This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R2y8B17opeaVZ535OcJ5SoRfqx8.roa File: R2y8B17opeaVZ535OcJ5SoRfqx8.roa (raw, json) Hash identifier: zF6lL06wZrQlcFn1miuD8WGgYa8q+iGM6Z6UeLjkReE= Subject key identifier: 47:6C:BC:07:5E:E8:A5:E6:95:67:9D:F9:39:C2:79:4A:84:5F:AB:1F Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB7928715B39D1CD1FFC6FDEC75F27 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R2y8B17opeaVZ535OcJ5SoRfqx8.roa Signing time: Fri 02 Jan 2026 08:20:45 +0000 ROA not before: Fri 02 Jan 2026 08:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208905 IP address blocks: 151.245.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:79:28:71:5b:39:d1:cd:1f:fc:6f:de:c7:5f:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=476cbc075ee8a5e695679df939c2794a845fab1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:66:0b:86:1f:0a:ed:cb:b7:90:fe:bb:cb:5c: 4b:27:3f:1a:2b:98:c3:7f:fb:82:92:47:f4:98:19: 2d:0e:a5:74:46:28:6c:4d:33:d9:5f:2c:33:30:7b: a3:46:da:7a:bc:e5:ec:fb:30:87:be:a2:69:0b:4e: 34:d7:63:e0:d9:5d:d2:ba:5c:2b:46:3a:b9:20:7b: 0b:ed:c6:6b:9b:9c:e0:5b:cf:03:0b:e6:74:4d:fa: b0:ac:26:e9:0c:98:58:4f:42:0d:7f:14:a7:f9:c9: 8a:c3:4a:44:be:40:54:f3:e0:7b:ff:3e:78:1e:fd: f8:15:a6:33:55:a0:aa:6d:7d:10:52:e1:d9:85:47: b7:02:d9:34:56:59:7a:9a:05:72:e2:44:39:62:94: 6d:40:8a:10:5f:dc:b5:a6:9e:11:d3:4d:de:d1:75: ba:6f:cc:38:61:f6:e1:38:4e:79:6e:0c:a2:ad:5e: d7:ad:e8:96:14:c4:c5:a5:39:e3:c9:79:ac:8a:ba: 95:f8:7c:c3:15:d3:fc:15:15:67:6d:75:45:0f:3a: 6f:cb:62:17:7d:16:72:27:00:f6:cf:ba:a4:42:57: 08:e4:52:46:4f:83:ac:9f:5a:61:a2:2f:71:26:e4: 45:ef:1d:eb:33:b4:fb:21:e5:2f:ca:ac:2c:fb:d0: dd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:6C:BC:07:5E:E8:A5:E6:95:67:9D:F9:39:C2:79:4A:84:5F:AB:1F X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R2y8B17opeaVZ535OcJ5SoRfqx8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.245.72.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:45:84:78:26:e5:02:ba:75:00:2a:59:ba:70:87:c3:cf:96: 00:61:d0:6f:b5:f5:ec:e2:53:c2:65:d3:61:41:d6:1a:d2:e9: 01:97:6b:f7:76:4a:a8:87:92:38:61:3e:f2:79:90:20:cd:56: 52:cb:17:74:41:77:94:97:8d:2c:9e:03:ee:86:32:da:f0:f4: 1a:44:d2:05:cb:af:e2:e7:46:c5:a2:b5:97:76:b5:d5:68:a5: f9:c3:ab:d5:67:8c:ed:74:53:6f:be:e0:92:01:72:c1:fb:42: 1e:f2:ea:34:99:da:0a:f1:69:00:92:d1:38:72:4b:a8:c0:cf: aa:c8:ff:75:a2:74:5c:43:71:92:84:32:22:af:21:31:0e:7a: f0:4c:93:27:f9:06:d8:79:ba:28:08:4f:d0:36:92:63:47:83: 68:09:01:89:99:e5:c8:43:19:86:50:be:f2:57:84:02:30:f4: 37:17:9f:cb:ff:da:2b:59:90:a8:61:fc:a2:72:79:f4:fe:b3: 2b:da:89:b3:99:6b:23:6e:4e:b6:09:68:a2:61:85:44:b0:da: e3:47:6a:be:e9:e7:75:50:18:04:ba:13:09:e7:45:8f:ff:50: 87:97:40:50:54:de:bb:1d:be:a9:f0:26:2e:30:50:b0:09:d7: 88:69:a8:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y3kocVs50c0f/G/ex18nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzZjYmMwNzVlZThhNWU2OTU2NzlkZjkzOWMyNzk0YTg0NWZhYjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2YLhh8K7cu3kP67y1xLJz8aK5jD f/uCkkf0mBktDqV0RihsTTPZXywzMHujRtp6vOXs+zCHvqJpC04012Pg2V3Sulwr Rjq5IHsL7cZrm5zgW88DC+Z0TfqwrCbpDJhYT0INfxSn+cmKw0pEvkBU8+B7/z54 Hv34FaYzVaCqbX0QUuHZhUe3Atk0Vll6mgVy4kQ5YpRtQIoQX9y1pp4R003e0XW6 b8w4YfbhOE55bgyirV7XreiWFMTFpTnjyXmsirqV+HzDFdP8FRVnbXVFDzpvy2IX fRZyJwD2z7qkQlcI5FJGT4Osn1phoi9xJuRF7x3rM7T7IeUvyqws+9DdqQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEdsvAde6KXmlWed+TnCeUqEX6sfMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvUjJ5OEIxN29wZWFWWjUzNU9jSjVTb1JmcXg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/VIMA0G CSqGSIb3DQEBCwUAA4IBAQArRYR4JuUCunUAKlm6cIfDz5YAYdBvtfXs4lPCZdNh QdYa0ukBl2v3dkqoh5I4YT7yeZAgzVZSyxd0QXeUl40sngPuhjLa8PQaRNIFy6/i 50bForWXdrXVaKX5w6vVZ4ztdFNvvuCSAXLB+0Ie8uo0mdoK8WkAktE4ckuowM+q yP91onRcQ3GShDIiryExDnrwTJMn+QbYebooCE/QNpJjR4NoCQGJmeXIQxmGUL7y V4QCMPQ3F5/L/9orWZCoYfyicnn0/rMr2omzmWsjbk62CWiiYYVEsNrjR2q+6ed1 UBgEuhMJ50WP/1CHl0BQVN67Hb6p8CYuMFCwCdeIaaj4 -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:32 2026 by rpki-client