This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Q-ffyZRDHRqbzE0gAeyiZjylZBo.roa File: Q-ffyZRDHRqbzE0gAeyiZjylZBo.roa (raw, json) Hash identifier: Oh+5UBJ+pDfe+TcDVhPqopnVVMK+plyzh0BHUfujkaY= Subject key identifier: 43:E7:DF:C9:94:43:1D:1A:9B:CC:4D:20:01:EC:A2:66:3C:A5:64:1A Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BB6AC2DCDBBEBA4D98C02F77C259E9672 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Q-ffyZRDHRqbzE0gAeyiZjylZBo.roa Signing time: Tue 13 Jan 2026 09:24:55 +0000 ROA not before: Tue 13 Jan 2026 09:24:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214025 IP address blocks: 151.242.114.0/24 maxlen: 24 151.244.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:ac:2d:cd:bb:eb:a4:d9:8c:02:f7:7c:25:9e:96:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 13 09:24:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43e7dfc994431d1a9bcc4d2001eca2663ca5641a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:55:ea:11:fb:75:23:3c:b1:f9:70:58:29:e9: 5e:e8:e9:ed:94:08:57:ec:5d:0c:c9:5a:49:6a:12: c4:bf:89:9e:c3:90:3e:01:f4:3f:45:bc:a7:7b:e1: 6f:0f:df:d2:76:86:df:2d:34:b7:92:ed:75:03:01: 65:f2:39:19:d3:c4:ba:56:53:b1:72:1f:bb:40:2d: cc:bb:93:b8:4b:01:ff:89:77:e0:cf:e6:1f:a6:5d: f1:92:a1:d0:90:a7:7d:5c:18:ad:20:ee:73:8f:d6: 9a:93:8f:aa:1f:4a:47:46:bc:92:ce:56:43:f1:3a: e0:53:52:ed:ef:38:a0:8a:63:6f:cb:26:84:a1:78: 78:d9:03:fc:64:1c:d7:68:c6:ca:5a:e7:cc:4b:01: fe:e6:9d:17:5f:07:4c:60:bf:31:06:38:30:6f:6c: 7c:eb:33:77:e8:fe:8b:3f:f2:65:3f:43:9f:71:58: 35:21:7d:a9:86:fd:1f:86:2e:31:1b:eb:92:07:c1: cf:cc:d7:e4:7c:85:e9:e1:06:54:2b:85:68:98:ac: a1:45:6b:3b:bb:4a:f2:8b:f1:d7:14:f9:7e:d7:d7: c0:1c:fc:fa:20:0e:db:9c:02:9a:9b:a6:13:1c:f3: 43:50:2f:c2:77:1e:f9:fb:5b:62:fb:d7:36:7d:ff: a3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E7:DF:C9:94:43:1D:1A:9B:CC:4D:20:01:EC:A2:66:3C:A5:64:1A X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Q-ffyZRDHRqbzE0gAeyiZjylZBo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.114.0/24 151.244.6.0/24 Signature Algorithm: sha256WithRSAEncryption 64:78:0d:03:14:b3:8f:51:36:2b:df:95:08:92:91:8c:66:f8: a9:f0:96:65:c0:2c:ea:2e:83:ed:50:89:53:de:f3:ac:4a:8d: 8e:b7:62:65:62:b9:74:3e:08:ee:0b:0a:52:e3:80:90:20:31: eb:5f:4e:18:3b:b4:e6:05:35:b2:82:82:04:f4:3b:d2:cf:60: ad:85:91:45:6a:63:c3:ae:46:38:95:ef:cf:c5:ba:48:ee:85: 8f:67:59:f6:64:35:86:88:30:91:3c:c0:31:ed:f8:d3:7a:95: 83:f9:a0:16:ef:62:85:a1:c4:50:c2:48:2a:fa:bb:4e:29:eb: 26:2c:36:fd:ab:f2:b7:2a:45:08:f1:ea:3b:26:80:0d:b6:48: 7b:93:30:47:00:01:b0:f1:7f:58:0b:18:44:ce:a4:1d:e5:2b: eb:10:46:e9:19:0a:cf:6f:ef:dd:d0:53:78:48:f7:d7:90:01: a5:3f:7f:6e:c0:fd:85:87:45:d4:19:f8:39:5e:0a:74:d4:52: d8:62:aa:6b:c9:f0:2c:a2:51:d8:cd:21:44:69:59:f7:59:2c: a0:e4:99:b3:bf:b1:e5:a5:34:b9:ed:d5:b1:85:a5:1e:47:53: a0:f3:ba:43:b3:00:d0:57:9b:aa:a4:ac:f8:ef:e1:d2:bc:f8: da:fb:19:c4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZu2rC3Nu+uk2YwC93wlnpZyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTEzMDkyNDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2U3ZGZjOTk0NDMxZDFhOWJjYzRkMjAwMWVjYTI2NjNjYTU2NDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VXqEft1Izyx+XBYKele6OntlAhX 7F0MyVpJahLEv4mew5A+AfQ/Rbyne+FvD9/SdobfLTS3ku11AwFl8jkZ08S6VlOx ch+7QC3Mu5O4SwH/iXfgz+Yfpl3xkqHQkKd9XBitIO5zj9aak4+qH0pHRrySzlZD 8TrgU1Lt7zigimNvyyaEoXh42QP8ZBzXaMbKWufMSwH+5p0XXwdMYL8xBjgwb2x8 6zN36P6LP/JlP0OfcVg1IX2phv0fhi4xG+uSB8HPzNfkfIXp4QZUK4VomKyhRWs7 u0ryi/HXFPl+19fAHPz6IA7bnAKam6YTHPNDUC/Cdx75+1ti+9c2ff+jjwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEPn38mUQx0am8xNIAHsomY8pWQaMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvUS1mZnlaUkRIUnFiekUwZ0FleWlaanlsWkJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/JyAwQA l/QGMA0GCSqGSIb3DQEBCwUAA4IBAQBkeA0DFLOPUTYr35UIkpGMZvip8JZlwCzq LoPtUIlT3vOsSo2Ot2JlYrl0PgjuCwpS44CQIDHrX04YO7TmBTWygoIE9DvSz2Ct hZFFamPDrkY4le/PxbpI7oWPZ1n2ZDWGiDCRPMAx7fjTepWD+aAW72KFocRQwkgq +rtOKesmLDb9q/K3KkUI8eo7JoANtkh7kzBHAAGw8X9YCxhEzqQd5SvrEEbpGQrP b+/d0FN4SPfXkAGlP39uwP2Fh0XUGfg5Xgp01FLYYqpryfAsolHYzSFEaVn3WSyg 5Jmzv7HlpTS57dWxhaUeR1Og87pDswDQV5uqpKz47+HSvPja+xnE -----END CERTIFICATE-----Generated at Sun Jan 18 06:32:04 2026 by rpki-client