This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Xaj0BT7ZYofmsDQnVM101ldQUrA.roa File: Xaj0BT7ZYofmsDQnVM101ldQUrA.roa (raw, json) Hash identifier: f/KJOBO23mttP2Nl9M5syUxAZWpDqY9/udWnMPISFqg= Subject key identifier: 5D:A8:F4:05:3E:D9:62:87:E6:B0:34:27:54:CD:74:D6:57:50:52:B0 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB4B2068185557A31214E97433DDCF Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Xaj0BT7ZYofmsDQnVM101ldQUrA.roa Signing time: Fri 02 Jan 2026 08:20:33 +0000 ROA not before: Fri 02 Jan 2026 08:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135402 IP address blocks: 151.240.96.0/24 maxlen: 24 151.242.86.0/24 maxlen: 24 151.243.4.0/24 maxlen: 24 151.243.206.0/24 maxlen: 24 151.243.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4b:20:68:18:55:57:a3:12:14:e9:74:33:dd:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5da8f4053ed96287e6b0342754cd74d6575052b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4e:93:c5:56:88:d0:d2:fe:ab:e2:e9:29:38: be:06:ef:4c:17:21:bf:48:4a:7b:ad:de:fd:fc:36: e2:f5:36:84:06:d4:b9:45:67:96:68:45:e9:51:52: bf:98:2d:dd:96:9b:7b:a6:8b:69:71:f8:27:66:63: a8:d1:34:fb:a8:34:94:91:4e:79:64:a1:2f:7d:dc: e7:f3:c4:41:77:e7:79:be:3d:a0:e2:6b:e9:08:21: a7:a6:19:e6:cb:75:18:bc:a6:79:d3:9e:c4:df:28: fd:a2:de:64:b7:b9:49:f1:57:2c:3e:d7:06:4f:51: f2:6c:df:85:26:ac:1f:e9:0a:4a:b6:a4:33:61:a6: b1:07:81:b5:43:bb:42:df:4b:65:59:87:4f:e7:6b: 15:a6:ea:b7:d7:d3:4b:6e:19:bd:39:6c:e6:6b:fc: af:34:8c:fb:12:2d:90:93:ed:82:27:b9:80:51:12: 66:56:f5:f8:66:bf:88:a4:ca:53:f7:a2:13:83:8c: 55:99:88:b0:bb:be:d5:ce:19:65:69:d2:4a:c0:14: 7e:b1:ae:44:3c:2b:43:30:0c:d3:4b:6b:29:21:73: aa:90:59:d8:4d:6a:ba:ff:83:bb:59:5b:4f:51:74: 75:7c:96:2b:5d:7b:d3:54:5b:e7:0c:5c:9f:0d:cf: d1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:A8:F4:05:3E:D9:62:87:E6:B0:34:27:54:CD:74:D6:57:50:52:B0 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Xaj0BT7ZYofmsDQnVM101ldQUrA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.96.0/24 151.242.86.0/24 151.243.4.0/24 151.243.206.0/24 151.243.221.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:86:03:55:b6:90:67:fc:92:85:ec:71:6b:4b:ad:6e:57:db: cc:18:a7:54:bd:f9:85:c1:f8:e2:92:d4:73:e0:f7:5a:3f:94: 5c:72:16:fd:68:ab:ab:8a:83:c1:1c:a0:d1:41:3a:f4:40:36: 98:56:df:fc:60:b9:8b:1a:ad:8f:f2:e3:85:4f:74:31:4b:72: 68:f0:73:a8:26:13:b6:11:57:98:91:63:46:b1:28:5a:49:62: 3c:d1:16:1b:6b:63:ba:89:44:7f:0e:e2:40:6e:d6:9e:10:c7: 80:41:59:ac:3a:d3:3d:79:7c:f8:1e:47:3b:0e:6c:58:0f:92: b5:54:04:91:35:dc:c0:a1:94:fb:a9:25:b0:f1:86:8b:93:ee: 85:2a:a6:84:20:cc:96:bb:47:ae:70:59:16:e8:64:fc:90:2d: f7:13:28:ed:86:5e:56:3f:a3:b2:41:e0:29:37:96:57:59:25: d9:47:24:83:2e:53:7e:a4:72:66:c2:a3:ee:e8:60:a1:89:28: 22:a0:bf:a4:a1:ee:24:d5:be:d8:b9:d3:6f:15:b4:f1:50:f2: 23:15:ea:8b:8e:f5:e1:ed:79:bf:fd:cd:b4:ce:a1:2a:54:29: 35:56:c4:5e:1e:3f:22:d0:16:ab:5e:99:16:e6:45:b6:63:b8: 24:da:e8:38 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt9y0sgaBhVV6MSFOl0M93PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGE4ZjQwNTNlZDk2Mjg3ZTZiMDM0Mjc1NGNkNzRkNjU3NTA1MmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv06TxVaI0NL+q+LpKTi+Bu9MFyG/ SEp7rd79/Dbi9TaEBtS5RWeWaEXpUVK/mC3dlpt7potpcfgnZmOo0TT7qDSUkU55 ZKEvfdzn88RBd+d5vj2g4mvpCCGnphnmy3UYvKZ5057E3yj9ot5kt7lJ8VcsPtcG T1HybN+FJqwf6QpKtqQzYaaxB4G1Q7tC30tlWYdP52sVpuq319NLbhm9OWzma/yv NIz7Ei2Qk+2CJ7mAURJmVvX4Zr+IpMpT96ITg4xVmYiwu77VzhlladJKwBR+sa5E PCtDMAzTS2spIXOqkFnYTWq6/4O7WVtPUXR1fJYrXXvTVFvnDFyfDc/RUQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFF2o9AU+2WKH5rA0J1TNdNZXUFKwMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvWGFqMEJUN1pZb2Ztc0RRblZNMTAxbGRRVXJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAl/BgAwQA l/JWAwQAl/MEAwQAl/POAwQAl/PdMA0GCSqGSIb3DQEBCwUAA4IBAQBdhgNVtpBn /JKF7HFrS61uV9vMGKdUvfmFwfjiktRz4PdaP5Rcchb9aKurioPBHKDRQTr0QDaY Vt/8YLmLGq2P8uOFT3QxS3Jo8HOoJhO2EVeYkWNGsShaSWI80RYba2O6iUR/DuJA btaeEMeAQVmsOtM9eXz4Hkc7DmxYD5K1VASRNdzAoZT7qSWw8YaLk+6FKqaEIMyW u0eucFkW6GT8kC33Eyjthl5WP6OyQeApN5ZXWSXZRySDLlN+pHJmwqPu6GChiSgi oL+koe4k1b7YudNvFbTxUPIjFeqLjvXh7Xm//c20zqEqVCk1VsReHj8i0BarXpkW 5kW2Y7gk2ug4 -----END CERTIFICATE-----Generated at Sun Jan 18 06:29:12 2026 by rpki-client