This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fosmXvXFczJx6sGiPVIaFH6Lu2s.roa File: fosmXvXFczJx6sGiPVIaFH6Lu2s.roa (raw, json) Hash identifier: Hl0Zp7JoTlVJSIBHH14sr8OFmIEr63P6ZgyQdMWq9Q8= Subject key identifier: 7E:8B:26:5E:F5:C5:73:32:71:EA:C1:A2:3D:52:1A:14:7E:8B:BB:6B Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB2188CFFAC1330DE20DD79811DF9A Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fosmXvXFczJx6sGiPVIaFH6Lu2s.roa Signing time: Fri 02 Jan 2026 08:20:22 +0000 ROA not before: Fri 02 Jan 2026 08:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23470 IP address blocks: 151.243.162.0/24 maxlen: 24 151.243.254.0/24 maxlen: 24 151.245.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 00:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:21:88:cf:fa:c1:33:0d:e2:0d:d7:98:11:df:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e8b265ef5c5733271eac1a23d521a147e8bbb6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cf:49:83:b2:93:20:a1:9b:ca:05:a9:25:41: a4:86:e3:18:de:89:bd:ae:16:14:ac:35:5f:2d:11: 0b:22:7b:53:84:e3:50:f5:4c:73:46:34:b5:12:75: 70:ad:f1:3f:7b:34:35:41:36:fe:e1:bf:30:c0:06: 96:39:20:b4:6c:71:c5:d4:0d:48:28:6b:ce:f1:23: c4:fd:77:71:d1:99:bd:d7:af:e1:66:ad:3b:83:40: b5:64:1e:f6:5b:be:1c:78:c9:c0:89:ae:01:d9:32: 89:6e:a9:a9:7a:bf:6e:65:a9:0d:19:4d:11:4e:a2: 34:5d:21:74:29:10:d6:d9:64:76:00:79:1f:98:ef: d4:d9:c7:79:ab:60:72:be:e9:1b:8d:81:ae:09:e8: ce:b9:7c:f0:87:36:c4:f1:cb:4f:2c:9f:c6:df:03: 27:42:2d:a0:65:f7:7e:15:4a:d2:1b:f6:a3:cc:92: eb:82:e1:3a:8a:1e:bb:99:e5:87:15:5e:c7:f8:dc: b8:ed:b0:79:f2:1c:14:14:25:9f:17:53:f3:65:f8: c0:af:33:02:7c:cf:65:9c:cc:48:8b:e9:ff:30:ee: 1b:73:45:fb:63:76:6a:da:0f:05:1b:8e:53:1b:74: c7:d1:c3:d0:03:d2:58:c2:8a:4d:47:5c:01:83:eb: 94:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8B:26:5E:F5:C5:73:32:71:EA:C1:A2:3D:52:1A:14:7E:8B:BB:6B X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fosmXvXFczJx6sGiPVIaFH6Lu2s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.162.0/24 151.243.254.0/24 151.245.32.0/24 Signature Algorithm: sha256WithRSAEncryption 27:2f:45:fc:03:81:65:ba:c8:ed:4a:c1:a4:7e:e0:40:0c:52: d3:03:d1:cb:31:58:d2:a3:03:ca:2a:13:7f:c2:1e:d8:0e:6f: b6:2a:53:14:b6:0d:a4:2b:1d:09:65:9c:4c:98:ce:80:00:be: b6:fb:2c:2a:ad:15:9f:0e:2f:79:80:41:ba:09:8c:13:a4:d1: da:5d:b1:67:c1:85:82:d1:90:dc:a2:49:24:4e:56:76:02:69: cb:52:2c:4f:c3:61:d7:06:05:b2:3d:c7:f8:19:0b:05:ac:d3: ec:94:6d:54:88:4b:72:11:42:9c:a2:d5:f7:c3:a5:7a:d3:21: 9a:db:5b:cb:7e:e7:c3:cb:40:1c:8f:1b:0b:81:ed:ae:8c:a3: 39:03:0f:74:45:62:05:95:53:10:1f:35:08:f9:0c:43:a1:8d: 1d:87:c9:cf:ec:70:76:a1:82:d4:67:6f:48:03:ce:55:77:97: b0:ec:c3:b6:e9:72:80:f2:92:cf:c5:d6:51:c1:02:26:03:20: 84:2e:6b:b8:48:36:2c:ef:52:81:db:d6:5a:fd:11:60:d5:b8: eb:eb:01:7b:ff:c7:fa:a4:d7:c8:69:14:f7:69:40:d4:ce:45: 3a:60:85:ce:1a:2f:bc:fe:79:01:a9:af:94:95:da:30:c1:c9: fc:4c:85:dc -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9yyGIz/rBMw3iDdeYEd+aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZThiMjY1ZWY1YzU3MzMyNzFlYWMxYTIzZDUyMWExNDdlOGJiYjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M9Jg7KTIKGbygWpJUGkhuMY3om9 rhYUrDVfLRELIntThONQ9UxzRjS1EnVwrfE/ezQ1QTb+4b8wwAaWOSC0bHHF1A1I KGvO8SPE/Xdx0Zm916/hZq07g0C1ZB72W74ceMnAia4B2TKJbqmper9uZakNGU0R TqI0XSF0KRDW2WR2AHkfmO/U2cd5q2ByvukbjYGuCejOuXzwhzbE8ctPLJ/G3wMn Qi2gZfd+FUrSG/ajzJLrguE6ih67meWHFV7H+Ny47bB58hwUFCWfF1PzZfjArzMC fM9lnMxIi+n/MO4bc0X7Y3Zq2g8FG45TG3TH0cPQA9JYwopNR1wBg+uU3QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFH6LJl71xXMycerBoj1SGhR+i7trMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvZm9zbVh2WEZjekp4NnNHaVBWSWFGSDZMdTJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/OiAwQA l/P+AwQAl/UgMA0GCSqGSIb3DQEBCwUAA4IBAQAnL0X8A4FlusjtSsGkfuBADFLT A9HLMVjSowPKKhN/wh7YDm+2KlMUtg2kKx0JZZxMmM6AAL62+ywqrRWfDi95gEG6 CYwTpNHaXbFnwYWC0ZDcokkkTlZ2AmnLUixPw2HXBgWyPcf4GQsFrNPslG1UiEty EUKcotX3w6V60yGa21vLfufDy0AcjxsLge2ujKM5Aw90RWIFlVMQHzUI+QxDoY0d h8nP7HB2oYLUZ29IA85Vd5ew7MO26XKA8pLPxdZRwQImAyCELmu4SDYs71KB29Za /RFg1bjr6wF7/8f6pNfIaRT3aUDUzkU6YIXOGi+8/nkBqa+Uldowwcn8TIXc -----END CERTIFICATE-----Generated at Thu Jan 8 09:23:45 2026 by rpki-client