This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mYwfRxNXLnfGuM4jMVF74WbjPx0.roa File: mYwfRxNXLnfGuM4jMVF74WbjPx0.roa (raw, json) Hash identifier: 8bCk0Wtr8GpX/wMBRTqsQw81Nvon6pB6IDhWazhbdqQ= Subject key identifier: 99:8C:1F:47:13:57:2E:77:C6:B8:CE:23:31:51:7B:E1:66:E3:3F:1D Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB99DC9F19F1B6A80BAF113ADC2C6C Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mYwfRxNXLnfGuM4jMVF74WbjPx0.roa Signing time: Fri 02 Jan 2026 08:20:53 +0000 ROA not before: Fri 02 Jan 2026 08:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214732 IP address blocks: 151.244.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:99:dc:9f:19:f1:b6:a8:0b:af:11:3a:dc:2c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=998c1f4713572e77c6b8ce2331517be166e33f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:23:11:a2:61:cf:12:24:19:3f:82:b5:37:4f: 08:b7:98:2c:ba:9b:54:67:1a:c1:05:1f:ea:86:b7: 4a:59:0c:e2:74:5c:eb:2d:2f:16:5b:6f:94:d0:bd: 42:4f:4e:ed:65:3c:af:63:26:e2:01:4d:01:af:0f: e8:e8:3b:f3:2a:c1:c6:ee:a7:12:80:50:d5:3a:ab: ef:d3:d6:6d:56:33:cb:1a:ba:08:d5:d0:15:4b:ce: 87:73:52:be:f5:03:ca:b1:82:f1:25:87:60:8c:90: 58:26:8b:fe:e5:91:3f:50:7b:aa:3c:9c:f5:4e:95: f2:22:ee:62:52:db:36:0f:d8:5f:fa:52:7f:c9:c8: 19:02:d4:68:a4:18:e3:45:ff:62:2e:d4:91:26:b6: 36:0e:a7:f1:e1:81:e2:7c:1a:56:69:ec:f3:2b:0f: 64:27:b1:f6:97:10:66:df:84:d7:a3:ba:da:a8:df: 51:80:e0:4a:81:9b:86:72:34:0b:a8:e3:44:73:54: b3:84:ae:14:ba:bd:3f:ae:d4:00:b8:78:62:ac:7c: c3:5e:d4:cc:05:83:ef:75:c3:79:35:4f:3f:10:30: 9f:01:45:2a:4b:d4:80:b0:ce:0f:2e:89:3b:b5:1f: 51:dc:9d:41:c1:41:7c:ee:71:42:eb:91:0e:11:16: 14:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:8C:1F:47:13:57:2E:77:C6:B8:CE:23:31:51:7B:E1:66:E3:3F:1D X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mYwfRxNXLnfGuM4jMVF74WbjPx0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.244.0/24 Signature Algorithm: sha256WithRSAEncryption 57:e9:52:f1:04:8c:6d:e4:45:65:e2:86:ad:23:72:1f:79:41: c9:e4:92:ef:51:22:ff:b8:ac:63:f8:29:21:db:4a:84:f7:8b: 60:2c:a3:72:70:fa:b0:8a:2b:85:e2:45:04:c0:df:f8:42:4e: 87:46:c3:d0:8b:8c:f0:db:4a:77:b6:09:7f:d2:e9:4e:c2:96: 7d:27:ce:b9:23:c5:ec:70:a4:b5:6a:ca:2c:8a:8a:61:f6:82: b3:e9:3d:0e:6e:ce:02:a0:cd:fa:45:7a:52:e3:02:a0:48:f2: cb:8a:b1:ab:c8:c7:79:3f:06:39:b1:ca:c5:45:9d:2f:d1:63: 32:69:e7:59:8d:25:54:66:44:0e:c4:56:d0:16:d1:2b:c7:2f: e2:fa:c4:55:72:54:75:b9:3f:26:65:a7:65:60:98:de:d5:e5: b6:ae:a9:eb:db:9b:4f:bd:2b:8f:ba:d8:d2:43:62:73:8e:73: ee:4a:5e:b8:d7:6d:82:e9:f4:6e:3a:80:85:70:59:5a:4d:04: 96:59:2b:53:49:11:fd:d0:f0:ef:32:a8:9f:87:d8:24:de:55: 92:ab:3b:7d:5a:6f:af:02:80:99:6a:12:e1:18:3e:90:f0:5d: 76:4a:55:46:24:12:9a:e6:b0:31:09:a7:53:81:61:bd:89:52: b7:20:a7:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y5ncnxnxtqgLrxE63CxsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OThjMWY0NzEzNTcyZTc3YzZiOGNlMjMzMTUxN2JlMTY2ZTMzZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliMRomHPEiQZP4K1N08It5gsuptU ZxrBBR/qhrdKWQzidFzrLS8WW2+U0L1CT07tZTyvYybiAU0Brw/o6DvzKsHG7qcS gFDVOqvv09ZtVjPLGroI1dAVS86Hc1K+9QPKsYLxJYdgjJBYJov+5ZE/UHuqPJz1 TpXyIu5iUts2D9hf+lJ/ycgZAtRopBjjRf9iLtSRJrY2Dqfx4YHifBpWaezzKw9k J7H2lxBm34TXo7raqN9RgOBKgZuGcjQLqONEc1SzhK4Uur0/rtQAuHhirHzDXtTM BYPvdcN5NU8/EDCfAUUqS9SAsM4PLok7tR9R3J1BwUF87nFC65EOERYU/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJmMH0cTVy53xrjOIzFRe+Fm4z8dMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvbVl3ZlJ4TlhMbmZHdU00ak1WRjc0V2JqUHgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/T0MA0G CSqGSIb3DQEBCwUAA4IBAQBX6VLxBIxt5EVl4oatI3IfeUHJ5JLvUSL/uKxj+Ckh 20qE94tgLKNycPqwiiuF4kUEwN/4Qk6HRsPQi4zw20p3tgl/0ulOwpZ9J865I8Xs cKS1asosioph9oKz6T0Obs4CoM36RXpS4wKgSPLLirGryMd5PwY5scrFRZ0v0WMy aedZjSVUZkQOxFbQFtErxy/i+sRVclR1uT8mZadlYJje1eW2rqnr25tPvSuPutjS Q2JzjnPuSl64122C6fRuOoCFcFlaTQSWWStTSRH90PDvMqifh9gk3lWSqzt9Wm+v AoCZahLhGD6Q8F12SlVGJBKa5rAxCadTgWG9iVK3IKc4 -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:31 2026 by rpki-client