This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6NrSiQnNxOi5AsHRA0El4wcskxE.roa File: 6NrSiQnNxOi5AsHRA0El4wcskxE.roa (raw, json) Hash identifier: 84YMPasXqv9+utlEJOKkdbBWH8Z4BMgfH1NWfzs84Ho= Subject key identifier: E8:DA:D2:89:09:CD:C4:E8:B9:02:C1:D1:03:41:25:E3:07:2C:93:11 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB6584D480F35EE68170BFE07DC57A Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6NrSiQnNxOi5AsHRA0El4wcskxE.roa Signing time: Fri 02 Jan 2026 08:20:40 +0000 ROA not before: Fri 02 Jan 2026 08:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202903 IP address blocks: 151.242.254.0/24 maxlen: 24 151.243.62.0/24 maxlen: 24 151.243.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:65:84:d4:80:f3:5e:e6:81:70:bf:e0:7d:c5:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e8dad28909cdc4e8b902c1d1034125e3072c9311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e7:77:90:8f:a4:4d:37:fc:8e:10:7f:9d:3e: 63:c1:2c:db:c3:74:6c:a0:d5:4d:2a:54:89:f4:4d: 95:45:fc:ac:44:2b:a7:5c:bc:c4:75:01:91:6c:19: 47:0b:07:4c:28:e8:ff:1e:21:35:a2:de:28:1a:e4: 42:02:04:67:c3:57:9d:e9:2a:c3:b8:5e:59:60:43: ab:d7:42:b5:08:2f:9d:0b:d5:40:af:4c:d6:44:09: b9:f6:24:69:d3:ed:7f:0b:3b:74:e8:7e:27:fc:d9: e1:3b:d5:87:7a:f6:a2:ba:54:51:15:b5:27:3a:88: 9d:9c:4c:73:97:8c:2c:5a:19:f1:85:16:f6:d7:db: 99:88:a1:61:bc:a8:06:d6:05:a7:34:19:3a:24:c2: 96:d7:55:ff:59:5c:33:64:b2:92:3b:7b:ec:21:01: bf:94:e6:84:45:ef:e7:9b:16:a5:b1:17:7d:fb:31: ba:23:7d:a7:5d:c8:d3:4f:26:a6:02:2d:4f:f8:69: 97:d0:67:b4:f8:42:8d:5c:64:3a:31:fa:e9:a5:03: c5:9b:a0:ca:92:8e:45:90:9d:60:6e:0e:97:e2:38: 0c:b0:50:76:9f:e2:68:b8:74:0d:42:f0:fc:d1:e2: 4d:48:de:26:b2:10:95:2c:1f:2c:57:b8:74:7c:8e: 44:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DA:D2:89:09:CD:C4:E8:B9:02:C1:D1:03:41:25:E3:07:2C:93:11 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6NrSiQnNxOi5AsHRA0El4wcskxE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.254.0/24 151.243.62.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:c6:a4:5b:1c:1b:80:6a:b1:5f:95:cf:4b:3a:e4:cd:53:75: 2f:67:03:3b:3f:3c:d3:05:f9:e2:f5:69:5e:bb:66:25:24:89: 4b:8b:69:51:33:43:04:60:64:af:a9:66:2d:77:71:db:04:01: 34:18:98:80:c7:c7:c5:55:03:26:83:e1:12:d1:3e:9f:0c:56: bc:79:0a:6b:9e:87:25:15:82:98:ea:4d:25:fd:c2:94:ac:09: 22:5a:dc:ff:d7:ce:8e:49:3a:ed:f8:13:d7:6f:9f:41:a8:4e: 29:10:83:2e:d5:18:72:89:81:ac:1d:e2:d9:f5:36:6e:54:d8: ba:7e:82:1e:b4:ba:0c:d5:93:83:ed:0e:2a:08:e4:87:22:11: fa:ab:ab:fc:47:5d:13:58:5a:97:91:41:5c:d3:2e:ca:86:2e: e7:b1:da:93:0a:62:b0:56:c8:ff:fe:0d:a4:f3:54:ff:72:22: d6:ae:64:61:d8:56:96:d2:23:bf:dd:a2:68:5a:50:3b:a5:85: cc:ae:2e:43:e7:32:ac:37:76:76:dd:d1:f3:dc:16:6c:39:f5: 68:49:89:98:8b:54:a5:a7:ad:bd:ed:ca:15:8b:a2:e4:25:9d: 4d:8b:e6:06:45:ea:7c:d4:29:84:6e:45:ea:db:3a:a5:d0:e6: 90:f5:3b:5c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y2WE1IDzXuaBcL/gfcV6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOGRhZDI4OTA5Y2RjNGU4YjkwMmMxZDEwMzQxMjVlMzA3MmM5MzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOd3kI+kTTf8jhB/nT5jwSzbw3Rs oNVNKlSJ9E2VRfysRCunXLzEdQGRbBlHCwdMKOj/HiE1ot4oGuRCAgRnw1ed6SrD uF5ZYEOr10K1CC+dC9VAr0zWRAm59iRp0+1/Czt06H4n/NnhO9WHevaiulRRFbUn OoidnExzl4wsWhnxhRb219uZiKFhvKgG1gWnNBk6JMKW11X/WVwzZLKSO3vsIQG/ lOaERe/nmxalsRd9+zG6I32nXcjTTyamAi1P+GmX0Ge0+EKNXGQ6MfrppQPFm6DK ko5FkJ1gbg6X4jgMsFB2n+JouHQNQvD80eJNSN4mshCVLB8sV7h0fI5EcQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOja0okJzcTouQLB0QNBJeMHLJMRMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvNk5yU2lRbk54T2k1QXNIUkEwRWw0d2Nza3hFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/L+AwQB l/M+MA0GCSqGSIb3DQEBCwUAA4IBAQB6xqRbHBuAarFflc9LOuTNU3UvZwM7PzzT Bfni9Wleu2YlJIlLi2lRM0MEYGSvqWYtd3HbBAE0GJiAx8fFVQMmg+ES0T6fDFa8 eQprnoclFYKY6k0l/cKUrAkiWtz/186OSTrt+BPXb59BqE4pEIMu1RhyiYGsHeLZ 9TZuVNi6foIetLoM1ZOD7Q4qCOSHIhH6q6v8R10TWFqXkUFc0y7Khi7nsdqTCmKw Vsj//g2k81T/ciLWrmRh2FaW0iO/3aJoWlA7pYXMri5D5zKsN3Z23dHz3BZsOfVo SYmYi1Slp6297coVi6LkJZ1Ni+YGRep81CmEbkXq2zql0OaQ9Ttc -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:26 2026 by rpki-client