This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m5HPl0UDxdheaq_yabID2tNu3_Y.roa
File: m5HPl0UDxdheaq_yabID2tNu3_Y.roa (raw, json)
Hash identifier: DBgvSz+WzO4cUtQU/1S44LInTrS1p7MQpnpGq6l9LWU=
Subject key identifier: 9B:91:CF:97:45:03:C5:D8:5E:6A:AF:F2:69:B2:03:DA:D3:6E:DF:F6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019B7DCBA86A5F3CE79C3927D3DEBFD144A5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m5HPl0UDxdheaq_yabID2tNu3_Y.roa
Signing time: Fri 02 Jan 2026 08:20:57 +0000
ROA not before: Fri 02 Jan 2026 08:20:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 273612
IP address blocks: 151.243.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Jan 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:a8:6a:5f:3c:e7:9c:39:27:d3:de:bf:d1:44:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 2 08:20:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9b91cf974503c5d85e6aaff269b203dad36edff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:40:02:f1:d1:55:5c:00:49:74:a3:92:0f:
a8:97:f9:16:56:c0:d7:30:6e:ca:9a:2b:c7:c9:b3:
21:04:37:53:b3:1e:2e:51:cb:6f:97:2a:30:63:80:
1b:84:ab:b1:7d:9e:40:96:57:75:e8:4a:b8:ae:e9:
27:27:43:52:59:93:a6:f1:bc:96:c3:ad:6f:00:d6:
22:2d:b2:35:96:11:1f:d5:22:71:6e:bc:35:53:8b:
38:5f:9b:6b:dd:15:57:da:e4:72:a8:59:76:be:d0:
53:ec:40:32:d1:cc:fd:bc:2d:e4:52:40:bc:17:42:
47:2f:39:fb:bd:18:69:66:71:7a:6a:12:fa:fc:a1:
e4:0e:3c:a2:61:5a:c4:74:00:82:93:51:cf:aa:fb:
b9:a2:7b:5b:8a:07:8a:69:58:0a:90:96:0f:e8:c3:
a1:8e:78:9c:e1:06:d6:f8:1a:c6:24:c9:e9:50:a0:
d3:16:27:8d:05:35:46:b5:98:37:19:0b:40:78:d8:
94:6d:42:58:16:de:cf:41:20:88:4e:aa:90:6b:5a:
db:83:de:46:7c:a8:7f:b8:b9:4a:80:8d:83:2a:a5:
e5:a3:2b:cc:9c:21:78:25:cc:02:e3:57:5d:bb:c5:
2e:ca:13:0b:79:aa:56:bb:60:84:9f:4f:7e:f6:aa:
44:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:91:CF:97:45:03:C5:D8:5E:6A:AF:F2:69:B2:03:DA:D3:6E:DF:F6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m5HPl0UDxdheaq_yabID2tNu3_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.0.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c4:5a:c5:41:af:0e:09:5a:46:d0:12:31:e5:88:72:c3:8c:
08:74:3d:55:8d:eb:57:f2:b7:34:c4:1d:ee:8b:96:ee:e3:59:
98:0a:d7:53:ed:33:21:56:5c:38:27:39:c3:48:1f:f3:ea:88:
be:03:1f:90:57:a5:68:a7:46:03:ec:f2:42:95:e0:6d:ee:29:
ab:59:4d:84:c2:96:28:b9:e9:5b:54:f3:ec:73:35:1d:30:b8:
2a:6f:72:c0:3a:6f:10:76:a6:f6:79:91:37:20:1c:5e:f9:3d:
41:b9:ab:4b:24:07:13:2f:ba:8e:48:d7:dc:5d:94:0c:e4:38:
67:e2:0c:3d:59:2b:27:1a:03:47:60:ac:15:6c:d1:9b:83:d3:
54:a3:c8:c7:38:e3:42:e5:8d:a8:e3:30:a6:fd:b9:2c:83:be:
79:6c:ff:cd:4f:bf:c5:d2:a4:1c:33:bd:17:a1:16:6e:cd:3e:
17:18:45:1c:e3:21:a5:10:49:ee:6c:15:f3:c3:f8:9d:a8:f6:
3f:04:ef:ab:d2:c9:cf:3e:9a:58:bb:6a:15:de:30:3c:7a:da:
0b:a0:84:31:c0:fa:8e:45:36:b4:02:ca:31:d4:4a:bb:17:8a:
11:61:7b:45:09:60:a7:16:93:75:93:9f:d4:87:de:31:33:74:
c6:60:1e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 06:30:32 2026 by rpki-client