This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KUYxX5iTgPK4Ja-X0yZ_P1dGDyw.roa File: KUYxX5iTgPK4Ja-X0yZ_P1dGDyw.roa (raw, json) Hash identifier: nQEIomkFFljEvVezXQACcVrx8S3wmUQabFuJxWXiSN8= Subject key identifier: 29:46:31:5F:98:93:80:F2:B8:25:AF:97:D3:26:7F:3F:57:46:0F:2C Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BB62C01186DE78EFD1BD5EAC782C0D42B Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KUYxX5iTgPK4Ja-X0yZ_P1dGDyw.roa Signing time: Tue 13 Jan 2026 07:04:55 +0000 ROA not before: Tue 13 Jan 2026 07:04:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213200 IP address blocks: 151.243.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:2c:01:18:6d:e7:8e:fd:1b:d5:ea:c7:82:c0:d4:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 13 07:04:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2946315f989380f2b825af97d3267f3f57460f2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c3:fe:47:25:ff:e2:81:d9:b3:d6:11:de:19: f6:b2:fa:d7:32:c1:69:11:a0:3c:da:fb:64:d7:42: fc:e6:9c:5a:f2:3f:a6:9a:80:15:23:b7:ed:87:50: 8f:5f:70:2b:7c:0d:78:61:fd:68:7e:48:48:46:aa: 09:15:2b:f4:ae:58:f0:09:e6:0b:b4:89:ee:67:81: 6d:c9:a5:2d:83:b0:75:3f:f5:1a:ec:89:13:69:64: 23:78:ce:78:24:9a:2f:a8:f5:ec:b3:d6:91:cf:92: c3:17:9a:9b:d6:6c:07:ea:cc:12:ed:a4:43:e9:45: 19:e3:5d:59:c5:6c:b2:c8:f7:c9:08:01:71:cb:97: 90:d5:28:8f:47:18:30:2b:14:4f:bf:03:40:7f:e5: c3:bc:ee:04:12:d8:d1:d9:cc:88:fd:03:a0:a4:46: aa:49:6c:07:36:ad:a0:98:a3:21:ae:cb:a6:4f:be: 03:f8:2e:fe:c2:b5:5b:1c:80:d8:3c:46:0f:9c:cf: 53:2f:86:15:8f:89:7b:1d:ef:05:a4:e7:79:ed:2f: f3:54:4a:9c:be:57:73:53:3d:a4:32:b1:86:6b:87: c6:ef:03:f2:bd:7d:50:da:67:98:a7:17:5f:70:14: 73:ec:77:a0:86:28:31:56:b8:79:90:62:bc:5b:6b: 46:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:46:31:5F:98:93:80:F2:B8:25:AF:97:D3:26:7F:3F:57:46:0F:2C X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KUYxX5iTgPK4Ja-X0yZ_P1dGDyw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.217.0/24 Signature Algorithm: sha256WithRSAEncryption 07:c7:e1:de:c3:8d:f0:1d:46:6a:0c:58:bf:63:18:93:80:20: cb:a6:55:11:19:2f:8f:2a:37:50:33:fe:7e:57:ea:09:4d:c0: 86:98:4b:ff:de:d6:df:fe:b5:37:42:1b:04:e5:e3:6d:be:19: 0c:e8:d2:6d:14:3a:56:8d:bc:92:51:3d:dd:d8:ab:55:76:9d: 5b:e8:69:d2:43:2c:b0:57:04:23:82:b9:9d:d0:f0:22:44:58: d8:9d:0c:9e:0f:da:02:98:58:03:19:e5:89:55:69:9d:5b:84: ff:2d:0d:9b:dc:5a:4a:f6:a5:82:c5:1c:50:66:27:7b:4c:23: 10:0e:19:b2:9f:5d:a6:40:6e:f4:75:a3:94:9a:10:19:96:6d: 30:e9:1a:08:3b:e4:a9:9f:a9:69:3a:22:8f:0e:4c:02:4b:0d: f7:bc:0a:ab:1e:3f:a6:e7:bf:b1:20:12:ed:11:33:1f:d8:57: 26:df:2f:c1:36:a9:e9:3f:95:a3:d6:c0:8e:e7:06:42:a7:5f: 3a:07:4d:61:8c:3d:fe:fb:9c:96:1e:4e:8a:73:7d:8b:50:2c: 2c:e0:80:0e:76:15:e5:06:0e:07:40:85:78:66:0f:ce:59:0f: 89:06:56:51:64:e0:96:9f:69:22:b6:8d:2e:1b:a8:b0:67:2f: 9a:4d:8b:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu2LAEYbeeO/RvV6seCwNQrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTEzMDcwNDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTQ2MzE1Zjk4OTM4MGYyYjgyNWFmOTdkMzI2N2YzZjU3NDYwZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusP+RyX/4oHZs9YR3hn2svrXMsFp EaA82vtk10L85pxa8j+mmoAVI7fth1CPX3ArfA14Yf1ofkhIRqoJFSv0rljwCeYL tInuZ4FtyaUtg7B1P/Ua7IkTaWQjeM54JJovqPXss9aRz5LDF5qb1mwH6swS7aRD 6UUZ411ZxWyyyPfJCAFxy5eQ1SiPRxgwKxRPvwNAf+XDvO4EEtjR2cyI/QOgpEaq SWwHNq2gmKMhrsumT74D+C7+wrVbHIDYPEYPnM9TL4YVj4l7He8FpOd57S/zVEqc vldzUz2kMrGGa4fG7wPyvX1Q2meYpxdfcBRz7HeghigxVrh5kGK8W2tGSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFClGMV+Yk4DyuCWvl9Mmfz9XRg8sMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvS1VZeFg1aVRnUEs0SmEtWDB5Wl9QMWRHRHl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/PZMA0G CSqGSIb3DQEBCwUAA4IBAQAHx+Hew43wHUZqDFi/YxiTgCDLplURGS+PKjdQM/5+ V+oJTcCGmEv/3tbf/rU3QhsE5eNtvhkM6NJtFDpWjbySUT3d2KtVdp1b6GnSQyyw VwQjgrmd0PAiRFjYnQyeD9oCmFgDGeWJVWmdW4T/LQ2b3FpK9qWCxRxQZid7TCMQ Dhmyn12mQG70daOUmhAZlm0w6RoIO+Spn6lpOiKPDkwCSw33vAqrHj+m57+xIBLt ETMf2Fcm3y/BNqnpP5Wj1sCO5wZCp186B01hjD3++5yWHk6Kc32LUCws4IAOdhXl Bg4HQIV4Zg/OWQ+JBlZRZOCWn2kito0uG6iwZy+aTYsX -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:06 2026 by rpki-client