This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m_l2Gt_ulDsKWjDvV4T3EJEAzuY.roa File: m_l2Gt_ulDsKWjDvV4T3EJEAzuY.roa (raw, json) Hash identifier: uK9MIWcUVZigpB0bb6wPdCy8RG7S9Xor4DTOw51LNT0= Subject key identifier: 9B:F9:76:1A:DF:EE:94:3B:0A:5A:30:EF:57:84:F7:10:91:00:CE:E6 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB1C4C42B5C96D4FD48F23DA943D79 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m_l2Gt_ulDsKWjDvV4T3EJEAzuY.roa Signing time: Fri 02 Jan 2026 08:20:21 +0000 ROA not before: Fri 02 Jan 2026 08:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20326 IP address blocks: 151.241.65.0/24 maxlen: 24 151.241.178.0/24 maxlen: 24 151.241.208.0/22 maxlen: 22 151.243.21.0/24 maxlen: 24 151.243.52.0/23 maxlen: 24 151.243.244.0/24 maxlen: 24 151.244.2.0/24 maxlen: 24 151.244.136.0/22 maxlen: 24 151.244.160.0/22 maxlen: 24 151.244.171.0/24 maxlen: 24 151.244.172.0/22 maxlen: 24 151.244.176.0/22 maxlen: 24 151.245.8.0/21 maxlen: 24 151.245.168.0/21 maxlen: 21 151.247.132.0/24 maxlen: 24 151.247.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:1c:4c:42:b5:c9:6d:4f:d4:8f:23:da:94:3d:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9bf9761adfee943b0a5a30ef5784f7109100cee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e3:97:6e:32:ac:4b:24:b1:67:5c:b5:f2:b4: 3b:07:53:42:9d:c9:c2:75:6c:2a:9e:ec:78:85:a4: cd:e8:23:a8:45:af:38:16:bc:58:5b:98:f3:78:c0: de:12:3e:5f:54:0c:2e:3d:91:a8:53:58:13:23:ed: 6b:92:e2:fb:0b:42:67:36:e3:14:27:b3:7e:ec:4d: 3a:c1:71:f8:02:26:6b:06:b4:8f:ba:fc:84:fe:4c: 3b:48:81:ae:59:35:34:e9:9f:19:b4:64:2c:5f:ee: b1:b4:af:77:13:02:0c:53:57:30:2c:7c:02:7f:0c: 91:5f:65:50:1b:b0:f4:f9:37:e4:83:48:67:de:08: fa:4a:09:31:69:ba:02:62:81:76:c6:3b:0e:27:4b: 75:4e:5b:41:ea:61:ec:54:46:ae:0a:d1:a0:70:3e: 8d:f7:4b:07:85:06:81:57:e5:0f:e1:14:50:1e:ff: 27:20:49:76:6f:b5:0f:d9:bb:fa:3d:f3:4d:4b:36: 12:37:cc:28:0d:27:55:75:a5:32:2c:a4:da:e2:95: dd:c9:7b:9a:ae:b6:6a:43:f9:0c:0d:23:93:6b:9a: 61:fc:4a:27:fa:6d:35:3f:b9:54:51:78:ea:c1:ba: d9:51:24:3c:49:85:bf:ce:e1:9c:f8:54:ab:09:c8: 38:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F9:76:1A:DF:EE:94:3B:0A:5A:30:EF:57:84:F7:10:91:00:CE:E6 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m_l2Gt_ulDsKWjDvV4T3EJEAzuY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.65.0/24 151.241.178.0/24 151.241.208.0/22 151.243.21.0/24 