This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7c7DCoYGtvcEMDR3CFiEgACDqck.roa File: 7c7DCoYGtvcEMDR3CFiEgACDqck.roa (raw, json) Hash identifier: 0C2gq4DV2rL4ArN4Skg0enOiWsFfUN9vxowIXP0TciU= Subject key identifier: ED:CE:C3:0A:86:06:B6:F7:04:30:34:77:08:58:84:80:00:83:A9:C9 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB5F6F1E8FA742661C621C33150A16 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7c7DCoYGtvcEMDR3CFiEgACDqck.roa Signing time: Fri 02 Jan 2026 08:20:38 +0000 ROA not before: Fri 02 Jan 2026 08:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199218 IP address blocks: 151.243.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5f:6f:1e:8f:a7:42:66:1c:62:1c:33:15:0a:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edcec30a8606b6f704303477085884800083a9c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d9:7c:f7:df:bf:15:aa:71:a7:92:f7:a8:a0: 11:bc:2e:0a:81:ab:b5:e9:10:bc:72:da:79:51:6d: c6:78:b0:31:a2:90:ca:c5:67:31:b1:cc:4b:43:5f: f3:77:c7:84:87:ae:a1:7e:27:ec:a9:d9:67:e7:a5: 5f:0c:39:6d:a0:16:c4:2b:f0:bb:cf:44:46:93:09: a0:8b:ef:ff:12:44:e6:3b:50:be:13:79:87:c3:1c: 56:66:ad:29:93:5f:a1:39:5e:de:39:be:20:b7:58: 78:1b:30:8a:4f:d4:b5:35:7b:fe:87:b1:79:32:32: 4f:56:45:3a:07:db:5a:73:dd:3d:0c:da:2f:fa:92: 3a:bd:43:e2:e1:aa:24:d6:68:19:4a:94:9f:96:26: 32:22:ab:ff:1d:47:fc:a3:81:71:f9:ac:93:57:f3: 8e:45:f9:e6:8f:31:4f:8a:0f:aa:d3:a3:6b:e4:d2: 37:26:8f:39:22:25:c6:87:1a:1e:81:e6:c3:c4:cc: 52:47:14:7f:0e:ed:c6:9a:24:83:15:45:ba:05:b4: dd:2a:46:eb:b3:8c:30:41:a0:d4:5d:22:38:f0:0f: 7d:b5:a6:a3:11:d0:a6:27:ef:c3:4b:c0:e9:b0:26: 01:c9:35:7f:ce:f3:b4:ac:21:25:0c:84:b9:e2:e5: e4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CE:C3:0A:86:06:B6:F7:04:30:34:77:08:58:84:80:00:83:A9:C9 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7c7DCoYGtvcEMDR3CFiEgACDqck.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.141.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:c7:f1:b2:a2:af:14:d9:06:54:03:48:5f:f5:cb:c2:df:b6: e8:81:bf:79:90:8a:f6:ab:02:4b:6f:f0:44:51:10:34:3e:f8: 6a:c2:6a:fe:88:e4:fa:0e:a8:59:81:99:77:9c:13:ca:5e:e7: 78:e9:c5:f3:30:94:10:be:da:93:89:fe:7b:24:67:9e:f9:02: 5b:00:61:95:ee:61:b7:dc:67:08:da:ea:60:f2:40:ba:1d:07: dd:14:22:c7:1e:10:6a:05:85:a5:79:f3:00:70:c7:84:83:09: 8d:c9:e3:30:04:5d:cb:d6:97:d5:b2:68:07:f1:92:6b:7a:ba: e5:90:2d:52:9f:a7:2c:1a:5d:b0:84:59:b9:77:b4:91:61:cf: 4f:83:91:31:d9:26:d1:c5:ca:42:a8:af:bd:29:a7:df:61:4b: 6d:ff:ce:ec:cb:a6:20:1e:9f:8d:64:34:4a:25:18:4a:eb:41: 73:cd:c3:6e:f8:a2:ad:8e:9c:b6:fb:7e:c8:5f:4c:ab:da:43: e1:a4:f4:e2:e9:1a:09:34:b3:ed:8c:6e:03:2b:87:f0:0d:bc: 72:0b:4c:4f:d7:81:02:69:bd:b0:2d:3e:3f:84:38:78:60:58: be:03:1b:a7:2c:03:6d:69:8b:e6:31:a1:8d:17:c5:60:4f:6a: 32:d7:60:6e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y19vHo+nQmYcYhwzFQoWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGNlYzMwYTg2MDZiNmY3MDQzMDM0NzcwODU4ODQ4MDAwODNhOWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9l899+/Fapxp5L3qKARvC4Kgau1 6RC8ctp5UW3GeLAxopDKxWcxscxLQ1/zd8eEh66hfifsqdln56VfDDltoBbEK/C7 z0RGkwmgi+//EkTmO1C+E3mHwxxWZq0pk1+hOV7eOb4gt1h4GzCKT9S1NXv+h7F5 MjJPVkU6B9tac909DNov+pI6vUPi4aok1mgZSpSfliYyIqv/HUf8o4Fx+ayTV/OO RfnmjzFPig+q06Nr5NI3Jo85IiXGhxoegebDxMxSRxR/Du3GmiSDFUW6BbTdKkbr s4wwQaDUXSI48A99taajEdCmJ+/DS8DpsCYByTV/zvO0rCElDIS54uXkXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO3OwwqGBrb3BDA0dwhYhIAAg6nJMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvN2M3RENvWUd0dmNFTURSM0NGaUVnQUNEcWNrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/ONMA0G CSqGSIb3DQEBCwUAA4IBAQCdx/Gyoq8U2QZUA0hf9cvC37bogb95kIr2qwJLb/BE URA0Pvhqwmr+iOT6DqhZgZl3nBPKXud46cXzMJQQvtqTif57JGee+QJbAGGV7mG3 3GcI2upg8kC6HQfdFCLHHhBqBYWlefMAcMeEgwmNyeMwBF3L1pfVsmgH8ZJrerrl kC1Sn6csGl2whFm5d7SRYc9Pg5Ex2SbRxcpCqK+9KaffYUtt/87sy6YgHp+NZDRK JRhK60FzzcNu+KKtjpy2+37IX0yr2kPhpPTi6RoJNLPtjG4DK4fwDbxyC0xP14EC ab2wLT4/hDh4YFi+AxunLANtaYvmMaGNF8VgT2oy12Bu -----END CERTIFICATE-----Generated at Sun Jan 18 06:29:59 2026 by rpki-client