This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/McbkjlI6zXuWB9DdBVT4CDhGOYA.roa
File: McbkjlI6zXuWB9DdBVT4CDhGOYA.roa (raw, json)
Hash identifier: gUPpibZgvGlHNp3lCXVTOB4HKvy2oGoepU27qVaUlmQ=
Subject key identifier: 31:C6:E4:8E:52:3A:CD:7B:96:07:D0:DD:05:54:F8:08:38:46:39:80
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019B7DCB305DE6A265CD911B8CEEBAC37EEE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/McbkjlI6zXuWB9DdBVT4CDhGOYA.roa
Signing time: Fri 02 Jan 2026 08:20:26 +0000
ROA not before: Fri 02 Jan 2026 08:20:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44486
IP address blocks: 151.244.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Jan 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:30:5d:e6:a2:65:cd:91:1b:8c:ee:ba:c3:7e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 2 08:20:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=31c6e48e523acd7b9607d0dd0554f80838463980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a6:a6:ac:49:49:9d:0c:24:35:37:c8:51:40:
d9:af:2f:b1:8a:bc:c3:c5:49:81:34:79:ce:2e:7a:
df:74:96:64:69:e6:ce:36:ba:1e:39:52:54:f4:1b:
f8:8c:3e:c1:5e:0f:71:cc:73:a0:e0:f6:48:85:63:
f7:e0:59:af:b7:e2:ab:f6:11:65:f8:47:68:a2:b7:
ae:d2:dc:28:61:7e:cd:40:b7:04:da:b8:77:07:24:
89:09:bc:98:0b:ed:0f:ae:f1:4e:c3:10:e9:8f:5d:
38:1c:8a:4f:7c:61:20:09:37:17:5e:d7:23:55:c7:
1c:eb:20:49:d9:7b:7c:0b:7a:b5:74:44:91:0f:2e:
41:8f:63:12:b2:e1:f6:09:65:cb:c0:43:60:34:62:
47:48:16:53:2f:76:6c:61:61:bc:5d:2c:08:cd:4e:
7f:f9:cd:98:7d:b6:df:92:5f:3c:c1:43:5e:8f:75:
84:8e:12:49:61:d7:cd:e1:18:70:d7:35:6c:78:54:
49:c3:c7:c2:18:f3:d7:b3:58:06:c7:43:a3:02:f2:
e3:fb:66:1d:ba:5f:9b:69:cd:46:06:87:2d:7a:c3:
8c:cc:13:f5:10:c5:50:74:e6:70:3a:80:ef:5c:b7:
f5:2a:54:3a:fa:29:20:97:a3:54:d8:ec:f3:35:30:
6f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C6:E4:8E:52:3A:CD:7B:96:07:D0:DD:05:54:F8:08:38:46:39:80
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/McbkjlI6zXuWB9DdBVT4CDhGOYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.232.0/24
Signature Algorithm: sha256WithRSAEncryption
15:3a:53:41:0b:1e:a6:23:0c:dd:fc:09:40:4a:77:e1:6f:4f:
70:c0:38:75:09:0a:53:23:ce:41:db:53:70:b1:c5:54:b5:c9:
6e:9c:9d:22:8d:4a:3a:25:ed:37:c2:60:1d:55:e1:81:28:9c:
20:e8:9c:40:d9:35:5d:b7:be:c4:ea:74:24:36:e5:00:bc:6d:
dc:39:9d:5d:e4:a8:c5:31:bd:a2:71:cb:9e:8f:55:91:b4:0c:
58:f8:1f:21:77:e9:02:d2:80:f4:2c:64:c8:3f:5e:52:f5:0e:
e8:b8:6c:18:82:c1:66:a6:05:7c:d5:22:21:35:c6:3d:33:83:
0a:3a:bd:f3:6e:df:d4:0d:cd:91:6e:5d:ee:af:8c:01:e5:e1:
3c:35:34:20:67:1d:33:28:53:46:c1:de:51:38:d0:91:c5:ca:
e7:29:0f:b0:e7:18:68:5b:09:d8:bf:29:e7:14:53:9d:31:12:
85:14:0b:c0:4c:3b:a8:0d:68:7c:0e:24:c7:15:d1:98:21:14:
ec:88:f4:81:9c:78:ce:5c:df:d5:60:e4:f7:7e:bc:00:33:f5:
2b:60:dd:6c:ed:44:eb:9b:14:cd:ae:96:e6:87:2d:d9:d4:4c:
b4:b2:c9:82:0c:69:bd:cf:3f:e4:75:0d:b5:f3:fd:fb:4f:e9:
73:39:74:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 06:28:47 2026 by rpki-client