This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/MIuxpobk-RliahH6l1b1qZ092ZQ.roa File: MIuxpobk-RliahH6l1b1qZ092ZQ.roa (raw, json) Hash identifier: 659VrYt5ojGkna29fX5Ccmw4R/Hvyj8HreCNK1nT6+4= Subject key identifier: 30:8B:B1:A6:86:E4:F9:19:62:6A:11:FA:97:56:F5:A9:9D:3D:D9:94 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BB6201B51C784A47FCE37EE15E3E8ED19 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/MIuxpobk-RliahH6l1b1qZ092ZQ.roa Signing time: Tue 13 Jan 2026 06:51:55 +0000 ROA not before: Tue 13 Jan 2026 06:51:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 984 IP address blocks: 151.242.54.0/24 maxlen: 24 151.242.134.0/24 maxlen: 24 151.243.107.0/24 maxlen: 24 151.243.108.0/24 maxlen: 24 151.244.16.0/21 maxlen: 24 151.244.30.0/24 maxlen: 24 151.244.168.0/23 maxlen: 24 151.244.216.0/23 maxlen: 24 151.244.218.0/24 maxlen: 24 151.246.48.0/21 maxlen: 24 151.246.56.0/21 maxlen: 24 151.246.80.0/21 maxlen: 24 151.246.88.0/21 maxlen: 24 151.246.96.0/21 maxlen: 24 151.246.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 19:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:20:1b:51:c7:84:a4:7f:ce:37:ee:15:e3:e8:ed:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 13 06:51:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=308bb1a686e4f919626a11fa9756f5a99d3dd994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:cc:f1:2a:33:8d:28:51:21:03:f3:9c:0f:c9: 35:ba:66:ba:9b:81:4d:d7:29:60:be:f3:a1:4f:24: 89:be:a0:29:49:cb:fb:4d:5e:c7:7b:4e:ad:91:e6: a8:51:61:30:f1:5e:5a:ac:fc:37:74:1c:4e:b9:06: e6:ee:1f:87:a8:16:ce:9e:7a:0a:a1:42:ee:5d:62: 35:32:26:c6:a5:2e:6f:20:fd:3b:77:2f:b7:d2:8c: 50:46:82:ec:cc:5b:4a:15:ac:3c:84:96:0e:d5:39: 68:dc:b2:35:7d:7f:c3:c5:8d:1b:31:c1:8f:c2:64: ae:76:c6:24:49:df:51:93:2c:8d:0f:43:bc:8d:b0: 10:cf:73:66:b1:81:bd:a0:19:a5:d3:d8:7a:2d:a8: 96:de:1f:40:9a:99:09:ff:30:28:8d:a8:b5:dd:76: 8c:2f:98:9b:0f:86:d2:c8:74:6a:10:da:2f:e1:7a: 86:c7:2a:f2:31:7c:b2:2c:30:f9:3f:8c:53:6a:45: a6:88:0b:d9:3a:bf:2e:4e:27:6c:b1:53:96:f5:f6: 83:f5:d1:cf:26:ea:f5:0c:c4:a3:5d:00:b4:6f:92: 10:c0:aa:9f:0c:b4:3c:c5:25:e5:fe:55:2e:b9:3a: 8b:56:45:9f:86:21:50:e6:d8:f7:76:7b:42:3a:07: 54:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:8B:B1:A6:86:E4:F9:19:62:6A:11:FA:97:56:F5:A9:9D:3D:D9:94 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/MIuxpobk-RliahH6l1b1qZ092ZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.54.0/24 151.242.134.0/24 