This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eIQ00zZ1VFWIFB_WRCK6NMtzh4o.roa File: eIQ00zZ1VFWIFB_WRCK6NMtzh4o.roa (raw, json) Hash identifier: eaeYBvXwab740lT1D8M24m9mdfQZOUvcGKxxE2uIK9g= Subject key identifier: 78:84:34:D3:36:75:54:55:88:14:1F:D6:44:22:BA:34:CB:73:87:8A Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB357E71684AAAC7C7CFF2AD812CA9 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eIQ00zZ1VFWIFB_WRCK6NMtzh4o.roa Signing time: Fri 02 Jan 2026 08:20:28 +0000 ROA not before: Fri 02 Jan 2026 08:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49678 IP address blocks: 151.243.82.0/24 maxlen: 24 151.243.84.0/24 maxlen: 24 151.243.86.0/24 maxlen: 24 151.243.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:35:7e:71:68:4a:aa:c7:c7:cf:f2:ad:81:2c:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=788434d33675545588141fd64422ba34cb73878a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:13:85:01:bb:5d:0d:9d:62:b3:8c:4a:61:08: 49:71:86:c4:47:99:a7:73:a6:e5:da:7e:78:ef:45: f3:1c:83:02:7e:1c:12:49:e8:89:e8:1b:a8:e6:9b: 2b:4f:6e:ff:43:df:1c:97:92:05:5d:3a:35:22:99: 09:ac:52:ab:99:95:bd:3b:50:7f:6d:27:e6:bd:d9: 5f:d1:c8:a8:75:8d:87:39:83:a4:68:65:e3:f8:c3: ce:43:fc:39:7e:55:8b:0a:9f:71:42:ff:c3:c3:09: 84:c9:18:84:47:eb:cd:80:a2:0e:56:8c:e4:11:e6: aa:5a:02:bb:ba:48:90:c2:5e:90:b8:a3:37:ef:d0: d0:eb:1b:fb:24:73:1d:af:e9:6d:10:6e:38:97:14: 84:31:0b:54:64:e0:24:0c:9f:f0:28:6c:17:28:59: 7a:cc:c9:7f:af:fc:82:87:3f:7c:77:92:b4:46:da: c0:db:b2:84:54:39:5f:3d:39:01:8e:a4:dc:f0:35: 54:9f:e0:ec:03:1e:02:ca:9a:16:23:9a:d4:b0:ab: 17:8a:e5:16:9c:2f:a3:dc:88:71:1a:ab:2b:39:c3: ea:f7:34:13:cb:44:9d:c6:e1:24:a3:7c:49:e6:bb: 04:bf:41:e6:b5:b8:e6:d5:d3:61:b5:ba:ab:1e:7b: 6d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:84:34:D3:36:75:54:55:88:14:1F:D6:44:22:BA:34:CB:73:87:8A X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eIQ00zZ1VFWIFB_WRCK6NMtzh4o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.82.0/24 151.243.84.0/24 151.243.86.0/24 151.243.118.0/24 Signature Algorithm: sha256WithRSAEncryption 48:f4:e7:f7:d1:64:f2:ac:a7:58:e7:b7:bc:62:48:aa:19:a1: 18:a2:cc:f1:12:ce:60:d8:f1:e4:b4:20:17:93:46:a8:e9:9a: f4:20:1d:d6:60:02:96:9b:7c:40:d2:60:45:7b:a9:4d:0c:35: 73:54:2d:fe:07:55:1a:d6:34:66:0b:24:a1:0e:a6:0f:7b:df: 1e:8f:eb:95:95:ac:1c:ca:e9:87:33:b7:34:7a:e3:cc:9c:c0: 3e:ae:93:61:49:2b:64:d2:69:5d:4f:c4:ee:91:3f:32:6f:47: 74:1e:bf:ff:8b:9c:2d:29:f3:6a:a4:d5:67:7c:ae:89:61:9c: 55:55:e7:a0:bb:27:f7:a1:76:ae:ca:81:6b:77:8d:3d:6f:ac: ab:f7:16:21:3d:a6:b7:75:0b:d9:68:84:44:1a:42:53:d2:8b: bf:3b:1d:51:ab:39:c1:f9:fc:e1:cf:15:98:df:cd:af:7c:6d: f3:63:d0:f6:c7:9e:16:e0:6c:0e:8b:4d:5b:34:5a:00:84:aa: 8b:78:60:52:bc:23:a6:01:ea:80:4d:3f:ae:4a:c8:8b:3e:6d: 68:4c:b1:01:32:c9:2f:5b:88:60:8e:a8:e4:6f:f7:93:d9:fb: 90:64:7c:ac:2e:07:54:23:d9:3f:47:c2:d3:91:17:dc:f6:e2: 0e:85:cd:85 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9yzV+cWhKqsfHz/KtgSypMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODg0MzRkMzM2NzU1NDU1ODgxNDFmZDY0NDIyYmEzNGNiNzM4NzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhOFAbtdDZ1is4xKYQhJcYbER5mn c6bl2n5470XzHIMCfhwSSeiJ6Buo5psrT27/Q98cl5IFXTo1IpkJrFKrmZW9O1B/ bSfmvdlf0ciodY2HOYOkaGXj+MPOQ/w5flWLCp9xQv/DwwmEyRiER+vNgKIOVozk EeaqWgK7ukiQwl6QuKM379DQ6xv7JHMdr+ltEG44lxSEMQtUZOAkDJ/wKGwXKFl6 zMl/r/yChz98d5K0RtrA27KEVDlfPTkBjqTc8DVUn+DsAx4CypoWI5rUsKsXiuUW nC+j3IhxGqsrOcPq9zQTy0SdxuEko3xJ5rsEv0Hmtbjm1dNhtbqrHnttXwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHiENNM2dVRViBQf1kQiujTLc4eKMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvZUlRMDB6WjFWRldJRkJfV1JDSzZOTXR6aDRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/NSAwQA l/NUAwQAl/NWAwQAl/N2MA0GCSqGSIb3DQEBCwUAA4IBAQBI9Of30WTyrKdY57e8 YkiqGaEYoszxEs5g2PHktCAXk0ao6Zr0IB3WYAKWm3xA0mBFe6lNDDVzVC3+B1Ua 1jRmCyShDqYPe98ej+uVlawcyumHM7c0euPMnMA+rpNhSStk0mldT8TukT8yb0d0 Hr//i5wtKfNqpNVnfK6JYZxVVeeguyf3oXauyoFrd409b6yr9xYhPaa3dQvZaIRE GkJT0ou/Ox1RqznB+fzhzxWY382vfG3zY9D2x54W4GwOi01bNFoAhKqLeGBSvCOm AeqATT+uSsiLPm1oTLEBMskvW4hgjqjkb/eT2fuQZHysLgdUI9k/R8LTkRfc9uIO hc2F -----END CERTIFICATE-----Generated at Sun Jan 18 06:28:45 2026 by rpki-client