This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RpPVKWmKWNNoBatDbPC5A2PLgPo.roa File: RpPVKWmKWNNoBatDbPC5A2PLgPo.roa (raw, json) Hash identifier: t1ZElHd3cvbSKc1PyUfUz3meWPShp4QAju1hOzRcEzA= Subject key identifier: 46:93:D5:29:69:8A:58:D3:68:05:AB:43:6C:F0:B9:03:63:CB:80:FA Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB2F82E9A335EB5014F52460A2890C Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RpPVKWmKWNNoBatDbPC5A2PLgPo.roa Signing time: Fri 02 Jan 2026 08:20:26 +0000 ROA not before: Fri 02 Jan 2026 08:20:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 37.202.193.0/24 maxlen: 24 37.202.213.0/24 maxlen: 24 151.240.158.0/24 maxlen: 24 151.242.40.0/24 maxlen: 24 151.242.99.0/24 maxlen: 24 151.243.175.0/24 maxlen: 24 151.244.164.0/24 maxlen: 24 151.244.249.0/24 maxlen: 24 151.245.26.0/24 maxlen: 24 151.245.42.0/24 maxlen: 24 151.245.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:2f:82:e9:a3:35:eb:50:14:f5:24:60:a2:89:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4693d529698a58d36805ab436cf0b90363cb80fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:45:5e:7f:37:0c:76:93:dd:fb:ab:31:2b:89: fd:0b:ee:53:d5:0c:f5:a3:e4:47:61:36:79:6b:e1: df:5a:fd:cd:cb:c6:f6:08:24:cb:5d:c5:ea:98:e8: cc:57:58:c6:0c:9a:12:0a:63:48:66:ee:c8:03:4a: 0d:0c:a8:00:34:71:2f:69:32:cf:af:0e:db:a3:dd: 8f:bd:97:67:6f:23:e2:e2:09:38:a2:c6:fb:bf:6c: d6:d0:63:66:7b:60:bb:77:e0:1f:98:e9:38:3d:02: a4:db:89:d5:21:27:f6:5d:7e:10:57:a6:c9:87:ee: e8:b2:27:55:45:e9:62:f1:df:65:3e:4f:9c:7e:a4: 7f:bc:e1:96:80:ce:e5:42:cc:17:79:6c:54:86:f6: ed:1c:4b:9e:de:ca:8b:fc:c1:ae:23:13:42:ff:42: 43:cc:b1:e6:bf:fb:e0:8a:05:23:00:74:33:15:3f: 18:03:1f:4e:e2:f0:fb:1f:29:c5:c3:51:98:05:60: c8:77:d8:82:37:85:ff:61:4b:f5:01:fb:45:cb:98: d9:23:8b:b0:41:17:10:c4:1d:dd:72:0f:44:6e:28: b1:55:b2:81:d8:7e:d6:a0:68:c7:26:6a:d1:82:be: c5:8d:5c:0c:48:98:bc:b4:4b:16:9e:8f:05:ea:1b: f1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:93:D5:29:69:8A:58:D3:68:05:AB:43:6C:F0:B9:03:63:CB:80:FA X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RpPVKWmKWNNoBatDbPC5A2PLgPo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.193.0/24 37.202.213.0/24 151.240.158.0/24 151.242.40.0/24 151.242.99.0/24 151.243.175.0/24 151.244.164.0/24 151.244.249.0/24 151.245.26.0/24 151.245.42.0/24 151.245.44.0/24 Signature Algorithm: sha256WithRSAEncryption a9:11:82:b6:48:7e:0f:6e:ec:2e:87:b6:57:e5:8e:8b:02:18: fb:06:fc:0a:92:e4:90:94:df:9c:5d:3c:ce:f5:f1:b3:71:ad: 1d:01:3e:92:63:ec:d0:b9:c2:5d:f9:a5:e9:ee:ea:67:9a:2a: 0d:0e:e8:ca:96:58:44:5d:31:98:7c:8b:d2:e2:e9:73:3a:2a: f9:04:64:81:ed:63:b9:83:ec:41:37:d7:78:3e:63:6f:a8:5b: 87:86:6c:e7:56:11:20:e0:ba:29:6a:bf:fd:d0:04:41:73:99: d0:1f:5a:7c:52:cd:0d:45:61:6e:1f:a5:95:8c:e0:81:d7:05: 44:35:1f:b1:d9:cc:7a:f6:e6:5d:a2:d5:f5:d2:3a:2b:29:a7: 3a:d8:00:2f:4d:8f:97:f2:62:20:c3:6b:c8:3e:0f:23:05:b3: e9:ac:ce:e5:f1:30:c4:eb:67:69:0b:2e:ee:3e:55:51:b5:91: 2e:e4:20:f9:5b:59:69:64:b2:8d:9b:a4:c4:dc:fa:a9:9a:27: 77:3b:18:7a:3f:54:5f:78:a1:f4:ca:60:24:48:fb:f2:a9:44: ca:96:52:b0:01:44:7c:2a:bf:9f:c9:ad:03:80:22:39:7b:1a: c8:0e:78:e8:cd:19:af:52:67:ae:56:a0:62:77:c7:28:30:6b: da:3c:5d:6c -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt9yy+C6aM161AU9SRgookMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjkzZDUyOTY5OGE1OGQzNjgwNWFiNDM2Y2YwYjkwMzYzY2I4MGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0VefzcMdpPd+6sxK4n9C+5T1Qz1 o+RHYTZ5a+HfWv3Ny8b2CCTLXcXqmOjMV1jGDJoSCmNIZu7IA0oNDKgANHEvaTLP rw7bo92PvZdnbyPi4gk4osb7v2zW0GNme2C7d+AfmOk4PQKk24nVISf2XX4QV6bJ h+7osidVReli8d9lPk+cfqR/vOGWgM7lQswXeWxUhvbtHEue3sqL/MGuIxNC/0JD zLHmv/vgigUjAHQzFT8YAx9O4vD7HynFw1GYBWDId9iCN4X/YUv1AftFy5jZI4uw QRcQxB3dcg9EbiixVbKB2H7WoGjHJmrRgr7FjVwMSJi8tEsWno8F6hvxSwIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFEaT1SlpiljTaAWrQ2zwuQNjy4D6MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvUnBQVktXbUtXTk5vQmF0RGJQQzVBMlBMZ1BvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAJcrBAwQA JcrVAwQAl/CeAwQAl/IoAwQAl/JjAwQAl/OvAwQAl/SkAwQAl/T5AwQAl/UaAwQA l/UqAwQAl/UsMA0GCSqGSIb3DQEBCwUAA4IBAQCpEYK2SH4Pbuwuh7ZX5Y6LAhj7 BvwKkuSQlN+cXTzO9fGzca0dAT6SY+zQucJd+aXp7upnmioNDujKllhEXTGYfIvS 4ulzOir5BGSB7WO5g+xBN9d4PmNvqFuHhmznVhEg4Lopar/90ARBc5nQH1p8Us0N RWFuH6WVjOCB1wVENR+x2cx69uZdotX10jorKac62AAvTY+X8mIgw2vIPg8jBbPp rM7l8TDE62dpCy7uPlVRtZEu5CD5W1lpZLKNm6TE3Pqpmid3Oxh6P1RfeKH0ymAk SPvyqUTKllKwAUR8Kr+fya0DgCI5exrIDnjozRmvUmeuVqBid8coMGvaPF1s -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:29 2026 by rpki-client