This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nkNcpuSj6EBeDoGA-Y-nOL11cZ4.roa File: nkNcpuSj6EBeDoGA-Y-nOL11cZ4.roa (raw, json) Hash identifier: npeYPFRSYGz84UX5MWW4KdMp/+FZ2PIaPpasmIbyAoc= Subject key identifier: 9E:43:5C:A6:E4:A3:E8:40:5E:0E:81:80:F9:8F:A7:38:BD:75:71:9E Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B8145E50D9C32164A6D57F08F4F7696AF Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nkNcpuSj6EBeDoGA-Y-nOL11cZ4.roa Signing time: Sat 03 Jan 2026 00:33:19 +0000 ROA not before: Sat 03 Jan 2026 00:33:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207252 IP address blocks: 151.240.157.0/24 maxlen: 24 151.242.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:81:45:e5:0d:9c:32:16:4a:6d:57:f0:8f:4f:76:96:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 3 00:33:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e435ca6e4a3e8405e0e8180f98fa738bd75719e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:49:26:67:35:ca:d4:ba:93:9d:f3:f6:3e:97: be:a9:d9:b4:b6:84:7e:79:1b:36:e1:f6:01:93:4a: ea:48:79:5d:d7:cf:ab:4d:09:0a:b4:bd:d3:c4:ea: 71:1a:40:5c:2b:f6:2c:0a:1d:e5:07:44:b3:e0:f0: 22:36:e6:df:dc:04:50:f4:75:79:97:cb:69:6f:a6: f4:f4:c0:50:55:e1:d9:3a:2e:33:6d:a0:a4:fd:31: 6b:cc:29:27:64:9c:82:13:e0:31:a3:97:7d:60:93: c5:f9:9f:06:97:95:14:f4:32:02:1d:9e:5b:ba:42: 21:03:2a:93:0b:f6:42:39:a0:cb:7d:c7:0f:c4:0e: 50:a5:4f:b0:5f:e7:bf:69:4c:0b:bf:76:eb:37:12: db:5a:9b:78:a5:7f:9c:d1:8b:4d:52:37:59:48:ea: f1:56:d8:3c:6f:b3:6b:04:77:08:1e:20:43:25:68: 4c:23:f7:22:55:27:79:94:5a:af:91:3a:31:a3:a5: 12:9b:6b:8e:c2:21:92:c0:58:c3:ee:d6:ab:c6:4b: 6c:80:ac:f3:3c:68:ca:e5:2a:1a:b4:08:40:c6:bb: dd:32:dd:3a:53:47:29:aa:3d:df:cf:f9:3a:06:a6: 5e:18:2a:36:d7:53:8b:0d:38:df:8d:af:2f:83:cb: 2e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:43:5C:A6:E4:A3:E8:40:5E:0E:81:80:F9:8F:A7:38:BD:75:71:9E X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nkNcpuSj6EBeDoGA-Y-nOL11cZ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.157.0/24 151.242.160.0/22 Signature Algorithm: sha256WithRSAEncryption 90:ab:cc:df:bf:54:db:44:c4:76:59:49:8a:2a:71:3a:e9:b6: af:b6:6c:b0:34:c1:70:fc:53:3a:f8:a6:a5:4f:31:87:ab:3f: 29:9e:63:e1:96:11:f3:eb:d8:af:07:7c:1e:f6:0e:23:e7:42: 70:c3:98:b1:7f:d7:4f:aa:d8:d3:af:38:a8:03:eb:d6:1f:85: b7:84:be:d6:ff:92:17:65:04:99:c3:5d:f3:f1:01:61:34:7e: bf:2b:25:d8:cf:bd:4d:bb:61:9a:f7:1d:18:b1:de:06:91:0e: 10:31:07:3f:59:b0:70:c0:4c:05:f1:7a:b9:e4:c5:43:06:74: 16:3f:3f:57:48:68:87:8f:12:35:3b:e6:6a:9e:38:d0:67:fc: 0e:d1:cb:ad:12:1b:6d:79:52:f1:58:8d:f4:30:ff:76:1d:e5: c7:99:23:3b:92:50:81:79:82:19:b3:86:24:6a:85:5e:0e:78: 64:b9:84:a7:c0:31:63:23:89:df:62:38:a2:85:ab:8b:9f:79: a3:0f:42:35:3b:ef:2e:ba:1e:b3:24:18:db:a0:9a:d0:49:99: d1:54:76:53:16:a1:81:ca:65:f8:e3:19:fe:9a:4d:c4:e9:44: 7c:86:18:50:b7:0b:2e:8e:2b:cf:ea:79:33:3f:2c:2d:bf:9a: e1:21:f0:2f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuBReUNnDIWSm1X8I9PdpavMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAzMDAzMzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTQzNWNhNmU0YTNlODQwNWUwZTgxODBmOThmYTczOGJkNzU3MTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUkmZzXK1LqTnfP2Ppe+qdm0toR+ eRs24fYBk0rqSHld18+rTQkKtL3TxOpxGkBcK/YsCh3lB0Sz4PAiNubf3ARQ9HV5 l8tpb6b09MBQVeHZOi4zbaCk/TFrzCknZJyCE+Axo5d9YJPF+Z8Gl5UU9DICHZ5b ukIhAyqTC/ZCOaDLfccPxA5QpU+wX+e/aUwLv3brNxLbWpt4pX+c0YtNUjdZSOrx Vtg8b7NrBHcIHiBDJWhMI/ciVSd5lFqvkToxo6USm2uOwiGSwFjD7tarxktsgKzz PGjK5SoatAhAxrvdMt06U0cpqj3fz/k6BqZeGCo211OLDTjfja8vg8suOwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ5DXKbko+hAXg6BgPmPpzi9dXGeMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvbmtOY3B1U2o2RUJlRG9HQS1ZLW5PTDExY1o0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/CdAwQC l/KgMA0GCSqGSIb3DQEBCwUAA4IBAQCQq8zfv1TbRMR2WUmKKnE66bavtmywNMFw /FM6+KalTzGHqz8pnmPhlhHz69ivB3we9g4j50Jww5ixf9dPqtjTrzioA+vWH4W3 hL7W/5IXZQSZw13z8QFhNH6/KyXYz71Nu2Ga9x0Ysd4GkQ4QMQc/WbBwwEwF8Xq5 5MVDBnQWPz9XSGiHjxI1O+ZqnjjQZ/wO0cutEhtteVLxWI30MP92HeXHmSM7klCB eYIZs4YkaoVeDnhkuYSnwDFjI4nfYjiihauLn3mjD0I1O+8uuh6zJBjboJrQSZnR VHZTFqGBymX44xn+mk3E6UR8hhhQtwsujivP6nkzPywtv5rhIfAv -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:38 2026 by rpki-client