This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fQez8TYiy01yjPp4JKekr47cbZ8.roa File: fQez8TYiy01yjPp4JKekr47cbZ8.roa (raw, json) Hash identifier: W0DX6XTG2BD7Z+YS2HZTRqXo0jYdszEDjl6CvP+uk+E= Subject key identifier: 7D:07:B3:F1:36:22:CB:4D:72:8C:FA:78:24:A7:A4:AF:8E:DC:6D:9F Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB25F6A11780797DA7C806F07444B2 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fQez8TYiy01yjPp4JKekr47cbZ8.roa Signing time: Fri 02 Jan 2026 08:20:24 +0000 ROA not before: Fri 02 Jan 2026 08:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26042 IP address blocks: 151.244.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:25:f6:a1:17:80:79:7d:a7:c8:06:f0:74:44:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d07b3f13622cb4d728cfa7824a7a4af8edc6d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:26:dc:d1:12:6c:25:84:06:b3:b9:cb:a4:ef: 46:16:f8:9b:f0:20:96:98:8f:1e:ab:e7:24:53:88: 43:4c:87:12:cb:dc:05:35:a3:19:0d:de:4e:0e:12: 91:66:3e:1a:56:c9:29:6f:94:00:b4:3f:26:40:5d: 2a:db:66:a2:df:27:f7:5a:2a:35:31:b6:ad:de:ba: 03:1a:97:36:3c:34:0f:b2:c2:d4:e1:22:a9:d1:15: e1:c5:a3:44:2b:28:59:c2:e3:57:3b:3f:95:96:9d: 3d:0c:66:61:2b:6f:6f:1d:e1:df:46:bb:35:d9:c6: 62:99:8f:cb:51:65:a7:7f:12:35:16:69:37:85:e0: ad:98:e7:af:50:f7:7e:2e:02:a6:18:89:db:b8:84: c5:69:8d:c6:3d:61:cc:9f:9c:53:fa:ce:a8:fd:60: 91:3d:4d:78:fb:86:c1:7d:e4:50:f9:55:c4:c7:e0: 42:3e:3f:95:53:b7:d1:be:55:64:2b:b8:bb:66:96: 90:fb:b0:d2:9b:3c:97:d4:4f:63:a2:aa:cd:bf:da: 37:9b:7c:6f:0e:9f:34:d9:70:5a:11:60:a7:10:62: bc:db:7b:79:f0:eb:21:47:cb:59:ad:24:3d:8d:87: 4d:c4:35:5b:ff:1b:66:52:be:1f:a8:fc:c1:f3:e5: e0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:07:B3:F1:36:22:CB:4D:72:8C:FA:78:24:A7:A4:AF:8E:DC:6D:9F X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fQez8TYiy01yjPp4JKekr47cbZ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.231.0/24 Signature Algorithm: sha256WithRSAEncryption b8:9e:84:1d:4a:ab:72:b0:a9:3e:b9:33:c5:c3:35:44:99:01: 70:2d:05:9f:c1:8f:91:fa:31:e0:b6:12:fa:a0:66:5f:59:70: be:ae:e3:a6:46:7b:58:29:2c:6d:7f:7a:f5:d7:b9:94:7a:20: 82:80:c7:a4:7b:ee:e8:d4:88:4b:84:13:8c:65:7e:96:33:5d: 9b:15:60:af:4a:a8:3b:f3:0a:05:b9:b1:54:11:ff:4d:f0:30: 58:d8:5e:82:a1:28:14:a6:c5:3d:a2:0b:db:62:d4:56:6a:76: ec:fe:bb:cd:5f:d6:fd:a3:7f:6d:d8:8b:6d:36:cc:4d:fe:a2: 9f:11:f4:a3:a2:63:7c:bd:74:38:a4:94:60:0e:ed:50:f0:db: f2:38:8e:be:00:b6:39:f0:82:a1:ac:de:0f:ba:a7:72:5b:9c: 06:b0:8b:28:47:95:59:b1:2a:24:fd:ec:0a:6e:ae:6c:de:c2: 74:5f:85:22:c6:41:f3:19:ef:d2:62:8a:44:9c:1c:db:70:c5: fd:cb:47:5f:b6:8d:ee:e9:11:b3:47:8a:0f:e8:a7:b2:70:57: 5f:d3:58:f1:5a:12:01:0f:96:47:fe:1c:18:40:ad:da:62:89: 9c:87:a5:09:cc:bf:3e:1a:3a:7b:5f:78:ed:88:70:32:bd:3d: 9c:08:7b:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yyX2oReAeX2nyAbwdESyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDA3YjNmMTM2MjJjYjRkNzI4Y2ZhNzgyNGE3YTRhZjhlZGM2ZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApibc0RJsJYQGs7nLpO9GFvib8CCW mI8eq+ckU4hDTIcSy9wFNaMZDd5ODhKRZj4aVskpb5QAtD8mQF0q22ai3yf3Wio1 Mbat3roDGpc2PDQPssLU4SKp0RXhxaNEKyhZwuNXOz+Vlp09DGZhK29vHeHfRrs1 2cZimY/LUWWnfxI1Fmk3heCtmOevUPd+LgKmGInbuITFaY3GPWHMn5xT+s6o/WCR PU14+4bBfeRQ+VXEx+BCPj+VU7fRvlVkK7i7ZpaQ+7DSmzyX1E9joqrNv9o3m3xv Dp802XBaEWCnEGK823t58OshR8tZrSQ9jYdNxDVb/xtmUr4fqPzB8+XgYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH0Hs/E2IstNcoz6eCSnpK+O3G2fMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvZlFlejhUWWl5MDF5alBwNEpLZWtyNDdjYlo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/TnMA0G CSqGSIb3DQEBCwUAA4IBAQC4noQdSqtysKk+uTPFwzVEmQFwLQWfwY+R+jHgthL6 oGZfWXC+ruOmRntYKSxtf3r117mUeiCCgMeke+7o1IhLhBOMZX6WM12bFWCvSqg7 8woFubFUEf9N8DBY2F6CoSgUpsU9ogvbYtRWanbs/rvNX9b9o39t2IttNsxN/qKf EfSjomN8vXQ4pJRgDu1Q8NvyOI6+ALY58IKhrN4PuqdyW5wGsIsoR5VZsSok/ewK bq5s3sJ0X4UixkHzGe/SYopEnBzbcMX9y0dfto3u6RGzR4oP6KeycFdf01jxWhIB D5ZH/hwYQK3aYomch6UJzL8+Gjp7X3jtiHAyvT2cCHsk -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:03 2026 by rpki-client