This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FIvyg2PACGRBWKx7uCYImLAv3-0.roa File: FIvyg2PACGRBWKx7uCYImLAv3-0.roa (raw, json) Hash identifier: +6wxIysVkyZcqTSHQYdRRCMsBvWeGvcyTb+dShlZ4jA= Subject key identifier: 14:8B:F2:83:63:C0:08:64:41:58:AC:7B:B8:26:08:98:B0:2F:DF:ED Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCBB1BD96F8876CC76A567DDB3423DC Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FIvyg2PACGRBWKx7uCYImLAv3-0.roa Signing time: Fri 02 Jan 2026 08:20:59 +0000 ROA not before: Fri 02 Jan 2026 08:20:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400175 IP address blocks: 151.243.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:b1:bd:96:f8:87:6c:c7:6a:56:7d:db:34:23:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=148bf28363c008644158ac7bb8260898b02fdfed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:99:b4:cb:79:da:6d:26:73:47:b3:64:f9:b2: 27:1e:ff:55:1d:c9:6b:c9:89:c5:f2:b6:8d:be:69: 87:f9:92:4a:c6:37:8c:bf:25:c4:07:a2:1a:66:8e: d5:66:48:54:84:21:f2:1a:86:a6:94:9a:06:3b:2e: 49:7a:a5:7d:ea:f8:23:13:6b:7c:53:86:8a:2c:fe: d2:97:fe:2b:c6:57:58:36:8b:af:70:da:2c:15:bc: e7:aa:f6:ec:b3:3d:5c:96:54:cc:35:5d:7e:d1:aa: 65:17:34:e2:9e:67:c8:9d:08:29:78:f5:53:55:88: 66:cd:d8:c1:44:77:09:83:57:3c:f2:29:0e:03:46: f7:bc:ba:0c:29:64:77:d7:f7:51:05:b4:8e:c5:dc: 8a:c2:bc:fb:79:77:c9:a3:3d:50:05:da:be:c1:3c: 7f:74:9b:fe:24:11:bd:06:7d:09:de:de:b3:54:11: 48:fe:55:67:4c:22:c7:e3:9f:7c:3f:d0:08:eb:ac: 3a:3f:77:b7:17:c6:09:47:54:a4:d5:b4:92:97:93: 28:fe:71:8d:2f:7e:09:a5:d4:b1:ff:60:21:6d:45: 50:9b:22:b6:9a:8b:2b:f8:6c:38:69:a4:7c:6c:09: 76:36:50:2d:52:69:bd:9f:d1:5a:c1:32:15:4e:0a: cf:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:8B:F2:83:63:C0:08:64:41:58:AC:7B:B8:26:08:98:B0:2F:DF:ED X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FIvyg2PACGRBWKx7uCYImLAv3-0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.215.0/24 Signature Algorithm: sha256WithRSAEncryption 27:14:84:00:63:87:3a:1d:c1:ce:81:5d:dc:3c:1a:d1:19:e2: 7c:78:62:2a:54:bf:c9:7f:9b:6a:7d:67:32:db:0b:ab:c9:ce: 76:0f:6e:19:1a:57:ae:c1:a1:0f:2e:12:a0:ab:58:8c:67:e2: c5:b5:8b:06:b9:3f:14:4f:be:c4:97:52:22:4d:2b:08:33:8b: 20:8a:9a:00:9d:5f:b7:96:e4:24:58:ff:ee:b8:bd:cf:be:e6: 0c:2d:b2:aa:28:9d:21:12:99:f9:91:45:aa:ec:dc:e2:66:0d: 18:19:96:6f:8a:b4:d8:33:23:56:97:0a:72:40:44:65:6a:38: 60:ed:3d:d1:7f:0f:00:92:e7:6f:10:63:58:fb:3b:2a:d4:27: 98:c4:d3:31:bf:69:fc:c3:3b:90:51:4a:5c:03:78:0b:51:4e: e7:10:63:20:81:2f:12:66:81:31:d0:bf:3f:16:42:92:36:cd: 67:57:ee:ab:85:c2:75:dc:ec:bf:62:fc:a5:26:b7:11:54:30: 04:37:00:7f:c4:df:cc:a8:19:3b:29:3f:33:a9:36:dc:a4:6c: 7a:31:eb:dd:53:fa:ce:64:46:f9:99:60:da:a9:8c:16:f2:a9: 1f:09:d0:4e:65:66:d1:2d:20:7b:3b:67:b0:8b:cc:6c:b1:9f: 98:fd:25:2b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y7G9lviHbMdqVn3bNCPcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDhiZjI4MzYzYzAwODY0NDE1OGFjN2JiODI2MDg5OGIwMmZkZmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZm0y3nabSZzR7Nk+bInHv9VHclr yYnF8raNvmmH+ZJKxjeMvyXEB6IaZo7VZkhUhCHyGoamlJoGOy5JeqV96vgjE2t8 U4aKLP7Sl/4rxldYNouvcNosFbznqvbssz1cllTMNV1+0aplFzTinmfInQgpePVT VYhmzdjBRHcJg1c88ikOA0b3vLoMKWR31/dRBbSOxdyKwrz7eXfJoz1QBdq+wTx/ dJv+JBG9Bn0J3t6zVBFI/lVnTCLH4598P9AI66w6P3e3F8YJR1Sk1bSSl5Mo/nGN L34JpdSx/2AhbUVQmyK2mosr+Gw4aaR8bAl2NlAtUmm9n9FawTIVTgrPGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBSL8oNjwAhkQVise7gmCJiwL9/tMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvRkl2eWcyUEFDR1JCV0t4N3VDWUltTEF2My0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/PXMA0G CSqGSIb3DQEBCwUAA4IBAQAnFIQAY4c6HcHOgV3cPBrRGeJ8eGIqVL/Jf5tqfWcy 2wuryc52D24ZGleuwaEPLhKgq1iMZ+LFtYsGuT8UT77El1IiTSsIM4sgipoAnV+3 luQkWP/uuL3PvuYMLbKqKJ0hEpn5kUWq7NziZg0YGZZvirTYMyNWlwpyQERlajhg 7T3Rfw8AkudvEGNY+zsq1CeYxNMxv2n8wzuQUUpcA3gLUU7nEGMggS8SZoEx0L8/ FkKSNs1nV+6rhcJ13Oy/YvylJrcRVDAENwB/xN/MqBk7KT8zqTbcpGx6MevdU/rO ZEb5mWDaqYwW8qkfCdBOZWbRLSB7O2ewi8xssZ+Y/SUr -----END CERTIFICATE-----Generated at Sun Jan 18 06:29:13 2026 by rpki-client