:0a:3e:fd:2a:a9:ec:f4:66:e7:52:09:fc:ac:8a: d4:29:4e:21:d1:f3:1f:a3:b8:92:a7:fd:92:49:e3: 05:e9:60:e3:ad:62:3c:ee:6b:0a:e6:99:c4:6e:7f: 2c:f4:1d:3a:28:40:32:e2:8b:83:f1:99:d7:7d:41: 3b:0b:71:89:7c:35:82:53:f2:81:f7:f4:63:23:f2: bb:7f:55:56:43:fd:45:98:a7:e4:8e:56:e4:e5:a6: 82:5e:db:f8:b6:49:c5:6b:52:ce:90:ec:ef:88:af: a9:49:47:51:06:8a:07:28:17:c9:e6:72:2a:16:ed: 4d:07:ed:59:47:f4:0d:2c:87:2c:b4:76:6c:a5:e6: f4:f5:2b:20:99:e1:21:9a:aa:68:f0:98:33:76:17: 2c:f0:0b:73:f0:c9:4f:0c:69:21:91:21:91:4e:42: 44:15:af:3a:d7:60:36:ab:e8:25:cf:c2:66:39:e7: 50:34:25:55:a7:32:89:d1:33:48:8e:5d:8f:1a:23: f2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0C:EB:02:55:D9:3B:F5:1B:CB:5C:1E:64:F0:EB:A3:69:F0:95:B2 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5wzrAlXZO_Uby1weZPDro2nwlbI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.245.94.0/24 151.245.113.0-151.245.114.255 Signature Algorithm: sha256WithRSAEncryption 8b:f8:cd:77:22:fd:34:b8:1e:25:2b:a8:02:a4:6a:41:f3:0a: b5:4b:be:c3:0b:6a:84:ab:55:24:a2:f3:33:5f:7c:a9:22:85: 96:90:f6:f0:ca:cb:2f:c5:dd:c8:6d:5f:11:c0:d4:cd:b9:0f: 52:6b:7a:40:a1:58:75:05:ab:56:c6:b6:fa:28:93:71:6a:13: 54:c2:c7:e1:85:1b:81:4d:90:71:a5:26:3c:c9:b3:18:64:b2: 19:ac:2e:87:d6:82:db:49:23:08:55:22:b9:2b:d0:6e:eb:d0: 7e:0a:9e:fd:e5:74:20:ec:43:3e:06:ac:a7:48:70:29:6f:80: f2:1c:8a:03:cc:8b:f8:99:79:12:d1:1b:00:4c:bb:02:80:5b: dc:0c:31:6a:ee:bb:b6:c6:f3:fd:48:88:43:a7:00:50:e9:46: 90:66:92:c4:3c:42:df:b7:de:00:df:7f:d3:96:98:b0:5e:ab: b0:3e:9f:38:5c:2a:d8:ea:76:ab:53:5c:95:c7:a6:38:45:8f: d5:58:66:08:d0:a6:e7:5e:33:2d:a6:70:db:d1:ac:56:14:6f: a0:86:d2:50:ec:a0:84:db:e1:ab:9a:1b:e8:aa:10:8b:cd:e4: 17:a5:85:98:8e:3d:46:93:d2:c1:31:1a:57:10:21:e1:cd:47: c9:9e:3f:e8 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9y42n/lQEGT9xqva5qbXkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzBjZWIwMjU1ZDkzYmY1MWJjYjVjMWU2NGYwZWJhMzY5ZjA5NWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN+f+0LJUUHTqstjkREPfBeCqj9z 7EbjTlrsCZ/SdTqewvwDyutHlyKuTWWmvCJMetKoIeij3tJ/XWYvCj79Kqns9Gbn Ugn8rIrUKU4h0fMfo7iSp/2SSeMF6WDjrWI87msK5pnEbn8s9B06KEAy4ouD8ZnX fUE7C3GJfDWCU/KB9/RjI/K7f1VWQ/1FmKfkjlbk5aaCXtv4tknFa1LOkOzviK+p SUdRBooHKBfJ5nIqFu1NB+1ZR/QNLIcstHZspeb09SsgmeEhmqpo8Jgzdhcs8Atz 8MlPDGkhkSGRTkJEFa8612A2q+glz8JmOedQNCVVpzKJ0TNIjl2PGiPywQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFOcM6wJV2Tv1G8tcHmTw66Np8JWyMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvNXd6ckFsWFpPX1VieTF3ZVpQRHJvMm53bGJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAl/VeMAwD BACX9XEDBACX9XIwDQYJKoZIhvcNAQELBQADggEBAIv4zXci/TS4HiUrqAKkakHz CrVLvsMLaoSrVSSi8zNffKkihZaQ9vDKyy/F3chtXxHA1M25D1JrekChWHUFq1bG tvook3FqE1TCx+GFG4FNkHGlJjzJsxhkshmsLofWgttJIwhVIrkr0G7r0H4Knv3l dCDsQz4GrKdIcClvgPIcigPMi/iZeRLRGwBMuwKAW9wMMWruu7bG8/1IiEOnAFDp RpBmksQ8Qt+33gDff9OWmLBeq7A+nzhcKtjqdqtTXJXHpjhFj9VYZgjQpudeMy2m cNvRrFYUb6CG0lDsoITb4auaG+iqEIvN5BelhZiOPUaT0sExGlcQIeHNR8meP+g= -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:11 2026 by rpki-client