This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cVmvEaAOIc8APzSj-CNQwZQTGvs.roa File: cVmvEaAOIc8APzSj-CNQwZQTGvs.roa (raw, json) Hash identifier: dBk8fkwlLXCP7UJU+0xjcDlOaHwdz2N2vBTqwbqXlZ0= Subject key identifier: 71:59:AF:11:A0:0E:21:CF:00:3F:34:A3:F8:23:50:C1:94:13:1A:FB Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB4D2A1BEAC529C30C355EDA446350 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cVmvEaAOIc8APzSj-CNQwZQTGvs.roa Signing time: Fri 02 Jan 2026 08:20:34 +0000 ROA not before: Fri 02 Jan 2026 08:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136501 IP address blocks: 151.242.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4d:2a:1b:ea:c5:29:c3:0c:35:5e:da:44:63:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7159af11a00e21cf003f34a3f82350c194131afb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:de:8f:c5:fe:7c:ca:3c:b7:49:cd:ea:43:c5: 93:b4:95:98:ad:8d:5f:71:96:cd:da:63:70:de:e0: bd:57:6c:b3:57:e8:11:cf:87:ff:2d:a1:39:c9:5e: 53:7e:7e:09:13:80:ec:27:e9:5c:d5:8a:56:3f:eb: 29:b4:f8:9d:7b:3f:e3:fd:30:5f:af:39:bd:53:bd: b9:ad:26:dc:aa:8b:14:0e:e1:09:9b:0c:68:3e:3e: 2b:0b:de:8c:ac:06:fd:b7:ac:1a:52:85:2a:48:b5: 02:c5:82:9f:df:29:e8:09:40:52:9a:9a:28:7a:59: ea:58:a9:32:0f:f8:b2:77:32:72:9f:42:d0:f0:f6: e3:56:8e:3c:f0:0a:e7:01:91:bb:23:1a:c9:ac:78: d7:9c:2d:8f:a8:e7:60:7b:5d:8e:39:5e:cd:75:a7: ed:c4:f7:c0:66:0c:40:69:70:6b:06:fd:44:32:88: 9d:c8:d0:ef:9a:6b:e3:2d:ee:0b:4e:4e:f8:21:a6: 5e:cb:ad:7e:0c:b8:cd:3f:c2:78:65:cd:12:0e:39: 5d:b1:0d:4b:df:fc:7a:16:31:63:fd:91:53:28:20: ff:5f:c7:03:5d:54:b4:89:7a:c3:3a:ba:ef:d4:e9: 6d:db:8d:56:9a:1e:9b:37:f8:0b:71:ac:53:1d:32: 84:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:59:AF:11:A0:0E:21:CF:00:3F:34:A3:F8:23:50:C1:94:13:1A:FB X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cVmvEaAOIc8APzSj-CNQwZQTGvs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.180.0/22 Signature Algorithm: sha256WithRSAEncryption 8d:84:e6:c4:4f:3c:45:72:9f:c9:c5:16:a4:c9:93:3a:31:b3: b2:50:87:db:9e:ed:26:f1:df:0a:c4:f4:24:cd:36:9d:b1:2b: c1:08:0b:fa:7e:3c:64:55:57:42:09:7f:8b:9a:e0:59:d1:61: 7b:12:9f:c3:61:fd:35:3c:27:c4:c9:cc:14:82:77:97:bc:3f: 50:f5:78:c9:10:6d:7f:08:b1:2e:ed:85:b7:e9:dc:41:09:b1: 5b:f1:81:55:f8:8d:64:a2:d9:db:8e:a4:a7:8f:e5:e9:e7:9e: 4a:6a:fb:f0:bc:ed:2c:40:a8:80:0d:4f:73:42:ff:aa:f8:be: 85:4e:3f:35:2e:74:a2:ad:9d:70:d6:9e:93:21:e0:a6:c7:2f: cf:51:3f:8e:77:1f:e3:07:df:7b:a2:92:ce:08:a0:d3:18:b2: 9e:e6:a5:96:1a:2d:1c:8f:b4:73:8d:55:25:4e:b8:88:3b:c6: 8b:db:4f:e3:22:0b:81:d6:b8:b2:ac:0c:c6:bf:88:69:a4:c2: 37:bf:85:19:73:5e:13:25:6b:3a:eb:74:7f:1c:6d:81:9f:6d: 2f:1a:04:06:dd:56:6d:f9:45:01:66:ba:d0:98:37:7e:c5:80: 99:a5:ef:67:03:13:a5:36:38:a0:9d:17:f0:c4:0f:7d:cf:f7: 3b:85:84:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y00qG+rFKcMMNV7aRGNQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTU5YWYxMWEwMGUyMWNmMDAzZjM0YTNmODIzNTBjMTk0MTMxYWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod6Pxf58yjy3Sc3qQ8WTtJWYrY1f cZbN2mNw3uC9V2yzV+gRz4f/LaE5yV5Tfn4JE4DsJ+lc1YpWP+sptPidez/j/TBf rzm9U725rSbcqosUDuEJmwxoPj4rC96MrAb9t6waUoUqSLUCxYKf3ynoCUBSmpoo elnqWKkyD/iydzJyn0LQ8PbjVo488ArnAZG7IxrJrHjXnC2PqOdge12OOV7Ndaft xPfAZgxAaXBrBv1EMoidyNDvmmvjLe4LTk74IaZey61+DLjNP8J4Zc0SDjldsQ1L 3/x6FjFj/ZFTKCD/X8cDXVS0iXrDOrrv1Olt241Wmh6bN/gLcaxTHTKEJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHFZrxGgDiHPAD80o/gjUMGUExr7MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvY1ZtdkVhQU9JYzhBUHpTai1DTlF3WlFUR3ZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl/K0MA0G CSqGSIb3DQEBCwUAA4IBAQCNhObETzxFcp/JxRakyZM6MbOyUIfbnu0m8d8KxPQk zTadsSvBCAv6fjxkVVdCCX+LmuBZ0WF7Ep/DYf01PCfEycwUgneXvD9Q9XjJEG1/ CLEu7YW36dxBCbFb8YFV+I1kotnbjqSnj+Xp555KavvwvO0sQKiADU9zQv+q+L6F Tj81LnSirZ1w1p6TIeCmxy/PUT+Odx/jB997opLOCKDTGLKe5qWWGi0cj7RzjVUl TriIO8aL20/jIguB1riyrAzGv4hppMI3v4UZc14TJWs663R/HG2Bn20vGgQG3VZt +UUBZrrQmDd+xYCZpe9nAxOlNjignRfwxA99z/c7hYRQ -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:40 2026 by rpki-client