This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9uQ7oDotzjmgN8TWE10Ut7Bf8yI.roa File: 9uQ7oDotzjmgN8TWE10Ut7Bf8yI.roa (raw, json) Hash identifier: qhtWjQWQdAqjcqrJB4Auy7/h0iDremuK1Jk+KRD85gg= Subject key identifier: F6:E4:3B:A0:3A:2D:CE:39:A0:37:C4:D6:13:5D:14:B7:B0:5F:F3:22 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB31147444669A5525009B3F8B20FE Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9uQ7oDotzjmgN8TWE10Ut7Bf8yI.roa Signing time: Fri 02 Jan 2026 08:20:26 +0000 ROA not before: Fri 02 Jan 2026 08:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46450 IP address blocks: 151.243.32.0/24 maxlen: 24 151.243.48.0/24 maxlen: 24 151.243.56.0/24 maxlen: 24 151.243.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:31:14:74:44:66:9a:55:25:00:9b:3f:8b:20:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6e43ba03a2dce39a037c4d6135d14b7b05ff322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:06:a6:19:c3:63:8c:53:73:84:c7:05:f2:43: d3:32:47:ee:9a:45:54:8a:9f:c6:cb:d4:2d:87:5a: 32:19:fa:06:f7:29:fb:e9:42:43:8d:a9:b8:9b:07: b6:cf:63:2a:29:3f:1b:39:ec:d6:49:02:f4:9b:25: 61:e3:ac:1f:cb:2f:ae:df:b8:5d:ba:ef:90:35:2b: c2:80:09:af:e3:27:7f:e0:37:66:e5:7f:3b:11:45: 1c:51:80:b2:98:a6:9b:d6:1a:a9:6d:f4:ef:a3:b8: f4:b1:41:80:0e:cb:fd:cc:0a:df:f1:48:5d:6a:41: 97:9e:6d:47:cd:31:bf:a8:d7:f5:f1:dc:16:a6:93: 49:24:79:31:0e:16:7f:d9:79:44:2e:25:d1:a4:1a: d7:36:58:33:1e:56:c5:ed:bd:cd:b6:2e:04:be:c0: f8:df:59:3b:81:72:17:b9:20:f1:9b:30:99:b7:4c: 51:d5:3c:f3:98:5e:79:d1:9d:e7:23:a5:a9:85:d9: ba:c5:49:62:fd:41:4f:7a:68:c1:f1:00:55:4f:56: 83:60:24:14:87:ad:9e:ad:c6:b0:86:5e:9e:36:0d: 3b:13:77:86:dc:e0:a0:b4:73:cd:de:37:eb:fb:ad: ce:c0:af:b1:0a:42:d0:d9:b3:22:c9:47:ce:92:90: 41:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:E4:3B:A0:3A:2D:CE:39:A0:37:C4:D6:13:5D:14:B7:B0:5F:F3:22 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9uQ7oDotzjmgN8TWE10Ut7Bf8yI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.32.0/24 151.243.48.0/24 151.243.56.0/24 151.243.85.0/24 Signature Algorithm: sha256WithRSAEncryption 07:ca:0a:45:8a:57:8a:af:82:ba:5b:8c:5c:de:d1:ef:7a:dc: 7b:3f:d2:82:3d:9f:3f:69:ec:49:2c:02:52:06:11:00:17:b4: d3:2e:65:cd:fc:3c:c7:65:98:2e:2b:03:64:13:35:87:ea:0e: f2:62:30:f8:70:3a:70:5c:85:a3:ac:99:1a:90:7c:a9:4f:d9: 18:4a:ac:79:4e:19:48:8b:71:31:97:4c:8f:7c:12:8b:01:3f: 53:26:b9:6c:20:8b:15:12:8c:82:80:a5:2b:cb:4b:5d:f3:77: fb:13:bd:e3:33:55:9a:96:14:75:b9:8d:7b:07:5a:21:9e:f3: 19:0c:fa:5d:e3:e5:a1:e1:60:c8:a3:b4:eb:0a:ed:d9:ca:17: 9e:b6:26:b3:9b:9a:02:b0:95:9b:18:d5:fd:42:d8:cc:d8:6e: ff:7e:89:93:c1:c6:e5:db:db:64:74:ed:5e:73:c9:b9:25:8b: 56:2b:01:d5:30:f6:7d:51:85:54:1f:5b:81:47:be:b1:43:ba: d5:ed:17:55:be:54:1f:65:cb:cf:64:5d:5f:76:54:a3:0f:53: df:cf:97:60:56:d3:f0:9f:cb:91:f8:49:2d:a9:01:ba:cb:3d: e9:96:76:43:b9:84:98:83:3c:3a:88:2c:f9:26:e4:cd:92:62: db:22:ba:42 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9yzEUdERmmlUlAJs/iyD+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmU0M2JhMDNhMmRjZTM5YTAzN2M0ZDYxMzVkMTRiN2IwNWZmMzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQamGcNjjFNzhMcF8kPTMkfumkVU ip/Gy9Qth1oyGfoG9yn76UJDjam4mwe2z2MqKT8bOezWSQL0myVh46wfyy+u37hd uu+QNSvCgAmv4yd/4Ddm5X87EUUcUYCymKab1hqpbfTvo7j0sUGADsv9zArf8Uhd akGXnm1HzTG/qNf18dwWppNJJHkxDhZ/2XlELiXRpBrXNlgzHlbF7b3Nti4EvsD4 31k7gXIXuSDxmzCZt0xR1TzzmF550Z3nI6Wphdm6xUli/UFPemjB8QBVT1aDYCQU h62ercawhl6eNg07E3eG3OCgtHPN3jfr+63OwK+xCkLQ2bMiyUfOkpBBMwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPbkO6A6Lc45oDfE1hNdFLewX/MiMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvOXVRN29Eb3R6am1nTjhUV0UxMFV0N0JmOHlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/MgAwQA l/MwAwQAl/M4AwQAl/NVMA0GCSqGSIb3DQEBCwUAA4IBAQAHygpFileKr4K6W4xc 3tHvetx7P9KCPZ8/aexJLAJSBhEAF7TTLmXN/DzHZZguKwNkEzWH6g7yYjD4cDpw XIWjrJkakHypT9kYSqx5ThlIi3Exl0yPfBKLAT9TJrlsIIsVEoyCgKUry0td83f7 E73jM1WalhR1uY17B1ohnvMZDPpd4+Wh4WDIo7TrCu3Zyheetiazm5oCsJWbGNX9 QtjM2G7/fomTwcbl29tkdO1ec8m5JYtWKwHVMPZ9UYVUH1uBR76xQ7rV7RdVvlQf ZcvPZF1fdlSjD1Pfz5dgVtPwn8uR+EktqQG6yz3plnZDuYSYgzw6iCz5JuTNkmLb IrpC -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:10 2026 by rpki-client