This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jOYwuGXQJsXJYPY21d9yRSdQn2U.roa File: jOYwuGXQJsXJYPY21d9yRSdQn2U.roa (raw, json) Hash identifier: iNW66puC48g64ui8Cl6y002uwhKii6ycVinowHofXic= Subject key identifier: 8C:E6:30:B8:65:D0:26:C5:C9:60:F6:36:D5:DF:72:45:27:50:9F:65 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB6FA4662BF5BF994E3D82E4FBD4D5 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jOYwuGXQJsXJYPY21d9yRSdQn2U.roa Signing time: Fri 02 Jan 2026 08:20:42 +0000 ROA not before: Fri 02 Jan 2026 08:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206453 IP address blocks: 151.244.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:6f:a4:66:2b:f5:bf:99:4e:3d:82:e4:fb:d4:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ce630b865d026c5c960f636d5df724527509f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cd:82:bc:40:82:57:6c:42:0c:c0:e9:ec:66: 47:e7:60:7d:b0:bd:8c:60:19:4d:d8:d4:16:81:ae: b6:c5:8d:91:f0:d1:af:92:5a:4f:59:b2:51:6e:50: 8c:3f:63:5f:b8:e6:f3:77:a3:84:b1:56:29:09:63: cf:26:87:4d:ae:4f:8d:0f:5d:2a:93:4b:cf:e8:37: 24:4f:66:a7:40:27:1e:5e:60:85:b5:82:f3:9f:cc: ab:cd:7b:a9:27:81:f2:ce:17:63:8e:50:42:33:3b: 96:49:e3:32:94:58:1a:90:23:08:8d:45:d2:8a:3a: ef:5b:a5:54:bc:c5:03:53:99:89:40:8f:15:23:26: cb:4a:14:e6:87:83:b6:7a:47:19:30:c7:f2:4f:03: 25:27:10:69:58:81:7b:a3:cd:11:96:a7:82:58:4b: 0f:e0:60:87:c8:9f:f0:5e:36:e3:d8:cc:d8:23:1c: f6:21:6f:92:73:5d:09:d8:ef:60:27:f3:90:4c:7e: ec:0e:1e:f3:f2:b6:a9:5a:26:76:1d:3e:f2:d3:ac: 75:c7:10:44:28:1f:e0:ad:5b:d7:3f:2d:ba:09:8a: 50:bb:c5:6e:1d:d9:23:07:af:1a:bb:8a:3d:4b:99: 5d:1c:5a:19:4d:21:9f:86:93:44:63:02:a4:ff:39: e6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E6:30:B8:65:D0:26:C5:C9:60:F6:36:D5:DF:72:45:27:50:9F:65 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jOYwuGXQJsXJYPY21d9yRSdQn2U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.189.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:bb:28:f0:d4:fc:c5:47:76:1b:f9:6b:a1:83:79:20:43:f5: 3d:ab:7d:49:0f:2b:35:04:68:5a:e2:8b:cf:1d:36:ab:cc:35: e1:4e:de:7e:55:95:fa:c5:0a:bf:8b:4e:ad:00:bd:73:4c:22: ae:b3:f1:19:4f:75:83:60:a3:84:d8:9a:bc:d2:d4:6f:51:9e: 93:e5:ed:f3:00:6e:56:36:ac:d6:30:f5:09:f4:62:ff:3e:95: 9b:91:e9:1d:40:49:9f:77:7c:b5:a8:a2:cb:de:fb:01:df:91: 0f:3d:d0:93:ae:fc:a9:ba:ff:9a:fe:95:f5:41:a3:86:9a:49: ba:86:9f:59:6f:d3:a0:15:59:eb:e5:0f:25:9a:e0:4e:b5:60: cc:f2:a3:db:e5:bd:6d:15:30:6d:c3:e1:5c:da:6d:e9:c5:bd: 5a:8f:a2:38:43:c6:4d:1b:fc:65:51:53:a9:b2:d8:6f:dc:54: 8b:82:9f:74:4c:9a:02:f7:a4:8f:49:d6:80:cb:62:41:b8:b0: 87:3c:39:07:98:6e:49:61:0a:67:f6:9c:09:d5:26:33:c0:fa: 7f:18:e3:1e:83:0a:93:b7:8f:1b:67:ff:39:63:6d:f2:4d:79: b7:ca:be:7a:ac:ba:61:e4:6e:f5:8c:d4:f6:f9:3f:6b:66:b1: 83:06:1e:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y2+kZiv1v5lOPYLk+9TVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2U2MzBiODY1ZDAyNmM1Yzk2MGY2MzZkNWRmNzI0NTI3NTA5ZjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc2CvECCV2xCDMDp7GZH52B9sL2M YBlN2NQWga62xY2R8NGvklpPWbJRblCMP2NfuObzd6OEsVYpCWPPJodNrk+ND10q k0vP6DckT2anQCceXmCFtYLzn8yrzXupJ4HyzhdjjlBCMzuWSeMylFgakCMIjUXS ijrvW6VUvMUDU5mJQI8VIybLShTmh4O2ekcZMMfyTwMlJxBpWIF7o80RlqeCWEsP 4GCHyJ/wXjbj2MzYIxz2IW+Sc10J2O9gJ/OQTH7sDh7z8rapWiZ2HT7y06x1xxBE KB/grVvXPy26CYpQu8VuHdkjB68au4o9S5ldHFoZTSGfhpNEYwKk/znmpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIzmMLhl0CbFyWD2NtXfckUnUJ9lMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvak9Zd3VHWFFKc1hKWVBZMjFkOXlSU2RRbjJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/S9MA0G CSqGSIb3DQEBCwUAA4IBAQBuuyjw1PzFR3Yb+Wuhg3kgQ/U9q31JDys1BGha4ovP HTarzDXhTt5+VZX6xQq/i06tAL1zTCKus/EZT3WDYKOE2Jq80tRvUZ6T5e3zAG5W NqzWMPUJ9GL/PpWbkekdQEmfd3y1qKLL3vsB35EPPdCTrvypuv+a/pX1QaOGmkm6 hp9Zb9OgFVnr5Q8lmuBOtWDM8qPb5b1tFTBtw+Fc2m3pxb1aj6I4Q8ZNG/xlUVOp sthv3FSLgp90TJoC96SPSdaAy2JBuLCHPDkHmG5JYQpn9pwJ1SYzwPp/GOMegwqT t48bZ/85Y23yTXm3yr56rLph5G71jNT2+T9rZrGDBh6s -----END CERTIFICATE-----Generated at Sun Jan 18 06:28:52 2026 by rpki-client