151.243.107.0-151.243.108.255 151.244.16.0/21 151.244.30.0/24 151.244.168.0/23 151.244.216.0-151.244.218.255 151.246.48.0/20 151.246.80.0-151.246.103.255 151.246.112.0/21 Signature Algorithm: sha256WithRSAEncryption 3a:bb:55:e4:44:36:42:e2:68:83:0e:66:55:45:56:1d:93:11: a6:c3:e6:af:6e:bf:a7:c4:d7:86:ac:7f:0d:f8:e0:91:cf:83: 3d:d9:de:9e:73:d4:2c:d2:33:34:59:9e:5d:65:42:e1:a2:b5: 18:42:9f:3b:61:19:3b:5e:f1:ad:9c:12:10:8f:46:14:d8:aa: 18:40:74:bd:c6:92:b5:c8:5a:88:0e:3d:88:a3:83:07:dc:8a: 13:c3:b4:40:9a:57:bd:69:4b:3d:64:4c:54:91:30:e3:20:cf: 38:b7:27:b8:e0:94:b3:14:ef:b7:bd:66:d5:7f:f1:3b:98:bb: dc:d7:56:0f:88:39:e4:75:71:2e:6c:7d:38:f7:30:77:99:f1: 37:b1:c2:33:0e:a7:43:2a:23:a9:c4:76:b3:f0:ba:50:70:a7: 12:b4:73:dd:3d:b7:4b:70:a4:95:7c:bd:ad:b7:47:c2:39:7d: d8:99:e7:23:e8:e5:8c:8a:9d:1e:3c:8d:a3:32:72:b4:7c:6c: 7d:3e:3f:6c:6a:0a:55:55:bd:e8:55:af:c4:72:0f:7d:f2:91: b1:ec:8c:cc:70:27:5f:c4:d1:cf:50:6a:5d:92:e2:9e:88:69: 73:9c:1f:b9:c0:e2:dd:c6:e1:76:b3:a5:82:26:a0:30:a9:a9: 04:7b:d2:2a -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZu2IBtRx4Skf8437hXj6O0ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTEzMDY1MTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMDhiYjFhNjg2ZTRmOTE5NjI2YTExZmE5NzU2ZjVhOTlkM2RkOTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3czxKjONKFEhA/OcD8k1uma6m4FN 1ylgvvOhTySJvqApScv7TV7He06tkeaoUWEw8V5arPw3dBxOuQbm7h+HqBbOnnoK oULuXWI1MibGpS5vIP07dy+30oxQRoLszFtKFaw8hJYO1Tlo3LI1fX/DxY0bMcGP wmSudsYkSd9RkyyND0O8jbAQz3NmsYG9oBml09h6LaiW3h9AmpkJ/zAojai13XaM L5ibD4bSyHRqENov4XqGxyryMXyyLDD5P4xTakWmiAvZOr8uTidssVOW9faD9dHP Jur1DMSjXQC0b5IQwKqfDLQ8xSXl/lUuuTqLVkWfhiFQ5tj3dntCOgdUAQIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFDCLsaaG5PkZYmoR+pdW9amdPdmUMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvTUl1eHBvYmstUmxpYWhINmwxYjFxWjA5MlpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAl/I2AwQA l/KGMAwDBACX82sDBACX82wDBAOX9BADBACX9B4DBAGX9KgwDAMEA5f02AMEAJf0 2gMEBJf2MDAMAwQEl/ZQAwQDl/ZgAwQDl/ZwMA0GCSqGSIb3DQEBCwUAA4IBAQA6 u1XkRDZC4miDDmZVRVYdkxGmw+avbr+nxNeGrH8N+OCRz4M92d6ec9Qs0jM0WZ5d ZULhorUYQp87YRk7XvGtnBIQj0YU2KoYQHS9xpK1yFqIDj2Io4MH3IoTw7RAmle9 aUs9ZExUkTDjIM84tye44JSzFO+3vWbVf/E7mLvc11YPiDnkdXEubH049zB3mfE3 scIzDqdDKiOpxHaz8LpQcKcStHPdPbdLcKSVfL2tt0fCOX3Ymecj6OWMip0ePI2j MnK0fGx9Pj9sagpVVb3oVa/Ecg998pGx7IzMcCdfxNHPUGpdkuKeiGlznB+5wOLd xuF2s6WCJqAwqakEe9Iq -----END CERTIFICATE-----Generated at Sun Jan 18 04:26:35 2026 by rpki-client