This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6KkGL8FqhqqkmPJ5nD3Az5l4hI8.roa File: 6KkGL8FqhqqkmPJ5nD3Az5l4hI8.roa (raw, json) Hash identifier: 0cpfuKlLNOXfoTTIaPgh2RappWSmohnHZCqqgTPDjp4= Subject key identifier: E8:A9:06:2F:C1:6A:86:AA:A4:98:F2:79:9C:3D:C0:CF:99:78:84:8F Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB8AEFB6E328DD72242087A2BEA963 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6KkGL8FqhqqkmPJ5nD3Az5l4hI8.roa Signing time: Fri 02 Jan 2026 08:20:49 +0000 ROA not before: Fri 02 Jan 2026 08:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212609 IP address blocks: 151.240.113.0/24 maxlen: 24 151.240.114.0/24 maxlen: 24 151.242.72.0/24 maxlen: 24 151.242.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:8a:ef:b6:e3:28:dd:72:24:20:87:a2:be:a9:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8a9062fc16a86aaa498f2799c3dc0cf9978848f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8b:45:11:0c:5c:3f:5b:1b:ec:26:22:d5:6c: 95:6c:3e:cb:19:63:20:b5:e4:00:8f:ca:ff:36:0a: 57:40:5e:9e:ff:db:8a:39:6a:d5:81:41:b4:fe:79: 68:db:f1:ff:08:e4:6b:6d:d7:ab:03:ad:a7:42:98: 69:f2:3a:59:05:6d:a4:31:d9:5b:ad:4c:a5:98:b9: f6:06:38:b2:93:fa:02:dd:b3:48:5a:7a:bb:29:82: 8d:ff:8b:2e:b1:31:dc:45:5c:b5:c0:88:0b:db:ca: 53:ab:13:39:68:ef:62:81:3d:27:5d:85:53:5f:48: 12:cd:c0:6f:9a:72:eb:f8:06:a2:a4:13:37:94:ab: 16:f4:78:47:2e:84:99:38:30:ed:8b:35:34:37:53: 4f:f0:3e:a3:de:b0:f3:4f:0e:e0:25:16:1c:51:b0: eb:8e:2a:ca:ac:77:e7:36:92:2d:ad:2d:a5:00:d0: 07:ea:02:0a:c2:21:ea:e4:17:2c:cb:2f:94:15:a7: 89:d9:08:dd:ef:e7:db:63:18:85:91:dd:65:6e:3a: aa:b1:5d:87:3a:80:26:3a:53:1d:bf:1d:b6:39:20: 77:f1:98:b2:31:27:5c:43:c1:11:ef:ff:85:e0:66: a9:24:75:31:3a:39:5f:67:8a:f6:22:84:1c:49:3d: 26:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A9:06:2F:C1:6A:86:AA:A4:98:F2:79:9C:3D:C0:CF:99:78:84:8F X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6KkGL8FqhqqkmPJ5nD3Az5l4hI8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.113.0-151.240.114.255 151.242.72.0/24 151.242.207.0/24 Signature Algorithm: sha256WithRSAEncryption b0:5a:25:ce:d2:ad:2b:b1:dc:af:af:30:bc:b2:8c:29:08:c3: 80:47:8a:9b:df:f9:09:63:2d:b9:9e:5b:99:04:97:93:ec:15: 95:50:b2:2e:f9:c2:27:75:58:b3:81:9a:91:da:6f:23:d9:d1: e4:85:0c:6f:18:b6:25:c3:dc:0f:50:ae:9b:1c:c4:69:a4:92: 6d:c8:af:b0:36:d8:52:35:8d:87:cb:c1:10:5b:24:30:eb:33: 45:f8:89:d2:d3:db:e3:21:fa:8a:a6:a2:08:6a:5b:d4:a4:1a: da:a5:76:43:39:27:8b:40:19:55:24:9e:24:e5:55:f3:9f:e0: 9b:63:3a:a2:cf:ae:66:69:94:2a:31:bc:5f:b2:cb:5f:8b:3a: 74:85:71:36:81:3b:85:4b:0e:43:a4:c9:de:10:60:b6:49:e2: 40:b8:90:50:cd:71:5b:98:fc:5d:b4:45:fd:3a:20:1b:75:84: 5d:c7:7a:2e:08:c7:db:89:80:11:38:40:8a:13:cf:f6:79:eb: 80:8a:9b:73:97:f7:2f:b7:3e:38:e0:b9:72:a3:8a:b0:ea:54: 99:51:6f:14:f4:78:9d:be:58:22:d5:b9:6c:4c:77:a9:91:7c: 0e:de:dd:56:2f:48:19:2f:84:69:2e:85:42:9d:44:5b:a1:90: ec:81:5c:76 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt9y4rvtuMo3XIkIIeivqljMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGE5MDYyZmMxNmE4NmFhYTQ5OGYyNzk5YzNkYzBjZjk5Nzg4NDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYtFEQxcP1sb7CYi1WyVbD7LGWMg teQAj8r/NgpXQF6e/9uKOWrVgUG0/nlo2/H/CORrbderA62nQphp8jpZBW2kMdlb rUylmLn2Bjiyk/oC3bNIWnq7KYKN/4susTHcRVy1wIgL28pTqxM5aO9igT0nXYVT X0gSzcBvmnLr+AaipBM3lKsW9HhHLoSZODDtizU0N1NP8D6j3rDzTw7gJRYcUbDr jirKrHfnNpItrS2lANAH6gIKwiHq5Bcsyy+UFaeJ2Qjd7+fbYxiFkd1lbjqqsV2H OoAmOlMdvx22OSB38ZiyMSdcQ8ER7/+F4GapJHUxOjlfZ4r2IoQcST0mXwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFOipBi/BaoaqpJjyeZw9wM+ZeISPMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvNktrR0w4RnFocXFrbVBKNW5EM0F6NWw0aEk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBACX8HED BACX8HIDBACX8kgDBACX8s8wDQYJKoZIhvcNAQELBQADggEBALBaJc7SrSux3K+v MLyyjCkIw4BHipvf+QljLbmeW5kEl5PsFZVQsi75wid1WLOBmpHabyPZ0eSFDG8Y tiXD3A9QrpscxGmkkm3Ir7A22FI1jYfLwRBbJDDrM0X4idLT2+Mh+oqmoghqW9Sk GtqldkM5J4tAGVUkniTlVfOf4JtjOqLPrmZplCoxvF+yy1+LOnSFcTaBO4VLDkOk yd4QYLZJ4kC4kFDNcVuY/F20Rf06IBt1hF3Hei4Ix9uJgBE4QIoTz/Z564CKm3OX 9y+3PjjguXKjirDqVJlRbxT0eJ2+WCLVuWxMd6mRfA7e3VYvSBkvhGkuhUKdRFuh kOyBXHY= -----END CERTIFICATE-----Generated at Sun Jan 18 06:28:48 2026 by rpki-client