This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZpvrE1-jrqRVkUpsV6DHSejb2F8.roa File: ZpvrE1-jrqRVkUpsV6DHSejb2F8.roa (raw, json) Hash identifier: mhjgLKFsRi4WP4WsXEH76AFcRRtrcHTeY09Tn/Qj5KA= Subject key identifier: 66:9B:EB:13:5F:A3:AE:A4:55:91:4A:6C:57:A0:C7:49:E8:DB:D8:5F Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB282A60DE5E0587B00EA8348EF3BC Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZpvrE1-jrqRVkUpsV6DHSejb2F8.roa Signing time: Fri 02 Jan 2026 08:20:24 +0000 ROA not before: Fri 02 Jan 2026 08:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31715 IP address blocks: 151.240.124.0/24 maxlen: 24 151.244.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:28:2a:60:de:5e:05:87:b0:0e:a8:34:8e:f3:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=669beb135fa3aea455914a6c57a0c749e8dbd85f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:79:db:0e:4f:75:6e:91:81:ee:94:d6:4f:b4: f8:81:1f:a6:9d:5e:53:b3:0d:58:6f:46:4a:db:97: bf:8b:e3:a0:7b:16:d0:bc:9f:75:09:04:65:03:46: be:35:76:5e:29:b3:07:06:4c:27:5c:3b:e5:9c:32: bf:2b:d5:29:ad:3d:de:ce:70:45:a6:28:e3:b4:fb: 1d:d5:6b:b2:31:f8:0e:55:09:02:cb:2c:51:e4:ea: ac:f0:28:da:36:cc:6b:04:9e:bf:d9:7c:20:84:05: 88:7c:c5:8e:a4:9b:55:d3:a9:b2:dd:bd:e5:b1:44: 4a:bf:3b:81:40:ba:4a:c7:1a:a0:27:e6:29:ff:4e: ef:35:02:56:9c:33:6b:7e:88:7f:b5:b2:ca:1e:0d: f0:ec:9d:d2:d3:08:29:e4:13:f1:e5:ba:ff:bd:b7: 67:03:b3:dd:0a:89:76:13:c4:e6:a1:69:89:54:3d: 2b:42:e4:8c:76:c1:e3:74:e4:80:ab:a5:aa:54:3a: 38:56:38:dd:06:a4:ac:97:6f:80:a2:64:48:d1:b0: 4c:d9:92:30:b8:2e:14:79:b1:9f:01:63:76:c0:b0: c6:07:35:f0:c7:5d:75:44:06:2c:ae:88:d0:e6:52: 06:99:c8:f8:1b:55:f0:3f:90:56:2d:ac:e9:d4:bd: 26:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9B:EB:13:5F:A3:AE:A4:55:91:4A:6C:57:A0:C7:49:E8:DB:D8:5F X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZpvrE1-jrqRVkUpsV6DHSejb2F8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.124.0/24 151.244.26.0/24 Signature Algorithm: sha256WithRSAEncryption 90:63:42:64:4f:b9:9a:10:9b:d4:f9:2c:58:44:1b:d0:f5:a2: ec:ec:b1:c1:ee:bf:29:03:08:3b:95:76:9f:bd:c9:55:63:bc: b5:2d:5a:9a:f1:a6:a9:0b:38:3c:12:c0:34:01:e0:41:77:33: ed:7b:14:33:82:d4:d1:90:aa:fc:61:bb:f1:4d:e7:14:a3:0b: 33:8b:43:01:f8:52:8d:fc:f5:ae:c2:0c:a1:83:e5:8e:e1:87: 61:39:4a:19:65:c2:aa:23:df:1e:a3:49:2d:22:cf:af:7d:d2: ef:16:d5:7d:cd:81:14:52:a3:e9:d1:40:35:ea:43:19:50:1b: c7:76:fc:29:2d:d9:f1:1e:3a:39:4f:33:d0:bd:ef:49:8b:39: b9:c4:c0:56:35:3a:a1:9d:dc:a9:9b:ee:86:15:7c:dc:6e:e9: 2b:14:05:d2:bc:78:8d:9e:6d:dc:45:dd:aa:85:80:77:42:d6: be:f6:0b:4b:40:90:23:f8:df:50:de:79:ae:0f:0b:f0:67:30: 26:d3:ff:ba:4b:8d:ca:28:66:da:e4:3b:ee:04:63:a5:c4:d6: e9:52:b2:1d:88:f6:c7:fa:54:3b:b5:ec:c2:ac:f8:73:bd:b9: 5c:b5:9e:0b:6a:e2:fb:07:e9:b8:6a:b4:50:43:28:c3:7a:05: 82:b7:52:c0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yygqYN5eBYewDqg0jvO8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjliZWIxMzVmYTNhZWE0NTU5MTRhNmM1N2EwYzc0OWU4ZGJkODVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHnbDk91bpGB7pTWT7T4gR+mnV5T sw1Yb0ZK25e/i+OgexbQvJ91CQRlA0a+NXZeKbMHBkwnXDvlnDK/K9UprT3eznBF pijjtPsd1WuyMfgOVQkCyyxR5Oqs8CjaNsxrBJ6/2XwghAWIfMWOpJtV06my3b3l sURKvzuBQLpKxxqgJ+Yp/07vNQJWnDNrfoh/tbLKHg3w7J3S0wgp5BPx5br/vbdn A7PdCol2E8TmoWmJVD0rQuSMdsHjdOSAq6WqVDo4VjjdBqSsl2+AomRI0bBM2ZIw uC4UebGfAWN2wLDGBzXwx111RAYsrojQ5lIGmcj4G1XwP5BWLazp1L0mrQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGab6xNfo66kVZFKbFegx0no29hfMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvWnB2ckUxLWpycVJWa1Vwc1Y2REhTZWpiMkY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/B8AwQA l/QaMA0GCSqGSIb3DQEBCwUAA4IBAQCQY0JkT7maEJvU+SxYRBvQ9aLs7LHB7r8p Awg7lXafvclVY7y1LVqa8aapCzg8EsA0AeBBdzPtexQzgtTRkKr8YbvxTecUowsz i0MB+FKN/PWuwgyhg+WO4YdhOUoZZcKqI98eo0ktIs+vfdLvFtV9zYEUUqPp0UA1 6kMZUBvHdvwpLdnxHjo5TzPQve9Jizm5xMBWNTqhndypm+6GFXzcbukrFAXSvHiN nm3cRd2qhYB3Qta+9gtLQJAj+N9Q3nmuDwvwZzAm0/+6S43KKGba5DvuBGOlxNbp UrIdiPbH+lQ7tezCrPhzvblctZ4LauL7B+m4arRQQyjDegWCt1LA -----END CERTIFICATE-----Generated at Sun Jan 18 06:28:51 2026 by rpki-client