This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m01grYOeqOL2L3tMK-qxPgGuZ74.roa File: m01grYOeqOL2L3tMK-qxPgGuZ74.roa (raw, json) Hash identifier: 3do+/yL93hP5jycLxGqkLc1gglomSBLWTnLpLqK6Ft8= Subject key identifier: 9B:4D:60:AD:83:9E:A8:E2:F6:2F:7B:4C:2B:EA:B1:3E:01:AE:67:BE Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB19E9B14A64FE4F6ECF0FAECD2173 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m01grYOeqOL2L3tMK-qxPgGuZ74.roa Signing time: Fri 02 Jan 2026 08:20:21 +0000 ROA not before: Fri 02 Jan 2026 08:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15510 IP address blocks: 151.246.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:19:e9:b1:4a:64:fe:4f:6e:cf:0f:ae:cd:21:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b4d60ad839ea8e2f62f7b4c2beab13e01ae67be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6e:26:04:a5:06:9b:55:b1:fb:2d:c4:2a:e2: e3:ef:e1:02:ed:f0:8d:c1:2c:ca:d6:04:ac:95:4d: c9:f1:f3:a0:a4:20:0f:80:0b:21:93:a7:28:84:22: fb:44:bf:a0:c7:e9:0e:4e:f5:63:6a:87:5f:df:48: c1:cf:01:bd:c4:c8:dc:0d:b3:62:12:1c:11:6f:a7: 0b:6c:52:84:cd:33:bf:8c:c1:b8:b2:2b:1d:68:b4: 65:01:89:72:b8:de:77:72:f1:fd:e2:da:30:fd:a6: 58:6f:7b:c6:7d:71:61:a6:a0:d9:5f:7c:bb:a3:c1: 4c:f6:61:12:0a:62:a6:d9:ac:c3:0b:e8:40:dd:a0: 34:48:aa:f0:3b:43:a3:4a:10:d7:3b:8a:a4:30:be: 7f:d4:35:9a:85:8a:d7:09:9b:45:63:b0:c3:0e:95: 2e:89:fe:72:10:f2:6a:52:7b:a6:29:88:94:0e:42: 1d:9e:28:c9:3b:6a:0a:15:b9:62:a1:e4:d0:6a:54: 69:42:1f:a6:9b:84:ec:c9:5b:ae:13:cb:a9:4c:47: 8b:4f:9d:02:56:d8:51:69:15:d0:a6:85:45:08:a1: 8d:10:0d:07:d7:50:b6:fc:69:8a:af:74:57:78:eb: 65:6d:02:53:71:4e:8d:37:6d:99:e3:42:28:3c:8e: 3c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:4D:60:AD:83:9E:A8:E2:F6:2F:7B:4C:2B:EA:B1:3E:01:AE:67:BE X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m01grYOeqOL2L3tMK-qxPgGuZ74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.246.210.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:3b:a4:80:93:3a:95:f1:19:a4:a4:11:23:b9:24:94:ef:87: 60:8f:71:2e:46:45:d4:d9:1c:9f:b0:bc:8d:2d:3c:4c:e5:79: 78:a6:f9:91:0f:d1:9d:c8:37:5e:69:c6:91:ec:67:1e:77:28: b3:2e:4f:c6:d0:65:12:5c:c2:b7:73:da:b2:23:82:13:47:95: eb:bb:03:0e:93:93:79:5b:33:ef:2b:a4:af:80:81:44:90:49: fb:27:25:af:5d:b2:9c:f5:25:63:54:b5:53:1d:72:0c:49:9d: 5a:0b:13:84:60:0d:f2:b2:6d:af:85:5a:0c:6e:cc:ee:76:11: a6:53:6f:6d:40:2d:d0:b4:65:f1:d8:49:af:58:8e:01:84:c7: 55:1e:64:9b:ae:54:27:e7:64:8f:95:a4:96:de:bd:d6:30:82: 09:bd:a1:39:30:27:17:46:d2:b3:00:8d:9d:3c:76:b8:1d:7e: c0:4e:49:e1:7b:e8:24:e6:f2:ce:d7:da:b8:cd:2c:b7:cc:ce: fb:ac:ad:4d:bf:1e:14:41:29:b6:d8:70:72:18:c6:21:6c:1e: 5c:77:f3:80:fe:db:88:74:0e:a8:bd:7a:f0:8a:c9:1b:89:a3: 2f:7d:b5:82:f4:c0:8d:27:57:48:56:79:41:38:3d:20:8d:37: 9e:21:76:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yxnpsUpk/k9uzw+uzSFzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjRkNjBhZDgzOWVhOGUyZjYyZjdiNGMyYmVhYjEzZTAxYWU2N2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv24mBKUGm1Wx+y3EKuLj7+EC7fCN wSzK1gSslU3J8fOgpCAPgAshk6cohCL7RL+gx+kOTvVjaodf30jBzwG9xMjcDbNi EhwRb6cLbFKEzTO/jMG4sisdaLRlAYlyuN53cvH94tow/aZYb3vGfXFhpqDZX3y7 o8FM9mESCmKm2azDC+hA3aA0SKrwO0OjShDXO4qkML5/1DWahYrXCZtFY7DDDpUu if5yEPJqUnumKYiUDkIdnijJO2oKFblioeTQalRpQh+mm4TsyVuuE8upTEeLT50C VthRaRXQpoVFCKGNEA0H11C2/GmKr3RXeOtlbQJTcU6NN22Z40IoPI48QQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJtNYK2Dnqji9i97TCvqsT4Brme+MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvbTAxZ3JZT2VxT0wyTDN0TUstcXhQZ0d1Wjc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/bSMA0G CSqGSIb3DQEBCwUAA4IBAQArO6SAkzqV8RmkpBEjuSSU74dgj3EuRkXU2RyfsLyN LTxM5Xl4pvmRD9GdyDdeacaR7GcedyizLk/G0GUSXMK3c9qyI4ITR5XruwMOk5N5 WzPvK6SvgIFEkEn7JyWvXbKc9SVjVLVTHXIMSZ1aCxOEYA3ysm2vhVoMbszudhGm U29tQC3QtGXx2EmvWI4BhMdVHmSbrlQn52SPlaSW3r3WMIIJvaE5MCcXRtKzAI2d PHa4HX7ATknhe+gk5vLO19q4zSy3zM77rK1Nvx4UQSm22HByGMYhbB5cd/OA/tuI dA6ovXrwiskbiaMvfbWC9MCNJ1dIVnlBOD0gjTeeIXYX -----END CERTIFICATE-----Generated at Sun Jan 18 06:28:53 2026 by rpki-client