This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/B386nHG9gMPfmvDK3c12QyyUlGQ.roa File: B386nHG9gMPfmvDK3c12QyyUlGQ.roa (raw, json) Hash identifier: mi7XoXa66BP6foPtqg+4l88UpfzqkRZlncLaKk9Lqr8= Subject key identifier: 07:7F:3A:9C:71:BD:80:C3:DF:9A:F0:CA:DD:CD:76:43:2C:94:94:64 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB89316169BBF0654DC3F3CE9CD9FA Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/B386nHG9gMPfmvDK3c12QyyUlGQ.roa Signing time: Fri 02 Jan 2026 08:20:49 +0000 ROA not before: Fri 02 Jan 2026 08:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212335 IP address blocks: 151.240.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:89:31:61:69:bb:f0:65:4d:c3:f3:ce:9c:d9:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=077f3a9c71bd80c3df9af0caddcd76432c949464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:81:ea:54:f3:15:7a:43:8a:49:38:29:25:79: e8:f5:94:a2:92:36:86:0d:17:83:d3:5d:4d:92:18: a8:ae:56:05:e4:68:48:e9:66:86:08:15:d8:4a:b3: f7:40:84:89:e8:a3:3e:65:33:a9:83:bd:b7:a3:c8: 71:f0:9f:3c:b3:1c:84:5c:6e:c9:9a:21:20:02:32: f5:bc:d0:98:21:5b:2c:50:a6:bb:b7:58:10:a2:45: 09:3d:eb:fa:08:44:f2:dc:f7:d0:ee:0c:4c:66:0a: 12:70:3f:84:00:8b:4e:dc:61:5c:6b:f7:7f:d6:b8: 1e:54:f3:00:fe:3a:3e:25:36:0d:a3:bd:3e:36:5a: 79:e9:f6:bb:3f:b6:8d:a4:07:fe:29:af:ae:56:1b: 65:7d:be:b2:41:02:26:9d:49:52:dd:3b:66:e2:b5: 9f:6c:36:27:b3:4e:86:8c:1a:c7:bf:6d:a8:73:37: 69:71:29:84:34:5f:44:d9:f0:71:2d:95:92:43:06: d4:66:6c:d4:89:35:67:bd:2a:45:37:c3:e9:b9:5e: 9d:77:29:14:04:4a:67:83:15:7e:3e:7d:a6:05:90: d8:5e:df:92:4d:63:db:31:73:ff:28:30:19:40:ba: ee:2b:36:bc:0f:b4:9f:27:c6:1c:21:4c:43:e1:db: 4c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:7F:3A:9C:71:BD:80:C3:DF:9A:F0:CA:DD:CD:76:43:2C:94:94:64 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/B386nHG9gMPfmvDK3c12QyyUlGQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.83.0/24 Signature Algorithm: sha256WithRSAEncryption a3:3d:16:72:40:66:7a:5b:82:2c:ec:6d:bf:81:93:f3:4f:a9: ca:69:5c:01:be:08:c7:f6:55:e9:6f:8a:b4:e1:76:a1:48:b3: fb:54:67:66:09:ba:f2:e9:bb:bb:62:0a:89:d7:15:90:82:84: db:0c:d5:22:39:7e:05:37:ec:76:f2:5c:d7:50:fc:b5:df:d1: c0:71:f9:fe:a3:93:3e:82:44:aa:32:4f:20:c1:2c:4d:38:44: 7d:70:ce:91:d2:e4:5f:7a:c6:d9:e3:08:6e:90:83:80:ac:97: 6b:5d:8b:6d:51:5d:49:4c:46:2a:46:75:66:03:42:6d:74:74: df:c4:8b:48:96:b6:fa:3f:29:8d:08:18:41:a2:2d:e2:b1:8a: c0:f5:21:e7:de:2b:6e:1e:bb:f4:8d:f6:79:79:5f:30:46:ea: 5f:e0:d6:dc:db:9c:26:ad:1c:e4:c5:77:b9:83:f4:95:0b:97: c1:fd:e0:ce:c0:d6:87:99:cd:f0:da:44:e7:26:fd:24:64:5d: a0:3c:f5:7f:cb:20:c4:7a:63:28:a7:be:2c:5f:72:94:55:00: 42:40:4d:22:55:ab:73:f8:1f:2f:33:67:ce:ba:e0:48:3b:59: 7e:be:af:df:aa:0d:01:00:bc:16:d3:c3:3c:dc:6b:f3:31:98: 5a:92:23:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y4kxYWm78GVNw/POnNn6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNzdmM2E5YzcxYmQ4MGMzZGY5YWYwY2FkZGNkNzY0MzJjOTQ5NDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIHqVPMVekOKSTgpJXno9ZSikjaG DReD011NkhiorlYF5GhI6WaGCBXYSrP3QISJ6KM+ZTOpg723o8hx8J88sxyEXG7J miEgAjL1vNCYIVssUKa7t1gQokUJPev6CETy3PfQ7gxMZgoScD+EAItO3GFca/d/ 1rgeVPMA/jo+JTYNo70+Nlp56fa7P7aNpAf+Ka+uVhtlfb6yQQImnUlS3Ttm4rWf bDYns06GjBrHv22oczdpcSmENF9E2fBxLZWSQwbUZmzUiTVnvSpFN8PpuV6ddykU BEpngxV+Pn2mBZDYXt+STWPbMXP/KDAZQLruKza8D7SfJ8YcIUxD4dtM0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAd/OpxxvYDD35rwyt3NdkMslJRkMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvQjM4Nm5IRzlnTVBmbXZESzNjMTJReXlVbEdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/BTMA0G CSqGSIb3DQEBCwUAA4IBAQCjPRZyQGZ6W4Is7G2/gZPzT6nKaVwBvgjH9lXpb4q0 4XahSLP7VGdmCbry6bu7YgqJ1xWQgoTbDNUiOX4FN+x28lzXUPy139HAcfn+o5M+ gkSqMk8gwSxNOER9cM6R0uRfesbZ4whukIOArJdrXYttUV1JTEYqRnVmA0JtdHTf xItIlrb6PymNCBhBoi3isYrA9SHn3ituHrv0jfZ5eV8wRupf4Nbc25wmrRzkxXe5 g/SVC5fB/eDOwNaHmc3w2kTnJv0kZF2gPPV/yyDEemMop74sX3KUVQBCQE0iVatz +B8vM2fOuuBIO1l+vq/fqg0BALwW08M83GvzMZhakiMA -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:51 2026 by rpki-client