This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_rU1rvgwiYpCAVZWRdcAS_7Tv8Q.roa File: _rU1rvgwiYpCAVZWRdcAS_7Tv8Q.roa (raw, json) Hash identifier: AmS6f3jPQWr/Wf11ZLPD1S2V88B+qAD/fAklKJLH3Vg= Subject key identifier: FE:B5:35:AE:F8:30:89:8A:42:01:56:56:45:D7:00:4B:FE:D3:BF:C4 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB9D8AE3BB4B64561B4B3ABAF6C64A Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_rU1rvgwiYpCAVZWRdcAS_7Tv8Q.roa Signing time: Fri 02 Jan 2026 08:20:54 +0000 ROA not before: Fri 02 Jan 2026 08:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215288 IP address blocks: 151.242.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:9d:8a:e3:bb:4b:64:56:1b:4b:3a:ba:f6:c6:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=feb535aef830898a4201565645d7004bfed3bfc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:58:fe:7d:79:25:ba:52:04:55:b1:2a:6a:de: 6f:4b:d1:b8:66:2e:dd:82:a9:d0:d8:8b:a2:6e:df: 2d:2a:68:46:9e:f7:80:aa:d3:60:6b:f7:db:35:00: b1:ff:36:e7:0c:f7:bf:c3:69:96:93:54:2e:06:9f: e3:82:11:49:77:63:9e:42:ec:7a:02:d4:4a:10:db: 71:43:4d:83:e4:5a:53:ec:cf:23:2b:fc:48:1b:2c: e9:51:8d:9b:cd:25:bc:09:ec:42:f2:6e:5e:af:40: 31:b6:56:9f:1c:49:60:70:2f:ed:4d:41:72:fb:38: e2:66:ac:98:d1:79:97:b8:3c:56:22:e3:1d:58:b1: 5c:c2:2c:dd:8c:0a:5e:ce:a3:5b:52:50:6d:a4:79: 28:f0:e7:4e:13:00:e9:4b:20:a9:53:9d:d2:ec:1f: 79:6f:a9:57:6e:e2:9e:5d:de:fa:84:98:bf:8e:5d: fb:1f:63:6a:d7:94:1a:3f:76:02:fe:fa:ca:93:a1: 6d:62:7c:7c:5b:aa:e2:87:7f:74:98:4e:18:08:bd: f1:c9:61:96:b1:f8:a7:be:84:e0:04:0f:fc:1b:05: 13:ce:99:c9:73:97:9c:b5:f9:5a:fe:0c:85:a0:98: 67:be:7e:d9:4b:4f:ff:5d:8b:40:f2:5b:b5:2c:77: 7f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B5:35:AE:F8:30:89:8A:42:01:56:56:45:D7:00:4B:FE:D3:BF:C4 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_rU1rvgwiYpCAVZWRdcAS_7Tv8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.132.0/24 Signature Algorithm: sha256WithRSAEncryption b1:e6:9a:de:5c:e3:f4:01:94:1c:32:a1:27:06:d2:dc:a0:35: c5:c6:00:85:8d:8f:bf:ea:27:eb:7c:26:00:74:f3:58:fd:a3: f8:59:e2:b8:83:34:de:ec:79:10:c0:0c:60:75:56:78:c3:57: 7d:98:ec:30:f9:4e:c5:bf:ba:c5:16:56:03:14:ff:90:35:3d: 33:e5:03:55:a6:98:d4:b8:9f:56:bf:1d:80:0e:e6:52:47:47: 85:a2:91:c6:07:cf:57:41:07:9a:67:a0:62:e6:43:4c:bf:7d: d7:98:9a:15:3b:b7:76:2d:28:6e:18:2a:15:9e:a6:f2:6c:85: a5:90:a8:89:05:71:b9:31:fb:7f:e9:ed:ee:48:fe:92:35:a7: 06:1e:80:7f:3f:d7:eb:3f:2d:43:f9:8a:aa:db:22:66:62:d1: 07:ab:83:15:73:70:23:c3:f9:a8:4c:74:bd:36:1a:68:f9:a8: ca:fd:a0:2c:a6:3b:8a:1b:52:fc:13:3f:0e:c6:6f:7e:38:4d: 28:d6:77:a2:9d:35:c5:bd:0b:57:53:e6:47:ed:94:38:cc:1d: 6b:56:67:ce:ab:4a:3a:43:d0:a9:97:7e:53:0d:03:26:c6:d9: d6:bf:53:f6:2c:c4:34:ff:9d:35:80:16:ed:b4:fd:65:31:f8: 8c:42:53:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y52K47tLZFYbSzq69sZKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWI1MzVhZWY4MzA4OThhNDIwMTU2NTY0NWQ3MDA0YmZlZDNiZmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Vj+fXklulIEVbEqat5vS9G4Zi7d gqnQ2Iuibt8tKmhGnveAqtNga/fbNQCx/zbnDPe/w2mWk1QuBp/jghFJd2OeQux6 AtRKENtxQ02D5FpT7M8jK/xIGyzpUY2bzSW8CexC8m5er0AxtlafHElgcC/tTUFy +zjiZqyY0XmXuDxWIuMdWLFcwizdjApezqNbUlBtpHko8OdOEwDpSyCpU53S7B95 b6lXbuKeXd76hJi/jl37H2Nq15QaP3YC/vrKk6FtYnx8W6rih390mE4YCL3xyWGW sfinvoTgBA/8GwUTzpnJc5ectfla/gyFoJhnvn7ZS0//XYtA8lu1LHd/wwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP61Na74MImKQgFWVkXXAEv+07/EMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvX3JVMXJ2Z3dpWXBDQVZaV1JkY0FTXzdUdjhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/KEMA0G CSqGSIb3DQEBCwUAA4IBAQCx5preXOP0AZQcMqEnBtLcoDXFxgCFjY+/6ifrfCYA dPNY/aP4WeK4gzTe7HkQwAxgdVZ4w1d9mOww+U7Fv7rFFlYDFP+QNT0z5QNVppjU uJ9Wvx2ADuZSR0eFopHGB89XQQeaZ6Bi5kNMv33XmJoVO7d2LShuGCoVnqbybIWl kKiJBXG5Mft/6e3uSP6SNacGHoB/P9frPy1D+Yqq2yJmYtEHq4MVc3Ajw/moTHS9 Nhpo+ajK/aAspjuKG1L8Ez8Oxm9+OE0o1neinTXFvQtXU+ZH7ZQ4zB1rVmfOq0o6 Q9Cpl35TDQMmxtnWv1P2LMQ0/501gBbttP1lMfiMQlPD -----END CERTIFICATE-----Generated at Sun Jan 18 06:28:47 2026 by rpki-client