This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R7Zcj4-j1hfwYf9u8tFfMODcqyc.roa File: R7Zcj4-j1hfwYf9u8tFfMODcqyc.roa (raw, json) Hash identifier: IxCcmC7KTVMR4MC2oVzlhjdCsq4fGTv1nik0JerEGLk= Subject key identifier: 47:B6:5C:8F:8F:A3:D6:17:F0:61:FF:6E:F2:D1:5F:30:E0:DC:AB:27 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB7D9B98CF2BE2F541933079956AA0 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R7Zcj4-j1hfwYf9u8tFfMODcqyc.roa Signing time: Fri 02 Jan 2026 08:20:46 +0000 ROA not before: Fri 02 Jan 2026 08:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209612 IP address blocks: 151.242.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:7d:9b:98:cf:2b:e2:f5:41:93:30:79:95:6a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47b65c8f8fa3d617f061ff6ef2d15f30e0dcab27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:36:8c:fb:04:c1:0b:1b:75:8d:eb:36:d6:36: b0:29:8a:b9:b6:90:9c:ec:cc:0a:f2:67:02:73:b4: 04:dc:c3:e0:1a:a4:ed:a7:37:3a:5b:be:a4:2d:84: ba:2b:68:21:e6:93:e1:88:c5:60:5f:1e:b9:48:78: 7e:9e:9a:4d:4e:2e:46:4e:76:8f:12:f7:a5:31:53: 54:66:1e:a3:4a:0a:3c:bf:78:f2:0f:d2:42:11:16: 43:18:ae:40:4c:2d:a6:53:02:55:57:fb:bb:eb:32: 68:76:20:77:13:69:23:0e:28:55:29:f1:51:2a:90: 12:49:d1:6f:0d:94:6c:1f:21:bd:02:27:59:55:30: 05:39:08:48:bd:39:79:e0:fb:96:6f:05:fd:2e:ad: 59:cd:e9:d8:77:0b:ea:0b:cf:46:46:c6:c3:6d:40: 58:76:b5:56:72:04:f2:28:52:b3:ad:20:86:d5:d1: bd:59:be:13:5f:b2:a2:70:92:35:3e:f3:f6:c4:77: ec:81:98:b8:0a:21:61:3b:a5:b8:5b:21:c2:f0:4a: ad:a6:a1:4b:fb:ee:57:13:ac:be:d4:ec:4f:28:7d: a9:64:07:be:a5:3e:bf:2c:90:68:e1:50:3e:9a:e9: b6:62:0f:9d:df:7a:fd:8f:78:db:f3:ec:6e:e6:b7: 99:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B6:5C:8F:8F:A3:D6:17:F0:61:FF:6E:F2:D1:5F:30:E0:DC:AB:27 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R7Zcj4-j1hfwYf9u8tFfMODcqyc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.136.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:86:aa:d4:aa:d0:1c:87:b9:0e:41:f8:31:c2:fb:08:4c:e7: db:c2:a5:e3:0a:48:21:e6:33:0e:0a:19:0b:31:5f:99:fb:de: c6:d2:4f:cf:b7:ab:3c:8a:63:78:26:45:cc:12:d2:a7:a4:de: 9a:33:9e:cb:2d:ed:22:12:51:f6:ed:97:6b:7f:ed:23:f7:fd: 4b:1e:6c:f8:12:05:a0:6e:32:80:9a:c3:cd:c5:82:e5:2e:96: b3:47:1c:94:26:83:13:d7:28:38:3d:98:ba:9d:21:a4:4b:22: 0a:0d:ef:61:eb:e9:aa:8e:ec:7a:fa:d4:e9:29:6e:e7:63:cd: 8f:e8:d3:c6:a5:cf:9e:3f:59:49:c2:e1:72:79:d0:db:c8:06: 48:04:35:88:68:66:36:89:1d:46:0e:a4:05:4a:c5:12:5b:d4: aa:b2:26:e6:c6:29:40:7e:6b:0a:76:af:b7:79:ac:45:3c:02: 3a:f2:2e:f4:e3:af:18:f5:2b:fd:83:c7:64:c7:73:ea:c8:7d: 23:3f:1b:bf:28:12:61:81:a2:63:f1:d9:54:10:76:db:82:14: 26:d2:6b:0f:2c:4e:38:23:2a:e3:28:17:3a:1b:2b:5b:bc:f5: 6f:55:4e:da:eb:db:31:9e:f8:dc:e7:1e:46:0f:d8:71:2a:15: 94:56:e7:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y32bmM8r4vVBkzB5lWqgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2I2NWM4ZjhmYTNkNjE3ZjA2MWZmNmVmMmQxNWYzMGUwZGNhYjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DaM+wTBCxt1jes21jawKYq5tpCc 7MwK8mcCc7QE3MPgGqTtpzc6W76kLYS6K2gh5pPhiMVgXx65SHh+nppNTi5GTnaP EvelMVNUZh6jSgo8v3jyD9JCERZDGK5ATC2mUwJVV/u76zJodiB3E2kjDihVKfFR KpASSdFvDZRsHyG9AidZVTAFOQhIvTl54PuWbwX9Lq1ZzenYdwvqC89GRsbDbUBY drVWcgTyKFKzrSCG1dG9Wb4TX7KicJI1PvP2xHfsgZi4CiFhO6W4WyHC8EqtpqFL ++5XE6y+1OxPKH2pZAe+pT6/LJBo4VA+mum2Yg+d33r9j3jb8+xu5reZ6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEe2XI+Po9YX8GH/bvLRXzDg3KsnMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvUjdaY2o0LWoxaGZ3WWY5dTh0RmZNT0RjcXljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/KIMA0G CSqGSIb3DQEBCwUAA4IBAQBKhqrUqtAch7kOQfgxwvsITOfbwqXjCkgh5jMOChkL MV+Z+97G0k/Pt6s8imN4JkXMEtKnpN6aM57LLe0iElH27Zdrf+0j9/1LHmz4EgWg bjKAmsPNxYLlLpazRxyUJoMT1yg4PZi6nSGkSyIKDe9h6+mqjux6+tTpKW7nY82P 6NPGpc+eP1lJwuFyedDbyAZIBDWIaGY2iR1GDqQFSsUSW9SqsibmxilAfmsKdq+3 eaxFPAI68i70468Y9Sv9g8dkx3PqyH0jPxu/KBJhgaJj8dlUEHbbghQm0msPLE44 IyrjKBc6GytbvPVvVU7a69sxnvjc5x5GD9hxKhWUVue8 -----END CERTIFICATE-----Generated at Sun Jan 18 06:29:12 2026 by rpki-client