This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m7Vf_IDOzoSQVEzn7Nf9MO7CI7g.roa File: m7Vf_IDOzoSQVEzn7Nf9MO7CI7g.roa (raw, json) Hash identifier: lQ3ymK3cbDhVP6HKbpfWJLdpmtFjJ1awt7G8iHOhZTI= Subject key identifier: 9B:B5:5F:FC:80:CE:CE:84:90:54:4C:E7:EC:D7:FD:30:EE:C2:23:B8 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB51C84D056F4A650C37FD7C8ED1BE Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m7Vf_IDOzoSQVEzn7Nf9MO7CI7g.roa Signing time: Fri 02 Jan 2026 08:20:35 +0000 ROA not before: Fri 02 Jan 2026 08:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 139057 IP address blocks: 151.242.210.0/24 maxlen: 24 151.242.211.0/24 maxlen: 24 151.242.212.0/24 maxlen: 24 151.242.213.0/24 maxlen: 24 151.242.214.0/24 maxlen: 24 151.242.215.0/24 maxlen: 24 151.242.216.0/24 maxlen: 24 151.242.217.0/24 maxlen: 24 151.242.218.0/24 maxlen: 24 151.242.219.0/24 maxlen: 24 151.242.220.0/24 maxlen: 24 151.242.221.0/24 maxlen: 24 151.242.222.0/24 maxlen: 24 151.242.223.0/24 maxlen: 24 151.242.228.0/24 maxlen: 24 151.242.229.0/24 maxlen: 24 151.242.230.0/24 maxlen: 24 151.242.231.0/24 maxlen: 24 151.242.232.0/24 maxlen: 24 151.242.233.0/24 maxlen: 24 151.242.234.0/24 maxlen: 24 151.242.235.0/24 maxlen: 24 151.242.240.0/24 maxlen: 24 151.242.241.0/24 maxlen: 24 151.242.243.0/24 maxlen: 24 151.242.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 19:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:51:c8:4d:05:6f:4a:65:0c:37:fd:7c:8e:d1:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bb55ffc80cece8490544ce7ecd7fd30eec223b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:3d:61:f0:4d:da:b3:fa:0e:f5:95:0c:76: 2c:e9:98:26:a5:cf:a3:11:2f:66:a3:48:e3:47:7b: 64:c9:85:c6:04:bd:6b:38:30:2c:e2:80:60:35:cf: d9:5a:e9:ec:35:b7:c3:46:4a:b0:10:f8:3c:c5:2d: aa:b4:ea:06:f2:ca:ef:32:df:64:41:c2:28:ce:9c: 42:00:46:e8:e3:a2:34:47:c1:66:68:d0:58:63:7f: 86:f7:0d:20:3a:16:f6:2f:04:12:7a:c4:dd:bf:e8: dd:d5:b8:37:33:cb:2e:a7:27:e3:a8:57:83:67:3a: 38:88:ff:74:a1:f4:94:b8:7f:84:9a:68:a1:26:18: 15:b5:01:c2:b6:6a:ca:0f:9e:21:ac:44:98:91:1b: 7e:b6:00:24:42:2e:15:da:4d:1d:a9:8f:b6:0a:9f: 82:08:ad:1c:5e:bb:bd:86:19:eb:8f:74:31:6b:93: 54:f8:19:42:2d:d8:26:28:a6:63:78:ba:b1:8d:8f: 63:a2:01:92:2b:f9:ab:b8:e9:3b:7b:b5:56:05:3a: ae:24:25:54:b7:f6:1d:60:ed:2e:a9:98:90:f7:45: fd:ac:c8:64:2c:59:6a:3d:4a:7b:97:d9:11:cc:f2: ae:87:5b:6f:8d:39:99:7b:9e:df:3b:cc:b6:9f:a3: