This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9z-2zGS1C4PeooiJqn9Mhz6kjV4.roa File: 9z-2zGS1C4PeooiJqn9Mhz6kjV4.roa (raw, json) Hash identifier: YUrCIqQKML1R79iBEYRy0QPsRdrUZ6maOiCMZ4KdQcU= Subject key identifier: F7:3F:B6:CC:64:B5:0B:83:DE:A2:88:89:AA:7F:4C:87:3E:A4:8D:5E Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB785A847D1BBBBF27B06236CD68DE Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9z-2zGS1C4PeooiJqn9Mhz6kjV4.roa Signing time: Fri 02 Jan 2026 08:20:45 +0000 ROA not before: Fri 02 Jan 2026 08:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208765 IP address blocks: 151.247.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:78:5a:84:7d:1b:bb:bf:27:b0:62:36:cd:68:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f73fb6cc64b50b83dea28889aa7f4c873ea48d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:72:19:ec:07:aa:8c:de:27:c1:1e:93:82:91: c8:b8:b8:b2:93:6e:f1:a5:23:e9:80:7b:f9:c8:c8: 2d:fd:e8:d8:ae:7a:81:00:7d:55:f9:2a:38:4f:0d: 35:65:f5:1e:29:24:5d:d1:e4:49:3e:2f:90:10:51: 58:af:74:8a:3c:b5:69:29:7c:4b:4e:25:c0:fd:e0: 20:05:18:e1:44:91:8b:ec:e4:4f:07:46:85:f8:28: ec:cc:39:be:6f:83:a8:1c:cb:e4:a5:c5:12:60:35: ec:cc:d2:ef:18:29:8d:42:d2:34:84:8c:14:86:0a: 92:a2:ce:65:8b:1a:7b:85:7d:e2:c8:6b:39:25:4f: 41:b2:4d:64:9c:f5:71:84:4f:47:3e:df:5c:09:84: 14:c5:c3:5f:e1:54:f8:32:64:72:99:77:44:c5:1e: c9:61:64:42:e2:a2:3e:05:4e:fd:01:5f:e9:1f:c8: da:da:6d:15:64:7c:82:62:af:fb:0d:70:e9:bb:d6: 43:e3:61:26:d8:79:31:ab:01:a3:3d:dd:1f:e2:9d: 45:d7:6a:89:af:f0:e0:19:f2:5b:95:c1:11:3d:2d: 9f:1e:3c:d3:ce:fd:aa:1c:e9:00:46:83:60:a2:88: 31:0f:1c:f4:aa:bb:0a:4a:7e:c2:24:06:71:84:a9: 27:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:3F:B6:CC:64:B5:0B:83:DE:A2:88:89:AA:7F:4C:87:3E:A4:8D:5E X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9z-2zGS1C4PeooiJqn9Mhz6kjV4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.247.201.0/24 Signature Algorithm: sha256WithRSAEncryption af:06:1c:50:29:c8:1b:c2:79:22:30:34:46:82:43:34:27:d5: 63:b0:4a:b7:89:d1:29:22:fc:d3:60:ac:da:7b:8a:0f:2f:35: 20:84:2d:61:ed:2e:7c:9c:ff:b3:1d:44:54:f4:29:f3:61:05: 65:51:97:73:3f:ad:d0:01:d1:57:84:88:ea:07:67:75:bb:94: 4e:a9:dc:b6:61:3b:67:48:30:35:59:a7:41:3f:bf:50:25:5a: 6b:2d:ff:7e:de:20:ee:fc:2b:b4:0f:f5:2a:7a:e1:1e:3a:ab: 0d:f2:4a:4c:d3:b5:7e:6c:b9:13:84:3a:54:69:c6:45:cc:38: 7a:43:12:b0:a9:ef:6f:33:70:46:2f:ad:07:17:94:28:c2:7c: 05:5e:10:04:7b:ae:14:2a:5c:e3:6b:c9:3b:16:52:e2:0b:ee: 5a:be:80:2b:0f:3a:45:10:11:92:f2:93:b0:0d:25:88:3f:69: d2:4d:b9:52:a5:41:71:7b:75:0d:d1:b5:a3:84:d9:d3:5d:87: cb:33:e1:cd:75:35:ca:01:76:e2:fc:e2:ea:56:fc:e1:0d:01: 09:45:00:dd:da:be:17:53:11:e1:d3:27:f9:7d:60:2f:d8:cd: 50:82:24:75:fe:8f:61:ad:6d:b4:48:60:7f:f1:d6:0f:da:25: 73:a4:e6:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y3hahH0bu78nsGI2zWjeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzNmYjZjYzY0YjUwYjgzZGVhMjg4ODlhYTdmNGM4NzNlYTQ4ZDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHIZ7AeqjN4nwR6TgpHIuLiyk27x pSPpgHv5yMgt/ejYrnqBAH1V+So4Tw01ZfUeKSRd0eRJPi+QEFFYr3SKPLVpKXxL TiXA/eAgBRjhRJGL7ORPB0aF+CjszDm+b4OoHMvkpcUSYDXszNLvGCmNQtI0hIwU hgqSos5lixp7hX3iyGs5JU9Bsk1knPVxhE9HPt9cCYQUxcNf4VT4MmRymXdExR7J YWRC4qI+BU79AV/pH8ja2m0VZHyCYq/7DXDpu9ZD42Em2HkxqwGjPd0f4p1F12qJ r/DgGfJblcERPS2fHjzTzv2qHOkARoNgoogxDxz0qrsKSn7CJAZxhKknXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPc/tsxktQuD3qKIiap/TIc+pI1eMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvOXotMnpHUzFDNFBlb29pSnFuOU1oejZralY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/fJMA0G CSqGSIb3DQEBCwUAA4IBAQCvBhxQKcgbwnkiMDRGgkM0J9VjsEq3idEpIvzTYKza e4oPLzUghC1h7S58nP+zHURU9CnzYQVlUZdzP63QAdFXhIjqB2d1u5ROqdy2YTtn SDA1WadBP79QJVprLf9+3iDu/Cu0D/UqeuEeOqsN8kpM07V+bLkThDpUacZFzDh6 QxKwqe9vM3BGL60HF5QownwFXhAEe64UKlzja8k7FlLiC+5avoArDzpFEBGS8pOw DSWIP2nSTblSpUFxe3UN0bWjhNnTXYfLM+HNdTXKAXbi/OLqVvzhDQEJRQDd2r4X UxHh0yf5fWAv2M1QgiR1/o9hrW20SGB/8dYP2iVzpObC -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:37 2026 by rpki-client