This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/b1usYNm3ydC8KEZvhnD_ObWypug.roa File: b1usYNm3ydC8KEZvhnD_ObWypug.roa (raw, json) Hash identifier: op2cuhq6l2sZPVST8lJFUpF/kdwgmm6WBOtc3iuVizo= Subject key identifier: 6F:5B:AC:60:D9:B7:C9:D0:BC:28:46:6F:86:70:FF:39:B5:B2:A6:E8 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB0C5A81E4EA2F70BFCC45DBAFA80C Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/b1usYNm3ydC8KEZvhnD_ObWypug.roa Signing time: Fri 02 Jan 2026 08:20:17 +0000 ROA not before: Fri 02 Jan 2026 08:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7979 IP address blocks: 151.240.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:0c:5a:81:e4:ea:2f:70:bf:cc:45:db:af:a8:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f5bac60d9b7c9d0bc28466f8670ff39b5b2a6e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:98:ee:e8:c6:9a:95:11:94:ce:53:9f:c2:fc: 7b:3f:89:97:51:4d:9c:cb:25:ff:64:55:b4:1d:e4: 71:fc:95:2f:1a:90:90:c0:57:11:c2:dd:46:4c:1e: 8f:e7:3d:6e:7a:91:61:71:03:12:09:09:ea:80:89: 6e:e9:0d:ac:6b:fd:3f:62:4c:b3:0c:61:b0:ec:c8: b8:47:b2:53:51:25:df:39:d9:f3:bb:a2:1e:ea:c9: 3e:f8:8f:f8:58:ea:f6:ea:ba:6e:14:36:0e:d9:09: 24:99:54:bf:3a:0b:11:f6:a5:91:cb:5f:6f:0b:fc: e9:12:36:bb:55:a3:ac:22:6a:a4:0f:56:62:55:13: 4b:93:e8:d3:d9:01:d8:b1:b7:a6:4b:61:62:30:37: 05:37:6a:c4:f3:b1:dd:15:19:75:c0:9c:3a:86:f7: c1:01:0f:20:97:63:a8:a5:d0:86:00:04:28:ae:33: 4c:9d:ca:73:63:62:9c:30:c5:df:d7:f4:23:1c:ed: c2:a1:b9:36:a3:a3:65:d6:89:ad:88:2b:bd:46:e0: 28:02:8f:03:12:d8:8d:25:60:ad:d9:7c:fe:da:a6: f2:4b:23:32:3d:1a:b3:37:2f:74:e8:d5:5a:0a:27: 13:da:c8:53:22:60:42:5b:aa:8d:58:52:25:2e:be: 65:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5B:AC:60:D9:B7:C9:D0:BC:28:46:6F:86:70:FF:39:B5:B2:A6:E8 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/b1usYNm3ydC8KEZvhnD_ObWypug.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.18.0/24 Signature Algorithm: sha256WithRSAEncryption a7:b8:bb:4e:e4:35:04:37:bf:75:15:50:d0:d6:68:35:61:d9: a4:90:6a:6a:0e:97:52:c0:4c:3e:db:45:3c:d7:66:a6:e5:ca: e6:5a:22:cb:7b:b8:d8:7e:3a:03:ea:39:1b:f6:6e:e4:dd:28: 64:bc:35:0a:a4:71:23:a0:1e:cf:a7:fe:8e:54:5a:89:ad:55: 2f:b3:d5:30:dc:60:d1:77:5a:65:77:88:3d:fc:fd:ba:4f:de: b0:fa:7d:14:dc:4e:93:87:24:b7:29:e3:bf:4c:6d:7f:38:22: 17:04:c6:d6:a9:da:d8:7a:0c:8d:68:f6:16:9b:38:68:54:4e: 3b:52:98:5b:9f:28:04:b2:5e:ee:0b:63:73:b9:ac:25:dd:3e: 83:34:df:fa:e5:1b:a2:11:a2:be:bc:c7:e8:ef:68:10:fc:b2: 1a:d3:f1:2c:30:ba:0e:d3:0a:43:6c:a7:c5:b2:e0:0e:3d:71: d3:f6:89:ed:a5:4b:6c:d7:93:41:ce:b5:a0:92:f5:e7:30:a1: dc:94:fe:1f:5e:16:61:22:ff:19:4c:77:45:da:57:22:c6:8b: 84:96:a8:2b:aa:b5:74:42:45:b5:2f:06:e9:0e:8d:bf:52:04: 4f:19:40:b3:a5:1c:77:67:ba:48:20:24:21:9f:ec:5a:a3:84: 83:5f:51:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ywxageTqL3C/zEXbr6gMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjViYWM2MGQ5YjdjOWQwYmMyODQ2NmY4NjcwZmYzOWI1YjJhNmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpju6MaalRGUzlOfwvx7P4mXUU2c yyX/ZFW0HeRx/JUvGpCQwFcRwt1GTB6P5z1uepFhcQMSCQnqgIlu6Q2sa/0/Ykyz DGGw7Mi4R7JTUSXfOdnzu6Ie6sk++I/4WOr26rpuFDYO2QkkmVS/OgsR9qWRy19v C/zpEja7VaOsImqkD1ZiVRNLk+jT2QHYsbemS2FiMDcFN2rE87HdFRl1wJw6hvfB AQ8gl2OopdCGAAQorjNMncpzY2KcMMXf1/QjHO3Cobk2o6Nl1omtiCu9RuAoAo8D EtiNJWCt2Xz+2qbySyMyPRqzNy906NVaCicT2shTImBCW6qNWFIlLr5lcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG9brGDZt8nQvChGb4Zw/zm1sqboMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvYjF1c1lObTN5ZEM4S0VadmhuRF9PYld5cHVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/ASMA0G CSqGSIb3DQEBCwUAA4IBAQCnuLtO5DUEN791FVDQ1mg1YdmkkGpqDpdSwEw+20U8 12am5crmWiLLe7jYfjoD6jkb9m7k3ShkvDUKpHEjoB7Pp/6OVFqJrVUvs9Uw3GDR d1pld4g9/P26T96w+n0U3E6ThyS3KeO/TG1/OCIXBMbWqdrYegyNaPYWmzhoVE47 UphbnygEsl7uC2Nzuawl3T6DNN/65RuiEaK+vMfo72gQ/LIa0/EsMLoO0wpDbKfF suAOPXHT9ontpUts15NBzrWgkvXnMKHclP4fXhZhIv8ZTHdF2lcixouElqgrqrV0 QkW1LwbpDo2/UgRPGUCzpRx3Z7pIICQhn+xao4SDX1GW -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:34 2026 by rpki-client