This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Aysvjt9Z5DznYsCc6_gwoRZ2RqM.roa File: Aysvjt9Z5DznYsCc6_gwoRZ2RqM.roa (raw, json) Hash identifier: qj76jnsVUpUQveyk0zRLPmWmjdTmahkG0vU9fBDOEvM= Subject key identifier: 03:2B:2F:8E:DF:59:E4:3C:E7:62:C0:9C:EB:F8:30:A1:16:76:46:A3 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB71FE949626651BE69227A871CE33 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Aysvjt9Z5DznYsCc6_gwoRZ2RqM.roa Signing time: Fri 02 Jan 2026 08:20:43 +0000 ROA not before: Fri 02 Jan 2026 08:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207043 IP address blocks: 151.240.151.0/24 maxlen: 24 151.243.18.0/24 maxlen: 24 151.243.28.0/24 maxlen: 24 151.243.113.0/24 maxlen: 24 151.243.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:71:fe:94:96:26:65:1b:e6:92:27:a8:71:ce:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=032b2f8edf59e43ce762c09cebf830a1167646a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f6:88:db:f2:bb:f6:76:c3:9f:2a:23:7e:8f: 85:7b:f7:8b:12:96:8a:5d:07:25:27:de:ab:15:fb: a0:ea:36:70:57:d5:1c:36:59:92:9a:30:49:cf:6b: 62:f4:f9:8b:d0:2e:77:7f:9a:19:4b:3e:9f:cc:f8: d2:6f:17:2c:b5:96:2d:b6:13:ca:c8:77:57:87:33: 22:fc:a0:b1:7d:d8:24:ef:2e:09:e9:e0:b6:10:e1: 15:7d:d3:29:e0:9d:8a:8b:e6:69:53:60:70:1c:ba: 24:2c:16:29:3e:8d:75:2f:19:83:11:2b:10:c2:a8: a3:ca:eb:0f:00:0d:36:be:ad:48:ea:aa:76:c0:1c: 3d:c7:3b:e0:ef:85:4b:31:c5:91:dc:90:bf:35:94: fe:78:fa:a3:6a:b2:4c:de:84:cf:61:a7:5b:b7:9c: d8:e2:18:54:61:ef:d9:bf:5a:15:4f:cc:9a:0a:d3: 46:9d:32:4b:c9:ce:87:7f:0f:00:81:a3:63:50:45: 63:60:ae:3e:4a:be:3b:91:d9:31:63:03:32:d2:17: 41:b5:f5:06:9d:57:6d:f8:31:bf:be:f6:83:86:c5: 06:e2:b2:01:e7:90:73:4a:e8:df:ed:85:9c:50:9d: ca:86:f5:eb:82:f7:ed:bb:c0:64:39:35:4b:2a:e9: 42:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:2B:2F:8E:DF:59:E4:3C:E7:62:C0:9C:EB:F8:30:A1:16:76:46:A3 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Aysvjt9Z5DznYsCc6_gwoRZ2RqM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.151.0/24 151.243.18.0/24 151.243.28.0/24 151.243.113.0/24 151.243.150.0/24 Signature Algorithm: sha256WithRSAEncryption 47:2d:f1:16:90:b1:a6:24:4d:14:f5:9d:8f:0c:d7:26:be:ad: cd:5c:fb:f3:de:24:85:44:09:41:6a:bf:b7:01:8d:30:b4:45: 2d:00:30:f0:44:a5:9f:37:f8:78:05:cc:ee:77:f3:b3:5c:fe: ce:df:41:94:22:b1:89:b8:cb:04:8f:7b:a4:28:3b:46:d1:75: 85:73:00:07:69:b8:b9:be:15:01:d1:50:47:7e:c8:95:f8:6e: a7:5a:af:0b:a3:17:4d:31:ec:4e:0d:5d:7d:c7:9a:42:2e:7b: 05:3e:8a:5b:70:be:c5:e8:a4:04:d7:89:c2:fb:0f:76:f2:89: 88:09:0b:b4:31:4d:ab:38:05:01:82:92:5d:aa:97:2b:ff:99: 63:0b:cb:e1:4c:ec:33:7a:a2:6d:06:9b:a0:ee:65:8f:2d:d6: 90:a1:c4:23:ec:9c:05:d2:22:3c:d2:8a:d1:24:d9:f4:07:08: 39:a3:68:c1:0c:d2:68:8f:86:4d:fd:62:48:25:ce:78:0b:84: 65:0f:19:63:e9:b4:91:88:bf:f1:8f:45:1a:18:16:77:a9:50: d8:ac:ca:c8:59:2a:8d:26:ef:9e:92:3e:84:c3:0e:27:66:ca: 6f:ec:5a:7e:55:0d:a5:1b:5a:db:05:34:d5:c4:45:aa:1f:70: 23:4e:72:33 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt9y3H+lJYmZRvmkieocc4zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzJiMmY4ZWRmNTllNDNjZTc2MmMwOWNlYmY4MzBhMTE2NzY0NmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/aI2/K79nbDnyojfo+Fe/eLEpaK XQclJ96rFfug6jZwV9UcNlmSmjBJz2ti9PmL0C53f5oZSz6fzPjSbxcstZYtthPK yHdXhzMi/KCxfdgk7y4J6eC2EOEVfdMp4J2Ki+ZpU2BwHLokLBYpPo11LxmDESsQ wqijyusPAA02vq1I6qp2wBw9xzvg74VLMcWR3JC/NZT+ePqjarJM3oTPYadbt5zY 4hhUYe/Zv1oVT8yaCtNGnTJLyc6Hfw8AgaNjUEVjYK4+Sr47kdkxYwMy0hdBtfUG nVdt+DG/vvaDhsUG4rIB55BzSujf7YWcUJ3KhvXrgvftu8BkOTVLKulCWwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFAMrL47fWeQ852LAnOv4MKEWdkajMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvQXlzdmp0OVo1RHpuWXNDYzZfZ3dvUloyUnFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAl/CXAwQA l/MSAwQAl/McAwQAl/NxAwQAl/OWMA0GCSqGSIb3DQEBCwUAA4IBAQBHLfEWkLGm JE0U9Z2PDNcmvq3NXPvz3iSFRAlBar+3AY0wtEUtADDwRKWfN/h4Bczud/OzXP7O 30GUIrGJuMsEj3ukKDtG0XWFcwAHabi5vhUB0VBHfsiV+G6nWq8LoxdNMexODV19 x5pCLnsFPopbcL7F6KQE14nC+w928omICQu0MU2rOAUBgpJdqpcr/5ljC8vhTOwz eqJtBpug7mWPLdaQocQj7JwF0iI80orRJNn0Bwg5o2jBDNJoj4ZN/WJIJc54C4Rl Dxlj6bSRiL/xj0UaGBZ3qVDYrMrIWSqNJu+ekj6Eww4nZspv7Fp+VQ2lG1rbBTTV xEWqH3AjTnIz -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:31 2026 by rpki-client