This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/A86ygRFeGb6GtLIBnvLfwpCH_so.roa File: A86ygRFeGb6GtLIBnvLfwpCH_so.roa (raw, json) Hash identifier: MIIYg6cdZKXkoi1GYzk6req2TGq3YeUA4Raj4+dOS6c= Subject key identifier: 03:CE:B2:81:11:5E:19:BE:86:B4:B2:01:9E:F2:DF:C2:90:87:FE:CA Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB671D02C4FACC324475F9D2E23919 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/A86ygRFeGb6GtLIBnvLfwpCH_so.roa Signing time: Fri 02 Jan 2026 08:20:40 +0000 ROA not before: Fri 02 Jan 2026 08:20:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203446 IP address blocks: 151.247.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:67:1d:02:c4:fa:cc:32:44:75:f9:d2:e2:39:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03ceb281115e19be86b4b2019ef2dfc29087feca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:81:02:96:d4:10:59:2c:83:76:2f:8e:74:1c: d5:a8:0a:66:33:8b:ce:39:4d:3c:e2:03:85:88:b0: 16:be:67:f7:4c:84:72:2f:ce:4a:21:53:9e:c5:b8: 36:58:92:fe:4f:6d:89:4c:a5:c0:43:02:2d:21:98: d5:52:db:71:8e:16:a0:c3:28:0c:44:88:68:b3:b9: 1d:da:3f:2c:04:c6:66:14:da:1f:e7:58:0e:80:09: 1f:e7:3d:e3:7b:3b:cf:5d:4c:44:be:cf:0f:e3:c3: ef:ca:65:dd:14:80:32:b9:f2:e5:08:07:5c:87:5e: 43:91:5d:ab:c4:ab:b1:6e:f3:cb:09:5d:00:54:bb: f3:04:a3:12:be:a3:0c:4e:02:f2:32:69:c8:bc:04: 1c:60:51:a9:12:c1:86:69:c0:ec:7d:b5:be:1b:a7: 59:8f:72:52:d3:63:3a:b9:ae:18:9d:e8:d7:2e:e0: 3b:05:31:cc:43:72:53:a8:1e:4e:f6:d3:89:07:eb: 1c:e6:e7:0b:e1:90:08:c0:2e:53:8c:ab:73:88:28: f3:9c:54:61:49:60:30:95:6b:34:93:19:bf:a1:32: a9:ec:57:ad:e7:ab:1a:bb:b5:46:83:70:42:68:c5: a6:6b:3b:94:52:68:aa:b1:58:68:b4:5e:21:7c:80: d9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CE:B2:81:11:5E:19:BE:86:B4:B2:01:9E:F2:DF:C2:90:87:FE:CA X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/A86ygRFeGb6GtLIBnvLfwpCH_so.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.247.207.0/24 Signature Algorithm: sha256WithRSAEncryption 89:c4:1f:48:d7:65:8b:57:46:4e:5b:9c:ca:30:aa:0e:e2:d6: 5c:83:6d:c4:51:fc:84:69:df:b8:f1:92:0b:36:5d:51:11:41: 67:cc:f1:60:6c:6c:ba:37:57:21:3f:08:24:4d:f2:3a:fc:7d: e6:77:25:c6:d2:b4:6f:54:a5:fe:e2:01:ca:44:55:a8:97:b4: 85:21:53:82:99:03:9e:fd:68:51:e3:c2:81:7e:34:6b:11:69: 35:e8:66:5d:e7:92:bb:dd:13:3e:5b:aa:fd:41:8e:92:33:29: 23:33:3c:24:09:23:95:35:23:56:ae:1f:a0:07:aa:5e:9c:ac: 9d:07:f1:30:97:22:c7:9e:6a:09:d1:4a:ed:bc:95:cd:01:5c: c8:c5:a5:ed:99:7a:45:67:c3:97:83:df:6e:7b:90:f0:60:80: e9:2a:25:16:49:6e:2c:38:70:dd:17:43:ae:2a:e0:cf:6f:31: 97:69:c7:ea:34:f3:d8:0b:b5:27:20:4b:1c:30:a6:63:f4:57: 8c:f8:f1:b0:a5:32:3b:28:59:ac:23:eb:f7:28:8f:15:b7:e5: c3:b3:50:9b:c5:dd:5e:64:68:0f:88:53:74:3f:25:3c:69:bb: 63:83:9c:1b:44:4f:5f:9b:38:64:63:0d:10:f0:51:a2:2b:8f: 18:da:ad:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y2cdAsT6zDJEdfnS4jkZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2NlYjI4MTExNWUxOWJlODZiNGIyMDE5ZWYyZGZjMjkwODdmZWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IECltQQWSyDdi+OdBzVqApmM4vO OU084gOFiLAWvmf3TIRyL85KIVOexbg2WJL+T22JTKXAQwItIZjVUttxjhagwygM RIhos7kd2j8sBMZmFNof51gOgAkf5z3jezvPXUxEvs8P48PvymXdFIAyufLlCAdc h15DkV2rxKuxbvPLCV0AVLvzBKMSvqMMTgLyMmnIvAQcYFGpEsGGacDsfbW+G6dZ j3JS02M6ua4YnejXLuA7BTHMQ3JTqB5O9tOJB+sc5ucL4ZAIwC5TjKtziCjznFRh SWAwlWs0kxm/oTKp7Fet56sau7VGg3BCaMWmazuUUmiqsVhotF4hfIDZ0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAPOsoERXhm+hrSyAZ7y38KQh/7KMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvQTg2eWdSRmVHYjZHdExJQm52TGZ3cENIX3NvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/fPMA0G CSqGSIb3DQEBCwUAA4IBAQCJxB9I12WLV0ZOW5zKMKoO4tZcg23EUfyEad+48ZIL Nl1REUFnzPFgbGy6N1chPwgkTfI6/H3mdyXG0rRvVKX+4gHKRFWol7SFIVOCmQOe /WhR48KBfjRrEWk16GZd55K73RM+W6r9QY6SMykjMzwkCSOVNSNWrh+gB6penKyd B/EwlyLHnmoJ0UrtvJXNAVzIxaXtmXpFZ8OXg99ue5DwYIDpKiUWSW4sOHDdF0Ou KuDPbzGXacfqNPPYC7UnIEscMKZj9FeM+PGwpTI7KFmsI+v3KI8Vt+XDs1Cbxd1e ZGgPiFN0PyU8abtjg5wbRE9fmzhkYw0Q8FGiK48Y2q3h -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:23 2026 by rpki-client