This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z7DRWvBggFJ69REsxq9AgaqFNEQ.roa File: Z7DRWvBggFJ69REsxq9AgaqFNEQ.roa (raw, json) Hash identifier: dSfXatoN28V/GZkJDbvV7vdt0+vrRsH6adx/RN93YR0= Subject key identifier: 67:B0:D1:5A:F0:60:80:52:7A:F5:11:2C:C6:AF:40:81:AA:85:34:44 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BB61607CF46B7A217C3F35660C6D9DA98 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z7DRWvBggFJ69REsxq9AgaqFNEQ.roa Signing time: Tue 13 Jan 2026 06:40:55 +0000 ROA not before: Tue 13 Jan 2026 06:40:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 11439 IP address blocks: 151.240.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:16:07:cf:46:b7:a2:17:c3:f3:56:60:c6:d9:da:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 13 06:40:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=67b0d15af06080527af5112cc6af4081aa853444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1f:c4:e0:4c:f7:8f:09:43:5b:74:18:8a:da: 91:10:6a:ff:4a:96:29:0f:9e:93:d3:95:64:e1:bc: ff:01:aa:5f:5a:4b:c7:b4:75:93:b7:26:4f:2b:33: 83:8e:c7:82:8f:b5:67:59:11:41:9a:c1:f2:8e:a6: 46:1c:e7:ec:4c:69:06:7c:22:a8:0c:93:6d:e8:dd: 7d:f6:21:27:1b:d4:e5:27:2b:4d:ae:de:68:30:6a: 6a:ec:97:21:3e:7b:14:14:45:ab:c7:58:2c:26:f1: c6:52:cb:c7:c7:c6:05:6d:ac:69:6d:e8:ca:04:ad: 63:9e:1d:67:db:79:b2:0c:ea:a3:aa:84:ff:5b:18: 58:75:98:07:cc:aa:3e:df:a0:68:52:46:b3:8e:1a: 40:13:05:2b:7c:48:86:d4:fa:cd:67:be:e2:bd:04: f3:a1:db:73:34:25:50:8b:5f:9a:60:af:14:77:ae: 20:e0:1b:f1:cd:d2:75:27:4f:90:e0:d7:28:e8:25: 9c:ac:91:2e:d7:61:56:07:b2:ee:5c:60:fc:f9:4f: 93:9a:8c:dd:27:fc:64:f4:9c:f2:d0:de:16:16:c4: 3b:67:4b:96:73:4d:a4:2e:d2:48:77:30:53:e2:59: cf:5b:2d:0b:03:f9:c2:e7:4f:e5:cf:6c:ed:69:fa: 7c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:B0:D1:5A:F0:60:80:52:7A:F5:11:2C:C6:AF:40:81:AA:85:34:44 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z7DRWvBggFJ69REsxq9AgaqFNEQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.31.0/24 Signature Algorithm: sha256WithRSAEncryption 20:5d:c7:93:74:89:ac:98:33:10:87:81:03:2a:eb:f7:c2:5d: 9d:d4:66:82:7f:1e:12:a2:5b:6b:a4:7f:7f:7e:1d:3e:5d:9e: 85:9f:9d:6f:28:9c:fe:df:d9:0d:3a:43:93:76:e4:6d:39:b0: 3a:54:05:78:6a:5b:d3:87:85:56:ac:15:25:be:29:e2:8f:7c: 47:01:be:ef:c6:ec:57:86:e0:c2:13:8f:b5:b2:82:78:ca:78: 13:61:9d:f9:90:0c:61:ff:26:22:9a:44:3f:94:a5:6a:f7:d4: c7:7e:06:24:d9:99:eb:bc:da:5a:f0:6c:f5:f3:bf:de:e1:a7: 3b:c9:aa:b7:0b:41:75:d8:76:16:c3:16:41:af:9a:99:79:33: 1e:3e:22:58:e5:17:47:9b:9f:fb:6a:e7:17:12:59:ef:c7:0b: ac:c6:d0:eb:37:3d:55:58:95:98:20:0c:27:26:d1:06:59:96: 25:57:57:72:83:bf:d6:3a:be:2a:36:a1:0c:80:1d:11:d1:15: f5:b7:ec:35:43:29:0b:17:6f:1b:fc:d0:53:d1:ea:73:8a:b1: 1c:a1:de:67:d5:6e:54:d0:28:3d:0f:e4:99:25:64:5b:52:76: e9:a4:44:8d:6d:2e:22:47:e4:ba:35:25:cf:9a:b2:03:6f:ee: 9f:24:5c:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu2FgfPRreiF8PzVmDG2dqYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTEzMDY0MDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2N2IwZDE1YWYwNjA4MDUyN2FmNTExMmNjNmFmNDA4MWFhODUzNDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzB/E4Ez3jwlDW3QYitqREGr/SpYp D56T05Vk4bz/AapfWkvHtHWTtyZPKzODjseCj7VnWRFBmsHyjqZGHOfsTGkGfCKo DJNt6N199iEnG9TlJytNrt5oMGpq7JchPnsUFEWrx1gsJvHGUsvHx8YFbaxpbejK BK1jnh1n23myDOqjqoT/WxhYdZgHzKo+36BoUkazjhpAEwUrfEiG1PrNZ77ivQTz odtzNCVQi1+aYK8Ud64g4BvxzdJ1J0+Q4Nco6CWcrJEu12FWB7LuXGD8+U+Tmozd J/xk9Jzy0N4WFsQ7Z0uWc02kLtJIdzBT4lnPWy0LA/nC50/lz2ztafp8LQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGew0VrwYIBSevURLMavQIGqhTREMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvWjdEUld2QmdnRko2OVJFc3hxOUFnYXFGTkVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/AfMA0G CSqGSIb3DQEBCwUAA4IBAQAgXceTdImsmDMQh4EDKuv3wl2d1GaCfx4SoltrpH9/ fh0+XZ6Fn51vKJz+39kNOkOTduRtObA6VAV4alvTh4VWrBUlvinij3xHAb7vxuxX huDCE4+1soJ4yngTYZ35kAxh/yYimkQ/lKVq99THfgYk2ZnrvNpa8Gz187/e4ac7 yaq3C0F12HYWwxZBr5qZeTMePiJY5RdHm5/7aucXElnvxwusxtDrNz1VWJWYIAwn JtEGWZYlV1dyg7/WOr4qNqEMgB0R0RX1t+w1QykLF28b/NBT0epzirEcod5n1W5U 0Cg9D+SZJWRbUnbppESNbS4iR+S6NSXPmrIDb+6fJFx1 -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:27 2026 by rpki-client