This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RfqvupqC_ny66uTxGUqAqg5WYmo.roa File: RfqvupqC_ny66uTxGUqAqg5WYmo.roa (raw, json) Hash identifier: Apb+A/FKPVJr0+Kkb7+mlprT1YjXP0nWu8yNYIlOJzk= Subject key identifier: 45:FA:AF:BA:9A:82:FE:7C:BA:EA:E4:F1:19:4A:80:AA:0E:56:62:6A Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB2C7D248B41DB995BE24BCDE59A8F Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RfqvupqC_ny66uTxGUqAqg5WYmo.roa Signing time: Fri 02 Jan 2026 08:20:25 +0000 ROA not before: Fri 02 Jan 2026 08:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36352 IP address blocks: 151.245.179.0/24 maxlen: 24 151.247.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:2c:7d:24:8b:41:db:99:5b:e2:4b:cd:e5:9a:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45faafba9a82fe7cbaeae4f1194a80aa0e56626a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7c:af:1c:ea:1c:ff:74:66:d5:8b:c8:af:48: b1:02:b6:46:9c:01:6f:ef:c4:e7:07:97:a5:b8:d3: 5f:e9:8d:90:0b:fd:81:23:fa:a4:92:08:ac:85:9b: 52:51:05:f5:4a:cf:b5:ef:93:c3:71:fb:96:ce:dc: 66:15:dc:3d:22:9a:b7:11:a1:81:4e:eb:6e:11:70: 5e:ae:16:80:a4:4e:46:6c:20:98:c0:8a:50:a3:4d: fa:3c:54:a4:55:f7:35:90:dc:1f:f3:02:be:56:81: 3b:31:90:25:0a:8f:d3:b1:98:66:04:10:99:ae:4b: 93:9b:5f:fd:5d:ad:9d:b6:f1:98:dc:a6:84:73:cd: f0:03:6f:46:ef:43:f9:28:e6:aa:8b:fc:71:8f:7d: 3f:8d:88:27:f7:2f:14:aa:ea:47:f4:49:cc:bb:18: d9:1c:cc:34:39:2f:e6:dc:d9:f7:da:66:22:fb:c8: 7a:c9:70:31:68:66:a6:a0:c4:0b:1e:62:df:17:a7: bf:ac:ab:d3:6d:05:c8:bf:67:e8:04:1e:67:3c:0d: 84:f8:6c:5d:43:a7:bf:46:de:ba:1a:ef:57:16:43: 1e:a4:5a:5d:a6:c8:f2:9e:ef:a3:7c:0f:78:18:ea: 9a:72:d7:1b:ed:33:f4:f0:62:67:4c:98:53:4d:f3: 57:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FA:AF:BA:9A:82:FE:7C:BA:EA:E4:F1:19:4A:80:AA:0E:56:62:6A X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RfqvupqC_ny66uTxGUqAqg5WYmo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.245.179.0/24 151.247.172.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:c8:fc:33:ce:cc:5c:59:4c:30:c1:db:d9:a4:d2:41:c5:89: b8:65:ff:27:1e:c7:1d:38:37:40:0c:6f:86:2b:e2:79:d1:96: 07:e7:2f:4f:ce:2d:d9:16:07:c3:31:15:0a:3b:f0:6f:01:0b: 10:f9:90:8d:8a:a0:a2:1c:32:b6:67:b6:1b:68:00:a5:80:b3: cc:7a:3d:76:e8:11:17:1c:19:6d:67:a9:1d:ec:e9:59:70:f1: de:70:31:af:ec:be:e8:f2:b5:55:ca:fe:f8:c0:ab:1c:c0:1c: 53:f9:8c:39:0e:79:f4:8e:85:82:5f:ff:c7:9b:74:fc:df:dd: fc:20:44:1a:f8:18:dc:f4:3f:76:24:4c:dc:3a:49:5e:8c:f4: b2:f4:0f:fd:39:bc:26:38:70:3a:9f:e6:99:02:97:ab:47:c1: e8:62:ec:fc:30:cd:75:5b:1f:90:7d:46:31:77:e9:bf:87:2a: 29:a3:46:1c:08:9d:09:f9:b1:03:80:be:8f:ee:f4:e2:0d:ba: da:b2:72:c7:67:8c:4f:e7:9b:58:a3:e4:5e:01:1b:1c:bb:36: 16:9d:8a:58:0c:90:61:03:98:69:8b:61:2c:10:ec:31:83:1f: ec:f7:6a:f3:6c:5b:79:f7:92:dd:fa:1b:2c:5f:91:b4:e4:c6: 43:cc:f3:eb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yyx9JItB25lb4kvN5ZqPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWZhYWZiYTlhODJmZTdjYmFlYWU0ZjExOTRhODBhYTBlNTY2MjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHyvHOoc/3Rm1YvIr0ixArZGnAFv 78TnB5eluNNf6Y2QC/2BI/qkkgishZtSUQX1Ss+175PDcfuWztxmFdw9Ipq3EaGB TutuEXBerhaApE5GbCCYwIpQo036PFSkVfc1kNwf8wK+VoE7MZAlCo/TsZhmBBCZ rkuTm1/9Xa2dtvGY3KaEc83wA29G70P5KOaqi/xxj30/jYgn9y8UqupH9EnMuxjZ HMw0OS/m3Nn32mYi+8h6yXAxaGamoMQLHmLfF6e/rKvTbQXIv2foBB5nPA2E+Gxd Q6e/Rt66Gu9XFkMepFpdpsjynu+jfA94GOqactcb7TP08GJnTJhTTfNXFQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEX6r7qagv58uurk8RlKgKoOVmJqMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvUmZxdnVwcUNfbnk2NnVUeEdVcUFxZzVXWW1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/WzAwQA l/esMA0GCSqGSIb3DQEBCwUAA4IBAQBLyPwzzsxcWUwwwdvZpNJBxYm4Zf8nHscd ODdADG+GK+J50ZYH5y9Pzi3ZFgfDMRUKO/BvAQsQ+ZCNiqCiHDK2Z7YbaAClgLPM ej126BEXHBltZ6kd7OlZcPHecDGv7L7o8rVVyv74wKscwBxT+Yw5Dnn0joWCX//H m3T83938IEQa+Bjc9D92JEzcOklejPSy9A/9ObwmOHA6n+aZAperR8HoYuz8MM11 Wx+QfUYxd+m/hyopo0YcCJ0J+bEDgL6P7vTiDbrasnLHZ4xP55tYo+ReARscuzYW nYpYDJBhA5hpi2EsEOwxgx/s92rzbFt595Ld+hssX5G05MZDzPPr -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:38 2026 by rpki-client