This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZtRxM7Q_iz8Uoa44th-eezYSdvY.roa File: ZtRxM7Q_iz8Uoa44th-eezYSdvY.roa (raw, json) Hash identifier: s5ib8O+0VjLM2ws+aXuQDJpULDzXSAx0WxtJdCrFHmU= Subject key identifier: 66:D4:71:33:B4:3F:8B:3F:14:A1:AE:38:B6:1F:9E:7B:36:12:76:F6 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCBB051DFA2198527A1E069851B9F7E Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZtRxM7Q_iz8Uoa44th-eezYSdvY.roa Signing time: Fri 02 Jan 2026 08:20:59 +0000 ROA not before: Fri 02 Jan 2026 08:20:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 398493 IP address blocks: 151.244.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:b0:51:df:a2:19:85:27:a1:e0:69:85:1b:9f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66d47133b43f8b3f14a1ae38b61f9e7b361276f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:42:5e:fc:1d:e7:b7:6d:88:a5:5e:5e:e6:5a: e9:33:d5:2c:37:7a:a7:58:cf:bb:39:b3:88:0f:c8: 04:7d:13:a6:2b:d1:f2:af:f7:ec:fb:9d:63:74:04: 74:00:1a:19:e7:6d:c3:a2:ab:98:1f:69:03:2d:be: d8:73:30:d8:cd:96:bf:6f:b9:a4:5b:f8:e6:16:2c: 1b:48:fb:62:a2:05:c6:c6:b2:95:05:63:52:65:9f: ac:36:6f:f6:43:9a:d5:09:62:d2:7e:cc:ee:d5:da: 65:4a:5a:0c:6e:a0:46:db:53:00:7d:8e:ee:e7:26: 1a:1e:8f:64:18:83:65:06:03:4d:c7:2a:4a:52:5a: c2:1e:17:a6:e3:3b:58:83:97:7e:5b:fa:4c:19:60: eb:4a:94:9c:3e:f6:0b:45:72:32:4d:40:ec:41:de: 99:1b:cd:85:38:c5:f9:0b:a2:78:b1:b4:41:13:17: 62:2c:7e:59:6f:88:5e:de:db:fc:d1:97:66:01:32: 74:2b:d7:f2:40:72:fa:cc:f1:09:b1:ce:84:62:de: ea:89:6c:3f:75:f2:d5:5a:da:30:31:f4:8a:b3:e4: c5:df:f0:52:5c:38:31:83:d8:93:50:cc:e5:58:be: a8:5a:aa:5c:18:b9:d2:25:d4:d6:e6:3d:fc:f0:0f: 95:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:D4:71:33:B4:3F:8B:3F:14:A1:AE:38:B6:1F:9E:7B:36:12:76:F6 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZtRxM7Q_iz8Uoa44th-eezYSdvY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.214.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:26:ac:dd:bf:88:c0:08:12:6b:b4:06:72:64:49:6c:78:92: 29:d0:98:08:df:c6:82:7a:0e:ca:57:a5:dc:18:d0:b4:9d:74: 58:8f:16:c4:f6:d9:7b:a2:ec:a9:99:54:33:cf:69:24:ef:06: 64:08:a8:85:ab:87:86:f5:31:b1:57:d1:f8:45:e0:9e:d2:b2: 6e:fd:88:a8:ce:a4:d7:c1:7b:23:7a:99:c4:4d:d9:75:f2:0e: 55:1c:77:35:82:c7:61:45:91:9a:f3:ae:7a:bd:4c:c7:03:47: 41:4f:4d:da:5a:32:7a:d7:63:7e:e4:16:06:f5:08:d5:b4:3d: bf:79:31:2f:6a:1e:b7:88:af:39:5b:b6:08:bf:d3:1e:46:36: eb:da:65:02:86:3d:65:e4:1a:a3:5e:cf:cb:02:39:85:cd:44: ee:b5:f1:53:e4:a7:4c:16:39:02:62:d4:6f:39:bc:ee:0f:f1: 8c:b6:e3:5f:be:24:3a:81:c0:b8:98:52:ce:03:1f:0b:0f:95: d7:bc:7f:74:ef:4c:9a:e6:7b:78:da:f9:e3:a7:b3:1a:15:89: 23:16:81:69:9f:73:9b:a7:ff:ee:f8:16:30:e2:f0:ff:5e:99: 63:3a:3b:d7:d1:8a:97:50:af:78:3d:9d:a0:cf:e0:1d:e4:17: d3:c9:d8:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y7BR36IZhSeh4GmFG59+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NmQ0NzEzM2I0M2Y4YjNmMTRhMWFlMzhiNjFmOWU3YjM2MTI3NmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkJe/B3nt22IpV5e5lrpM9UsN3qn WM+7ObOID8gEfROmK9Hyr/fs+51jdAR0ABoZ523DoquYH2kDLb7YczDYzZa/b7mk W/jmFiwbSPtiogXGxrKVBWNSZZ+sNm/2Q5rVCWLSfszu1dplSloMbqBG21MAfY7u 5yYaHo9kGINlBgNNxypKUlrCHhem4ztYg5d+W/pMGWDrSpScPvYLRXIyTUDsQd6Z G82FOMX5C6J4sbRBExdiLH5Zb4he3tv80ZdmATJ0K9fyQHL6zPEJsc6EYt7qiWw/ dfLVWtowMfSKs+TF3/BSXDgxg9iTUMzlWL6oWqpcGLnSJdTW5j388A+VsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGbUcTO0P4s/FKGuOLYfnns2Enb2MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvWnRSeE03UV9pejhVb2E0NHRoLWVlellTZHZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/TWMA0G CSqGSIb3DQEBCwUAA4IBAQBLJqzdv4jACBJrtAZyZElseJIp0JgI38aCeg7KV6Xc GNC0nXRYjxbE9tl7ouypmVQzz2kk7wZkCKiFq4eG9TGxV9H4ReCe0rJu/YiozqTX wXsjepnETdl18g5VHHc1gsdhRZGa8656vUzHA0dBT03aWjJ612N+5BYG9QjVtD2/ eTEvah63iK85W7YIv9MeRjbr2mUChj1l5BqjXs/LAjmFzUTutfFT5KdMFjkCYtRv ObzuD/GMtuNfviQ6gcC4mFLOAx8LD5XXvH9070ya5nt42vnjp7MaFYkjFoFpn3Ob p//u+BYw4vD/XpljOjvX0YqXUK94PZ2gz+Ad5BfTydii -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:31 2026 by rpki-client