This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8bLAHuRdu_yhkhGOwy9Lfi_V07M.roa File: 8bLAHuRdu_yhkhGOwy9Lfi_V07M.roa (raw, json) Hash identifier: 8Zrj9kRSa3DmxFiHM7VLz6Np3tGiLzLKPIQY43rXwMs= Subject key identifier: F1:B2:C0:1E:E4:5D:BB:FC:A1:92:11:8E:C3:2F:4B:7E:2F:D5:D3:B3 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB846C2559274DBBF639FF9DA53935 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8bLAHuRdu_yhkhGOwy9Lfi_V07M.roa Signing time: Fri 02 Jan 2026 08:20:48 +0000 ROA not before: Fri 02 Jan 2026 08:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211439 IP address blocks: 151.242.138.0/24 maxlen: 24 151.244.77.0/24 maxlen: 24 151.244.84.0/24 maxlen: 24 151.245.79.0/24 maxlen: 24 151.245.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:84:6c:25:59:27:4d:bb:f6:39:ff:9d:a5:39:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1b2c01ee45dbbfca192118ec32f4b7e2fd5d3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:95:4a:b7:7e:00:46:fe:d1:ca:ae:30:20:ac: ba:8f:94:29:5d:66:61:88:60:b9:03:f3:c6:b6:69: 5c:56:e4:5c:88:55:e0:44:92:38:ac:d1:c4:26:a2: 1e:71:f0:c4:a9:84:34:88:8e:48:d9:47:f4:b3:d4: 57:68:ee:7a:f6:4a:6d:a4:bd:c8:78:bf:b9:b7:52: d2:82:c8:fb:97:e7:36:f0:73:32:bf:1b:2b:c6:66: e1:18:68:56:77:33:fe:66:76:fe:07:cb:d2:ed:59: 4c:36:7c:0c:39:37:9d:6f:69:15:f2:ed:dd:32:e6: 98:7a:71:31:80:1b:1e:0e:a6:f4:87:c2:18:51:45: 11:3b:3a:7f:53:48:47:8d:58:d2:a8:7e:9f:e0:fb: 87:67:7d:93:d1:e5:dd:f1:9a:fb:d2:97:0e:d9:c8: 62:e3:2d:82:ad:45:a9:23:42:ca:cb:7b:8d:6f:2f: d3:aa:47:69:f5:89:30:0f:7b:a1:c3:f1:c3:68:85: 62:7c:72:81:3d:b9:13:34:1e:97:cf:57:1e:40:e5: 29:54:5e:91:62:8b:c0:d6:42:77:fe:ae:2b:1b:17: cf:f9:6f:90:0b:4c:72:fd:16:e7:c1:b6:ee:3c:15: 20:dc:33:8f:da:f3:bc:da:c1:6a:6b:5e:10:46:70: 92:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B2:C0:1E:E4:5D:BB:FC:A1:92:11:8E:C3:2F:4B:7E:2F:D5:D3:B3 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8bLAHuRdu_yhkhGOwy9Lfi_V07M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.138.0/24 151.244.77.0/24 151.244.84.0/24 151.245.79.0/24 151.245.84.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:c8:dd:eb:ad:25:da:ca:d6:8f:2e:fd:a9:b0:6c:a6:42:48: 9e:56:aa:39:be:41:e3:0b:f4:e1:23:06:64:a9:eb:08:2d:58: 61:91:23:b8:fa:e8:e5:b2:c7:9d:c4:34:3d:f6:2e:9f:0c:2d: 00:0f:8d:26:cf:92:32:f9:7e:5b:07:53:94:1a:e0:85:91:86: ee:4b:a8:bc:7c:c1:3f:64:a2:26:39:f9:47:1f:10:1f:60:08: 62:73:87:81:e5:93:9f:c3:92:85:5d:c2:52:f8:40:b4:fc:02: 71:da:37:f1:f5:72:b7:12:b8:d2:17:ef:73:77:56:4e:5e:92: e7:9d:4c:79:ce:d9:b2:94:64:5f:1f:31:33:ac:32:e8:2e:e0: 43:ea:31:d1:b7:9a:c1:78:49:87:9a:f6:81:ab:07:5e:e2:8f: e9:ff:db:cb:fa:87:c2:de:01:15:4e:15:68:e1:56:e6:5a:1f: 66:65:2b:57:92:9e:db:56:09:ec:d3:0e:3e:ff:8d:47:3b:6c: e3:23:a1:b4:a5:89:ad:0d:c3:d8:03:44:0f:77:8e:db:48:31: c4:dc:cf:50:57:c6:6b:b1:7c:ec:d6:9e:20:47:d6:6b:d2:63: ab:03:90:5d:c7:7b:7e:43:99:cf:e9:47:0b:02:e1:ad:8a:64: 7d:5b:9c:d1 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt9y4RsJVknTbv2Of+dpTk1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMWIyYzAxZWU0NWRiYmZjYTE5MjExOGVjMzJmNGI3ZTJmZDVkM2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpVKt34ARv7Ryq4wIKy6j5QpXWZh iGC5A/PGtmlcVuRciFXgRJI4rNHEJqIecfDEqYQ0iI5I2Uf0s9RXaO569kptpL3I eL+5t1LSgsj7l+c28HMyvxsrxmbhGGhWdzP+Znb+B8vS7VlMNnwMOTedb2kV8u3d MuaYenExgBseDqb0h8IYUUUROzp/U0hHjVjSqH6f4PuHZ32T0eXd8Zr70pcO2chi 4y2CrUWpI0LKy3uNby/Tqkdp9YkwD3uhw/HDaIVifHKBPbkTNB6Xz1ceQOUpVF6R YovA1kJ3/q4rGxfP+W+QC0xy/RbnwbbuPBUg3DOP2vO82sFqa14QRnCShwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFPGywB7kXbv8oZIRjsMvS34v1dOzMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvOGJMQUh1UmR1X3loa2hHT3d5OUxmaV9WMDdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAl/KKAwQA l/RNAwQAl/RUAwQAl/VPAwQAl/VUMA0GCSqGSIb3DQEBCwUAA4IBAQBcyN3rrSXa ytaPLv2psGymQkieVqo5vkHjC/ThIwZkqesILVhhkSO4+ujlssedxDQ99i6fDC0A D40mz5Iy+X5bB1OUGuCFkYbuS6i8fME/ZKImOflHHxAfYAhic4eB5ZOfw5KFXcJS +EC0/AJx2jfx9XK3ErjSF+9zd1ZOXpLnnUx5ztmylGRfHzEzrDLoLuBD6jHRt5rB eEmHmvaBqwde4o/p/9vL+ofC3gEVThVo4VbmWh9mZStXkp7bVgns0w4+/41HO2zj I6G0pYmtDcPYA0QPd47bSDHE3M9QV8ZrsXzs1p4gR9Zr0mOrA5Bdx3t+Q5nP6UcL AuGtimR9W5zR -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:52 2026 by rpki-client