This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/faNx7uKNivyc6CxkYLfZCRyYMnU.roa File: faNx7uKNivyc6CxkYLfZCRyYMnU.roa (raw, json) Hash identifier: vqbRV4B4jNbWhSX1LQIiQ4jxKYamhz+UpCyr6jFG+Qk= Subject key identifier: 7D:A3:71:EE:E2:8D:8A:FC:9C:E8:2C:64:60:B7:D9:09:1C:98:32:75 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCBA6E95F27BA6B8A7E3AAA9946C852 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/faNx7uKNivyc6CxkYLfZCRyYMnU.roa Signing time: Fri 02 Jan 2026 08:20:57 +0000 ROA not before: Fri 02 Jan 2026 08:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 272696 IP address blocks: 151.242.149.0/24 maxlen: 24 151.243.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:a6:e9:5f:27:ba:6b:8a:7e:3a:aa:99:46:c8:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7da371eee28d8afc9ce82c6460b7d9091c983275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:aa:5f:be:ab:40:df:df:31:a9:14:02:7f:d0: 17:ce:07:df:2b:ee:49:0a:4d:82:e2:bd:3d:24:15: 2a:c0:72:4e:79:8d:1c:35:9e:55:b1:b9:51:d4:3d: 5e:cb:e9:a9:34:66:a5:b3:d6:ef:7d:e6:92:97:04: 59:f2:6d:05:f8:1f:3f:c7:d0:07:d4:d3:86:8b:c6: df:42:25:fa:41:6b:d6:c8:e8:60:0f:79:de:33:bd: b0:5b:6b:bf:35:8e:b0:c6:d1:1c:10:56:1b:53:16: cc:3f:b5:28:3e:b5:35:98:a2:a1:0a:4e:db:d7:62: ba:57:cd:71:63:69:f3:8f:91:b2:5e:74:9d:8e:d1: 7c:f7:9b:ca:a3:b1:8c:a8:5c:9f:24:c7:d6:d4:b5: 2f:68:77:48:a0:27:93:72:23:bd:65:0c:16:79:b9: 47:3e:90:a1:59:8a:3a:ba:6c:f3:d2:f9:9f:1d:11: a1:ca:1f:8b:f9:88:e7:6c:93:69:c6:90:d7:63:12: 77:f9:00:4d:99:c1:c4:e7:32:57:be:46:0f:b1:5a: 3a:ed:0b:59:93:55:1c:d1:3f:32:b1:72:53:c2:8c: 94:bc:1a:fd:6d:83:fb:b1:2f:17:f1:9a:05:f5:bc: 87:83:2e:cb:89:34:46:72:9d:a7:9f:00:59:3a:15: 13:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A3:71:EE:E2:8D:8A:FC:9C:E8:2C:64:60:B7:D9:09:1C:98:32:75 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/faNx7uKNivyc6CxkYLfZCRyYMnU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.149.0/24 151.243.46.0/24 Signature Algorithm: sha256WithRSAEncryption b3:4e:5e:9c:a5:73:3d:bd:4c:cf:bd:cf:ff:67:50:72:ab:79: 5b:d6:75:62:61:e4:e9:27:ac:c5:0d:59:1a:c5:2e:d4:29:e5: a3:5f:47:bb:9e:8d:56:2c:20:39:81:de:77:86:95:11:ac:4e: 80:12:72:5a:db:35:94:28:eb:5a:bc:8e:e1:60:f8:ec:91:d6: 46:ca:57:42:88:ed:7b:41:80:25:ac:b9:74:28:4d:7d:bd:70: 83:f9:1d:73:3b:15:46:b3:57:08:b2:68:f7:7a:91:8c:4a:e4: b4:98:a8:d4:25:54:f6:c6:82:8f:92:a8:78:87:22:c3:b9:9f: 6c:10:45:78:0a:cf:42:ee:9f:59:c1:28:89:67:c3:5b:90:00: 4c:95:7d:f0:fc:4e:30:d0:1b:1b:55:1e:64:36:18:0f:21:3e: 54:37:30:f8:f4:70:94:3e:ee:c4:a4:5a:c1:18:3f:99:72:0e: ac:18:27:6d:5f:f8:d3:5e:54:b6:58:c3:45:b0:fb:10:97:07: 22:14:5e:8a:c3:40:ec:19:27:c8:d0:d0:48:3d:11:93:cf:3a: ba:7c:ae:36:15:4d:ad:a1:6c:b2:e7:0b:6f:c3:fd:dd:ff:29: 04:8c:71:c1:8a:de:6d:20:56:50:ae:38:57:09:cb:92:d8:f3: 75:00:41:c1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y6bpXye6a4p+OqqZRshSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGEzNzFlZWUyOGQ4YWZjOWNlODJjNjQ2MGI3ZDkwOTFjOTgzMjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36pfvqtA398xqRQCf9AXzgffK+5J Ck2C4r09JBUqwHJOeY0cNZ5VsblR1D1ey+mpNGals9bvfeaSlwRZ8m0F+B8/x9AH 1NOGi8bfQiX6QWvWyOhgD3neM72wW2u/NY6wxtEcEFYbUxbMP7UoPrU1mKKhCk7b 12K6V81xY2nzj5GyXnSdjtF895vKo7GMqFyfJMfW1LUvaHdIoCeTciO9ZQwWeblH PpChWYo6umzz0vmfHRGhyh+L+YjnbJNpxpDXYxJ3+QBNmcHE5zJXvkYPsVo67QtZ k1Uc0T8ysXJTwoyUvBr9bYP7sS8X8ZoF9byHgy7LiTRGcp2nnwBZOhUTsQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH2jce7ijYr8nOgsZGC32QkcmDJ1MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvZmFOeDd1S05pdnljNkN4a1lMZlpDUnlZTW5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/KVAwQA l/MuMA0GCSqGSIb3DQEBCwUAA4IBAQCzTl6cpXM9vUzPvc//Z1Byq3lb1nViYeTp J6zFDVkaxS7UKeWjX0e7no1WLCA5gd53hpURrE6AEnJa2zWUKOtavI7hYPjskdZG yldCiO17QYAlrLl0KE19vXCD+R1zOxVGs1cIsmj3epGMSuS0mKjUJVT2xoKPkqh4 hyLDuZ9sEEV4Cs9C7p9ZwSiJZ8NbkABMlX3w/E4w0BsbVR5kNhgPIT5UNzD49HCU Pu7EpFrBGD+Zcg6sGCdtX/jTXlS2WMNFsPsQlwciFF6Kw0DsGSfI0NBIPRGTzzq6 fK42FU2toWyy5wtvw/3d/ykEjHHBit5tIFZQrjhXCcuS2PN1AEHB -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:32 2026 by rpki-client