This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VOVlfSls3ceLMmTEyERQoIYjkKw.roa File: VOVlfSls3ceLMmTEyERQoIYjkKw.roa (raw, json) Hash identifier: to0BUWiUEhIxbS6MgjP2Qk9mxgcU/IgCUTgvmhxtHXo= Subject key identifier: 54:E5:65:7D:29:6C:DD:C7:8B:32:64:C4:C8:44:50:A0:86:23:90:AC Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB394A92993AE1A60192BC7D2AF3D8 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VOVlfSls3ceLMmTEyERQoIYjkKw.roa Signing time: Fri 02 Jan 2026 08:20:29 +0000 ROA not before: Fri 02 Jan 2026 08:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53356 IP address blocks: 151.240.16.0/24 maxlen: 24 151.243.104.0/24 maxlen: 24 151.244.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:39:4a:92:99:3a:e1:a6:01:92:bc:7d:2a:f3:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=54e5657d296cddc78b3264c4c84450a0862390ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:14:fb:83:40:3b:52:3f:15:52:a7:f0:62:0d: 16:7a:cb:f4:ba:21:aa:3b:fd:c8:0d:7c:d9:96:d2: e0:a0:2f:eb:ce:43:4f:47:35:ab:cf:79:fb:1f:3b: 93:67:fe:5f:30:e5:f4:f0:3f:d0:e2:c4:81:7b:be: 4a:8f:29:74:57:4a:b7:95:06:ca:be:4b:0a:45:67: af:9f:9a:5c:bc:3e:32:f4:df:55:7a:11:a1:bd:c4: b0:28:3f:b3:88:5e:b9:5b:85:1e:35:6e:12:4d:b9: 3b:49:4c:e5:c5:57:cb:09:69:be:74:5c:3e:69:1b: 78:24:b8:12:a6:65:3b:d5:11:28:fe:a9:90:60:8e: b0:06:78:98:c8:0c:43:48:05:6e:94:9e:c5:cf:f7: 5a:af:64:38:74:b8:4a:5f:19:7b:da:e0:ba:2a:15: 56:18:07:63:29:f6:e5:b1:c4:e8:c8:63:6f:72:02: c2:9e:c6:71:af:bc:c2:3d:42:19:a2:1b:bd:82:a1: d5:f7:49:a6:03:92:d1:a3:83:e8:c0:a6:17:96:b2: 90:43:e4:89:7d:a4:e7:1a:d9:e3:ad:df:2f:c7:99: 5d:f4:cb:19:6d:d9:e8:87:df:02:ed:81:5e:06:88: 9f:b4:af:e9:5d:e0:d7:2d:c3:4b:ae:bc:e0:83:c6: 6d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E5:65:7D:29:6C:DD:C7:8B:32:64:C4:C8:44:50:A0:86:23:90:AC X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VOVlfSls3ceLMmTEyERQoIYjkKw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.16.0/24 151.243.104.0/24 151.244.250.0/24 Signature Algorithm: sha256WithRSAEncryption 00:5d:6c:ea:64:a4:54:e1:82:a4:3d:75:c5:05:d7:a9:44:5b: 13:d9:8d:5d:88:34:81:fd:3e:0f:ac:fe:6c:03:20:46:a8:89: 5b:da:a9:20:63:e6:8a:08:29:e8:5c:30:2f:f7:12:fa:c5:db: 02:85:0b:95:8a:0b:4f:13:e6:94:7f:1c:86:c1:2e:44:85:aa: e9:29:92:3f:1f:39:fc:8c:e4:e3:6c:51:4d:52:07:36:b2:21: 47:43:7b:e0:1d:62:18:a8:8c:76:bf:10:74:36:98:e9:e6:d8: 89:99:32:a0:d1:51:04:55:05:2f:2d:0b:23:91:b5:77:13:4f: d3:0f:96:6a:a2:e1:a4:ef:fd:ca:3b:76:30:7f:87:48:de:56: 99:59:16:63:ad:d8:7c:f6:5d:22:d2:ea:4b:40:cd:b0:25:d2: b5:de:bc:2b:ae:5c:dd:fa:aa:08:1b:0f:b2:f6:a2:07:60:0b: 4f:5a:34:7e:fe:40:96:f2:fa:3a:64:6b:6e:c0:b8:e2:ce:bb: 97:38:a2:ef:20:d9:bc:de:b6:e8:98:1a:40:03:b2:c9:ed:a9: a7:c4:c7:f2:86:04:16:2e:7a:53:ed:51:d8:43:2b:18:0c:95: 5a:c4:bf:0f:1f:2d:2b:64:64:b8:df:3c:02:08:07:e8:7a:87: a4:ec:71:59 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9yzlKkpk64aYBkrx9KvPYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGU1NjU3ZDI5NmNkZGM3OGIzMjY0YzRjODQ0NTBhMDg2MjM5MGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxT7g0A7Uj8VUqfwYg0Wesv0uiGq O/3IDXzZltLgoC/rzkNPRzWrz3n7HzuTZ/5fMOX08D/Q4sSBe75Kjyl0V0q3lQbK vksKRWevn5pcvD4y9N9VehGhvcSwKD+ziF65W4UeNW4STbk7SUzlxVfLCWm+dFw+ aRt4JLgSpmU71REo/qmQYI6wBniYyAxDSAVulJ7Fz/dar2Q4dLhKXxl72uC6KhVW GAdjKfblscToyGNvcgLCnsZxr7zCPUIZohu9gqHV90mmA5LRo4PowKYXlrKQQ+SJ faTnGtnjrd8vx5ld9MsZbdnoh98C7YFeBoiftK/pXeDXLcNLrrzgg8ZtWQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFTlZX0pbN3HizJkxMhEUKCGI5CsMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvVk9WbGZTbHMzY2VMTW1URXlFUlFvSVlqa0t3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/AQAwQA l/NoAwQAl/T6MA0GCSqGSIb3DQEBCwUAA4IBAQAAXWzqZKRU4YKkPXXFBdepRFsT 2Y1diDSB/T4PrP5sAyBGqIlb2qkgY+aKCCnoXDAv9xL6xdsChQuVigtPE+aUfxyG wS5EharpKZI/Hzn8jOTjbFFNUgc2siFHQ3vgHWIYqIx2vxB0Npjp5tiJmTKg0VEE VQUvLQsjkbV3E0/TD5ZqouGk7/3KO3Ywf4dI3laZWRZjrdh89l0i0upLQM2wJdK1 3rwrrlzd+qoIGw+y9qIHYAtPWjR+/kCW8vo6ZGtuwLjizruXOKLvINm83rbomBpA A7LJ7amnxMfyhgQWLnpT7VHYQysYDJVaxL8PHy0rZGS43zwCCAfoeoek7HFZ -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:51 2026 by rpki-client