This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/n7sPKTX3UcngsqGNs4ENKw3EEXU.roa File: n7sPKTX3UcngsqGNs4ENKw3EEXU.roa (raw, json) Hash identifier: ji1jfJ67ZA7NsxtJ5RYDKOPzayIpJ3TSxHKbkaMtiQU= Subject key identifier: 9F:BB:0F:29:35:F7:51:C9:E0:B2:A1:8D:B3:81:0D:2B:0D:C4:11:75 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB457A7127FA97DDD34BB906EB8F44 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/n7sPKTX3UcngsqGNs4ENKw3EEXU.roa Signing time: Fri 02 Jan 2026 08:20:32 +0000 ROA not before: Fri 02 Jan 2026 08:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62563 IP address blocks: 151.245.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:45:7a:71:27:fa:97:dd:d3:4b:b9:06:eb:8f:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fbb0f2935f751c9e0b2a18db3810d2b0dc41175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a9:d0:9d:28:26:ea:fd:6b:7c:bb:4a:48:91: 80:45:e8:69:3b:c8:98:ba:f8:70:ca:21:35:d4:ea: e0:6f:06:b3:89:15:6f:bd:f9:42:52:66:5d:79:2f: 87:90:a8:52:67:66:d5:89:a3:24:e3:8c:40:ac:31: 25:9e:eb:c0:3f:4e:b2:95:8e:db:fa:61:43:66:c5: 64:90:a8:dc:07:2c:54:51:e3:4a:c1:93:da:80:24: e2:fb:43:1e:c6:e5:7d:19:45:5a:b7:a5:24:14:86: 10:55:a5:c8:e4:c1:73:4f:f4:50:51:65:0c:39:36: 3d:1c:94:91:d2:12:a2:d0:e6:fc:ee:e5:9d:09:d2: 17:89:aa:ae:b7:cc:83:e9:1b:de:55:d0:e8:ab:72: 27:e2:1f:99:53:20:4c:d8:e4:a8:67:e2:e7:f2:9e: ab:34:a7:68:0a:f4:97:e5:55:bf:a5:22:09:95:5b: bc:e8:51:78:f0:d1:ef:7e:bc:aa:e9:b2:d4:4f:c8: 75:eb:8a:02:f4:9d:de:aa:28:7e:cf:da:4a:77:e8: 2e:64:b6:9c:e7:ed:da:1e:76:d9:51:f9:bf:f7:20: 96:b9:de:55:a8:a6:c9:89:25:cd:bc:8e:a7:e7:61: 6f:85:00:75:9a:09:00:0f:fe:81:34:ac:cd:e7:5c: 22:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BB:0F:29:35:F7:51:C9:E0:B2:A1:8D:B3:81:0D:2B:0D:C4:11:75 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/n7sPKTX3UcngsqGNs4ENKw3EEXU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.245.246.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:b9:0c:86:69:28:d4:1f:45:a7:7d:d0:3f:d9:55:f2:ce:25: cb:3b:36:03:07:2b:5b:3f:41:e7:0c:d3:e3:c5:19:ae:0d:39: 92:62:04:0e:ea:2a:ff:ad:92:6e:cf:f8:23:25:86:b2:67:f5: 93:cf:45:6b:57:03:66:c9:1d:8d:b3:eb:6b:b4:02:72:f5:49: 1f:24:6e:e4:e2:cc:84:4f:d3:7e:31:b4:9d:77:dc:69:d4:a6: 36:77:d2:78:e4:f9:de:a2:7b:2c:99:84:cb:23:fc:a8:ae:26: 0f:81:eb:d9:15:42:de:09:76:c2:7e:e2:b9:fb:79:6d:97:74: a1:a9:30:a7:e8:77:98:72:be:13:59:e8:15:64:4f:c3:af:a4: 80:ce:fb:5d:69:39:d7:3b:ee:83:5d:6c:83:d8:36:a2:e2:ad: c0:29:19:2e:47:7e:a9:21:cc:a2:4d:dd:df:d7:74:6f:0b:f0: a4:7b:5c:19:75:bc:f4:a0:5c:db:87:56:d0:1d:3e:20:d7:a6: 4c:4f:80:95:2c:8e:e7:77:2e:88:56:bb:ca:4c:8d:2b:22:2f: c4:60:b6:3c:c6:14:44:7e:27:29:8d:94:6f:a5:ff:93:0c:77: 67:a1:37:2e:df:a5:e7:97:a9:87:4b:89:37:08:4d:6f:c3:14: 3d:a5:60:f6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y0V6cSf6l93TS7kG649EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmJiMGYyOTM1Zjc1MWM5ZTBiMmExOGRiMzgxMGQyYjBkYzQxMTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6nQnSgm6v1rfLtKSJGARehpO8iY uvhwyiE11OrgbwaziRVvvflCUmZdeS+HkKhSZ2bViaMk44xArDElnuvAP06ylY7b +mFDZsVkkKjcByxUUeNKwZPagCTi+0MexuV9GUVat6UkFIYQVaXI5MFzT/RQUWUM OTY9HJSR0hKi0Ob87uWdCdIXiaqut8yD6RveVdDoq3In4h+ZUyBM2OSoZ+Ln8p6r NKdoCvSX5VW/pSIJlVu86FF48NHvfryq6bLUT8h164oC9J3eqih+z9pKd+guZLac 5+3aHnbZUfm/9yCWud5VqKbJiSXNvI6n52FvhQB1mgkAD/6BNKzN51wiZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ+7Dyk191HJ4LKhjbOBDSsNxBF1MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvbjdzUEtUWDNVY25nc3FHTnM0RU5LdzNFRVhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/X2MA0G CSqGSIb3DQEBCwUAA4IBAQCKuQyGaSjUH0WnfdA/2VXyziXLOzYDBytbP0HnDNPj xRmuDTmSYgQO6ir/rZJuz/gjJYayZ/WTz0VrVwNmyR2Ns+trtAJy9UkfJG7k4syE T9N+MbSdd9xp1KY2d9J45PneonssmYTLI/yoriYPgevZFULeCXbCfuK5+3ltl3Sh qTCn6HeYcr4TWegVZE/Dr6SAzvtdaTnXO+6DXWyD2Dai4q3AKRkuR36pIcyiTd3f 13RvC/Cke1wZdbz0oFzbh1bQHT4g16ZMT4CVLI7ndy6IVrvKTI0rIi/EYLY8xhRE ficpjZRvpf+TDHdnoTcu36Xnl6mHS4k3CE1vwxQ9pWD2 -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:27 2026 by rpki-client