This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/A7xhv8zrQEn57cqnC5i76uqikso.roa File: A7xhv8zrQEn57cqnC5i76uqikso.roa (raw, json) Hash identifier: nfxSgb8iD6d/L5pqN9M9sN7Y/3/43Q2nxPDyVqyubjk= Subject key identifier: 03:BC:61:BF:CC:EB:40:49:F9:ED:CA:A7:0B:98:BB:EA:EA:A2:92:CA Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB45D8557B1A4544B66CD3F0C5C09B Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/A7xhv8zrQEn57cqnC5i76uqikso.roa Signing time: Fri 02 Jan 2026 08:20:32 +0000 ROA not before: Fri 02 Jan 2026 08:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63023 IP address blocks: 151.241.169.0/24 maxlen: 24 151.243.159.0/24 maxlen: 24 151.244.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:45:d8:55:7b:1a:45:44:b6:6c:d3:f0:c5:c0:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03bc61bfcceb4049f9edcaa70b98bbeaeaa292ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:44:25:ef:5d:73:53:29:cc:69:94:41:4c:e3: 63:5d:4c:87:be:18:22:4c:23:46:17:23:f1:b1:a7: 34:0d:0d:f1:75:97:fa:37:48:64:03:4b:b9:6c:1b: 7f:ce:45:72:44:b1:ee:5b:05:1a:81:2b:3f:69:60: 2c:72:aa:30:1c:13:e9:f4:99:ad:d0:ac:36:2a:65: 7b:20:6b:8f:61:5d:be:a5:c0:ef:06:73:0f:fc:93: 3f:e3:62:b9:2c:c3:3f:37:6f:ab:23:02:61:0c:0f: 2b:e1:c1:61:77:09:9d:18:0b:53:dd:45:80:6e:91: b6:f7:26:8f:02:79:ce:55:61:79:90:7f:8e:cd:9f: 38:de:c4:a6:de:da:6d:76:40:c2:55:d3:2d:bd:16: 35:9d:bb:90:0f:57:e6:e4:61:d1:2d:c6:a2:69:75: bd:df:d1:81:0b:eb:2a:34:54:05:56:ce:95:8d:7a: 36:d1:aa:fa:74:dc:f0:2e:7a:4d:32:82:9d:91:d4: 9e:1a:cf:f7:13:e7:32:eb:d2:53:85:77:c1:85:50: 1c:9f:0b:be:db:12:b4:79:a9:da:69:a7:2e:70:91: 18:21:1f:50:81:e2:0c:53:0c:00:27:c2:d5:29:fe: 33:26:6e:13:49:8b:aa:10:0c:ef:a8:58:c7:4b:d0: ea:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:BC:61:BF:CC:EB:40:49:F9:ED:CA:A7:0B:98:BB:EA:EA:A2:92:CA X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/A7xhv8zrQEn57cqnC5i76uqikso.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.169.0/24 151.243.159.0/24 151.244.28.0/24 Signature Algorithm: sha256WithRSAEncryption 72:0d:22:0c:ed:6b:da:35:68:e3:5c:18:07:60:33:b8:1c:ac: 9a:cf:9c:ba:6b:e0:4b:bf:93:9b:ac:fc:54:2d:a8:b7:6c:dc: 0a:4b:fd:f5:6f:c3:b9:5a:7b:44:b1:9a:35:c9:b6:ba:08:7b: e9:a0:86:81:9b:20:7c:83:dd:6e:ed:b9:60:f8:ae:29:78:62: 7d:fa:3e:af:39:26:7e:ee:16:00:5e:7b:7b:aa:58:6f:88:9f: 63:cd:8b:ca:d4:ac:79:30:79:d1:52:25:c9:70:c7:de:03:bc: c3:a7:e3:7e:a1:99:0b:ba:91:42:8d:04:3e:d2:c0:e5:9a:58: 28:cd:6c:5f:35:93:ef:51:46:0b:c3:2b:61:2a:c9:bc:88:8a: c2:4f:9f:ee:84:06:c0:19:cb:22:c3:91:84:fd:c2:8d:39:8a: 7b:ba:e6:ec:8f:2a:8a:a9:ab:d9:0e:16:01:53:b7:dc:57:17: fb:1c:80:1a:80:da:c6:3c:cb:19:f4:7c:e0:30:6b:b9:f0:3f: 5a:8c:7a:74:68:cb:32:22:d0:87:64:e6:9d:f9:1e:aa:fd:e9: 8c:1b:d5:1d:30:8c:11:ad:10:d2:c4:4c:2f:08:3c:44:1e:ad: 67:64:5f:a2:b1:28:b0:1a:1a:eb:cb:38:e9:fb:94:32:47:c1: 2d:b1:ea:64 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9y0XYVXsaRUS2bNPwxcCbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2JjNjFiZmNjZWI0MDQ5ZjllZGNhYTcwYjk4YmJlYWVhYTI5MmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kQl711zUynMaZRBTONjXUyHvhgi TCNGFyPxsac0DQ3xdZf6N0hkA0u5bBt/zkVyRLHuWwUagSs/aWAscqowHBPp9Jmt 0Kw2KmV7IGuPYV2+pcDvBnMP/JM/42K5LMM/N2+rIwJhDA8r4cFhdwmdGAtT3UWA bpG29yaPAnnOVWF5kH+OzZ843sSm3tptdkDCVdMtvRY1nbuQD1fm5GHRLcaiaXW9 39GBC+sqNFQFVs6VjXo20ar6dNzwLnpNMoKdkdSeGs/3E+cy69JThXfBhVAcnwu+ 2xK0eanaaacucJEYIR9QgeIMUwwAJ8LVKf4zJm4TSYuqEAzvqFjHS9Dq2wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAO8Yb/M60BJ+e3KpwuYu+rqopLKMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvQTd4aHY4enJRRW41N2NxbkM1aTc2dXFpa3NvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/GpAwQA l/OfAwQAl/QcMA0GCSqGSIb3DQEBCwUAA4IBAQByDSIM7WvaNWjjXBgHYDO4HKya z5y6a+BLv5ObrPxULai3bNwKS/31b8O5WntEsZo1yba6CHvpoIaBmyB8g91u7blg +K4peGJ9+j6vOSZ+7hYAXnt7qlhviJ9jzYvK1Kx5MHnRUiXJcMfeA7zDp+N+oZkL upFCjQQ+0sDlmlgozWxfNZPvUUYLwythKsm8iIrCT5/uhAbAGcsiw5GE/cKNOYp7 uubsjyqKqavZDhYBU7fcVxf7HIAagNrGPMsZ9HzgMGu58D9ajHp0aMsyItCHZOad +R6q/emMG9UdMIwRrRDSxEwvCDxEHq1nZF+isSiwGhrryzjp+5QyR8Etsepk -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:40 2026 by rpki-client