This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UQ0qr8x7V-BFjFG3CYRhPi8JzMw.roa File: UQ0qr8x7V-BFjFG3CYRhPi8JzMw.roa (raw, json) Hash identifier: CZU/ZBv83qTzmfF0vPJsOBlb6uy5Pxb9pGvkOjnbSoE= Subject key identifier: 51:0D:2A:AF:CC:7B:57:E0:45:8C:51:B7:09:84:61:3E:2F:09:CC:CC Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB0AF58ECCCFEE3A2521ABF05E52B9 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UQ0qr8x7V-BFjFG3CYRhPi8JzMw.roa Signing time: Fri 02 Jan 2026 08:20:17 +0000 ROA not before: Fri 02 Jan 2026 08:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6079 IP address blocks: 37.202.206.0/24 maxlen: 24 151.242.49.0/24 maxlen: 24 151.243.64.0/20 maxlen: 24 151.243.97.0/24 maxlen: 24 151.243.106.0/24 maxlen: 24 151.245.18.0/24 maxlen: 24 151.247.226.0/24 maxlen: 24 151.247.232.0/24 maxlen: 24 151.247.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:0a:f5:8e:cc:cf:ee:3a:25:21:ab:f0:5e:52:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=510d2aafcc7b57e0458c51b70984613e2f09cccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c6:56:7d:0a:ed:ee:32:4a:57:50:86:ee:af: 56:46:74:35:27:ad:1d:52:d1:68:0d:1a:00:74:4f: b3:9e:30:b7:69:45:00:1f:a9:14:44:ba:26:c2:e4: 85:bc:b7:10:b8:10:09:97:1b:f0:b5:91:ff:95:8c: 1b:9e:38:4f:37:3a:72:07:97:2c:74:09:a4:d2:58: f3:b4:57:e0:f6:86:b8:3b:76:8d:b3:f0:5d:7f:84: d5:ef:80:29:fc:da:cd:9f:e6:90:ec:18:4d:25:91: 4b:75:99:e9:a2:cf:b9:44:65:05:7b:7b:3d:5e:ca: 66:a1:be:a3:a9:b4:6d:a9:c0:87:0a:b2:c3:bf:00: 87:e5:c5:84:9f:ec:66:b4:6c:52:5c:ad:6c:c0:ca: b6:e7:97:0b:4b:a2:33:28:92:d4:6f:0c:57:16:b0: 62:3b:78:04:2f:85:b2:19:c8:cd:ef:68:ba:bd:34: 66:82:51:2b:26:12:57:5c:50:96:f7:5b:70:78:0e: e9:36:a2:81:59:03:4e:b3:f1:71:24:f6:86:5b:f8: 95:c3:07:a4:7a:38:0b:64:10:10:3c:3a:22:ae:f4: b2:46:9b:f9:0f:1b:9c:0a:8d:cc:a9:a0:d7:03:58: cd:ad:a8:5d:c1:8c:f3:69:bb:8c:fa:91:0b:cf:da: 60:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:0D:2A:AF:CC:7B:57:E0:45:8C:51:B7:09:84:61:3E:2F:09:CC:CC X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UQ0qr8x7V-BFjFG3CYRhPi8JzMw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.206.0/24 151.242.49.0/24 151.243.64.0/20 151.243.97.0/24 151.243.106.0/24 151.245.18.0/24 151.247.226.0/24 151.247.232.0/24 151.247.239.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:84:e9:18:f4:1a:ec:10:2a:5a:b4:ab:60:4e:a6:4f:3e:9e: f0:e3:b6:e7:a1:3b:1c:7e:06:7e:42:83:29:d2:16:fd:6a:57: c2:44:92:30:ea:9d:a5:0f:3d:cc:65:22:2a:1a:19:f3:c9:8e: 8b:90:41:a9:57:44:00:e5:b5:92:ea:95:09:34:c7:2f:04:ed: c7:58:69:18:c1:eb:25:23:6c:f6:31:94:99:55:2a:23:7e:f4: 3a:d1:d1:ff:e8:48:f6:a4:85:e2:f6:0a:fc:85:c0:c0:50:c0: e9:73:bb:0b:2e:bd:6b:9c:5a:47:0c:2a:73:43:1b:52:d2:bb: 2f:0b:20:df:32:44:a6:a8:c9:f5:42:28:22:5e:d3:4f:fc:45: 33:8a:29:03:94:00:fa:67:9d:e9:70:5b:f9:63:e8:5d:cf:e4: a1:0b:61:9a:99:d2:2e:00:1c:86:0f:73:a2:09:c6:aa:8d:23: 0b:d0:21:0e:ed:b4:da:0a:9f:2b:cf:84:d1:f9:37:0e:98:3e: f0:8a:1d:32:fa:da:a1:c7:0f:5a:e4:dd:a4:ce:67:f1:ae:0e: ff:65:64:35:bf:63:ee:6d:47:23:ea:01:7f:47:c5:87:39:76: e0:0b:78:b0:df:67:e0:94:8c:94:27:00:91:67:b6:dd:ec:7e: e7:61:bc:92 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt9ywr1jszP7jolIavwXlK5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MTBkMmFhZmNjN2I1N2UwNDU4YzUxYjcwOTg0NjEzZTJmMDljY2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8ZWfQrt7jJKV1CG7q9WRnQ1J60d UtFoDRoAdE+znjC3aUUAH6kURLomwuSFvLcQuBAJlxvwtZH/lYwbnjhPNzpyB5cs dAmk0ljztFfg9oa4O3aNs/Bdf4TV74Ap/NrNn+aQ7BhNJZFLdZnpos+5RGUFe3s9 Xspmob6jqbRtqcCHCrLDvwCH5cWEn+xmtGxSXK1swMq255cLS6IzKJLUbwxXFrBi O3gEL4WyGcjN72i6vTRmglErJhJXXFCW91tweA7pNqKBWQNOs/FxJPaGW/iVwwek ejgLZBAQPDoirvSyRpv5DxucCo3MqaDXA1jNrahdwYzzabuM+pELz9pgEQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFFENKq/Me1fgRYxRtwmEYT4vCczMMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvVVEwcXI4eDdWLUJGakZHM0NZUmhQaThKek13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAJcrOAwQA l/IxAwQEl/NAAwQAl/NhAwQAl/NqAwQAl/USAwQAl/fiAwQAl/foAwQAl/fvMA0G CSqGSIb3DQEBCwUAA4IBAQAvhOkY9BrsECpatKtgTqZPPp7w47bnoTscfgZ+QoMp 0hb9alfCRJIw6p2lDz3MZSIqGhnzyY6LkEGpV0QA5bWS6pUJNMcvBO3HWGkYwesl I2z2MZSZVSojfvQ60dH/6Ej2pIXi9gr8hcDAUMDpc7sLLr1rnFpHDCpzQxtS0rsv CyDfMkSmqMn1QigiXtNP/EUziikDlAD6Z53pcFv5Y+hdz+ShC2GamdIuAByGD3Oi CcaqjSML0CEO7bTaCp8rz4TR+TcOmD7wih0y+tqhxw9a5N2kzmfxrg7/ZWQ1v2Pu bUcj6gF/R8WHOXbgC3iw32fglIyUJwCRZ7bd7H7nYbyS -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:31 2026 by rpki-client