This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bb5ylbB9wIelfZ13T2FN5xX_H1s.roa File: bb5ylbB9wIelfZ13T2FN5xX_H1s.roa (raw, json) Hash identifier: 2OaePRwxs61ayJbPsN9Xcd7P1GHObAHwd6RxJ20uA7w= Subject key identifier: 6D:BE:72:95:B0:7D:C0:87:A5:7D:9D:77:4F:61:4D:E7:15:FF:1F:5B Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB68B9C481EE87F4CF1FD75913874B Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bb5ylbB9wIelfZ13T2FN5xX_H1s.roa Signing time: Fri 02 Jan 2026 08:20:41 +0000 ROA not before: Fri 02 Jan 2026 08:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204613 IP address blocks: 151.247.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:68:b9:c4:81:ee:87:f4:cf:1f:d7:59:13:87:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6dbe7295b07dc087a57d9d774f614de715ff1f5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:d2:2c:c1:bd:ed:24:73:dc:cf:d8:4b:0d:34: 1f:ca:d0:0a:bb:f4:14:18:d0:72:bf:32:db:bb:8b: a6:8f:47:16:48:b5:49:af:29:4e:ca:78:d0:5b:36: d7:05:26:46:2a:86:3d:1f:61:df:a9:e9:e3:df:9a: 1b:a8:35:ca:52:c8:a1:ec:aa:2d:6d:5f:04:40:b8: a2:db:4c:eb:1a:f7:c7:39:21:e8:24:1b:84:fb:2e: 1a:f3:81:11:cb:a2:c2:ff:36:44:28:08:aa:68:9d: 96:f7:4a:3d:0d:9f:95:8f:22:65:ee:c6:5a:9c:2e: 15:fa:6f:b5:c6:e4:f0:23:6f:e4:0d:fc:47:25:d7: 84:42:16:b6:c7:ce:ca:53:e6:9b:9b:00:1a:17:f1: b0:2d:92:de:83:64:7b:60:ef:83:2a:f9:8b:50:ff: f8:bb:a9:94:3f:96:7d:dd:2f:3c:9f:3d:9f:92:60: da:e9:d1:33:b6:56:66:c2:6f:6d:43:da:4e:39:4e: af:8f:36:b0:c0:4a:e3:ff:4d:85:36:d7:59:69:7a: 84:f8:35:15:4a:1b:8e:b0:9f:f3:fd:ad:90:1f:83: 49:2d:de:0d:73:5c:b7:97:81:bf:91:90:48:ea:96: 06:6e:12:8c:aa:2c:66:3d:ae:d3:84:19:8c:ec:a1: a1:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BE:72:95:B0:7D:C0:87:A5:7D:9D:77:4F:61:4D:E7:15:FF:1F:5B X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bb5ylbB9wIelfZ13T2FN5xX_H1s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.247.191.0/24 Signature Algorithm: sha256WithRSAEncryption 37:f6:96:15:1a:79:b3:f9:88:44:7e:44:37:6f:af:ec:02:c0: 7a:ea:68:b1:d6:e1:01:0a:fb:4f:2d:81:4b:77:ab:ee:cf:81: b8:81:26:84:34:d5:4c:82:d8:e8:fa:ea:6b:ac:4a:ba:cf:ce: ce:11:27:61:b7:d0:bb:0e:92:b5:81:d4:18:5f:e3:af:6d:f7: 1b:2e:3d:c9:b5:b4:78:b1:fe:6d:a4:48:9a:3b:c4:d6:50:a5: 6f:38:72:4c:41:c2:60:f1:67:3f:05:39:8a:85:99:79:8b:b0: a6:a4:5d:e4:03:25:23:ef:b2:cd:44:cd:ab:f6:35:48:0d:e5: 4a:de:14:b6:5a:42:ff:ba:5c:e5:d8:9b:22:c3:7f:4a:7f:e6: f6:9a:82:14:2d:95:6b:c8:71:05:98:3e:69:9c:42:05:fd:e0: 88:40:75:b2:20:bd:03:da:79:40:64:a5:30:93:f9:4c:13:ad: 54:2c:24:91:b1:9f:ae:65:c1:58:ad:73:aa:f7:06:e3:e9:59: 96:b9:83:42:18:bb:a0:ba:8b:5c:91:59:e1:71:1d:2a:d3:c7: 58:54:75:72:1b:39:9b:11:f4:8f:ca:7a:42:13:5f:74:ed:12: bc:e1:b2:bb:f4:31:46:a1:a4:1f:0d:01:44:36:bc:46:67:ad: a8:7f:8f:4f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y2i5xIHuh/TPH9dZE4dLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZGJlNzI5NWIwN2RjMDg3YTU3ZDlkNzc0ZjYxNGRlNzE1ZmYxZjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA59Iswb3tJHPcz9hLDTQfytAKu/QU GNByvzLbu4umj0cWSLVJrylOynjQWzbXBSZGKoY9H2Hfqenj35obqDXKUsih7Kot bV8EQLii20zrGvfHOSHoJBuE+y4a84ERy6LC/zZEKAiqaJ2W90o9DZ+VjyJl7sZa nC4V+m+1xuTwI2/kDfxHJdeEQha2x87KU+abmwAaF/GwLZLeg2R7YO+DKvmLUP/4 u6mUP5Z93S88nz2fkmDa6dEztlZmwm9tQ9pOOU6vjzawwErj/02FNtdZaXqE+DUV ShuOsJ/z/a2QH4NJLd4Nc1y3l4G/kZBI6pYGbhKMqixmPa7ThBmM7KGhMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG2+cpWwfcCHpX2dd09hTecV/x9bMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvYmI1eWxiQjl3SWVsZloxM1QyRk41eFhfSDFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/e/MA0G CSqGSIb3DQEBCwUAA4IBAQA39pYVGnmz+YhEfkQ3b6/sAsB66mix1uEBCvtPLYFL d6vuz4G4gSaENNVMgtjo+uprrEq6z87OESdht9C7DpK1gdQYX+OvbfcbLj3JtbR4 sf5tpEiaO8TWUKVvOHJMQcJg8Wc/BTmKhZl5i7CmpF3kAyUj77LNRM2r9jVIDeVK 3hS2WkL/ulzl2Jsiw39Kf+b2moIULZVryHEFmD5pnEIF/eCIQHWyIL0D2nlAZKUw k/lME61ULCSRsZ+uZcFYrXOq9wbj6VmWuYNCGLuguotckVnhcR0q08dYVHVyGzmb EfSPynpCE1907RK84bK79DFGoaQfDQFENrxGZ62of49P -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:36 2026 by rpki-client