This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/U2AkBu6MhJkfOEbLXhuzPxLvWQ4.roa File: U2AkBu6MhJkfOEbLXhuzPxLvWQ4.roa (raw, json) Hash identifier: Ym1GRGPpTElbeYdpA2xvYkDED1jKLHdp02X15rbdKDg= Subject key identifier: 53:60:24:06:EE:8C:84:99:1F:38:46:CB:5E:1B:B3:3F:12:EF:59:0E Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB8609BDFB1DF69C2A4AAEA98748D6 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/U2AkBu6MhJkfOEbLXhuzPxLvWQ4.roa Signing time: Fri 02 Jan 2026 08:20:48 +0000 ROA not before: Fri 02 Jan 2026 08:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211693 IP address blocks: 151.242.59.0/24 maxlen: 24 151.242.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:86:09:bd:fb:1d:f6:9c:2a:4a:ae:a9:87:48:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53602406ee8c84991f3846cb5e1bb33f12ef590e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6a:22:60:b2:32:2a:72:fd:24:5e:ac:f5:fa: fb:e1:6e:93:a7:f1:38:ee:e2:ec:6d:04:52:ec:23: 7f:8b:67:ad:a9:40:ba:3b:ab:f5:f3:d8:eb:d9:19: f7:84:d6:f3:ed:45:22:14:dd:a4:8f:18:3e:7b:49: 1d:5c:c3:76:bb:95:3a:5f:b9:b3:be:b5:bd:72:3a: f1:39:77:4b:3d:50:b2:df:9e:01:68:af:00:91:00: 47:44:67:a7:3d:cf:c2:14:8e:44:f7:ad:ed:3d:ca: 05:58:3c:7a:9a:b6:27:d2:44:13:a5:ef:f0:5e:0c: a2:c8:19:28:79:4e:fb:7b:d4:d8:11:e2:e9:4d:2d: d3:5d:ee:68:01:96:ee:50:de:e3:4a:75:7a:e6:d5: 62:34:4f:c7:43:71:3a:bf:94:d5:34:78:a5:9d:82: d6:5f:a7:fb:93:e2:bd:d4:b6:de:9d:2f:38:79:4f: e5:ec:c6:f5:6e:cb:8b:56:69:69:a0:0e:18:6d:1d: c1:02:b1:b9:42:d4:ed:a1:a8:d5:d4:81:c9:8d:d8: 76:2f:79:f6:d6:96:d2:cd:04:3c:88:42:59:38:70: 1b:74:2a:54:f0:16:ec:1d:5e:ea:b5:3c:21:21:f0: 81:26:d8:c9:80:94:32:10:86:d3:e0:21:f0:a2:22: e4:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:60:24:06:EE:8C:84:99:1F:38:46:CB:5E:1B:B3:3F:12:EF:59:0E X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/U2AkBu6MhJkfOEbLXhuzPxLvWQ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.59.0/24 151.242.81.0/24 Signature Algorithm: sha256WithRSAEncryption 07:b4:a1:43:e6:a0:44:6a:0c:61:19:78:fa:d6:82:6f:d3:4c: 44:3c:fd:b6:65:da:b7:97:5c:cb:f4:7c:ef:5d:6f:ea:f8:d5: ca:8f:f6:ed:bd:af:90:7a:d1:3f:f8:98:a8:23:2f:71:cf:ee: b4:a3:92:1c:78:39:38:63:fe:05:d6:38:fa:08:4f:3d:b9:6b: bb:d8:48:67:3a:c6:70:9b:f2:51:78:22:69:ad:4a:ec:b5:81: d3:2c:4a:da:3a:25:59:8c:96:21:d4:4b:96:22:b3:ce:fb:e3: 5a:a7:a4:bd:97:82:1f:ed:bd:06:7f:64:58:4b:8e:59:5d:76: 51:c9:e3:eb:5b:2f:1c:78:28:26:17:b7:cf:dd:e9:97:5f:b2: 8b:30:0e:e7:62:d5:6d:44:ec:8e:17:3c:bd:79:53:02:38:cc: bd:1c:41:92:87:f9:3d:bb:0a:3a:c4:1f:41:0f:17:b2:42:2b: 7f:1f:ab:3a:71:2d:0f:7b:63:a5:8f:e3:f7:3e:f6:d4:9b:dc: c8:f0:16:84:3d:ea:8a:83:1b:1f:89:83:84:e8:3e:74:4e:94: 6d:1c:23:8f:b7:61:df:46:c1:73:e9:b6:fe:29:54:8c:33:12: 26:fe:24:f5:86:5f:ce:9a:69:b7:d6:8e:e4:8c:95:60:e4:1e: 3e:83:f2:6c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y4YJvfsd9pwqSq6ph0jWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzYwMjQwNmVlOGM4NDk5MWYzODQ2Y2I1ZTFiYjMzZjEyZWY1OTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWoiYLIyKnL9JF6s9fr74W6Tp/E4 7uLsbQRS7CN/i2etqUC6O6v189jr2Rn3hNbz7UUiFN2kjxg+e0kdXMN2u5U6X7mz vrW9cjrxOXdLPVCy354BaK8AkQBHRGenPc/CFI5E963tPcoFWDx6mrYn0kQTpe/w XgyiyBkoeU77e9TYEeLpTS3TXe5oAZbuUN7jSnV65tViNE/HQ3E6v5TVNHilnYLW X6f7k+K91LbenS84eU/l7Mb1bsuLVmlpoA4YbR3BArG5QtTtoajV1IHJjdh2L3n2 1pbSzQQ8iEJZOHAbdCpU8BbsHV7qtTwhIfCBJtjJgJQyEIbT4CHwoiLk3QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFNgJAbujISZHzhGy14bsz8S71kOMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvVTJBa0J1Nk1oSmtmT0ViTFhodXpQeEx2V1E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/I7AwQA l/JRMA0GCSqGSIb3DQEBCwUAA4IBAQAHtKFD5qBEagxhGXj61oJv00xEPP22Zdq3 l1zL9HzvXW/q+NXKj/btva+QetE/+JioIy9xz+60o5IceDk4Y/4F1jj6CE89uWu7 2EhnOsZwm/JReCJprUrstYHTLEraOiVZjJYh1EuWIrPO++Nap6S9l4If7b0Gf2RY S45ZXXZRyePrWy8ceCgmF7fP3emXX7KLMA7nYtVtROyOFzy9eVMCOMy9HEGSh/k9 uwo6xB9BDxeyQit/H6s6cS0Pe2Olj+P3PvbUm9zI8BaEPeqKgxsfiYOE6D50TpRt HCOPt2HfRsFz6bb+KVSMMxIm/iT1hl/Ommm31o7kjJVg5B4+g/Js -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:03 2026 by rpki-client