This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/k5Ylb_CW5_GEQxmew6Y7KoOeiKk.roa File: k5Ylb_CW5_GEQxmew6Y7KoOeiKk.roa (raw, json) Hash identifier: GbmmD7Ktzkcc0JRHLO2zM2+BSTkYqLfwo+pF6y4a710= Subject key identifier: 93:96:25:6F:F0:96:E7:F1:84:43:19:9E:C3:A6:3B:2A:83:9E:88:A9 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BFAFC36ADD122CFE5FD7B406878DAABC5 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/k5Ylb_CW5_GEQxmew6Y7KoOeiKk.roa Signing time: Mon 26 Jan 2026 15:46:31 +0000 ROA not before: Mon 26 Jan 2026 15:46:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205962 IP address blocks: 151.247.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:fc:36:ad:d1:22:cf:e5:fd:7b:40:68:78:da:ab:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 26 15:46:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9396256ff096e7f18443199ec3a63b2a839e88a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1b:1c:c2:14:6c:b8:1f:b6:00:4b:54:bb:8c: 3d:46:78:bb:d2:f3:de:04:64:d9:f8:ea:5b:f5:5b: df:0a:cb:58:8d:07:10:0c:c6:d0:65:08:20:59:43: 6d:93:3d:6a:bc:cc:86:8b:93:52:a8:97:f4:aa:36: 7d:46:88:62:d1:cb:6a:5e:a7:e8:7d:36:49:b7:a5: bc:d0:7e:52:d2:da:77:bd:a0:c6:3b:a2:22:4c:aa: 7f:54:97:5b:28:6d:50:20:5a:0c:5d:c3:9e:ea:86: f4:f2:80:d6:74:56:d1:48:31:8f:6c:ed:4c:14:77: 71:7a:48:bc:fc:0c:37:57:90:64:71:09:25:f1:96: 51:7e:96:fe:00:fd:99:23:65:f4:6d:fd:a7:e1:3b: ed:7c:a3:52:79:44:36:1b:3d:da:f9:76:11:76:ed: 09:4b:27:06:2b:7c:cc:ab:4b:98:be:a1:90:21:fa: 68:a6:59:67:af:0e:63:d1:29:76:2d:c3:a3:a4:64: a8:6e:45:34:a3:8b:b1:1b:10:a6:3d:45:b4:19:13: ba:7e:d3:46:12:ed:6a:91:38:ce:4e:5b:8b:96:74: b9:3e:ec:22:02:a2:04:61:b6:7b:2d:ae:c9:0a:93: b7:66:98:6c:e6:22:3b:57:40:ec:4f:90:69:ff:dd: 2d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:96:25:6F:F0:96:E7:F1:84:43:19:9E:C3:A6:3B:2A:83:9E:88:A9 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/k5Ylb_CW5_GEQxmew6Y7KoOeiKk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.247.33.0/24 Signature Algorithm: sha256WithRSAEncryption 97:91:0a:0c:7f:c5:63:9b:be:f7:06:d0:3e:a1:8e:4b:e8:96: 68:7a:5b:5d:93:22:3c:b9:7d:2d:db:a7:83:b9:6f:fe:19:7e: 5f:48:32:b1:40:6f:83:ec:8e:52:ba:1a:cd:58:87:72:90:05: f5:40:0a:fb:11:d1:17:d3:0b:3f:91:9b:65:b5:3f:c8:a6:fc: 78:8f:ea:63:08:45:4d:bc:ff:9a:d8:93:be:f5:90:84:94:30: a1:f8:ae:5b:f8:ae:22:d4:c8:a4:07:94:6c:cb:dd:50:3e:81: 37:06:e3:c6:99:47:75:c5:97:b2:5c:ac:d2:31:5a:30:c2:eb: 99:ad:28:ba:62:a5:87:15:d1:2e:8f:ec:8b:2f:0e:5e:e5:2c: 81:b7:75:80:3c:60:77:5e:4f:e8:01:92:25:4e:e9:eb:0a:c5: 30:f4:80:f7:38:15:99:eb:ad:6c:3b:20:c9:24:4f:5a:3d:29: 06:75:69:8c:39:32:bc:8a:c9:70:db:8d:f3:c3:b9:2c:a0:d4: bb:58:a2:0a:6a:f4:8c:dd:b9:bc:0d:d4:3f:14:d6:3a:eb:f5: 9d:98:e1:a7:14:f5:08:91:49:7e:7c:cf:a6:57:9e:67:52:5f: 1d:41:4f:6b:dd:8e:46:99:dc:50:76:99:9c:cb:66:df:af:24: a3:bf:64:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv6/Dat0SLP5f17QGh42qvFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTI2MTU0NjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Mzk2MjU2ZmYwOTZlN2YxODQ0MzE5OWVjM2E2M2IyYTgzOWU4OGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxscwhRsuB+2AEtUu4w9Rni70vPe BGTZ+Opb9VvfCstYjQcQDMbQZQggWUNtkz1qvMyGi5NSqJf0qjZ9Rohi0ctqXqfo fTZJt6W80H5S0tp3vaDGO6IiTKp/VJdbKG1QIFoMXcOe6ob08oDWdFbRSDGPbO1M FHdxeki8/Aw3V5BkcQkl8ZZRfpb+AP2ZI2X0bf2n4TvtfKNSeUQ2Gz3a+XYRdu0J SycGK3zMq0uYvqGQIfpopllnrw5j0Sl2LcOjpGSobkU0o4uxGxCmPUW0GRO6ftNG Eu1qkTjOTluLlnS5PuwiAqIEYbZ7La7JCpO3Zphs5iI7V0DsT5Bp/90ttQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJOWJW/wlufxhEMZnsOmOyqDnoipMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvazVZbGJfQ1c1X0dFUXhtZXc2WTdLb09laUtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/chMA0G CSqGSIb3DQEBCwUAA4IBAQCXkQoMf8Vjm773BtA+oY5L6JZoeltdkyI8uX0t26eD uW/+GX5fSDKxQG+D7I5SuhrNWIdykAX1QAr7EdEX0ws/kZtltT/Ipvx4j+pjCEVN vP+a2JO+9ZCElDCh+K5b+K4i1MikB5Rsy91QPoE3BuPGmUd1xZeyXKzSMVowwuuZ rSi6YqWHFdEuj+yLLw5e5SyBt3WAPGB3Xk/oAZIlTunrCsUw9ID3OBWZ661sOyDJ JE9aPSkGdWmMOTK8islw243zw7ksoNS7WKIKavSM3bm8DdQ/FNY66/WdmOGnFPUI kUl+fM+mV55nUl8dQU9r3Y5GmdxQdpmcy2bfrySjv2TL -----END CERTIFICATE-----Generated at Tue Feb 10 06:08:09 2026 by rpki-client