This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LpOS0pbqDBbv8upJHwO7Dws1yo8.roa File: LpOS0pbqDBbv8upJHwO7Dws1yo8.roa (raw, json) Hash identifier: UWK+I+FGDAXFhbV6RY8j8dh41QbFfLFLtzY++I8fhew= Subject key identifier: 2E:93:92:D2:96:EA:0C:16:EF:F2:EA:49:1F:03:BB:0F:0B:35:CA:8F Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB8663A71806F5DC6E06446AE3E93C Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LpOS0pbqDBbv8upJHwO7Dws1yo8.roa Signing time: Fri 02 Jan 2026 08:20:48 +0000 ROA not before: Fri 02 Jan 2026 08:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211750 IP address blocks: 151.243.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:86:63:a7:18:06:f5:dc:6e:06:44:6a:e3:e9:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2e9392d296ea0c16eff2ea491f03bb0f0b35ca8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:5c:c7:62:9a:31:44:a7:7e:8b:e2:83:98:25: cb:63:a2:ed:c1:31:ad:03:57:c2:41:c3:83:d8:e4: 43:7b:c0:7e:a9:86:18:00:c0:c5:c6:36:63:b6:22: c6:dd:65:8e:be:72:c9:d4:cb:98:04:0d:5f:7a:51: 9c:68:e2:e0:25:a1:4f:41:34:8d:f3:24:d7:5f:c6: 73:a8:a8:f7:20:4c:70:52:07:e1:17:cc:e8:6f:90: bc:f1:55:ca:92:d2:eb:f4:95:ff:4c:f8:32:8f:92: 09:0d:48:94:04:de:f9:33:46:13:f2:05:3f:25:d0: c7:3f:77:97:31:6d:c2:9d:8d:b1:86:7b:0c:9a:76: b0:16:81:7a:80:46:86:e9:84:59:18:2b:5b:24:64: 26:45:f0:33:2e:72:b3:d8:9d:ef:a5:94:d0:33:d7: 43:ee:20:94:b3:d3:41:8d:19:07:3e:bb:db:4d:0a: 04:dd:33:25:12:32:81:13:b4:e4:48:9c:e8:59:92: b9:89:39:50:aa:fe:d2:b9:1c:a0:77:62:68:81:bc: b0:a8:2d:a5:ef:63:80:51:ac:c1:4d:12:e5:0c:69: 2f:47:e4:c2:12:c4:82:dc:ce:9e:72:a0:e6:dc:92: 80:24:42:b7:22:48:7f:6b:5d:fa:9f:90:72:fe:d5: df:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:93:92:D2:96:EA:0C:16:EF:F2:EA:49:1F:03:BB:0F:0B:35:CA:8F X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LpOS0pbqDBbv8upJHwO7Dws1yo8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.127.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:bb:7b:66:8d:a8:63:af:b3:ee:43:a6:75:ce:0d:80:88:b9: 31:ec:4c:c7:89:94:0c:73:03:11:4a:1a:6e:1f:29:56:9f:5c: 71:14:71:95:a8:e0:1d:39:78:c1:b4:5e:51:38:a9:f7:bb:16: da:d3:a0:46:63:32:4c:ca:f1:9b:0b:b1:99:36:8e:74:63:ad: 33:24:3e:7a:35:c1:c1:6d:c3:c3:a4:52:f2:15:0b:74:73:fe: eb:32:80:de:e9:3a:85:61:22:72:3d:9f:f7:1a:33:fb:a5:da: 5a:7b:f5:49:2c:db:e9:db:f6:c4:99:4b:bb:5b:03:2b:6a:bc: 89:54:c0:d7:a5:ea:c3:ad:b9:e6:b8:aa:a4:f0:3f:e8:2f:a2: 80:f2:9a:65:2d:57:12:b0:8e:d7:d0:94:82:22:fb:8c:0a:f4: 27:a0:23:16:01:1e:b6:09:55:fd:a6:b6:86:11:90:bf:0d:bd: 80:37:3e:8a:a3:74:11:6a:1b:a7:48:fd:16:e4:28:f1:fc:00: e1:e4:5f:67:46:b1:5b:be:c2:e2:c4:83:60:87:17:05:64:79: e1:06:b7:3a:a6:0f:92:48:99:bc:2f:4a:54:06:c5:cd:5e:88: 59:0b:8b:c3:0b:75:ef:bf:2d:bf:5f:b4:06:36:a2:24:ad:d4: 90:94:6e:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y4ZjpxgG9dxuBkRq4+k8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZTkzOTJkMjk2ZWEwYzE2ZWZmMmVhNDkxZjAzYmIwZjBiMzVjYThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1zHYpoxRKd+i+KDmCXLY6LtwTGt A1fCQcOD2ORDe8B+qYYYAMDFxjZjtiLG3WWOvnLJ1MuYBA1felGcaOLgJaFPQTSN 8yTXX8ZzqKj3IExwUgfhF8zob5C88VXKktLr9JX/TPgyj5IJDUiUBN75M0YT8gU/ JdDHP3eXMW3CnY2xhnsMmnawFoF6gEaG6YRZGCtbJGQmRfAzLnKz2J3vpZTQM9dD 7iCUs9NBjRkHPrvbTQoE3TMlEjKBE7TkSJzoWZK5iTlQqv7SuRygd2JogbywqC2l 72OAUazBTRLlDGkvR+TCEsSC3M6ecqDm3JKAJEK3Ikh/a136n5By/tXfBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC6TktKW6gwW7/LqSR8Duw8LNcqPMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvTHBPUzBwYnFEQmJ2OHVwSkh3TzdEd3MxeW84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/N/MA0G CSqGSIb3DQEBCwUAA4IBAQCKu3tmjahjr7PuQ6Z1zg2AiLkx7EzHiZQMcwMRShpu HylWn1xxFHGVqOAdOXjBtF5ROKn3uxba06BGYzJMyvGbC7GZNo50Y60zJD56NcHB bcPDpFLyFQt0c/7rMoDe6TqFYSJyPZ/3GjP7pdpae/VJLNvp2/bEmUu7WwMraryJ VMDXperDrbnmuKqk8D/oL6KA8pplLVcSsI7X0JSCIvuMCvQnoCMWAR62CVX9praG EZC/Db2ANz6Ko3QRahunSP0W5Cjx/ADh5F9nRrFbvsLixINghxcFZHnhBrc6pg+S SJm8L0pUBsXNXohZC4vDC3Xvvy2/X7QGNqIkrdSQlG70 -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:44 2026 by rpki-client