This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7qRsAzFJLb3IGa_1s6tURUzmqCQ.roa File: 7qRsAzFJLb3IGa_1s6tURUzmqCQ.roa (raw, json) Hash identifier: OmuKzniIhwoj807/g8tM5wSHcon5XCa+3R+LzxI9p34= Subject key identifier: EE:A4:6C:03:31:49:2D:BD:C8:19:AF:F5:B3:AB:54:45:4C:E6:A8:24 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB67C0A92C15325703400B85B431F2 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7qRsAzFJLb3IGa_1s6tURUzmqCQ.roa Signing time: Fri 02 Jan 2026 08:20:40 +0000 ROA not before: Fri 02 Jan 2026 08:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203758 IP address blocks: 151.242.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:67:c0:a9:2c:15:32:57:03:40:0b:85:b4:31:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eea46c0331492dbdc819aff5b3ab54454ce6a824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e0:e1:fa:ca:2c:73:5a:37:e2:9e:8d:0a:d2: a4:f2:79:c3:a4:e7:23:c3:06:a4:6c:d4:97:55:40: 26:cb:19:8b:ea:2b:a9:46:64:fb:3a:c8:45:a6:05: 5d:c8:52:89:1c:95:33:94:4c:7c:b1:43:b2:61:4b: c1:10:65:75:6f:36:c5:20:c6:af:a1:8b:bc:9b:eb: 5e:af:f6:c7:ed:6f:53:d5:2b:04:fc:d1:27:57:d8: ca:2c:93:2f:d2:73:af:fd:c0:d4:bb:65:51:3e:f9: 0b:46:36:8f:69:7f:94:d4:6c:51:a3:72:9f:9c:c4: 4b:22:0f:83:00:69:4f:fc:b5:38:7d:d8:3a:7a:2a: 5a:e3:1f:c9:d8:a3:cc:5a:8b:d0:bf:11:b0:cf:54: 2a:35:d3:c5:1f:1b:58:e1:8c:08:1c:21:a6:43:83: 8c:93:85:f0:47:53:f2:e2:f5:ed:5d:f1:1b:fb:f0: 87:06:a9:4c:d2:7f:dd:77:e3:3d:ad:c1:77:f5:40: 4c:e1:f3:eb:68:1e:16:fe:68:a9:db:87:39:74:cc: 92:a6:69:b8:0d:cc:d9:fc:c9:74:e3:91:c7:22:81: ac:bf:58:f3:d2:02:90:eb:61:d9:d1:44:c5:4a:2f: 84:f8:7c:59:ae:62:22:4a:c4:6c:74:d0:d3:4f:0e: df:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A4:6C:03:31:49:2D:BD:C8:19:AF:F5:B3:AB:54:45:4C:E6:A8:24 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7qRsAzFJLb3IGa_1s6tURUzmqCQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.127.0/24 Signature Algorithm: sha256WithRSAEncryption 89:a8:70:39:48:2c:8a:d7:30:be:10:55:d7:25:f4:18:fa:e6: 60:0d:93:a6:11:c3:db:30:d0:74:91:2d:c5:e1:2f:32:b3:db: e9:ca:c9:50:6c:55:0c:15:11:10:4f:f2:77:e2:b9:4e:51:20: 08:22:87:47:e0:53:b2:06:50:23:38:ff:24:fe:3c:a9:3e:a6: 89:e0:8d:a5:95:77:a9:3d:98:37:86:fe:60:45:e2:89:9d:b7: cf:66:0b:60:9e:8e:e2:5c:93:dc:7d:5a:d8:51:e4:5b:07:80: 12:76:08:22:91:7f:0b:5e:a0:7c:f2:79:ec:30:6e:d4:2e:41: 92:34:19:5b:e4:45:3b:a2:d6:6a:4d:14:31:98:16:2b:81:34: b5:d3:1c:23:12:55:88:ed:ae:16:20:32:aa:7c:ec:d5:8f:51: 2e:6a:0c:a5:cf:96:4a:85:69:4b:0b:4e:f6:b5:18:c5:78:b3: 95:9c:a3:c2:66:f9:74:9f:79:61:7d:64:9f:e3:43:54:cd:c1: 99:ab:79:59:14:92:37:e8:37:c9:24:e6:cc:a9:69:c1:13:9a: 92:bd:3b:24:12:12:ee:0e:b6:db:79:7d:1a:cd:a4:96:69:aa: 47:a3:ca:6b:5f:39:8d:cf:03:de:5f:2c:1c:37:ee:bd:91:ff: 62:f0:15:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y2fAqSwVMlcDQAuFtDHyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWE0NmMwMzMxNDkyZGJkYzgxOWFmZjViM2FiNTQ0NTRjZTZhODI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneDh+sosc1o34p6NCtKk8nnDpOcj wwakbNSXVUAmyxmL6iupRmT7OshFpgVdyFKJHJUzlEx8sUOyYUvBEGV1bzbFIMav oYu8m+ter/bH7W9T1SsE/NEnV9jKLJMv0nOv/cDUu2VRPvkLRjaPaX+U1GxRo3Kf nMRLIg+DAGlP/LU4fdg6eipa4x/J2KPMWovQvxGwz1QqNdPFHxtY4YwIHCGmQ4OM k4XwR1Py4vXtXfEb+/CHBqlM0n/dd+M9rcF39UBM4fPraB4W/mip24c5dMySpmm4 DczZ/Ml045HHIoGsv1jz0gKQ62HZ0UTFSi+E+HxZrmIiSsRsdNDTTw7fnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO6kbAMxSS29yBmv9bOrVEVM5qgkMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvN3FSc0F6RkpMYjNJR2FfMXM2dFVSVXptcUNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/J/MA0G CSqGSIb3DQEBCwUAA4IBAQCJqHA5SCyK1zC+EFXXJfQY+uZgDZOmEcPbMNB0kS3F 4S8ys9vpyslQbFUMFREQT/J34rlOUSAIIodH4FOyBlAjOP8k/jypPqaJ4I2llXep PZg3hv5gReKJnbfPZgtgno7iXJPcfVrYUeRbB4ASdggikX8LXqB88nnsMG7ULkGS NBlb5EU7otZqTRQxmBYrgTS10xwjElWI7a4WIDKqfOzVj1Euagylz5ZKhWlLC072 tRjFeLOVnKPCZvl0n3lhfWSf40NUzcGZq3lZFJI36DfJJObMqWnBE5qSvTskEhLu DrbbeX0azaSWaapHo8prXzmNzwPeXywcN+69kf9i8BXk -----END CERTIFICATE-----Generated at Sun Jan 18 06:28:52 2026 by rpki-client