This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mc6oJ4CTQDR_1mKnVMJIwp7rKvw.roa File: mc6oJ4CTQDR_1mKnVMJIwp7rKvw.roa (raw, json) Hash identifier: 8XMIO3hUhFjCovXE1GH+zux+n+K8zc3lEilPQfDYR1o= Subject key identifier: 99:CE:A8:27:80:93:40:34:7F:D6:62:A7:54:C2:48:C2:9E:EB:2A:FC Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB408E56BCD7BC236F01E7FA97FA0C Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mc6oJ4CTQDR_1mKnVMJIwp7rKvw.roa Signing time: Fri 02 Jan 2026 08:20:30 +0000 ROA not before: Fri 02 Jan 2026 08:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59432 IP address blocks: 151.243.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:40:8e:56:bc:d7:bc:23:6f:01:e7:fa:97:fa:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99cea827809340347fd662a754c248c29eeb2afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2d:e7:82:23:eb:84:15:87:8b:1b:1c:49:31: 55:30:e0:68:32:dc:bb:e9:cf:d9:08:00:c4:b6:cf: 29:db:63:cc:91:ea:2f:3c:19:46:50:18:d2:70:2e: 0c:f8:39:e3:24:50:e3:43:c5:07:b0:e8:a2:86:d2: d6:80:a2:ec:c9:f9:c8:0f:f0:44:e1:64:22:ee:88: 01:5b:12:63:f6:ef:d7:39:85:e1:e3:ac:24:a7:7a: f3:91:4f:94:0f:1e:5e:0b:77:59:af:c1:b1:2b:a2: d7:aa:8d:55:8d:39:b6:29:d9:b1:4c:fb:97:b1:b5: a2:f8:c0:47:89:e0:a4:e9:f3:3a:04:f1:c8:e4:38: cc:63:f3:ff:11:b7:6e:68:10:04:cb:32:96:b1:f0: 4e:6b:bb:a6:af:4e:bf:e9:d3:10:82:4b:71:b3:67: 10:a8:07:ea:a9:87:66:61:1a:d2:08:25:e4:2f:99: cb:41:36:3e:14:f4:2f:cf:70:53:91:3d:a5:28:9b: dc:56:85:39:46:05:d6:94:b5:a0:d6:7b:97:34:4d: 5d:9c:cf:b1:07:3e:5a:33:c1:82:8c:e5:d2:c8:2e: 5d:fb:06:70:61:1b:7f:0e:90:69:c9:45:01:88:14: 75:f2:b5:ae:1d:e2:01:c3:6d:cf:7a:9b:31:3a:00: ec:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CE:A8:27:80:93:40:34:7F:D6:62:A7:54:C2:48:C2:9E:EB:2A:FC X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mc6oJ4CTQDR_1mKnVMJIwp7rKvw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.156.0/24 Signature Algorithm: sha256WithRSAEncryption 03:53:6e:48:d6:05:30:39:35:f2:92:5f:9c:a3:3c:b4:d7:15: 0c:ea:58:5e:ed:61:23:e4:dd:ed:24:1f:2d:e0:c5:b4:a7:43: d0:db:41:a7:ec:1e:8f:2f:be:66:c2:41:21:5f:85:0b:c7:d1: 4b:57:8d:7d:0e:8c:ef:13:ac:f3:78:b3:71:67:94:7b:97:c3: ec:b0:63:c0:07:31:af:cb:55:7f:f3:eb:2e:5f:51:4c:da:22: 0c:6d:bf:21:4e:e4:f8:c8:7c:b1:ab:05:42:cf:cc:3a:0a:1a: 74:d1:63:f6:2d:8f:2e:8a:6f:e3:15:56:96:58:4e:86:2c:7e: ab:3e:62:4d:17:a7:da:b9:52:a6:8f:9d:f0:99:a9:2e:ac:e9: e4:fc:da:b5:d9:0a:87:33:7b:4b:95:ed:d2:cc:86:e8:8c:21: d7:ce:e3:30:a6:67:ce:9f:ba:af:d5:6e:67:0a:97:25:bf:6a: 65:cf:e0:93:df:19:c0:a9:3e:be:82:0b:ba:80:90:53:36:8a: 2e:60:05:c5:76:55:87:c0:34:da:1a:73:5b:59:12:58:da:3a: 4f:0b:5b:17:87:14:8f:f8:b2:6b:90:c4:43:1b:c0:b4:a2:9f: c0:3c:34:58:1a:da:fc:e9:a0:b5:3d:e0:a2:a6:80:38:fd:e0: a8:4e:0e:99 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y0COVrzXvCNvAef6l/oMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWNlYTgyNzgwOTM0MDM0N2ZkNjYyYTc1NGMyNDhjMjllZWIyYWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS3ngiPrhBWHixscSTFVMOBoMty7 6c/ZCADEts8p22PMkeovPBlGUBjScC4M+DnjJFDjQ8UHsOiihtLWgKLsyfnID/BE 4WQi7ogBWxJj9u/XOYXh46wkp3rzkU+UDx5eC3dZr8GxK6LXqo1VjTm2KdmxTPuX sbWi+MBHieCk6fM6BPHI5DjMY/P/EbduaBAEyzKWsfBOa7umr06/6dMQgktxs2cQ qAfqqYdmYRrSCCXkL5nLQTY+FPQvz3BTkT2lKJvcVoU5RgXWlLWg1nuXNE1dnM+x Bz5aM8GCjOXSyC5d+wZwYRt/DpBpyUUBiBR18rWuHeIBw23PepsxOgDsjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJnOqCeAk0A0f9Zip1TCSMKe6yr8MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvbWM2b0o0Q1RRRFJfMW1LblZNSkl3cDdyS3Z3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/OcMA0G CSqGSIb3DQEBCwUAA4IBAQADU25I1gUwOTXykl+cozy01xUM6lhe7WEj5N3tJB8t 4MW0p0PQ20Gn7B6PL75mwkEhX4ULx9FLV419DozvE6zzeLNxZ5R7l8PssGPABzGv y1V/8+suX1FM2iIMbb8hTuT4yHyxqwVCz8w6Chp00WP2LY8uim/jFVaWWE6GLH6r PmJNF6fauVKmj53wmakurOnk/Nq12QqHM3tLle3SzIbojCHXzuMwpmfOn7qv1W5n Cpclv2plz+CT3xnAqT6+ggu6gJBTNoouYAXFdlWHwDTaGnNbWRJY2jpPC1sXhxSP +LJrkMRDG8C0op/APDRYGtr86aC1PeCipoA4/eCoTg6Z -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:41 2026 by rpki-client