This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y_Cf9k1oL2ymuOlk-sQS2DGRbWc.roa File: Y_Cf9k1oL2ymuOlk-sQS2DGRbWc.roa (raw, json) Hash identifier: MaH9TavwvOF5J1nb3DiFt8m5FSiqEpP1Uq0ypWiHoLQ= Subject key identifier: 63:F0:9F:F6:4D:68:2F:6C:A6:B8:E9:64:FA:C4:12:D8:31:91:6D:67 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB94736F0FE96E50A30CB4A4E807D4 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y_Cf9k1oL2ymuOlk-sQS2DGRbWc.roa Signing time: Fri 02 Jan 2026 08:20:52 +0000 ROA not before: Fri 02 Jan 2026 08:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214209 IP address blocks: 151.242.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:94:73:6f:0f:e9:6e:50:a3:0c:b4:a4:e8:07:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=63f09ff64d682f6ca6b8e964fac412d831916d67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ac:09:7f:a0:56:6b:5f:dc:70:2a:76:91:2d: 4d:4f:91:fb:00:a2:c7:65:c0:5b:a7:90:16:97:89: 7f:45:4d:9e:cd:e3:81:f8:5d:69:79:b4:3a:5e:5a: db:d1:cc:e5:05:ef:c0:9d:3f:68:4c:34:29:1e:9b: 4a:f6:88:aa:a8:5e:b0:e1:eb:b0:ae:70:f1:e9:17: 39:57:95:49:e9:8f:79:4d:0a:e4:60:3c:b7:76:91: fb:76:b0:a3:6e:31:31:25:6e:f7:e3:0a:38:95:d9: 89:b0:c6:4a:4c:97:34:4a:0d:28:37:8c:d0:b0:f9: f2:5a:56:89:d3:84:2b:e2:64:74:61:91:cb:68:34: c0:69:a5:1e:d1:5c:99:c3:6a:73:da:84:5d:bc:42: 17:31:03:f7:f0:7b:2b:f0:95:58:7d:b8:d0:82:30: 9e:ac:c9:d8:51:0e:9f:0e:53:f2:a2:69:65:55:ac: a2:56:55:3e:69:49:98:3e:3d:d0:c0:33:60:06:c6: 81:49:9b:fc:cc:52:b0:62:f1:b7:67:f1:d4:e2:12: 42:20:4b:bd:d5:92:a8:d4:eb:a1:e1:0f:1a:4d:e6: 00:0f:0d:7b:62:4f:50:d8:22:98:08:9c:d9:79:1a: 28:d1:64:d3:8c:55:45:7e:2b:a2:42:22:dc:34:90: d4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F0:9F:F6:4D:68:2F:6C:A6:B8:E9:64:FA:C4:12:D8:31:91:6D:67 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y_Cf9k1oL2ymuOlk-sQS2DGRbWc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.30.0/24 Signature Algorithm: sha256WithRSAEncryption 17:f0:8d:54:ed:61:4e:f3:94:5b:b8:f7:7e:76:0e:16:2e:c0: c6:6d:13:d6:a3:37:06:b6:60:e9:96:68:80:86:ad:78:ee:00: f2:d9:3b:47:90:5e:c2:73:37:00:69:32:9e:85:18:9e:32:9b: a5:8b:ae:b8:5b:72:7a:53:1f:87:2b:5c:79:3a:55:e4:73:c1: 19:25:67:ad:fe:a8:1c:e5:da:1c:5f:8f:51:52:62:a8:e8:bc: 28:9d:52:ba:c7:ff:aa:ec:3b:0a:d7:14:b5:19:4b:8f:4b:23: b0:f0:e9:05:da:47:5f:c2:8c:71:15:2e:42:4b:94:4c:24:72: c9:3e:bf:9e:85:28:4a:8d:d9:86:23:0a:6d:11:dc:56:21:be: d7:be:d1:71:57:2c:b0:08:d6:6e:dd:db:f5:55:3c:ab:e5:d8: 6a:36:5d:f9:e8:2f:72:c6:e7:b1:10:a7:36:29:99:31:1a:55: ae:ae:07:f1:9a:62:ed:b7:63:5b:86:60:71:17:f9:ee:cc:d2: c0:4d:c5:b4:7c:ce:25:bd:d8:63:df:44:3a:b1:b9:70:52:97: 86:12:41:9b:16:ba:4d:8b:a8:b8:ef:bd:e6:e8:eb:f6:f3:ea: 54:50:0f:70:a9:b3:2c:94:df:01:7c:01:24:7e:ff:46:c5:32: 69:12:70:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y5Rzbw/pblCjDLSk6AfUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2M2YwOWZmNjRkNjgyZjZjYTZiOGU5NjRmYWM0MTJkODMxOTE2ZDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKwJf6BWa1/ccCp2kS1NT5H7AKLH ZcBbp5AWl4l/RU2ezeOB+F1pebQ6Xlrb0czlBe/AnT9oTDQpHptK9oiqqF6w4euw rnDx6Rc5V5VJ6Y95TQrkYDy3dpH7drCjbjExJW734wo4ldmJsMZKTJc0Sg0oN4zQ sPnyWlaJ04Qr4mR0YZHLaDTAaaUe0VyZw2pz2oRdvEIXMQP38Hsr8JVYfbjQgjCe rMnYUQ6fDlPyomllVayiVlU+aUmYPj3QwDNgBsaBSZv8zFKwYvG3Z/HU4hJCIEu9 1ZKo1Ouh4Q8aTeYADw17Yk9Q2CKYCJzZeRoo0WTTjFVFfiuiQiLcNJDUHwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGPwn/ZNaC9sprjpZPrEEtgxkW1nMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvWV9DZjlrMW9MMnltdU9say1zUVMyREdSYldjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/IeMA0G CSqGSIb3DQEBCwUAA4IBAQAX8I1U7WFO85RbuPd+dg4WLsDGbRPWozcGtmDplmiA hq147gDy2TtHkF7CczcAaTKehRieMpuli664W3J6Ux+HK1x5OlXkc8EZJWet/qgc 5docX49RUmKo6LwonVK6x/+q7DsK1xS1GUuPSyOw8OkF2kdfwoxxFS5CS5RMJHLJ Pr+ehShKjdmGIwptEdxWIb7XvtFxVyywCNZu3dv1VTyr5dhqNl356C9yxuexEKc2 KZkxGlWurgfxmmLtt2NbhmBxF/nuzNLATcW0fM4lvdhj30Q6sblwUpeGEkGbFrpN i6i4773m6Ov28+pUUA9wqbMslN8BfAEkfv9GxTJpEnD1 -----END CERTIFICATE-----Generated at Sun Jan 18 06:28:47 2026 by rpki-client