This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/a7RHx-uZV0sXNOg2yd_mNZBJrxM.roa File: a7RHx-uZV0sXNOg2yd_mNZBJrxM.roa (raw, json) Hash identifier: 4l+FvwYsTgDCW30UR34ka+bD/Jw+RVfOBBl7pNsqKMA= Subject key identifier: 6B:B4:47:C7:EB:99:57:4B:17:34:E8:36:C9:DF:E6:35:90:49:AF:13 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B8145E3D805114366534EB8B7BD650326 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/a7RHx-uZV0sXNOg2yd_mNZBJrxM.roa Signing time: Sat 03 Jan 2026 00:33:19 +0000 ROA not before: Sat 03 Jan 2026 00:33:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36530 IP address blocks: 151.241.128.0/22 maxlen: 24 151.245.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:81:45:e3:d8:05:11:43:66:53:4e:b8:b7:bd:65:03:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 3 00:33:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6bb447c7eb99574b1734e836c9dfe6359049af13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b8:cb:41:5e:c7:c3:62:65:35:52:a9:6d:1a: 98:2c:46:9e:54:3c:b9:1f:4e:91:57:f2:d2:27:e6: b5:34:f4:8a:e7:ca:5f:d0:d3:6c:dc:7a:a1:c2:a2: 50:ea:c0:a9:9e:b9:11:d2:9f:c3:9c:e3:7e:0c:8d: 4c:40:42:7f:6b:e2:43:c2:41:25:03:e7:40:de:d4: 1a:d0:47:a8:36:39:b0:18:c2:82:1a:c4:41:b9:78: b8:d9:e7:7f:e4:79:af:16:51:b2:34:0c:ed:9f:95: 6e:4a:70:c9:4c:93:11:9c:c0:b9:76:28:71:59:50: cf:66:08:d6:9b:32:17:3d:48:b1:94:74:ca:f3:86: f8:01:fb:9e:39:16:09:9e:31:ba:fb:68:44:f3:62: 21:29:f1:5a:0a:62:64:26:21:e8:80:e0:3e:63:ea: da:ae:38:0b:ff:2d:9d:f4:93:1d:04:0e:8e:65:c8: 76:cf:1d:fc:37:4f:53:80:fe:cf:eb:fc:53:f7:f8: 33:e1:5f:8a:13:59:44:2a:26:6d:f3:ee:ee:66:18: f7:16:65:69:f6:a6:26:69:bb:05:fc:4f:f2:17:8e: 71:b1:a7:cc:69:00:c8:5b:d0:35:30:54:89:3f:37: e9:68:fb:d1:08:b2:0e:1f:5e:75:4c:5a:21:be:76: 98:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B4:47:C7:EB:99:57:4B:17:34:E8:36:C9:DF:E6:35:90:49:AF:13 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/a7RHx-uZV0sXNOg2yd_mNZBJrxM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.128.0/22 151.245.108.0/24 Signature Algorithm: sha256WithRSAEncryption 47:88:06:01:7e:52:2c:8c:5b:3a:27:56:be:40:82:f4:37:08: 09:54:f5:f6:af:8e:63:91:f9:ce:27:b1:80:4f:15:27:db:a5: 7c:b7:0f:52:c4:cc:27:2b:04:01:1e:63:d9:47:2f:bb:68:1e: e8:ab:8b:4e:16:93:f0:62:d2:a8:22:1c:86:88:6a:37:e3:b2: d3:0d:44:4b:92:5f:0a:a7:ed:84:e0:38:f6:7d:61:2a:1a:2b: 2b:9f:8e:71:dd:a3:43:5b:aa:10:57:5d:0e:3a:0b:e0:3b:54: e1:18:a2:73:cd:f5:c5:62:fd:0c:7c:73:02:34:67:af:4e:cc: 13:31:6d:9c:17:2b:fd:03:e2:34:3e:2f:0e:49:3b:ec:a0:56: a9:8d:27:8a:c3:41:3f:6e:c9:20:b7:19:53:14:b7:66:b8:e1: 58:e9:90:4e:f1:60:f7:c2:e4:e6:b2:35:09:d7:5e:8a:0e:a9: 94:3d:ee:2c:3d:ea:79:dc:c4:11:58:f0:6d:4e:42:af:8c:c5: d1:34:c5:4c:87:3c:6d:ca:ea:d1:77:b3:bf:61:54:b1:58:a6: 52:0b:f5:ee:59:50:61:e2:c7:9d:f6:34:05:59:98:3d:32:ab: 0e:8b:fd:dc:9b:95:b9:ad:49:6b:21:72:f8:2f:2e:41:d3:ef: bd:6b:4b:53 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuBRePYBRFDZlNOuLe9ZQMmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAzMDAzMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmI0NDdjN2ViOTk1NzRiMTczNGU4MzZjOWRmZTYzNTkwNDlhZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrjLQV7Hw2JlNVKpbRqYLEaeVDy5 H06RV/LSJ+a1NPSK58pf0NNs3HqhwqJQ6sCpnrkR0p/DnON+DI1MQEJ/a+JDwkEl A+dA3tQa0EeoNjmwGMKCGsRBuXi42ed/5HmvFlGyNAztn5VuSnDJTJMRnMC5dihx WVDPZgjWmzIXPUixlHTK84b4AfueORYJnjG6+2hE82IhKfFaCmJkJiHogOA+Y+ra rjgL/y2d9JMdBA6OZch2zx38N09TgP7P6/xT9/gz4V+KE1lEKiZt8+7uZhj3FmVp 9qYmabsF/E/yF45xsafMaQDIW9A1MFSJPzfpaPvRCLIOH151TFohvnaYuQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGu0R8frmVdLFzToNsnf5jWQSa8TMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvYTdSSHgtdVpWMHNYTk9nMnlkX21OWkJKcnhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCl/GAAwQA l/VsMA0GCSqGSIb3DQEBCwUAA4IBAQBHiAYBflIsjFs6J1a+QIL0NwgJVPX2r45j kfnOJ7GATxUn26V8tw9SxMwnKwQBHmPZRy+7aB7oq4tOFpPwYtKoIhyGiGo347LT DURLkl8Kp+2E4Dj2fWEqGisrn45x3aNDW6oQV10OOgvgO1ThGKJzzfXFYv0MfHMC NGevTswTMW2cFyv9A+I0Pi8OSTvsoFapjSeKw0E/bskgtxlTFLdmuOFY6ZBO8WD3 wuTmsjUJ116KDqmUPe4sPep53MQRWPBtTkKvjMXRNMVMhzxtyurRd7O/YVSxWKZS C/XuWVBh4sed9jQFWZg9MqsOi/3cm5W5rUlrIXL4Ly5B0++9a0tT -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:11 2026 by rpki-client