This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Cd9cMALY6B7_mnJoO17yXnVzRTQ.roa File: Cd9cMALY6B7_mnJoO17yXnVzRTQ.roa (raw, json) Hash identifier: JxLdQ8JYtCKXNFL8KlMp4quuU0TI8ImfmVtJBDabfuA= Subject key identifier: 09:DF:5C:30:02:D8:E8:1E:FF:9A:72:68:3B:5E:F2:5E:75:73:45:34 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB15A2B4ABFD7181F33F704F494D93 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Cd9cMALY6B7_mnJoO17yXnVzRTQ.roa Signing time: Fri 02 Jan 2026 08:20:19 +0000 ROA not before: Fri 02 Jan 2026 08:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14576 IP address blocks: 151.240.206.0/24 maxlen: 24 151.240.207.0/24 maxlen: 24 151.240.208.0/24 maxlen: 24 151.240.209.0/24 maxlen: 24 151.240.210.0/24 maxlen: 24 151.240.211.0/24 maxlen: 24 151.240.212.0/24 maxlen: 24 151.240.213.0/24 maxlen: 24 151.240.214.0/24 maxlen: 24 151.240.215.0/24 maxlen: 24 151.240.216.0/24 maxlen: 24 151.240.217.0/24 maxlen: 24 151.240.218.0/24 maxlen: 24 151.240.220.0/24 maxlen: 24 151.240.222.0/24 maxlen: 24 151.240.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:15:a2:b4:ab:fd:71:81:f3:3f:70:4f:49:4d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=09df5c3002d8e81eff9a72683b5ef25e75734534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:18:89:4b:88:39:d1:7d:a0:54:c6:dc:11:42: a5:37:7c:be:fc:4e:60:82:b5:fb:ac:2d:02:3d:9e: fd:64:41:64:70:f7:78:3c:41:51:aa:8e:30:7c:a2: 46:59:1d:39:3d:56:71:dc:d4:5c:f2:86:7d:0e:c2: e4:f7:67:2b:6f:99:20:de:29:c3:55:d4:cf:b6:f8: 75:e4:45:26:a3:b2:1c:77:b2:c5:76:42:81:f2:e9: 94:bc:af:de:e2:80:af:1e:0c:00:99:4d:5c:e5:99: 40:a0:8d:d8:b7:56:75:3a:ed:5a:8b:ac:2f:52:e2: 00:24:60:40:27:4d:d0:d9:37:b8:af:fc:0b:a2:f0: 83:2f:d7:4d:40:56:a7:f8:78:ee:64:51:09:58:45: 5d:f8:e4:9b:e2:d2:aa:fe:28:4e:36:15:a3:3b:bf: 29:22:99:ff:f2:7c:83:a2:00:34:b5:29:49:ca:30: 8d:9d:57:be:f4:26:81:ba:48:fd:69:05:1f:9f:ab: 7a:31:8d:d2:05:02:92:03:81:3b:41:04:af:dc:41: ac:63:72:a5:87:90:ef:8b:79:51:cd:a8:db:67:ec: b7:ea:a8:09:be:77:ba:0c:00:b3:79:60:2c:df:17: 3e:d0:f0:6e:3d:0f:3b:cc:87:59:75:15:07:a0:17: 61:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:DF:5C:30:02:D8:E8:1E:FF:9A:72:68:3B:5E:F2:5E:75:73:45:34 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Cd9cMALY6B7_mnJoO17yXnVzRTQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.206.0-151.240.218.255 151.240.220.0/24 151.240.222.0/24 151.240.224.0/24 Signature Algorithm: sha256WithRSAEncryption a8:02:d2:73:64:02:2d:09:ec:85:de:54:ac:d3:24:12:ae:86: b6:2b:ec:b9:72:35:c5:15:bf:2f:be:69:56:88:2f:09:c3:e3: c4:c8:e3:ed:28:af:4e:bb:36:cd:a9:b1:0e:35:50:1c:42:d9: f0:e8:c9:bb:df:62:02:c4:75:64:27:16:da:18:cb:06:49:4b: 74:25:40:6c:8d:15:b3:59:23:0f:23:50:3a:5c:5d:74:86:5b: 33:92:58:6d:ec:e1:c3:18:d3:25:05:da:b8:c8:b0:a3:b2:3c: ca:73:fc:6c:f5:9e:c4:c9:5d:07:84:b7:86:40:b2:68:e7:2e: 98:7a:af:55:e9:9d:09:94:a1:9d:31:09:10:22:98:c4:30:4b: 67:1c:2a:4e:36:d2:a5:f8:a7:0c:7f:04:99:51:e6:fe:34:9b: f8:a1:76:f3:65:ed:26:87:7c:d8:ae:56:75:b7:67:28:66:0e: 46:09:76:8c:5c:07:c8:8f:0a:3c:f5:60:b2:58:3b:e7:71:c5: a6:77:97:8e:65:ff:f5:fc:88:c1:72:78:16:76:56:11:f9:eb: 9d:0b:d1:98:ba:fc:64:da:33:6d:ba:06:34:5e:02:1d:ae:cf: 59:92:c6:ac:fb:87:4d:3e:ca:2e:e6:86:3e:6e:25:87:3d:d2: 42:3a:da:c6 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt9yxWitKv9cYHzP3BPSU2TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOWRmNWMzMDAyZDhlODFlZmY5YTcyNjgzYjVlZjI1ZTc1NzM0NTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBiJS4g50X2gVMbcEUKlN3y+/E5g grX7rC0CPZ79ZEFkcPd4PEFRqo4wfKJGWR05PVZx3NRc8oZ9DsLk92crb5kg3inD VdTPtvh15EUmo7Icd7LFdkKB8umUvK/e4oCvHgwAmU1c5ZlAoI3Yt1Z1Ou1ai6wv UuIAJGBAJ03Q2Te4r/wLovCDL9dNQFan+HjuZFEJWEVd+OSb4tKq/ihONhWjO78p Ipn/8nyDogA0tSlJyjCNnVe+9CaBukj9aQUfn6t6MY3SBQKSA4E7QQSv3EGsY3Kl h5Dvi3lRzajbZ+y36qgJvne6DACzeWAs3xc+0PBuPQ87zIdZdRUHoBdh9wIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFAnfXDAC2Oge/5pyaDte8l51c0U0MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvQ2Q5Y01BTFk2QjdfbW5Kb08xN3lYblZ6UlRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAGX8M4D BACX8NoDBACX8NwDBACX8N4DBACX8OAwDQYJKoZIhvcNAQELBQADggEBAKgC0nNk Ai0J7IXeVKzTJBKuhrYr7LlyNcUVvy++aVaILwnD48TI4+0or067Ns2psQ41UBxC 2fDoybvfYgLEdWQnFtoYywZJS3QlQGyNFbNZIw8jUDpcXXSGWzOSWG3s4cMY0yUF 2rjIsKOyPMpz/Gz1nsTJXQeEt4ZAsmjnLph6r1XpnQmUoZ0xCRAimMQwS2ccKk42 0qX4pwx/BJlR5v40m/ihdvNl7SaHfNiuVnW3ZyhmDkYJdoxcB8iPCjz1YLJYO+dx xaZ3l45l//X8iMFyeBZ2VhH5650L0Zi6/GTaM226BjReAh2uz1mSxqz7h00+yi7m hj5uJYc90kI62sY= -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:50 2026 by rpki-client