This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XqbOtwbZC0DktAg8xkU5UgosB-I.roa File: XqbOtwbZC0DktAg8xkU5UgosB-I.roa (raw, json) Hash identifier: i7CZsg5DA0EEkirIGYBjefKIfgYca4DiTBl7Tv53YSk= Subject key identifier: 5E:A6:CE:B7:06:D9:0B:40:E4:B4:08:3C:C6:45:39:52:0A:2C:07:E2 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB6B2FE37049F101F55CEE8D9120D0 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XqbOtwbZC0DktAg8xkU5UgosB-I.roa Signing time: Fri 02 Jan 2026 08:20:41 +0000 ROA not before: Fri 02 Jan 2026 08:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205634 IP address blocks: 151.243.132.0/24 maxlen: 24 151.243.133.0/24 maxlen: 24 151.243.134.0/24 maxlen: 24 151.243.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:6b:2f:e3:70:49:f1:01:f5:5c:ee:8d:91:20:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ea6ceb706d90b40e4b4083cc64539520a2c07e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cc:02:a4:fc:c5:6d:10:4d:07:3c:15:db:de: e8:44:9b:1d:cf:7a:03:60:a7:68:75:1d:54:72:27: 01:30:dd:e0:be:75:7f:77:1b:2d:4b:0e:9c:80:35: 0d:e8:c6:73:74:61:c3:f6:d6:17:fd:88:ba:69:bf: e1:d3:ee:75:2d:4c:ff:db:6f:8b:fe:9e:3f:b6:76: 0a:4a:5c:7f:cd:48:7d:4a:05:29:a5:15:9c:96:28: e0:79:81:cf:76:a7:6c:1b:53:ad:70:99:73:07:ff: 1c:bc:85:5c:5a:29:8e:19:63:36:dd:b3:d1:50:9d: 50:45:73:67:47:f3:3c:6d:43:9d:15:be:18:86:02: 11:6f:77:1f:ca:01:50:e0:e1:74:aa:a6:7b:9f:43: 40:ae:47:ab:9c:63:03:81:34:63:a2:b0:b5:be:79: 50:33:38:85:39:79:31:5b:e2:91:0e:0c:fb:45:c3: 33:16:22:89:cc:7f:dd:ff:61:af:d1:30:92:13:01: d6:f5:9c:37:ac:36:b9:b7:15:54:a8:fd:fc:7e:04: 90:2c:94:1b:91:2e:e8:5a:fa:fd:8f:b3:6f:9e:f6: 07:68:7e:da:6e:ea:1f:46:89:a3:bd:24:3f:7c:a9: 53:9d:3b:5e:f0:ef:8c:3a:48:88:10:21:cc:79:71: 8b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:A6:CE:B7:06:D9:0B:40:E4:B4:08:3C:C6:45:39:52:0A:2C:07:E2 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XqbOtwbZC0DktAg8xkU5UgosB-I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.132.0/22 Signature Algorithm: sha256WithRSAEncryption 54:a9:61:a3:47:6b:68:ab:5e:2c:f0:5d:a7:36:be:8f:5e:5b: 1c:53:fe:17:af:b1:94:8f:34:75:1e:d6:84:61:18:8c:2f:22: b5:30:18:c1:1f:a0:45:e5:db:52:07:4f:c6:59:c2:63:5f:58: 3b:38:e1:0e:0a:5c:c2:ea:af:c1:7d:06:74:3e:31:0f:bf:2b: 7c:cc:4c:0f:e2:ee:61:06:72:5c:0b:8c:df:3e:3b:17:76:f5: 93:fb:d6:10:20:cb:fa:aa:a8:66:79:07:d4:0f:c1:d1:2b:47: 65:87:6e:3a:a6:eb:96:c6:d7:25:a2:79:a7:d2:51:f8:75:94: 65:57:83:94:b0:6f:6a:5b:a3:2a:a9:8c:be:38:77:a3:9d:7f: 2d:97:37:fc:27:2c:34:89:8a:2f:d7:4c:a4:85:89:b9:c1:60: 36:28:60:44:74:43:9c:ca:fe:31:e8:7c:bf:1e:f1:10:a8:4b: ce:58:fe:53:31:2e:60:6b:b9:93:c2:e6:80:9c:27:0b:52:eb: a3:da:e5:e0:69:ce:1e:d5:56:d9:34:87:71:14:ca:b6:d1:d8: 3f:22:5e:8d:a5:12:e9:5e:58:b3:f7:e8:f1:1f:b1:cd:8d:90: a6:75:17:fb:19:ea:aa:a5:6a:9c:43:88:cf:9f:53:bd:88:52: d4:ed:52:ab -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y2sv43BJ8QH1XO6NkSDQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZWE2Y2ViNzA2ZDkwYjQwZTRiNDA4M2NjNjQ1Mzk1MjBhMmMwN2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8wCpPzFbRBNBzwV297oRJsdz3oD YKdodR1UcicBMN3gvnV/dxstSw6cgDUN6MZzdGHD9tYX/Yi6ab/h0+51LUz/22+L /p4/tnYKSlx/zUh9SgUppRWclijgeYHPdqdsG1OtcJlzB/8cvIVcWimOGWM23bPR UJ1QRXNnR/M8bUOdFb4YhgIRb3cfygFQ4OF0qqZ7n0NArkernGMDgTRjorC1vnlQ MziFOXkxW+KRDgz7RcMzFiKJzH/d/2Gv0TCSEwHW9Zw3rDa5txVUqP38fgSQLJQb kS7oWvr9j7NvnvYHaH7abuofRomjvSQ/fKlTnTte8O+MOkiIECHMeXGL/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF6mzrcG2QtA5LQIPMZFOVIKLAfiMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvWHFiT3R3YlpDMERrdEFnOHhrVTVVZ29zQi1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl/OEMA0G CSqGSIb3DQEBCwUAA4IBAQBUqWGjR2toq14s8F2nNr6PXlscU/4Xr7GUjzR1HtaE YRiMLyK1MBjBH6BF5dtSB0/GWcJjX1g7OOEOClzC6q/BfQZ0PjEPvyt8zEwP4u5h BnJcC4zfPjsXdvWT+9YQIMv6qqhmeQfUD8HRK0dlh246puuWxtclonmn0lH4dZRl V4OUsG9qW6MqqYy+OHejnX8tlzf8Jyw0iYov10ykhYm5wWA2KGBEdEOcyv4x6Hy/ HvEQqEvOWP5TMS5ga7mTwuaAnCcLUuuj2uXgac4e1VbZNIdxFMq20dg/Il6NpRLp Xliz9+jxH7HNjZCmdRf7GeqqpWqcQ4jPn1O9iFLU7VKr -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:30 2026 by rpki-client