d9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B5:5F:FC:80:CE:CE:84:90:54:4C:E7:EC:D7:FD:30:EE:C2:23:B8 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m7Vf_IDOzoSQVEzn7Nf9MO7CI7g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.210.0-151.242.223.255 151.242.228.0-151.242.235.255 151.242.240.0/23 151.242.243.0-151.242.244.255 Signature Algorithm: sha256WithRSAEncryption 12:b5:ab:6b:97:29:61:bd:59:1c:67:3a:57:6d:10:58:a6:38: ce:74:fc:b7:d2:76:38:b0:88:17:18:5b:d6:ba:27:b1:df:1e: ea:6e:30:13:52:48:d0:88:c6:45:43:f3:43:6e:1e:b6:49:73: 60:aa:ef:03:56:e9:9b:54:ac:a2:3a:2a:a6:ae:17:3e:cb:ea: 83:7b:be:1a:b6:b0:fc:8d:76:36:98:28:18:39:01:1a:30:19: 5f:a0:4b:71:91:ab:49:76:2e:be:a0:6e:e7:0e:1b:b4:1b:fa: 5d:87:8f:da:84:f2:a6:6f:ef:11:49:cf:ed:65:37:f8:8b:93: 7a:5c:7c:f2:14:5a:37:1b:72:0b:18:eb:2b:0e:66:54:7f:29: f4:28:5c:53:8f:24:e9:83:35:3c:68:61:04:54:47:50:78:b8: 09:39:cc:ae:90:57:39:d0:de:25:da:ba:f3:5d:72:74:3a:7a: 8f:7b:d8:0a:2d:16:78:0b:00:48:5e:db:b4:69:d5:e2:40:eb: ff:74:ce:ea:a7:d4:71:30:5a:44:39:d5:46:75:54:37:1d:ca: f7:fd:9a:f3:96:20:82:fa:13:a3:00:5b:49:3d:22:6e:94:43: 92:6f:2b:53:92:7a:a3:92:fb:9f:9d:ee:46:84:e1:59:f5:72: 35:d2:a4:b5 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt9y1HITQVvSmUMN/18jtG+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmI1NWZmYzgwY2VjZTg0OTA1NDRjZTdlY2Q3ZmQzMGVlYzIyM2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvds9YfBN2rP6DvWVDHYs6Zgmpc+j ES9mo0jjR3tkyYXGBL1rODAs4oBgNc/ZWunsNbfDRkqwEPg8xS2qtOoG8srvMt9k QcIozpxCAEbo46I0R8FmaNBYY3+G9w0gOhb2LwQSesTdv+jd1bg3M8supyfjqFeD Zzo4iP90ofSUuH+EmmihJhgVtQHCtmrKD54hrESYkRt+tgAkQi4V2k0dqY+2Cp+C CK0cXru9hhnrj3Qxa5NU+BlCLdgmKKZjeLqxjY9jogGSK/mruOk7e7VWBTquJCVU t/YdYO0uqZiQ90X9rMhkLFlqPUp7l9kRzPKuh1tvjTmZe57fO8y2n6PZPQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFJu1X/yAzs6EkFRM5+zX/TDuwiO4MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvbTdWZl9JRE96b1NRVkV6bjdOZjlNTzdDSTdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwMAwDBAGX8tID BAWX8sAwDAMEApfy5AMEApfy6AMEAZfy8DAMAwQAl/LzAwQAl/L0MA0GCSqGSIb3 DQEBCwUAA4IBAQAStatrlylhvVkcZzpXbRBYpjjOdPy30nY4sIgXGFvWuiex3x7q bjATUkjQiMZFQ/NDbh62SXNgqu8DVumbVKyiOiqmrhc+y+qDe74atrD8jXY2mCgY OQEaMBlfoEtxkatJdi6+oG7nDhu0G/pdh4/ahPKmb+8RSc/tZTf4i5N6XHzyFFo3 G3ILGOsrDmZUfyn0KFxTjyTpgzU8aGEEVEdQeLgJOcyukFc50N4l2rrzXXJ0OnqP e9gKLRZ4CwBIXtu0adXiQOv/dM7qp9RxMFpEOdVGdVQ3Hcr3/ZrzliCC+hOjAFtJ PSJulEOSbytTknqjkvufne5GhOFZ9XI10qS1 -----END CERTIFICATE-----Generated at Sun Jan 18 04:27:10 2026 by rpki-client