This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XzcVTbn_prh38q209kurr_qry4k.roa File: XzcVTbn_prh38q209kurr_qry4k.roa (raw, json) Hash identifier: QT8UyhM9m/KiPjnBM7j0rCBb9MPFBStN4HxhrDMFqEk= Subject key identifier: 5F:37:15:4D:B9:FF:A6:B8:77:F2:AD:B4:F6:4B:AB:AF:FA:AB:CB:89 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB1D0559440A8D43B59A248076F40D Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XzcVTbn_prh38q209kurr_qry4k.roa Signing time: Fri 02 Jan 2026 08:20:21 +0000 ROA not before: Fri 02 Jan 2026 08:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20648 IP address blocks: 151.241.3.0/24 maxlen: 24 151.242.13.0/24 maxlen: 24 151.245.118.0/24 maxlen: 24 151.245.133.0/24 maxlen: 24 151.247.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:1d:05:59:44:0a:8d:43:b5:9a:24:80:76:f4:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f37154db9ffa6b877f2adb4f64babaffaabcb89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:eb:00:ce:ed:5a:5d:6b:c7:cf:48:96:4f:e1: 5e:43:c8:d7:7b:8b:42:34:49:f4:65:ac:c1:71:ce: 93:89:6c:b6:12:05:4f:9f:7f:ba:9a:f8:40:b7:c4: 99:22:ce:95:cb:71:77:15:23:f7:a3:11:c2:34:44: 7a:e6:89:89:82:e3:ae:cd:38:44:b7:36:48:85:6f: 62:25:2f:c6:cb:31:e4:05:d1:1a:75:37:18:71:18: 9b:d9:be:b3:8a:b2:0b:fd:bf:ec:00:22:21:6b:5e: ac:b2:b1:2a:02:45:dc:38:92:98:54:70:95:e4:48: 10:c7:c2:69:f9:a5:7c:3b:4e:33:bc:d0:93:03:fb: 56:ea:20:bd:ab:6b:44:8b:46:aa:2e:59:17:56:6f: 10:20:d4:68:b8:6b:f6:c0:3b:e4:00:78:6f:d6:9b: 92:4c:ee:63:38:a6:ad:83:4e:20:a5:a7:61:64:40: fd:25:5c:c5:9d:3b:cf:89:4e:0f:f8:27:69:5e:f7: e1:a4:f4:7c:d5:5d:46:5e:ef:bf:b8:e9:0c:2e:fa: 5e:b1:bd:8f:4f:19:c2:d5:fa:8a:52:36:b8:5e:73: 0f:8c:a8:d0:ef:2a:ea:ec:77:15:af:6e:50:50:ce: 05:55:e4:a9:6d:2e:97:eb:95:e6:3c:1d:ef:9c:9d: 94:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:37:15:4D:B9:FF:A6:B8:77:F2:AD:B4:F6:4B:AB:AF:FA:AB:CB:89 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XzcVTbn_prh38q209kurr_qry4k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.3.0/24 151.242.13.0/24 151.245.118.0/24 151.245.133.0/24 151.247.252.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:18:77:e3:e3:0a:9b:68:6d:bb:08:fc:f8:7f:7a:3a:fd:b0: 74:03:80:06:54:9c:d2:7c:25:b2:48:f6:6c:d0:84:a2:89:bf: 46:f9:c6:e8:93:09:2d:96:a4:34:d6:e5:cc:79:13:63:f8:5e: 75:d9:33:03:fb:fb:cb:76:44:d9:e7:00:85:02:d4:4e:31:fa: 69:53:d3:80:02:58:4c:0f:61:03:03:5f:fc:7f:b5:07:c5:d2: f5:3a:02:44:54:57:3d:c1:c8:63:2c:cc:d4:c0:7c:f7:94:f9: 30:a6:26:36:7b:2e:61:6b:3b:12:34:64:8b:51:23:a8:b8:44: ae:24:93:a4:05:44:e0:a2:cb:45:05:9b:1c:ea:a1:65:d1:3e: c5:89:eb:ea:b5:a2:a5:82:d1:fb:d5:42:d6:a0:a0:d3:e8:db: 62:d5:1d:11:86:4b:30:6a:08:cf:79:3d:0d:c8:00:4d:9a:7e: f5:95:0d:71:26:ec:78:b5:f7:e7:4a:54:cd:51:65:c7:ea:0f: ef:a6:8c:d2:12:ed:be:21:bc:49:77:28:4d:4c:c1:8a:f6:cb: c3:ab:26:b7:10:49:a5:9c:54:1c:70:ca:0f:72:d2:cb:f3:e3: 82:43:44:80:8f:9c:61:d0:22:bf:97:08:af:5c:13:50:48:2d: 91:0f:97:c3 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt9yx0FWUQKjUO1miSAdvQNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjM3MTU0ZGI5ZmZhNmI4NzdmMmFkYjRmNjRiYWJhZmZhYWJjYjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+sAzu1aXWvHz0iWT+FeQ8jXe4tC NEn0ZazBcc6TiWy2EgVPn3+6mvhAt8SZIs6Vy3F3FSP3oxHCNER65omJguOuzThE tzZIhW9iJS/GyzHkBdEadTcYcRib2b6zirIL/b/sACIha16ssrEqAkXcOJKYVHCV 5EgQx8Jp+aV8O04zvNCTA/tW6iC9q2tEi0aqLlkXVm8QINRouGv2wDvkAHhv1puS TO5jOKatg04gpadhZED9JVzFnTvPiU4P+CdpXvfhpPR81V1GXu+/uOkMLvpesb2P TxnC1fqKUja4XnMPjKjQ7yrq7HcVr25QUM4FVeSpbS6X65XmPB3vnJ2UhwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFF83FU25/6a4d/KttPZLq6/6q8uJMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvWHpjVlRibl9wcmgzOHEyMDlrdXJyX3FyeTRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAl/EDAwQA l/INAwQAl/V2AwQAl/WFAwQAl/f8MA0GCSqGSIb3DQEBCwUAA4IBAQBsGHfj4wqb aG27CPz4f3o6/bB0A4AGVJzSfCWySPZs0ISiib9G+cbokwktlqQ01uXMeRNj+F51 2TMD+/vLdkTZ5wCFAtROMfppU9OAAlhMD2EDA1/8f7UHxdL1OgJEVFc9wchjLMzU wHz3lPkwpiY2ey5hazsSNGSLUSOouESuJJOkBUTgostFBZsc6qFl0T7FievqtaKl gtH71ULWoKDT6Nti1R0RhkswagjPeT0NyABNmn71lQ1xJux4tffnSlTNUWXH6g/v pozSEu2+IbxJdyhNTMGK9svDqya3EEmlnFQccMoPctLL8+OCQ0SAj5xh0CK/lwiv XBNQSC2RD5fD -----END CERTIFICATE-----Generated at Thu Jan 8 08:55:26 2026 by rpki-client