This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CXkx6mxwN2i8BtKz1Il1NIcOhp4.roa File: CXkx6mxwN2i8BtKz1Il1NIcOhp4.roa (raw, json) Hash identifier: UK1TuX9/XD0isNj/8OvvEY+i4PEpQfGIOsA+rGvJywg= Subject key identifier: 09:79:31:EA:6C:70:37:68:BC:06:D2:B3:D4:89:75:34:87:0E:86:9E Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB41B6E73584A4A61C7DB74EA661B0 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CXkx6mxwN2i8BtKz1Il1NIcOhp4.roa Signing time: Fri 02 Jan 2026 08:20:31 +0000 ROA not before: Fri 02 Jan 2026 08:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60439 IP address blocks: 151.240.151.0/24 maxlen: 24 151.243.28.0/24 maxlen: 24 151.243.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:41:b6:e7:35:84:a4:a6:1c:7d:b7:4e:a6:61:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=097931ea6c703768bc06d2b3d4897534870e869e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:97:1e:e8:cb:c9:19:65:c8:b8:ad:d5:f9:15: f3:c6:02:d0:9c:4c:7f:d5:a2:45:92:9f:d0:bc:bf: 2f:3e:85:94:ac:0e:a9:72:db:17:57:99:05:cf:cf: 9f:d0:af:bd:a3:54:51:2c:60:73:3d:19:8b:3e:df: 64:e6:9c:29:e6:7e:19:01:fd:7d:26:e8:b2:7a:45: 42:c3:37:82:69:6b:84:32:fa:2c:8a:4b:d9:56:6b: 7b:53:41:af:4c:d5:90:1d:8e:36:ba:4b:aa:02:0d: bf:35:b4:85:ce:99:78:e0:cf:5c:dc:95:bc:48:93: 05:68:6c:19:ab:ce:fd:9d:1f:c0:62:a0:b8:5d:c3: 11:dc:4c:bd:33:21:99:be:cd:20:68:86:4b:67:d7: 7d:b8:3a:7a:80:a3:77:1b:b8:c0:a9:cf:ce:19:76: 89:8c:f9:a6:94:31:e6:48:fd:b5:4c:0f:9c:a1:26: cc:86:08:85:55:7f:fe:fa:dc:c6:eb:7f:ae:f5:cd: ee:33:d6:6f:05:b7:da:f0:bf:cb:b5:ae:7d:ec:85: 3a:5b:16:a9:2a:4b:6d:aa:56:2f:df:66:5a:4a:c0: c3:bb:20:35:dd:14:1d:be:b4:4c:d2:98:77:13:a5: d5:51:ed:91:19:d2:e4:0a:2a:73:6f:ed:fb:ce:86: e0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:79:31:EA:6C:70:37:68:BC:06:D2:B3:D4:89:75:34:87:0E:86:9E X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CXkx6mxwN2i8BtKz1Il1NIcOhp4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.151.0/24 151.243.28.0/24 151.243.150.0/24 Signature Algorithm: sha256WithRSAEncryption 70:cc:0a:d0:00:b1:27:aa:f7:bd:4f:52:92:81:a2:44:dd:c7: ac:21:cc:a7:42:d9:ab:3b:e5:3b:3e:09:e0:36:6a:6d:13:a9: 31:3c:2e:43:3c:49:35:56:93:9b:9f:4f:1d:d2:2c:ad:8d:9c: 88:90:99:e1:07:8f:b1:4f:05:0d:3f:84:ce:6f:4e:fe:0b:73: 08:d0:aa:c9:47:cf:63:c9:5f:9c:26:99:4f:4d:5e:53:7f:4b: 6f:ce:4b:3c:8c:b7:98:62:c8:c0:4c:01:18:ba:52:b1:c7:76: c0:4d:9d:2e:04:6f:66:32:51:30:81:85:44:f2:26:73:bb:0b: e5:2e:cc:a2:a1:95:66:99:7d:87:2a:71:c7:ef:e1:7a:ad:82: 36:d8:ff:00:4e:b5:80:7d:bb:eb:00:c9:62:21:4b:13:17:e9: f5:6d:fd:da:e5:52:90:b7:e0:d8:a7:ae:91:d3:24:53:7a:8d: 01:05:56:63:79:8e:4b:dd:45:75:da:e5:39:8e:f3:65:d3:2f: 02:97:c3:93:33:ee:fe:7d:9e:08:42:e8:5f:1e:c4:85:4d:1a: 83:a1:7c:06:12:21:99:8e:5f:48:54:7f:97:40:32:d6:2d:19: b8:2c:97:4a:ff:dc:bc:56:c8:bd:a3:0f:cc:2f:79:46:ec:6e: 03:79:62:86 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9y0G25zWEpKYcfbdOpmGwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTc5MzFlYTZjNzAzNzY4YmMwNmQyYjNkNDg5NzUzNDg3MGU4NjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZce6MvJGWXIuK3V+RXzxgLQnEx/ 1aJFkp/QvL8vPoWUrA6pctsXV5kFz8+f0K+9o1RRLGBzPRmLPt9k5pwp5n4ZAf19 JuiyekVCwzeCaWuEMvosikvZVmt7U0GvTNWQHY42ukuqAg2/NbSFzpl44M9c3JW8 SJMFaGwZq879nR/AYqC4XcMR3Ey9MyGZvs0gaIZLZ9d9uDp6gKN3G7jAqc/OGXaJ jPmmlDHmSP21TA+coSbMhgiFVX/++tzG63+u9c3uM9ZvBbfa8L/Lta597IU6Wxap KkttqlYv32ZaSsDDuyA13RQdvrRM0ph3E6XVUe2RGdLkCipzb+37zobgSwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFAl5MepscDdovAbSs9SJdTSHDoaeMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvQ1hreDZteHdOMmk4QnRLejFJbDFOSWNPaHA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/CXAwQA l/McAwQAl/OWMA0GCSqGSIb3DQEBCwUAA4IBAQBwzArQALEnqve9T1KSgaJE3ces IcynQtmrO+U7PgngNmptE6kxPC5DPEk1VpObn08d0iytjZyIkJnhB4+xTwUNP4TO b07+C3MI0KrJR89jyV+cJplPTV5Tf0tvzks8jLeYYsjATAEYulKxx3bATZ0uBG9m MlEwgYVE8iZzuwvlLsyioZVmmX2HKnHH7+F6rYI22P8ATrWAfbvrAMliIUsTF+n1 bf3a5VKQt+DYp66R0yRTeo0BBVZjeY5L3UV12uU5jvNl0y8Cl8OTM+7+fZ4IQuhf HsSFTRqDoXwGEiGZjl9IVH+XQDLWLRm4LJdK/9y8Vsi9ow/ML3lG7G4DeWKG -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:38 2026 by rpki-client