This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oN_A9UbyFoX5peuooYYTB2tHykg.roa File: oN_A9UbyFoX5peuooYYTB2tHykg.roa (raw, json) Hash identifier: Tq1of3rxv06cWQKAqCUUSk1Zi57Vp57AJtx2vb8/MPU= Subject key identifier: A0:DF:C0:F5:46:F2:16:85:F9:A5:EB:A8:A1:86:13:07:6B:47:CA:48 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB8970405E01375B7E545E3707F1A7 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oN_A9UbyFoX5peuooYYTB2tHykg.roa Signing time: Fri 02 Jan 2026 08:20:49 +0000 ROA not before: Fri 02 Jan 2026 08:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212336 IP address blocks: 151.241.88.0/24 maxlen: 24 151.242.11.0/24 maxlen: 24 151.242.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:89:70:40:5e:01:37:5b:7e:54:5e:37:07:f1:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0dfc0f546f21685f9a5eba8a18613076b47ca48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:41:fa:84:e3:17:3e:81:9c:dd:96:78:c8:49: 4c:a1:38:d5:78:6b:f6:0c:be:59:98:97:c7:29:a9: 59:73:ff:93:05:1a:1c:a2:8e:20:07:ac:4b:25:49: 6b:68:9f:b7:0a:7a:2b:bf:9f:5d:75:87:48:82:5a: e5:e2:92:15:4c:9a:db:ca:e2:9b:c1:d3:b5:ea:5e: cc:4f:3b:0f:70:5c:fd:54:69:19:96:55:93:5d:d9: 8c:6f:6c:3c:ae:ed:ca:67:34:86:3e:ef:97:87:77: e2:ca:f8:bd:e9:d0:08:cd:8f:93:88:ad:04:c0:ce: 93:7e:92:ef:63:de:d4:65:fe:dc:00:ff:70:95:46: 57:45:39:ce:bd:95:51:f4:e0:e9:b7:be:4f:ba:67: de:74:a5:f7:86:bf:9f:61:5f:02:1d:d1:9d:17:15: db:ec:66:e6:a0:54:ca:12:86:e6:49:7a:78:78:2a: 24:a0:b9:52:ae:4c:40:cc:85:2e:5c:ed:4c:1d:41: af:64:35:95:d5:3c:64:de:c4:39:bd:98:2e:a0:0a: 87:04:0c:ac:15:47:59:2d:43:09:2c:30:22:3d:cb: 62:00:8c:1c:7d:43:bd:c2:2d:ff:3b:48:09:9b:fe: 94:e8:a8:d7:d4:b6:ef:9c:b4:00:78:43:57:25:85: ec:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DF:C0:F5:46:F2:16:85:F9:A5:EB:A8:A1:86:13:07:6B:47:CA:48 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oN_A9UbyFoX5peuooYYTB2tHykg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.88.0/24 151.242.11.0/24 151.242.188.0/23 Signature Algorithm: sha256WithRSAEncryption 04:38:76:0e:2a:a8:32:a9:3c:89:07:55:54:48:f6:df:e3:ab: c2:c1:90:9c:8d:f8:93:e2:6b:b5:86:19:96:7d:dc:09:b9:8c: 67:a0:c3:26:4b:5f:9a:e3:62:35:e9:34:88:47:76:62:29:b4: 71:6d:45:ac:4c:a1:d1:0a:d3:a3:c7:b4:79:78:79:f1:b8:21: fb:80:ec:7d:90:aa:93:70:4b:94:02:30:80:5f:f1:7c:6c:73: 03:10:06:4a:fe:88:bc:22:18:dc:17:2a:66:67:a8:ae:65:81: 8d:da:de:a7:96:89:ef:dc:15:fc:94:eb:40:48:10:c9:03:f1: bc:07:66:26:f7:03:4b:9b:ec:41:fe:c9:29:54:0d:7f:45:6a: 81:77:94:d3:25:e5:9d:fe:6f:53:c0:38:79:85:b9:10:22:b3: 3c:7b:86:97:49:84:39:50:13:44:e5:55:13:de:05:56:a9:19: e5:43:7d:90:1d:56:77:00:f9:07:ef:55:a4:f3:c6:b7:39:a5: 98:b1:2a:2e:ef:01:f5:ef:84:23:5b:10:48:e4:10:35:42:66: f8:ad:9f:4e:4a:be:a1:3d:b8:ae:f8:14:54:ff:21:47:69:c9: 9f:8f:68:38:97:9f:f5:6c:ae:28:40:fe:28:3a:a7:30:66:62: e4:18:b3:e4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9y4lwQF4BN1t+VF43B/GnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGRmYzBmNTQ2ZjIxNjg1ZjlhNWViYThhMTg2MTMwNzZiNDdjYTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskH6hOMXPoGc3ZZ4yElMoTjVeGv2 DL5ZmJfHKalZc/+TBRocoo4gB6xLJUlraJ+3Cnorv59ddYdIglrl4pIVTJrbyuKb wdO16l7MTzsPcFz9VGkZllWTXdmMb2w8ru3KZzSGPu+Xh3fiyvi96dAIzY+TiK0E wM6TfpLvY97UZf7cAP9wlUZXRTnOvZVR9ODpt75PumfedKX3hr+fYV8CHdGdFxXb 7GbmoFTKEobmSXp4eCokoLlSrkxAzIUuXO1MHUGvZDWV1Txk3sQ5vZguoAqHBAys FUdZLUMJLDAiPctiAIwcfUO9wi3/O0gJm/6U6KjX1LbvnLQAeENXJYXsjQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKDfwPVG8haF+aXrqKGGEwdrR8pIMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvb05fQTlVYnlGb1g1cGV1b29ZWVRCMnRIeWtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/FYAwQA l/ILAwQBl/K8MA0GCSqGSIb3DQEBCwUAA4IBAQAEOHYOKqgyqTyJB1VUSPbf46vC wZCcjfiT4mu1hhmWfdwJuYxnoMMmS1+a42I16TSIR3ZiKbRxbUWsTKHRCtOjx7R5 eHnxuCH7gOx9kKqTcEuUAjCAX/F8bHMDEAZK/oi8IhjcFypmZ6iuZYGN2t6nlonv 3BX8lOtASBDJA/G8B2Ym9wNLm+xB/skpVA1/RWqBd5TTJeWd/m9TwDh5hbkQIrM8 e4aXSYQ5UBNE5VUT3gVWqRnlQ32QHVZ3APkH71Wk88a3OaWYsSou7wH174QjWxBI 5BA1Qmb4rZ9OSr6hPbiu+BRU/yFHacmfj2g4l5/1bK4oQP4oOqcwZmLkGLPk -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:27 2026 by rpki-client