This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aCmxbBrlQBbbtftAn1Ol4Ysa6L8.roa File: aCmxbBrlQBbbtftAn1Ol4Ysa6L8.roa (raw, json) Hash identifier: COKRlJVt4tJvdjDh3Fk93usMX5IG8k0mRZf6dl4rtR8= Subject key identifier: 68:29:B1:6C:1A:E5:40:16:DB:B5:FB:40:9F:53:A5:E1:8B:1A:E8:BF Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCBA5E3DDC70CF3FA0B3EC536240DC7 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aCmxbBrlQBbbtftAn1Ol4Ysa6L8.roa Signing time: Fri 02 Jan 2026 08:20:56 +0000 ROA not before: Fri 02 Jan 2026 08:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 272547 IP address blocks: 151.243.33.0/24 maxlen: 24 151.243.218.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:a5:e3:dd:c7:0c:f3:fa:0b:3e:c5:36:24:0d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6829b16c1ae54016dbb5fb409f53a5e18b1ae8bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:8c:eb:52:c7:f0:0c:e0:d8:36:c3:24:80:e4: 51:97:03:76:cb:f5:20:40:86:5b:ea:01:9b:02:f2: 27:09:c4:47:2b:06:65:95:70:60:7d:6d:be:d8:2c: 93:60:13:36:f1:ef:53:77:19:6c:ec:71:ef:0b:1f: 92:59:8d:56:7b:7b:f4:2d:f9:d0:b3:a9:ab:e5:7c: d0:0e:cd:c6:67:f6:3b:fe:66:0d:b8:7b:28:b2:79: bf:40:c0:ab:2e:83:12:a4:05:43:d8:9f:5c:ed:5a: a0:1f:f9:eb:16:3a:65:08:79:4a:92:49:2a:38:00: 52:14:9b:f7:09:3a:ad:f7:bb:dd:cf:9d:70:b8:73: 64:65:81:d9:8a:05:e9:f3:5b:4e:3c:c1:06:50:ee: 38:4c:b4:13:7a:dc:b0:8f:4f:36:e3:be:b3:fd:89: 4d:c0:6e:94:48:0a:91:2f:02:6e:64:95:a0:10:63: 08:6c:59:12:2b:f2:ad:92:b4:b7:64:c5:fb:5d:5d: 00:69:ba:a7:65:b6:a2:64:1a:8e:41:6d:5a:ad:40: 32:81:3c:d9:92:d4:73:5d:b7:1f:f9:2f:ff:f1:4d: 22:be:9c:ca:3f:a9:43:2b:34:fa:39:47:ba:e2:11: 91:ae:b8:64:f0:bd:1f:2b:c3:07:ec:4f:c9:61:d8: 13:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:29:B1:6C:1A:E5:40:16:DB:B5:FB:40:9F:53:A5:E1:8B:1A:E8:BF X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aCmxbBrlQBbbtftAn1Ol4Ysa6L8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.33.0/24 151.243.218.0/23 Signature Algorithm: sha256WithRSAEncryption b4:6c:e3:95:d6:6b:33:3e:e8:00:1c:28:d3:86:36:d8:5c:9f: 9c:01:6b:3f:e3:93:e3:7b:9c:e6:b7:d4:c5:ca:93:f5:1e:95: cc:ef:7a:10:8c:05:60:df:2f:cd:a5:37:86:e6:d7:4b:43:a8: 47:63:d5:3b:f0:ad:ee:87:71:33:51:d3:00:51:2b:e9:20:95: aa:2d:27:4f:20:4e:c8:ff:24:6f:5c:1b:61:43:d2:c1:59:db: 12:0b:af:15:f2:ed:0b:24:81:de:23:f3:59:d5:19:91:ca:8c: a0:c5:18:28:e0:ee:3a:b6:06:49:0c:8f:4a:fd:b9:22:f9:1d: 98:a6:62:2f:9c:7e:7c:51:60:e3:0b:d8:fc:05:bd:c1:23:c9: 92:16:1c:14:c8:26:85:96:22:ca:9f:c8:b1:bc:e7:6e:63:75: a1:17:67:5f:8c:23:cd:9c:9c:f2:a7:bf:a9:77:44:6d:c2:9c: a1:ab:a5:e3:f1:03:eb:bd:38:96:ee:2b:2d:af:b0:40:6d:11: 57:fa:d0:d0:33:19:8f:1d:6d:66:31:e5:eb:82:b5:6a:e6:6f: eb:dc:71:90:f6:e2:f2:ee:22:40:f6:70:b3:2f:6a:9e:dd:53: 02:a6:8f:4c:9a:69:cc:33:34:ab:ac:be:07:39:22:e7:7d:22: ed:5d:1f:7e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y6Xj3ccM8/oLPsU2JA3HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODI5YjE2YzFhZTU0MDE2ZGJiNWZiNDA5ZjUzYTVlMThiMWFlOGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4zrUsfwDODYNsMkgORRlwN2y/Ug QIZb6gGbAvInCcRHKwZllXBgfW2+2CyTYBM28e9Tdxls7HHvCx+SWY1We3v0LfnQ s6mr5XzQDs3GZ/Y7/mYNuHsosnm/QMCrLoMSpAVD2J9c7VqgH/nrFjplCHlKkkkq OABSFJv3CTqt97vdz51wuHNkZYHZigXp81tOPMEGUO44TLQTetywj082476z/YlN wG6USAqRLwJuZJWgEGMIbFkSK/KtkrS3ZMX7XV0AabqnZbaiZBqOQW1arUAygTzZ ktRzXbcf+S//8U0ivpzKP6lDKzT6OUe64hGRrrhk8L0fK8MH7E/JYdgT8QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGgpsWwa5UAW27X7QJ9TpeGLGui/MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvYUNteGJCcmxRQmJidGZ0QW4xT2w0WXNhNkw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/MhAwQB l/PaMA0GCSqGSIb3DQEBCwUAA4IBAQC0bOOV1mszPugAHCjThjbYXJ+cAWs/45Pj e5zmt9TFypP1HpXM73oQjAVg3y/NpTeG5tdLQ6hHY9U78K3uh3EzUdMAUSvpIJWq LSdPIE7I/yRvXBthQ9LBWdsSC68V8u0LJIHeI/NZ1RmRyoygxRgo4O46tgZJDI9K /bki+R2YpmIvnH58UWDjC9j8Bb3BI8mSFhwUyCaFliLKn8ixvOduY3WhF2dfjCPN nJzyp7+pd0Rtwpyhq6Xj8QPrvTiW7istr7BAbRFX+tDQMxmPHW1mMeXrgrVq5m/r 3HGQ9uLy7iJA9nCzL2qe3VMCpo9MmmnMMzSrrL4HOSLnfSLtXR9+ -----END CERTIFICATE-----Generated at Sun Jan 18 06:28:45 2026 by rpki-client