This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nWR0sWgWj6XXM4S42LowKg5LS-c.roa File: nWR0sWgWj6XXM4S42LowKg5LS-c.roa (raw, json) Hash identifier: ZSqvW2bDWNQRH4BS2kxYUUb0y8BZOV4c14uyKsP/AX4= Subject key identifier: 9D:64:74:B1:68:16:8F:A5:D7:33:84:B8:D8:BA:30:2A:0E:4B:4B:E7 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB38D8D9C1EFD8584A545712E2427E Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nWR0sWgWj6XXM4S42LowKg5LS-c.roa Signing time: Fri 02 Jan 2026 08:20:28 +0000 ROA not before: Fri 02 Jan 2026 08:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52041 IP address blocks: 151.244.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:38:d8:d9:c1:ef:d8:58:4a:54:57:12:e2:42:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d6474b168168fa5d73384b8d8ba302a0e4b4be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:cc:94:df:ea:db:a6:e5:12:37:06:d0:df:cf: b8:04:af:16:8e:de:6d:7c:99:38:7c:46:e4:fb:90: 32:6f:d2:29:c9:00:79:f5:e1:dc:a2:89:b7:f1:69: 02:8d:64:fc:6a:9e:b7:6d:ec:93:2f:18:b4:79:d3: 5b:69:aa:12:4e:a5:bd:55:1a:91:25:cd:5a:98:80: 4b:eb:cf:9d:bf:99:bc:4b:94:cd:43:a8:e7:ad:db: 41:96:5e:f8:ce:6d:85:13:1e:74:7b:6f:b7:db:c2: 10:90:46:b4:1d:90:bb:74:1c:73:11:f8:0e:c4:92: d1:82:78:75:f2:bf:22:69:d7:9f:37:81:e5:e7:24: 38:64:e4:d1:3b:93:03:8b:27:5d:5e:b5:e5:38:71: 89:0d:5c:cd:bb:79:26:00:10:d2:74:17:fb:3d:51: b5:08:d0:bc:58:10:15:17:5e:7e:dc:91:69:0b:8e: f6:50:d5:73:62:09:db:b6:37:37:44:79:ac:da:11: 0a:a7:ca:95:4c:f1:d6:b9:01:32:76:12:5b:9f:4f: 3a:69:91:75:f4:38:d4:ea:77:fd:99:df:9b:fb:36: b8:b5:22:75:a2:ad:c9:08:c4:67:74:8b:d4:bf:51: 5d:74:d2:26:6d:21:9b:65:af:a2:12:87:fb:38:3a: 29:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:64:74:B1:68:16:8F:A5:D7:33:84:B8:D8:BA:30:2A:0E:4B:4B:E7 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nWR0sWgWj6XXM4S42LowKg5LS-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.46.0/24 Signature Algorithm: sha256WithRSAEncryption 22:1e:82:bc:61:be:bf:fd:a5:d0:25:3f:01:02:a6:c0:d7:a2: 74:61:98:ed:db:b9:34:5a:0a:cd:75:a8:d2:ec:d9:18:cd:d0: 73:31:02:93:ed:27:e1:21:1b:62:de:aa:41:a6:09:ac:b3:57: 2b:df:56:55:1a:7d:e3:62:cd:45:f9:b5:45:c3:6a:06:b0:67: 24:29:f3:43:54:da:8d:71:a0:8d:ab:31:95:c0:12:21:6d:df: e7:7c:fd:79:c3:ce:18:9e:70:78:78:e9:2c:ba:76:90:1f:27: d4:bb:41:47:b4:9e:16:f1:46:00:b9:a8:fa:98:d5:06:2b:b8: 20:51:69:80:fc:d1:ea:f0:87:a2:0f:03:c4:92:06:cf:43:d0: d1:e8:81:01:af:8e:d6:c9:80:9f:a2:d8:1f:f7:41:05:e6:dc: a1:e4:5b:04:1e:d8:c1:ce:c6:e7:df:5c:eb:9b:4d:3e:3e:4b: eb:9e:df:08:22:4e:81:e2:d6:24:3d:e1:1c:64:e5:5f:9b:99: 5b:54:59:96:cd:57:f8:d9:fa:a0:a0:89:33:03:36:b1:8b:8e: 84:51:65:3d:7e:c9:f9:31:73:8f:6f:a4:c3:d3:53:12:8b:04: 9f:18:68:f3:e0:9a:b3:d4:3d:69:94:8f:e9:88:7f:90:3a:0f: fb:bc:9b:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yzjY2cHv2FhKVFcS4kJ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDY0NzRiMTY4MTY4ZmE1ZDczMzg0YjhkOGJhMzAyYTBlNGI0YmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsyU3+rbpuUSNwbQ38+4BK8Wjt5t fJk4fEbk+5Ayb9IpyQB59eHcoom38WkCjWT8ap63beyTLxi0edNbaaoSTqW9VRqR Jc1amIBL68+dv5m8S5TNQ6jnrdtBll74zm2FEx50e2+328IQkEa0HZC7dBxzEfgO xJLRgnh18r8iadefN4Hl5yQ4ZOTRO5MDiyddXrXlOHGJDVzNu3kmABDSdBf7PVG1 CNC8WBAVF15+3JFpC472UNVzYgnbtjc3RHms2hEKp8qVTPHWuQEydhJbn086aZF1 9DjU6nf9md+b+za4tSJ1oq3JCMRndIvUv1FddNImbSGbZa+iEof7ODopswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ1kdLFoFo+l1zOEuNi6MCoOS0vnMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvbldSMHNXZ1dqNlhYTTRTNDJMb3dLZzVMUy1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/QuMA0G CSqGSIb3DQEBCwUAA4IBAQAiHoK8Yb6//aXQJT8BAqbA16J0YZjt27k0WgrNdajS 7NkYzdBzMQKT7SfhIRti3qpBpgmss1cr31ZVGn3jYs1F+bVFw2oGsGckKfNDVNqN caCNqzGVwBIhbd/nfP15w84YnnB4eOksunaQHyfUu0FHtJ4W8UYAuaj6mNUGK7gg UWmA/NHq8IeiDwPEkgbPQ9DR6IEBr47WyYCfotgf90EF5tyh5FsEHtjBzsbn31zr m00+Pkvrnt8IIk6B4tYkPeEcZOVfm5lbVFmWzVf42fqgoIkzAzaxi46EUWU9fsn5 MXOPb6TD01MSiwSfGGjz4Jqz1D1plI/piH+QOg/7vJtS -----END CERTIFICATE-----Generated at Sun Jan 18 06:28:46 2026 by rpki-client