This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FWZPh1yBzMsnQ6w02oRRfZhB-rg.roa File: FWZPh1yBzMsnQ6w02oRRfZhB-rg.roa (raw, json) Hash identifier: Td2xGrhlkFOIJEhstWzFdQgbIjyf9iQimqIJhWIczGs= Subject key identifier: 15:66:4F:87:5C:81:CC:CB:27:43:AC:34:DA:84:51:7D:98:41:FA:B8 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB9A5EA320ABC0CEC22EA28A6F2BE6 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FWZPh1yBzMsnQ6w02oRRfZhB-rg.roa Signing time: Fri 02 Jan 2026 08:20:53 +0000 ROA not before: Fri 02 Jan 2026 08:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214987 IP address blocks: 151.241.103.0/24 maxlen: 24 151.242.16.0/24 maxlen: 24 151.243.142.0/24 maxlen: 24 151.243.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:9a:5e:a3:20:ab:c0:ce:c2:2e:a2:8a:6f:2b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15664f875c81cccb2743ac34da84517d9841fab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ef:cf:86:34:43:56:b1:f8:ab:62:92:6c:f7: c4:01:44:e4:1b:8f:e5:23:88:88:24:d1:e9:cc:95: f9:e3:02:c1:3a:c2:bf:65:d7:a8:c7:9d:e6:15:84: f6:5e:56:58:4f:26:ec:40:6f:62:75:45:10:ca:69: 83:7e:05:f3:f2:12:03:01:38:ce:38:0b:3e:54:58: ef:c6:b4:d3:58:dc:10:b2:d8:61:c2:6e:b5:28:7b: 49:4f:3e:2b:dd:cc:d0:22:a1:2b:9c:60:06:6d:25: a9:da:6d:9f:11:26:79:0f:f6:13:91:ff:fc:52:32: 69:dd:b3:f7:4b:82:51:53:e4:71:df:1b:26:b0:05: 77:e6:cc:8a:5a:d8:ad:82:d8:cd:36:a9:99:ba:02: ab:9e:a2:4e:fd:90:55:16:16:fe:8e:c5:44:cb:26: 74:39:ee:b0:0e:9b:aa:a6:6d:7d:a7:7d:6b:a5:78: 89:39:4c:47:6f:df:29:e9:3e:48:24:f8:91:b8:d8: 64:1a:29:df:b5:0a:fc:cd:09:cf:af:30:12:18:a6: 59:9c:bf:13:8c:7e:58:d7:4c:be:d3:de:08:b5:ea: af:16:25:5b:66:f8:26:e9:52:66:6f:f5:ed:ad:47: 42:20:77:07:22:97:d2:f0:6e:90:bb:fa:0a:1a:44: 95:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:66:4F:87:5C:81:CC:CB:27:43:AC:34:DA:84:51:7D:98:41:FA:B8 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FWZPh1yBzMsnQ6w02oRRfZhB-rg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.103.0/24 151.242.16.0/24 151.243.142.0/24 151.243.226.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:92:b2:e4:23:69:51:a6:bf:68:4b:2d:8c:6b:52:89:c3:ea: d5:c4:24:29:ff:6a:a2:52:6a:49:41:b1:d0:61:c0:a0:2a:9b: f5:be:62:1c:4e:e9:65:77:f6:b8:3b:16:96:fc:a4:17:cc:10: 8b:98:0d:69:a6:b0:e3:aa:f0:9c:71:2a:85:3b:05:56:08:9d: 2b:0c:0a:b8:bc:53:25:8a:35:d0:df:bb:6c:30:90:2a:61:5a: 94:b4:44:48:ed:70:84:e1:52:c6:30:6f:5f:e8:4e:bd:d0:f9: c2:d4:0a:b5:c0:68:0f:16:34:b5:9e:10:bd:fa:36:39:b9:5d: d8:19:54:f0:67:21:a3:1a:bb:a9:dd:fb:40:d8:e9:d8:f9:8f: 2a:a0:7d:7c:d0:8b:80:af:0e:9a:40:a5:93:cf:2d:43:cd:99: f8:e1:73:e9:52:81:29:6a:3c:2d:8d:cc:51:21:79:5d:f1:37: 61:08:bc:ba:ee:4a:51:0c:ae:2e:b9:8a:16:fd:63:51:3d:dd: 93:54:ce:22:42:f3:7c:87:8c:f8:cc:df:5f:e7:a3:b7:76:a9: 3d:1f:a3:cb:99:7e:2c:64:b1:25:83:26:91:e7:b7:77:79:4b: 66:16:a9:21:54:25:0a:5d:49:25:21:10:a9:bf:82:ae:85:98: 15:fe:f3:ab -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9y5peoyCrwM7CLqKKbyvmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTY2NGY4NzVjODFjY2NiMjc0M2FjMzRkYTg0NTE3ZDk4NDFmYWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+/PhjRDVrH4q2KSbPfEAUTkG4/l I4iIJNHpzJX54wLBOsK/Zdeox53mFYT2XlZYTybsQG9idUUQymmDfgXz8hIDATjO OAs+VFjvxrTTWNwQsthhwm61KHtJTz4r3czQIqErnGAGbSWp2m2fESZ5D/YTkf/8 UjJp3bP3S4JRU+Rx3xsmsAV35syKWtitgtjNNqmZugKrnqJO/ZBVFhb+jsVEyyZ0 Oe6wDpuqpm19p31rpXiJOUxHb98p6T5IJPiRuNhkGinftQr8zQnPrzASGKZZnL8T jH5Y10y+094IteqvFiVbZvgm6VJmb/XtrUdCIHcHIpfS8G6Qu/oKGkSV8QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFBVmT4dcgczLJ0OsNNqEUX2YQfq4MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvRldaUGgxeUJ6TXNuUTZ3MDJvUlJmWmhCLXJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/FnAwQA l/IQAwQAl/OOAwQAl/PiMA0GCSqGSIb3DQEBCwUAA4IBAQAckrLkI2lRpr9oSy2M a1KJw+rVxCQp/2qiUmpJQbHQYcCgKpv1vmIcTulld/a4OxaW/KQXzBCLmA1pprDj qvCccSqFOwVWCJ0rDAq4vFMlijXQ37tsMJAqYVqUtERI7XCE4VLGMG9f6E690PnC 1Aq1wGgPFjS1nhC9+jY5uV3YGVTwZyGjGrup3ftA2OnY+Y8qoH180IuArw6aQKWT zy1DzZn44XPpUoEpajwtjcxRIXld8TdhCLy67kpRDK4uuYoW/WNRPd2TVM4iQvN8 h4z4zN9f56O3dqk9H6PLmX4sZLElgyaR57d3eUtmFqkhVCUKXUklIRCpv4KuhZgV /vOr -----END CERTIFICATE-----Generated at Sun Jan 18 06:32:03 2026 by rpki-client