This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Ar7klLb9WTp9XzkY3gg_hpf8X2k.roa File: Ar7klLb9WTp9XzkY3gg_hpf8X2k.roa (raw, json) Hash identifier: f+/QbIEB7IhOJpP/hKBSrWayi0vfEWvIyTtKMM9fjLY= Subject key identifier: 02:BE:E4:94:B6:FD:59:3A:7D:5F:39:18:DE:08:3F:86:97:FC:5F:69 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCBAA9F41FAFFC1F5F27EFA4A998283 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Ar7klLb9WTp9XzkY3gg_hpf8X2k.roa Signing time: Fri 02 Jan 2026 08:20:58 +0000 ROA not before: Fri 02 Jan 2026 08:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395201 IP address blocks: 151.244.136.0/22 maxlen: 22 151.244.160.0/22 maxlen: 22 151.244.172.0/22 maxlen: 22 151.244.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:aa:9f:41:fa:ff:c1:f5:f2:7e:fa:4a:99:82:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02bee494b6fd593a7d5f3918de083f8697fc5f69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fd:a8:f5:f2:5e:cd:88:40:3a:e1:29:86:88: 3b:67:08:3f:33:1c:bf:e6:0e:90:b0:c8:9d:c8:6b: 93:83:32:b9:c5:b5:8d:39:dc:bc:44:48:56:40:08: 01:ed:9c:a4:ad:f2:73:09:13:bb:c8:47:cc:f1:b7: 56:70:ff:d7:90:8c:f4:d0:00:9d:55:b7:82:31:e1: 2d:64:ce:18:50:c2:ae:f0:18:0a:86:cb:1a:e0:06: 06:dc:7d:ed:ef:5b:ca:3e:17:6b:e2:5c:a2:17:eb: 8b:49:da:65:de:19:14:94:a3:ae:b4:d8:dc:33:4b: 1c:7c:90:44:5b:0e:98:f0:75:c5:ef:27:28:e1:76: ee:ae:48:3f:a6:1f:86:fb:63:86:40:dd:85:18:67: 3f:42:22:7e:d4:d3:10:78:47:0d:84:7d:77:7c:34: 33:94:d8:b0:33:bf:c9:9f:6e:20:5e:d0:42:61:8a: 90:47:53:dd:9a:36:88:bb:00:63:3a:8f:17:8e:ff: 79:ad:db:98:70:d8:1f:7c:91:46:70:d7:0d:8d:29: 0c:07:4f:ad:48:0b:3f:60:fd:31:f2:2b:30:02:ca: 7e:c4:be:c4:92:ae:a3:1d:08:52:4c:83:d5:85:f5: d1:8c:c5:97:b6:50:b3:ec:c3:df:23:11:fa:70:83: 5b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:BE:E4:94:B6:FD:59:3A:7D:5F:39:18:DE:08:3F:86:97:FC:5F:69 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Ar7klLb9WTp9XzkY3gg_hpf8X2k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.136.0/22 151.244.160.0/22 151.244.172.0-151.244.179.255 Signature Algorithm: sha256WithRSAEncryption 53:92:00:28:45:fe:46:fd:99:17:41:fb:98:f1:db:e5:0a:77: 0d:d3:78:b1:6b:fe:29:a3:79:2a:26:1c:f2:8c:8d:8d:6d:36: 49:03:6d:0a:c1:2e:f2:b3:de:e0:7d:93:0d:f4:99:12:19:a5: 2b:62:58:54:67:9c:1a:7d:89:10:cc:70:a2:50:82:4a:f5:88: 16:ed:6d:db:41:bf:3c:f0:47:e6:57:b8:ff:2b:95:18:5f:46: a8:ba:df:97:a3:c3:14:96:e9:57:c5:8f:28:92:78:82:64:28: 33:9f:20:d6:83:19:1d:d5:f5:e5:5e:d0:cc:7f:8d:98:83:3a: 0d:c8:74:86:d2:06:c3:d7:14:77:b1:31:56:2d:ec:37:a9:7a: 3b:4e:51:70:42:eb:c5:98:bc:4c:ba:21:c8:d1:00:92:d9:df: fc:e5:02:80:59:12:f0:66:ea:e2:a0:fc:a8:44:db:82:37:27: 87:71:3d:d4:b5:7e:5f:2b:64:e7:55:9d:0a:d9:67:f4:03:b9: c9:35:f8:b1:3c:09:45:1c:37:2f:8a:6c:50:b0:fc:b6:45:fb: 68:51:be:5c:69:05:2a:87:d6:90:c8:fe:29:aa:c4:c9:3b:59: 90:65:b1:0b:58:69:a7:f3:26:fc:55:91:9d:2f:fe:90:ee:fa: 98:ea:53:86 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt9y6qfQfr/wfXyfvpKmYKDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmJlZTQ5NGI2ZmQ1OTNhN2Q1ZjM5MThkZTA4M2Y4Njk3ZmM1ZjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/2o9fJezYhAOuEphog7Zwg/Mxy/ 5g6QsMidyGuTgzK5xbWNOdy8REhWQAgB7ZykrfJzCRO7yEfM8bdWcP/XkIz00ACd VbeCMeEtZM4YUMKu8BgKhssa4AYG3H3t71vKPhdr4lyiF+uLSdpl3hkUlKOutNjc M0scfJBEWw6Y8HXF7yco4Xburkg/ph+G+2OGQN2FGGc/QiJ+1NMQeEcNhH13fDQz lNiwM7/Jn24gXtBCYYqQR1PdmjaIuwBjOo8Xjv95rduYcNgffJFGcNcNjSkMB0+t SAs/YP0x8iswAsp+xL7Ekq6jHQhSTIPVhfXRjMWXtlCz7MPfIxH6cINbLwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFAK+5JS2/Vk6fV85GN4IP4aX/F9pMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvQXI3a2xMYjlXVHA5WHprWTNnZ19ocGY4WDJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCl/SIAwQC l/SgMAwDBAKX9KwDBAKX9LAwDQYJKoZIhvcNAQELBQADggEBAFOSAChF/kb9mRdB +5jx2+UKdw3TeLFr/imjeSomHPKMjY1tNkkDbQrBLvKz3uB9kw30mRIZpStiWFRn nBp9iRDMcKJQgkr1iBbtbdtBvzzwR+ZXuP8rlRhfRqi635ejwxSW6VfFjyiSeIJk KDOfINaDGR3V9eVe0Mx/jZiDOg3IdIbSBsPXFHexMVYt7DepejtOUXBC68WYvEy6 IcjRAJLZ3/zlAoBZEvBm6uKg/KhE24I3J4dxPdS1fl8rZOdVnQrZZ/QDuck1+LE8 CUUcNy+KbFCw/LZF+2hRvlxpBSqH1pDI/imqxMk7WZBlsQtYaafzJvxVkZ0v/pDu +pjqU4Y= -----END CERTIFICATE-----Generated at Sun Jan 18 06:28:53 2026 by rpki-client