This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/U4HVfBZrskjCyxCAZxBsPJTX93Y.roa File: U4HVfBZrskjCyxCAZxBsPJTX93Y.roa (raw, json) Hash identifier: PHMcOj+ncGCGmQBqWnXFjO7kl0YVk/XjjX/PiMXY/F4= Subject key identifier: 53:81:D5:7C:16:6B:B2:48:C2:CB:10:80:67:10:6C:3C:94:D7:F7:76 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB8BA2F1FFC2BF7D2A9C3B0D6C0CD2 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/U4HVfBZrskjCyxCAZxBsPJTX93Y.roa Signing time: Fri 02 Jan 2026 08:20:50 +0000 ROA not before: Fri 02 Jan 2026 08:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212980 IP address blocks: 151.245.214.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:8b:a2:f1:ff:c2:bf:7d:2a:9c:3b:0d:6c:0c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5381d57c166bb248c2cb108067106c3c94d7f776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:41:56:64:d3:cb:6c:5e:42:ce:6f:77:2c:53: cc:59:e3:ff:fe:5b:2e:4a:eb:c1:cd:ec:40:35:f9: 55:22:1e:be:8b:e2:87:8b:92:a2:cc:7f:3f:56:0c: 0b:c0:77:17:7a:18:da:b4:cc:a0:d7:3d:ca:49:63: 19:38:4d:17:1e:d8:e4:d8:6e:87:94:f2:74:e9:47: b6:84:db:ef:be:54:c5:54:55:b7:9f:c7:26:3d:e2: 01:32:42:83:29:97:ff:dc:d1:6b:44:54:07:1a:b6: bc:51:27:c1:ce:9a:83:69:30:98:5d:28:b8:9f:cd: 6d:58:27:40:21:8a:98:5b:df:0e:9c:61:55:d6:94: 5c:7f:3e:a6:45:a0:a8:66:fe:01:ff:4c:5f:d5:b6: c0:90:81:a1:e4:7e:e2:e6:9c:92:19:15:a3:19:0e: 21:d3:e3:f9:2b:0d:0d:f2:27:5d:ae:27:9b:c5:6e: 0a:00:ba:e9:2b:5b:a1:3e:3e:b6:4f:7a:54:82:f2: e9:ab:46:98:79:b2:e5:c8:cc:58:8f:87:a9:82:ec: e8:40:57:4a:c1:e1:a2:39:65:ab:55:e4:b7:ec:c0: 1c:dd:2e:4d:90:71:de:59:c2:c5:78:af:4e:f6:9e: b2:e4:4a:05:4e:7d:52:f0:28:34:57:8a:1a:fa:4b: 9a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:81:D5:7C:16:6B:B2:48:C2:CB:10:80:67:10:6C:3C:94:D7:F7:76 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/U4HVfBZrskjCyxCAZxBsPJTX93Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.245.214.0/23 Signature Algorithm: sha256WithRSAEncryption 45:b7:ee:0a:a8:cb:f7:2a:bf:dc:a7:94:f7:00:05:7a:38:8b: 79:7a:75:64:b5:76:8c:bf:e2:39:46:9d:90:bd:aa:a3:f0:21: f3:ee:79:23:e9:3a:2c:4e:c9:89:5a:51:56:fb:19:c9:d5:23: 5a:22:b1:02:4e:b9:f0:02:49:26:c4:07:72:c2:97:2b:e3:95: 51:f7:74:61:ff:5f:84:95:fb:10:2c:b2:7c:cc:8b:a5:86:3e: 5a:54:69:5b:19:d1:3c:12:90:e9:99:38:68:77:1a:09:6a:11: 90:07:13:29:08:9c:b7:39:f2:f7:a3:ed:ef:67:f0:bc:79:19: 2f:51:d7:b5:ea:96:bb:be:e1:0e:a7:72:d0:09:16:b4:ce:33: c3:b8:48:aa:6c:53:d0:f4:b8:fa:ad:63:55:0a:79:10:84:c9: 4a:dd:a7:e1:89:21:d4:f6:64:94:15:42:12:a2:ca:70:95:bf: e8:bb:c0:3e:4e:57:09:14:8d:00:be:ff:b1:47:b0:75:9c:3e: 27:04:62:ef:53:0a:1e:c3:07:50:bc:6c:09:9a:af:fd:9f:10: 21:a0:80:7f:1c:ef:3c:0a:9e:ab:58:48:08:be:d0:bc:3d:61: df:e9:9b:7c:5f:4b:ed:59:43:df:f6:72:16:3c:8b:d6:61:c8: 10:a9:93:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y4ui8f/Cv30qnDsNbAzSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzgxZDU3YzE2NmJiMjQ4YzJjYjEwODA2NzEwNmMzYzk0ZDdmNzc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUFWZNPLbF5Czm93LFPMWeP//lsu SuvBzexANflVIh6+i+KHi5KizH8/VgwLwHcXehjatMyg1z3KSWMZOE0XHtjk2G6H lPJ06Ue2hNvvvlTFVFW3n8cmPeIBMkKDKZf/3NFrRFQHGra8USfBzpqDaTCYXSi4 n81tWCdAIYqYW98OnGFV1pRcfz6mRaCoZv4B/0xf1bbAkIGh5H7i5pySGRWjGQ4h 0+P5Kw0N8iddriebxW4KALrpK1uhPj62T3pUgvLpq0aYebLlyMxYj4epguzoQFdK weGiOWWrVeS37MAc3S5NkHHeWcLFeK9O9p6y5EoFTn1S8Cg0V4oa+kuajQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFOB1XwWa7JIwssQgGcQbDyU1/d2MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvVTRIVmZCWnJza2pDeXhDQVp4QnNQSlRYOTNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl/XWMA0G CSqGSIb3DQEBCwUAA4IBAQBFt+4KqMv3Kr/cp5T3AAV6OIt5enVktXaMv+I5Rp2Q vaqj8CHz7nkj6TosTsmJWlFW+xnJ1SNaIrECTrnwAkkmxAdywpcr45VR93Rh/1+E lfsQLLJ8zIulhj5aVGlbGdE8EpDpmThodxoJahGQBxMpCJy3OfL3o+3vZ/C8eRkv Ude16pa7vuEOp3LQCRa0zjPDuEiqbFPQ9Lj6rWNVCnkQhMlK3afhiSHU9mSUFUIS ospwlb/ou8A+TlcJFI0Avv+xR7B1nD4nBGLvUwoewwdQvGwJmq/9nxAhoIB/HO88 Cp6rWEgIvtC8PWHf6Zt8X0vtWUPf9nIWPIvWYcgQqZNm -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:30 2026 by rpki-client