This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DjxIQlUWI0--i6sb2KZUiDJDtBM.roa File: DjxIQlUWI0--i6sb2KZUiDJDtBM.roa (raw, json) Hash identifier: gL73BGzLD5u9qU8tzMygyfFmEfqRRa2LLbIVEU6ScO4= Subject key identifier: 0E:3C:48:42:55:16:23:4F:BE:8B:AB:1B:D8:A6:54:88:32:43:B4:13 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB05FC5B7119B717E924357C80D28C Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DjxIQlUWI0--i6sb2KZUiDJDtBM.roa Signing time: Fri 02 Jan 2026 08:20:15 +0000 ROA not before: Fri 02 Jan 2026 08:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2856 IP address blocks: 151.240.180.0/22 maxlen: 24 151.240.184.0/22 maxlen: 24 151.240.188.0/22 maxlen: 24 151.240.192.0/22 maxlen: 24 151.240.196.0/22 maxlen: 24 151.240.200.0/22 maxlen: 24 151.241.52.0/22 maxlen: 24 151.241.56.0/22 maxlen: 24 151.241.60.0/22 maxlen: 24 151.241.180.0/22 maxlen: 24 151.241.184.0/22 maxlen: 24 151.241.188.0/22 maxlen: 24 151.241.192.0/22 maxlen: 24 151.241.196.0/22 maxlen: 24 151.241.200.0/22 maxlen: 24 151.244.80.0/22 maxlen: 24 151.244.204.0/22 maxlen: 24 151.244.208.0/22 maxlen: 24 151.245.80.0/22 maxlen: 24 151.245.204.0/22 maxlen: 24 151.245.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:05:fc:5b:71:19:b7:17:e9:24:35:7c:80:d2:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e3c48425516234fbe8bab1bd8a654883243b413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:4f:e2:09:e5:b6:e4:7e:97:62:ba:7a:3e:00: 57:78:c7:9b:8d:14:c9:b1:54:88:46:74:6e:7e:de: bb:c1:51:78:ae:a4:c4:2b:9f:f0:53:45:37:f8:50: 39:f5:27:a2:c4:39:65:a5:f6:63:6f:e0:22:ef:b5: 86:8b:56:a6:43:55:89:cd:68:ba:76:61:b9:22:14: ec:f6:88:3c:41:aa:97:b8:05:c5:3f:30:11:85:d0: 30:f2:36:38:3e:ec:c0:88:54:96:b0:81:19:25:da: a9:db:4d:c6:2a:c7:be:96:e4:c1:16:84:01:2f:f0: 51:32:ee:07:cc:cd:eb:99:e8:f2:41:7a:26:8a:18: 73:e0:45:45:c4:4d:ad:10:7f:10:5e:a4:54:4c:4a: e7:37:c5:5b:fb:17:69:8a:26:d2:ab:48:96:a2:ce: e6:db:ef:f4:02:ef:56:64:ce:26:4b:bf:e4:6f:4a: cb:af:85:ee:07:f9:34:61:d0:46:5d:15:6f:3b:3d: 75:20:8e:7a:2a:d3:35:0c:0c:ad:02:69:a5:6c:14: c1:09:68:02:b1:35:2b:75:77:4d:fe:34:ff:6e:bc: 6e:81:e5:d2:26:b3:40:29:36:48:04:97:92:c6:0d: 4a:c9:3e:9e:17:64:c2:76:f6:2a:2d:88:d3:17:9e: 05:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3C:48:42:55:16:23:4F:BE:8B:AB:1B:D8:A6:54:88:32:43:B4:13 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DjxIQlUWI0--i6sb2KZUiDJDtBM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.180.0-151.240.203.255 