151.243.52.0/23 151.243.244.0/24 151.244.2.0/24 151.244.136.0/22 151.244.160.0/22 151.244.171.0-151.244.179.255 151.245.8.0/21 151.245.168.0/21 151.247.132.0/24 151.247.228.0/22 Signature Algorithm: sha256WithRSAEncryption 40:1d:ca:c5:24:3e:c8:e7:04:f7:19:64:21:ea:d9:f0:98:44: bd:6e:aa:ac:86:7f:13:10:c5:b8:fc:8b:ce:05:36:78:ed:b8: a5:6e:c9:d9:c6:13:0a:94:d8:50:1b:52:19:7c:c0:ab:1e:c1: 85:16:2e:b1:6f:47:47:25:31:59:11:d4:1d:17:07:d0:d2:61: 71:4f:3b:c0:5c:91:db:98:b5:24:3e:0c:17:5c:e0:00:34:bd: 48:2c:91:f1:cb:da:4f:04:ea:7e:11:0e:f6:2a:2f:78:b5:7e: 3e:21:92:4d:2a:97:b9:a2:cd:b5:b7:22:10:e6:94:f2:c5:fa: f7:17:4e:ed:55:3a:7b:21:2f:7e:aa:e5:eb:cb:94:8a:6a:0f: 9b:09:62:c4:73:27:74:9f:80:d7:d0:0c:65:3b:0b:3c:3f:43: f6:36:1c:12:30:a6:c7:0c:62:61:2a:e5:5c:03:02:8f:53:af: f1:99:cd:7d:f1:a4:0a:1a:07:47:f6:dc:ab:d7:6d:f2:81:77: 4b:a4:f6:ea:db:b1:c8:ba:39:db:87:d0:a8:67:0b:a1:93:5d: 35:69:db:62:f5:54:cc:eb:af:14:cc:ad:38:2b:d7:f1:cc:df: 56:87:c1:37:38:1d:b4:b3:7c:80:96:75:73:c5:06:0a:19:e4: 20:78:e5:5e -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgISAZt9yxxMQrXJbU/UjyPalD15MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmY5NzYxYWRmZWU5NDNiMGE1YTMwZWY1Nzg0ZjcxMDkxMDBjZWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeOXbjKsSySxZ1y18rQ7B1NCncnC dWwqnux4haTN6COoRa84FrxYW5jzeMDeEj5fVAwuPZGoU1gTI+1rkuL7C0JnNuMU J7N+7E06wXH4AiZrBrSPuvyE/kw7SIGuWTU06Z8ZtGQsX+6xtK93EwIMU1cwLHwC fwyRX2VQG7D0+Tfkg0hn3gj6SgkxaboCYoF2xjsOJ0t1TltB6mHsVEauCtGgcD6N 90sHhQaBV+UP4RRQHv8nIEl2b7UP2bv6PfNNSzYSN8woDSdVdaUyLKTa4pXdyXua rrZqQ/kMDSOTa5ph/Eon+m01P7lUUXjqwbrZUSQ8SYW/zuGc+FSrCcg4lwIDAQAB o4ICXzCCAlswHQYDVR0OBBYEFJv5dhrf7pQ7Clow71eE9xCRAM7mMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvbV9sMkd0X3VsRHNLV2pEdlY0VDNFSkVBenVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQAl/FBAwQA l/GyAwQCl/HQAwQAl/MVAwQBl/M0AwQAl/P0AwQAl/QCAwQCl/SIAwQCl/SgMAwD BACX9KsDBAKX9LADBAOX9QgDBAOX9agDBACX94QDBAKX9+QwDQYJKoZIhvcNAQEL BQADggEBAEAdysUkPsjnBPcZZCHq2fCYRL1uqqyGfxMQxbj8i84FNnjtuKVuydnG EwqU2FAbUhl8wKsewYUWLrFvR0clMVkR1B0XB9DSYXFPO8BckduYtSQ+DBdc4AA0 vUgskfHL2k8E6n4RDvYqL3i1fj4hkk0ql7mizbW3IhDmlPLF+vcXTu1VOnshL36q 5evLlIpqD5sJYsRzJ3SfgNfQDGU7Czw/Q/Y2HBIwpscMYmEq5VwDAo9Tr/GZzX3x pAoaB0f23KvXbfKBd0uk9urbsci6OduH0KhnC6GTXTVp22L1VMzrrxTMrTgr1/HM 31aHwTc4HbSzfICWdXPFBgoZ5CB45V4= -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:08 2026 by rpki-client