This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lyTK7l2rPlXIQdqSG-uSfvkMdqA.roa File: lyTK7l2rPlXIQdqSG-uSfvkMdqA.roa (raw, json) Hash identifier: 9VlcFqRLbv8DwcV9aJE4la247rEntgw0SsKUGJHEWks= Subject key identifier: 97:24:CA:EE:5D:AB:3E:55:C8:41:DA:92:1B:EB:92:7E:F9:0C:76:A0 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB46DFAC21851C549D3C397C6B6405 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lyTK7l2rPlXIQdqSG-uSfvkMdqA.roa Signing time: Fri 02 Jan 2026 08:20:32 +0000 ROA not before: Fri 02 Jan 2026 08:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63473 IP address blocks: 151.241.5.0/24 maxlen: 24 151.241.113.0/24 maxlen: 24 151.242.15.0/24 maxlen: 24 151.242.74.0/24 maxlen: 24 151.242.85.0/24 maxlen: 24 151.245.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:46:df:ac:21:85:1c:54:9d:3c:39:7c:6b:64:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9724caee5dab3e55c841da921beb927ef90c76a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:2f:d3:6f:13:ce:0c:e5:03:47:69:4f:a7:ac: c0:13:a1:dc:15:00:47:f7:8a:5f:5e:93:f4:21:5f: d8:a3:13:96:4d:29:b8:ab:f5:2f:3c:a8:9c:de:d9: db:a9:4c:cc:98:c1:fe:51:78:e1:4a:e1:4a:b2:bf: 8b:be:83:2f:43:43:ca:55:7d:40:a0:09:30:d5:53: c4:5c:f8:01:84:83:dd:2b:71:3c:e5:c8:22:ed:43: cf:15:84:f0:c2:91:7c:18:ee:49:99:58:90:67:c6: 02:b5:b7:6e:66:8b:20:54:f3:8b:47:89:46:03:d2: c3:27:d5:3f:ca:e9:58:33:9b:d8:94:29:99:41:2e: 9d:50:c2:17:d4:69:47:e8:07:47:14:2a:6d:51:b8: a4:6e:b0:f4:b4:e6:8f:6c:8b:19:97:e8:b5:34:80: 92:4b:1c:b1:87:60:08:8a:ab:c5:ca:60:90:1d:44: 25:4a:05:85:4d:b4:72:8c:30:19:25:45:cc:9c:5f: 8f:7e:50:20:fe:36:11:2f:c1:93:ee:fb:03:b0:64: c8:10:8c:46:a8:1e:8a:13:1f:f0:d0:10:81:41:d2: 87:91:c6:47:8d:53:7d:0a:f6:c0:50:29:0b:d6:24: 38:8e:61:b3:7d:c8:4f:e4:60:bc:06:9a:af:5c:fd: 64:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:24:CA:EE:5D:AB:3E:55:C8:41:DA:92:1B:EB:92:7E:F9:0C:76:A0 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lyTK7l2rPlXIQdqSG-uSfvkMdqA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.5.0/24 151.241.113.0/24 151.242.15.0/24 151.242.74.0/24 151.242.85.0/24 151.245.106.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:93:32:ae:ae:01:89:77:19:d9:6a:d3:85:32:f3:29:6c:60: 24:a5:84:53:dd:de:25:89:a9:b8:0e:77:c4:fd:80:d2:c8:c6: 41:0c:82:51:e2:ff:30:28:5a:7b:f4:ca:77:78:1b:1f:46:0f: ab:3f:58:b0:e4:49:4a:96:9c:be:77:b8:4c:10:6d:4a:e6:08: a5:fe:3d:39:d9:93:db:6b:e0:74:18:14:9b:52:61:ab:67:52: ce:9a:39:92:94:77:ae:07:0d:03:92:39:ad:91:27:40:24:49: b0:b5:44:27:c1:50:e1:64:e5:d0:31:9b:a0:02:c4:39:1e:79: ac:5e:be:a2:c6:16:c9:14:48:a1:cc:63:d9:bb:1b:21:b7:65: f5:d4:28:31:a2:5d:84:ef:b0:d4:0c:a4:74:e2:0f:49:c3:d0: 6c:65:c9:0d:b6:23:86:fb:49:d3:8b:53:6c:f4:f9:5f:96:e7: c5:57:2e:f3:27:76:a6:ee:b2:29:1f:b7:d4:b4:98:a4:90:92: fd:04:a8:87:c1:56:e6:23:da:de:3f:dd:6c:2e:de:76:e3:4a: f5:2a:91:f7:9d:e0:f3:f2:20:f0:df:e9:76:88:20:c0:49:3f: 7a:28:94:ce:2e:95:00:f4:69:8c:ad:99:34:af:b4:de:90:29: 11:e2:d0:75 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt9y0bfrCGFHFSdPDl8a2QFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzI0Y2FlZTVkYWIzZTU1Yzg0MWRhOTIxYmViOTI3ZWY5MGM3NmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C/TbxPODOUDR2lPp6zAE6HcFQBH 94pfXpP0IV/YoxOWTSm4q/UvPKic3tnbqUzMmMH+UXjhSuFKsr+LvoMvQ0PKVX1A oAkw1VPEXPgBhIPdK3E85cgi7UPPFYTwwpF8GO5JmViQZ8YCtbduZosgVPOLR4lG A9LDJ9U/yulYM5vYlCmZQS6dUMIX1GlH6AdHFCptUbikbrD0tOaPbIsZl+i1NICS Sxyxh2AIiqvFymCQHUQlSgWFTbRyjDAZJUXMnF+PflAg/jYRL8GT7vsDsGTIEIxG qB6KEx/w0BCBQdKHkcZHjVN9CvbAUCkL1iQ4jmGzfchP5GC8BpqvXP1kXwIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFJckyu5dqz5VyEHakhvrkn75DHagMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvbHlUSzdsMnJQbFhJUWRxU0ctdVNmdmtNZHFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAl/EFAwQA l/FxAwQAl/IPAwQAl/JKAwQAl/JVAwQAl/VqMA0GCSqGSIb3DQEBCwUAA4IBAQAr kzKurgGJdxnZatOFMvMpbGAkpYRT3d4liam4DnfE/YDSyMZBDIJR4v8wKFp79Mp3 eBsfRg+rP1iw5ElKlpy+d7hMEG1K5gil/j052ZPba+B0GBSbUmGrZ1LOmjmSlHeu Bw0DkjmtkSdAJEmwtUQnwVDhZOXQMZugAsQ5HnmsXr6ixhbJFEihzGPZuxsht2X1 1Cgxol2E77DUDKR04g9Jw9BsZckNtiOG+0nTi1Ns9PlflufFVy7zJ3am7rIpH7fU tJikkJL9BKiHwVbmI9reP91sLt5240r1KpH3neDz8iDw3+l2iCDAST96KJTOLpUA 9GmMrZk0r7TekCkR4tB1 -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:06 2026 by rpki-client