This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CVFlc2UEB7vLCAGn11P8qwL2TN4.roa File: CVFlc2UEB7vLCAGn11P8qwL2TN4.roa (raw, json) Hash identifier: Ii7jy6EsWcR2Cx+HB4tqEO+dE8wscZ84IKLFyMJuoxQ= Subject key identifier: 09:51:65:73:65:04:07:BB:CB:08:01:A7:D7:53:FC:AB:02:F6:4C:DE Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCBB91143BEAADBE4636D69F9A9970E Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CVFlc2UEB7vLCAGn11P8qwL2TN4.roa Signing time: Fri 02 Jan 2026 08:21:01 +0000 ROA not before: Fri 02 Jan 2026 08:21:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401418 IP address blocks: 151.243.14.0/24 maxlen: 24 151.243.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:b9:11:43:be:aa:db:e4:63:6d:69:f9:a9:97:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:21:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09516573650407bbcb0801a7d753fcab02f64cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d3:c5:fe:47:a1:8f:33:00:72:b5:9d:93:60: 99:1d:56:42:5c:da:2b:71:65:88:ec:ac:2b:70:21: 14:74:af:98:2d:e7:2b:d3:ae:7f:10:23:46:e1:28: b5:c8:d7:60:aa:01:c1:a3:06:95:ae:38:0d:14:2c: 3e:47:58:05:1a:ac:55:fd:89:f9:d2:73:3d:a2:08: f4:a7:b4:70:6f:9a:ff:28:a7:d8:38:9e:99:da:ca: 37:87:59:6d:51:76:40:83:76:79:65:7b:11:5f:62: fd:f2:59:97:d0:2d:71:80:fa:78:05:fa:98:58:dd: 13:fc:29:b2:58:e5:39:d7:37:43:2f:36:74:e7:6a: d1:aa:84:17:0c:5f:bd:68:db:b3:d0:82:1d:bd:95: 76:77:00:50:f3:b6:2a:9e:5f:41:81:03:29:44:5f: 6c:7a:41:1e:d9:5f:6c:0e:ae:7c:e2:23:52:2e:c6: 20:15:e4:d7:6a:44:23:c2:61:fd:1f:94:42:0b:8c: 6b:37:57:95:8d:57:35:e9:66:c1:c4:93:41:0a:ec: c8:39:15:55:87:01:80:e2:6a:a9:00:6a:06:37:2e: e4:83:c5:06:c6:b8:19:e6:1c:16:cf:9c:88:0f:0b: 13:d7:c5:82:4c:f0:9c:ea:b3:58:5b:2d:dd:1c:35: 5b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:51:65:73:65:04:07:BB:CB:08:01:A7:D7:53:FC:AB:02:F6:4C:DE X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CVFlc2UEB7vLCAGn11P8qwL2TN4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.14.0/24 151.243.111.0/24 Signature Algorithm: sha256WithRSAEncryption 19:79:ad:19:0a:ad:3f:06:dc:ba:fc:b4:d4:03:2e:5d:f6:dd: 12:2f:24:7e:22:a0:44:ab:e9:40:8e:12:6e:aa:ec:b7:f0:03: 83:ad:ab:65:94:67:97:5c:4e:3e:a9:27:5c:9b:5a:f7:25:bb: 69:c5:4a:cf:97:51:21:e1:16:62:dd:d8:ad:34:93:54:91:79: 62:3d:a8:f2:cb:da:0a:8c:28:de:f3:8d:b9:d2:36:18:c1:62: 9e:85:21:53:45:7b:37:74:b3:a9:15:ab:15:35:31:01:ce:c7: 89:af:b7:9a:c3:b7:00:02:aa:16:d8:df:3d:e6:df:37:50:3d: 83:d1:95:fa:4f:4f:97:1d:d8:7a:b3:bd:21:dc:75:8d:be:b5: 33:58:69:13:73:04:ce:1c:a6:0e:a6:ec:7f:d0:3c:3f:7d:00: cf:2b:49:10:ba:c1:9a:46:f7:4a:ce:ba:af:06:d8:bf:87:fd: 5d:65:69:97:36:2e:c8:77:42:50:11:57:a1:c8:ab:ed:30:4a: f1:aa:32:28:4f:8e:3e:84:be:b9:7e:63:9a:e7:77:14:1c:6b: 8d:8d:0f:9e:0d:dc:73:31:65:d5:d3:8d:42:1f:f1:ab:15:db: 41:78:df:b8:67:fb:88:c6:03:8d:63:eb:81:bb:58:78:7d:16: fd:22:79:b2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y7kRQ76q2+RjbWn5qZcOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTUxNjU3MzY1MDQwN2JiY2IwODAxYTdkNzUzZmNhYjAyZjY0Y2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9PF/kehjzMAcrWdk2CZHVZCXNor cWWI7KwrcCEUdK+YLecr065/ECNG4Si1yNdgqgHBowaVrjgNFCw+R1gFGqxV/Yn5 0nM9ogj0p7Rwb5r/KKfYOJ6Z2so3h1ltUXZAg3Z5ZXsRX2L98lmX0C1xgPp4BfqY WN0T/CmyWOU51zdDLzZ052rRqoQXDF+9aNuz0IIdvZV2dwBQ87Yqnl9BgQMpRF9s ekEe2V9sDq584iNSLsYgFeTXakQjwmH9H5RCC4xrN1eVjVc16WbBxJNBCuzIORVV hwGA4mqpAGoGNy7kg8UGxrgZ5hwWz5yIDwsT18WCTPCc6rNYWy3dHDVbpQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAlRZXNlBAe7ywgBp9dT/KsC9kzeMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvQ1ZGbGMyVUVCN3ZMQ0FHbjExUDhxd0wyVE40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/MOAwQA l/NvMA0GCSqGSIb3DQEBCwUAA4IBAQAZea0ZCq0/Bty6/LTUAy5d9t0SLyR+IqBE q+lAjhJuquy38AODratllGeXXE4+qSdcm1r3JbtpxUrPl1Eh4RZi3ditNJNUkXli Pajyy9oKjCje84250jYYwWKehSFTRXs3dLOpFasVNTEBzseJr7eaw7cAAqoW2N89 5t83UD2D0ZX6T0+XHdh6s70h3HWNvrUzWGkTcwTOHKYOpux/0Dw/fQDPK0kQusGa RvdKzrqvBti/h/1dZWmXNi7Id0JQEVehyKvtMErxqjIoT44+hL65fmOa53cUHGuN jQ+eDdxzMWXV041CH/GrFdtBeN+4Z/uIxgONY+uBu1h4fRb9Inmy -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:34 2026 by rpki-client