This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Dq_uRz-iNHTiRgzPTA-zcGKQSr0.roa File: Dq_uRz-iNHTiRgzPTA-zcGKQSr0.roa (raw, json) Hash identifier: kqG12rMDtB/Y6aS81hAZ1y4V5NYTU0lqGJ3DplR6rcM= Subject key identifier: 0E:AF:EE:47:3F:A2:34:74:E2:46:0C:CF:4C:0F:B3:70:62:90:4A:BD Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB4A7884BCE61C6B553F82D8BCF180 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Dq_uRz-iNHTiRgzPTA-zcGKQSr0.roa Signing time: Fri 02 Jan 2026 08:20:33 +0000 ROA not before: Fri 02 Jan 2026 08:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135391 IP address blocks: 151.242.29.0/24 maxlen: 24 151.242.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 06:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4a:78:84:bc:e6:1c:6b:55:3f:82:d8:bc:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0eafee473fa23474e2460ccf4c0fb37062904abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fc:af:7c:37:e5:f6:48:ef:e9:c9:85:ce:d6: 7f:d8:31:9e:3d:50:2f:d4:2a:a2:c8:cf:dc:c0:1c: 78:bb:d4:00:cb:32:76:a8:43:2b:9b:e9:d5:43:c2: b7:29:d6:f0:a7:56:32:55:83:65:54:ab:b2:ae:99: 58:66:62:e9:96:b7:fe:0d:82:c6:b1:aa:b0:40:87: fa:f4:73:51:d4:fb:ef:0e:7e:75:61:a7:b7:91:08: ee:ba:22:e0:6e:af:da:a5:2e:e6:44:d4:cb:24:b0: 27:f5:66:d4:c4:a4:02:cb:16:f9:35:17:e2:fd:f2: be:e2:c3:c2:39:65:3b:b2:ec:ab:f6:f7:fa:a7:63: 94:fb:48:69:c9:88:e1:ec:ca:3f:a7:9c:22:40:77: e1:d9:e8:d4:67:a0:95:cf:c4:18:39:24:e7:03:98: 52:26:f2:77:31:d8:94:59:d3:26:5c:26:0c:c9:d9: dd:bf:f1:af:cf:4a:21:b2:b6:9a:0c:de:5b:bd:8a: 18:20:7d:46:b6:a7:63:2a:8d:86:56:f6:75:b1:92: 6f:85:a4:ed:9e:19:fa:65:68:1b:38:08:37:02:e5: 1d:5c:b4:bb:3a:b2:b2:82:d1:20:43:10:63:b1:e0: 02:b5:af:12:d9:16:0b:66:ff:3c:89:c0:7b:51:30: ea:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AF:EE:47:3F:A2:34:74:E2:46:0C:CF:4C:0F:B3:70:62:90:4A:BD X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Dq_uRz-iNHTiRgzPTA-zcGKQSr0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.29.0/24 151.242.66.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:5d:7e:ab:1f:39:0c:ac:60:1c:02:08:af:34:15:d6:3a:47: 12:8b:eb:5f:43:61:81:c1:04:22:d7:2e:86:91:a8:24:6b:03: 27:39:1b:ec:cc:dc:65:7b:76:a4:92:d8:49:12:f6:50:73:52: 00:3b:35:51:df:8d:06:ff:aa:0d:f8:d2:09:9a:4f:c3:77:38: 36:69:f5:dd:19:33:99:c2:69:a4:de:d3:82:55:a1:f1:1b:79: 59:d6:da:ee:15:ff:44:94:5a:c9:ad:c7:81:b0:c0:95:28:f8: b8:88:7a:95:e0:fd:af:ef:5f:72:1c:2b:9e:98:4d:78:1d:b4: 58:1b:2b:a4:45:ac:7b:3d:f4:8a:98:0d:6e:2f:59:fc:77:c7: 45:d1:ed:5f:74:5d:a7:96:5c:3d:9b:99:6d:12:e6:8a:dc:20: a3:70:a5:44:4c:66:4f:e6:1a:01:bc:fb:ea:7a:1d:87:c2:09: 3d:24:7a:ea:10:97:63:f0:ee:cc:14:0a:c2:3c:b6:cb:9b:dc: ab:2a:2e:0e:d3:d2:7f:2b:1f:97:e4:e8:78:96:a5:0e:0f:f3: 6b:95:1f:71:25:2c:bb:93:08:e2:1c:aa:9f:2e:c8:9e:1b:ee: aa:94:3c:d9:6a:ed:1b:c4:c5:4b:cd:7c:e2:fd:e5:a3:7c:15: c5:8a:99:0f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y0p4hLzmHGtVP4LYvPGAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZWFmZWU0NzNmYTIzNDc0ZTI0NjBjY2Y0YzBmYjM3MDYyOTA0YWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2vyvfDfl9kjv6cmFztZ/2DGePVAv 1CqiyM/cwBx4u9QAyzJ2qEMrm+nVQ8K3Kdbwp1YyVYNlVKuyrplYZmLplrf+DYLG saqwQIf69HNR1PvvDn51Yae3kQjuuiLgbq/apS7mRNTLJLAn9WbUxKQCyxb5NRfi /fK+4sPCOWU7suyr9vf6p2OU+0hpyYjh7Mo/p5wiQHfh2ejUZ6CVz8QYOSTnA5hS JvJ3MdiUWdMmXCYMydndv/Gvz0ohsraaDN5bvYoYIH1GtqdjKo2GVvZ1sZJvhaTt nhn6ZWgbOAg3AuUdXLS7OrKygtEgQxBjseACta8S2RYLZv88icB7UTDqXwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFA6v7kc/ojR04kYMz0wPs3BikEq9MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvRHFfdVJ6LWlOSFRpUmd6UFRBLXpjR0tRU3IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/IdAwQA l/JCMA0GCSqGSIb3DQEBCwUAA4IBAQBLXX6rHzkMrGAcAgivNBXWOkcSi+tfQ2GB wQQi1y6GkagkawMnORvszNxle3akkthJEvZQc1IAOzVR340G/6oN+NIJmk/Ddzg2 afXdGTOZwmmk3tOCVaHxG3lZ1truFf9ElFrJrceBsMCVKPi4iHqV4P2v719yHCue mE14HbRYGyukRax7PfSKmA1uL1n8d8dF0e1fdF2nllw9m5ltEuaK3CCjcKVETGZP 5hoBvPvqeh2Hwgk9JHrqEJdj8O7MFArCPLbLm9yrKi4O09J/Kx+X5Oh4lqUOD/Nr lR9xJSy7kwjiHKqfLsieG+6qlDzZau0bxMVLzXzi/eWjfBXFipkP -----END CERTIFICATE-----Generated at Wed Jan 7 14:41:25 2026 by rpki-client