This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8Icxm2NuYfcJpxMcuo7FHrdGCvo.roa File: 8Icxm2NuYfcJpxMcuo7FHrdGCvo.roa (raw, json) Hash identifier: jITEIB/UWpojXJJXD1+pB8PEtu9YJBS42GPToFgiZUM= Subject key identifier: F0:87:31:9B:63:6E:61:F7:09:A7:13:1C:BA:8E:C5:1E:B7:46:0A:FA Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB3859639E37F7A3DAA02E5FC0470F Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8Icxm2NuYfcJpxMcuo7FHrdGCvo.roa Signing time: Fri 02 Jan 2026 08:20:28 +0000 ROA not before: Fri 02 Jan 2026 08:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51847 IP address blocks: 151.243.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 19:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:38:59:63:9e:37:f7:a3:da:a0:2e:5f:c0:47:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f087319b636e61f709a7131cba8ec51eb7460afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e2:78:2c:65:3f:d5:58:73:56:25:3a:73:61: 9c:54:73:db:5c:85:95:d6:76:a2:17:d9:6a:be:4b: b6:41:09:3b:fc:c2:da:a8:66:3a:ae:f9:9c:d2:fe: 5d:2b:d4:58:98:ff:aa:6e:ff:4f:aa:0b:8a:32:48: 0b:b7:05:e8:a7:eb:e6:53:30:2c:30:f1:47:ea:1c: 98:7a:14:99:a2:85:59:49:e8:57:ba:9e:91:9f:27: 6d:08:19:c5:63:ff:1e:17:c3:a3:ad:bd:10:54:ab: d5:14:4c:8f:ab:79:41:9f:ef:ce:b9:be:82:72:ba: 45:2b:eb:03:0e:62:0e:0d:1b:e4:fd:9e:98:c4:ec: 8e:57:dd:83:7d:5f:38:c0:98:9a:47:a0:b6:2a:9a: 02:2f:a7:a0:28:0e:5a:bb:91:56:12:ae:a4:db:f5: d6:0e:28:c1:20:6c:cc:16:3f:f6:e2:00:ac:01:f9: b1:28:02:91:3e:c7:1c:b7:06:50:80:dd:b3:4a:f7: 96:c2:4d:50:08:7b:96:2a:e6:7a:86:9e:95:25:77: 38:e5:1a:3d:fc:90:74:53:49:d7:27:51:02:cd:2d: 84:9b:53:c9:ee:bb:d0:60:a3:6f:e7:fd:6c:06:76: df:bf:1b:1f:9a:cb:1d:3b:9a:7c:5c:10:a3:fc:44: 4f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:87:31:9B:63:6E:61:F7:09:A7:13:1C:BA:8E:C5:1E:B7:46:0A:FA X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8Icxm2NuYfcJpxMcuo7FHrdGCvo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.20.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:c0:49:f7:57:c7:cc:ac:eb:a7:0f:4a:68:ac:de:eb:42:c1: 13:b7:0b:8f:56:64:ab:5d:82:3f:58:7c:92:23:73:be:a8:c4: 2d:66:86:d6:5d:8f:ca:52:7a:71:0f:34:07:bd:3b:49:40:e3: 60:e7:e9:cf:6e:8a:4e:6b:1f:e5:f9:ce:e7:11:b1:92:68:6e: 4d:85:8f:25:40:d7:f3:59:e5:be:13:53:75:bf:60:b9:5d:f8: a3:fd:1b:c7:45:b7:30:80:4d:fa:58:79:89:b0:91:74:72:6d: 97:8e:a6:f9:6e:f9:53:9c:ad:f1:7d:bd:d5:32:f4:52:1f:71: b6:59:5e:cf:5d:8a:5a:c2:25:87:db:5a:c3:8b:e1:10:87:d0: f3:af:27:d0:fd:58:15:f5:99:da:08:15:20:fa:7f:c5:11:6b: 3c:2c:e4:2c:ed:ae:d6:53:4c:a3:76:9c:60:3e:28:32:3f:f1: e8:25:33:37:d7:60:2a:93:44:af:04:66:77:ec:08:12:2b:93: a0:08:4b:5d:47:2a:e3:49:2d:80:d9:e7:93:6d:18:c8:33:34: b8:72:6e:ff:44:54:78:cf:7d:02:fd:1f:a9:78:ff:a2:8e:d8: 80:a4:bd:1a:88:4a:80:58:a8:3e:66:09:73:d1:90:cb:04:d1: d5:45:d2:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yzhZY54396PaoC5fwEcPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMDg3MzE5YjYzNmU2MWY3MDlhNzEzMWNiYThlYzUxZWI3NDYwYWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOJ4LGU/1VhzViU6c2GcVHPbXIWV 1naiF9lqvku2QQk7/MLaqGY6rvmc0v5dK9RYmP+qbv9PqguKMkgLtwXop+vmUzAs MPFH6hyYehSZooVZSehXup6RnydtCBnFY/8eF8Ojrb0QVKvVFEyPq3lBn+/Oub6C crpFK+sDDmIODRvk/Z6YxOyOV92DfV84wJiaR6C2KpoCL6egKA5au5FWEq6k2/XW DijBIGzMFj/24gCsAfmxKAKRPscctwZQgN2zSveWwk1QCHuWKuZ6hp6VJXc45Ro9 /JB0U0nXJ1ECzS2Em1PJ7rvQYKNv5/1sBnbfvxsfmssdO5p8XBCj/ERPtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPCHMZtjbmH3CacTHLqOxR63Rgr6MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvOEljeG0yTnVZZmNKcHhNY3VvN0ZIcmRHQ3ZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/MUMA0G CSqGSIb3DQEBCwUAA4IBAQBMwEn3V8fMrOunD0porN7rQsETtwuPVmSrXYI/WHyS I3O+qMQtZobWXY/KUnpxDzQHvTtJQONg5+nPbopOax/l+c7nEbGSaG5NhY8lQNfz WeW+E1N1v2C5Xfij/RvHRbcwgE36WHmJsJF0cm2Xjqb5bvlTnK3xfb3VMvRSH3G2 WV7PXYpawiWH21rDi+EQh9DzryfQ/VgV9ZnaCBUg+n/FEWs8LOQs7a7WU0yjdpxg PigyP/HoJTM312Aqk0SvBGZ37AgSK5OgCEtdRyrjSS2A2eeTbRjIMzS4cm7/RFR4 z30C/R+peP+ijtiApL0aiEqAWKg+Zglz0ZDLBNHVRdK6 -----END CERTIFICATE-----Generated at Sun Jan 18 04:08:41 2026 by rpki-client