This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cKoOGpXhw5wDhDdt_T8iH80vzkQ.roa File: cKoOGpXhw5wDhDdt_T8iH80vzkQ.roa (raw, json) Hash identifier: 6MdDCDrSUQnuyvZ7e3CmTd2ei0MC1VqgbNIuOxasjDk= Subject key identifier: 70:AA:0E:1A:95:E1:C3:9C:03:84:37:6D:FD:3F:22:1F:CD:2F:CE:44 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB4CE21F6307FAC6D8EC138A5135B2 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cKoOGpXhw5wDhDdt_T8iH80vzkQ.roa Signing time: Fri 02 Jan 2026 08:20:33 +0000 ROA not before: Fri 02 Jan 2026 08:20:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 135682 IP address blocks: 151.242.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4c:e2:1f:63:07:fa:c6:d8:ec:13:8a:51:35:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70aa0e1a95e1c39c0384376dfd3f221fcd2fce44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:12:13:c4:6a:54:76:1c:2a:e9:eb:95:e2:79: 67:5b:5c:55:a4:b9:1e:c9:38:de:28:a7:fd:bf:1d: d5:a4:89:ec:97:d1:5b:2d:51:54:b9:ce:9a:97:4c: 61:7d:5f:7d:f5:96:45:3f:2c:94:00:fb:99:97:a3: 35:48:4e:92:7d:6b:52:48:51:85:0e:08:93:89:1d: 38:13:63:6b:a1:b7:c7:74:e3:aa:26:f4:ca:7b:6b: b2:e9:71:bf:52:d9:0f:3f:a5:ec:a4:6f:a7:d5:e5: 4b:62:a3:d9:37:f0:36:4f:b9:79:87:ef:21:65:9c: 58:75:d9:67:6c:8a:18:6c:dc:e5:e6:0b:5a:8c:a0: 21:60:87:4d:e0:c0:be:a8:c0:bb:14:fc:26:c4:d3: 76:22:55:1b:24:bd:3c:09:66:db:6a:33:24:d7:79: 77:1a:50:da:c5:e5:52:30:b7:81:39:90:e1:2d:5f: 47:7b:fd:ec:fe:3d:2b:e3:80:fa:83:81:cc:6c:e3: 25:7e:ff:94:75:b1:9c:c4:82:49:ff:c5:88:26:d5: 7c:68:43:23:cb:82:0c:4a:ee:f5:bc:6f:b4:7e:fe: cf:65:f3:1d:fe:c6:56:a8:fb:97:08:a4:05:ab:83: 22:d7:00:3a:ae:d6:72:b7:26:4d:88:e0:cb:40:68: 72:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:AA:0E:1A:95:E1:C3:9C:03:84:37:6D:FD:3F:22:1F:CD:2F:CE:44 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cKoOGpXhw5wDhDdt_T8iH80vzkQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.37.0/24 Signature Algorithm: sha256WithRSAEncryption 58:c0:df:05:c9:e8:b0:55:4e:4e:33:fe:d4:65:78:6e:8e:7e: d0:0b:76:08:a9:78:11:95:66:16:c6:4c:c6:23:9f:17:cf:a5: 85:94:5e:f0:6f:06:eb:49:c4:14:d9:af:56:05:d9:02:d0:a5: d1:1f:bd:20:78:49:e9:a3:b7:2c:1d:b2:61:67:32:e3:e3:54: 94:6c:80:c0:d7:9d:b2:32:38:f8:d2:64:32:ee:dc:9e:c8:3e: 68:a4:b8:c2:eb:bd:69:e0:6c:8e:4a:d2:61:b7:a6:88:e7:92: a0:d8:61:cc:0e:9a:00:de:4b:79:d2:6e:b0:74:75:b7:2e:38: 7c:ee:4c:63:a9:e5:10:b5:2b:87:76:3e:6d:9f:8a:fa:4a:6e: 31:f8:e9:8a:96:71:7d:ce:02:02:f0:22:19:a2:2b:6c:45:3a: d0:6f:71:c6:76:85:c5:b5:86:e7:f1:c5:a0:dd:2d:61:73:d3: 0b:ab:5e:8c:23:7c:e3:b7:1a:e0:f0:23:3b:70:69:14:b6:8a: d1:03:b8:ed:b6:7a:e1:7a:d7:d0:93:08:b4:fb:67:7c:72:01: 91:3b:2c:59:f9:ea:d4:cd:a2:15:f4:27:1a:9b:34:56:9e:1f: f1:1d:b9:2f:26:1e:2e:8a:c7:27:28:13:58:ca:cd:f1:2a:58: fa:80:48:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y0ziH2MH+sbY7BOKUTWyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGFhMGUxYTk1ZTFjMzljMDM4NDM3NmRmZDNmMjIxZmNkMmZjZTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xITxGpUdhwq6euV4nlnW1xVpLke yTjeKKf9vx3VpInsl9FbLVFUuc6al0xhfV999ZZFPyyUAPuZl6M1SE6SfWtSSFGF DgiTiR04E2NrobfHdOOqJvTKe2uy6XG/UtkPP6XspG+n1eVLYqPZN/A2T7l5h+8h ZZxYddlnbIoYbNzl5gtajKAhYIdN4MC+qMC7FPwmxNN2IlUbJL08CWbbajMk13l3 GlDaxeVSMLeBOZDhLV9He/3s/j0r44D6g4HMbOMlfv+UdbGcxIJJ/8WIJtV8aEMj y4IMSu71vG+0fv7PZfMd/sZWqPuXCKQFq4Mi1wA6rtZytyZNiODLQGhyVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHCqDhqV4cOcA4Q3bf0/Ih/NL85EMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvY0tvT0dwWGh3NXdEaERkdF9UOGlIODB2emtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/IlMA0G CSqGSIb3DQEBCwUAA4IBAQBYwN8FyeiwVU5OM/7UZXhujn7QC3YIqXgRlWYWxkzG I58Xz6WFlF7wbwbrScQU2a9WBdkC0KXRH70geEnpo7csHbJhZzLj41SUbIDA152y Mjj40mQy7tyeyD5opLjC671p4GyOStJht6aI55Kg2GHMDpoA3kt50m6wdHW3Ljh8 7kxjqeUQtSuHdj5tn4r6Sm4x+OmKlnF9zgIC8CIZoitsRTrQb3HGdoXFtYbn8cWg 3S1hc9MLq16MI3zjtxrg8CM7cGkUtorRA7jttnrhetfQkwi0+2d8cgGROyxZ+erU zaIV9CcamzRWnh/xHbkvJh4uiscnKBNYys3xKlj6gEjr -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:04 2026 by rpki-client