151.241.52.0-151.241.63.255 151.241.180.0-151.241.203.255 151.244.80.0/22 151.244.204.0-151.244.211.255 151.245.80.0/22 151.245.204.0-151.245.211.255 Signature Algorithm: sha256WithRSAEncryption 47:3f:c4:46:a9:dc:5f:ff:c9:5e:f7:7e:2f:d3:dd:e8:36:74: 2e:f1:b2:20:65:37:bf:d8:69:63:84:86:2c:5e:77:56:29:83: ad:b5:74:f9:35:aa:b5:12:2c:e5:bf:d6:ce:dc:ab:b0:97:7e: ac:bd:9c:dd:56:4c:16:b0:e3:c0:70:71:fe:0f:54:29:a0:b1: 41:bb:1b:a9:60:8c:03:5d:3b:70:73:89:b7:5e:f7:3b:82:c2: 38:4e:57:30:5b:20:75:6d:23:ba:c1:3f:d3:81:46:e8:81:60: f8:fb:36:bf:cf:8d:dd:90:7f:a4:93:5a:fa:49:d7:ad:1c:3c: e6:c3:93:89:54:49:9a:c2:60:67:0b:e5:08:d9:49:b1:6e:3d: 99:06:91:19:08:ef:85:5e:0f:29:cf:f1:71:47:c8:8b:b6:e9: 92:71:66:b9:21:03:ba:34:39:76:ae:e7:ba:4e:16:40:81:ee: 4c:b9:49:3e:b2:36:e8:1c:e3:e3:c5:86:10:33:c7:7a:08:8c: 82:ec:3a:eb:5a:e5:54:c1:41:cf:3b:ae:db:e3:f2:ac:6d:72: bd:65:fd:ac:fe:96:c7:c6:83:3e:d3:c7:7e:42:06:9c:9e:3c: 66:b4:57:50:ea:68:dc:01:d1:b3:6d:a0:a0:22:a3:8f:4b:43: 4c:5a:54:02 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZt9ywX8W3EZtxfpJDV8gNKMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTNjNDg0MjU1MTYyMzRmYmU4YmFiMWJkOGE2NTQ4ODMyNDNiNDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10/iCeW25H6XYrp6PgBXeMebjRTJ sVSIRnRuft67wVF4rqTEK5/wU0U3+FA59SeixDllpfZjb+Ai77WGi1amQ1WJzWi6 dmG5IhTs9og8QaqXuAXFPzARhdAw8jY4PuzAiFSWsIEZJdqp203GKse+luTBFoQB L/BRMu4HzM3rmejyQXomihhz4EVFxE2tEH8QXqRUTErnN8Vb+xdpiibSq0iWos7m 2+/0Au9WZM4mS7/kb0rLr4XuB/k0YdBGXRVvOz11II56KtM1DAytAmmlbBTBCWgC sTUrdXdN/jT/brxugeXSJrNAKTZIBJeSxg1KyT6eF2TCdvYqLYjTF54FowIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFA48SEJVFiNPvourG9imVIgyQ7QTMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvRGp4SVFsVVdJMC0taTZzYjJLWlVpREpEdEJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSMAwDBAKX8LQD BAKX8MgwDAMEApfxNAMEBpfxADAMAwQCl/G0AwQCl/HIAwQCl/RQMAwDBAKX9MwD BAKX9NADBAKX9VAwDAMEApf1zAMEApf10DANBgkqhkiG9w0BAQsFAAOCAQEARz/E RqncX//JXvd+L9Pd6DZ0LvGyIGU3v9hpY4SGLF53VimDrbV0+TWqtRIs5b/Wztyr sJd+rL2c3VZMFrDjwHBx/g9UKaCxQbsbqWCMA107cHOJt173O4LCOE5XMFsgdW0j usE/04FG6IFg+Ps2v8+N3ZB/pJNa+knXrRw85sOTiVRJmsJgZwvlCNlJsW49mQaR GQjvhV4PKc/xcUfIi7bpknFmuSEDujQ5dq7nuk4WQIHuTLlJPrI26Bzj48WGEDPH egiMguw661rlVMFBzzuu2+PyrG1yvWX9rP6Wx8aDPtPHfkIGnJ48ZrRXUOpo3AHR s22goCKjj0tDTFpUAg== -----END CERTIFICATE-----Generated at Thu Jan 8 17:33:58 2026 by rpki-client