This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pVDE0qhKiyVSXVrbiM-RXXDfbJ8.roa File: pVDE0qhKiyVSXVrbiM-RXXDfbJ8.roa (raw, json) Hash identifier: wwEzIcrGPVXSqzyt08mO9iR4cqV00yeSSO3A2+aQ2/w= Subject key identifier: A5:50:C4:D2:A8:4A:8B:25:52:5D:5A:DB:88:CF:91:5D:70:DF:6C:9F Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB8F6E1C569CADC6F8CE32A38C828A Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pVDE0qhKiyVSXVrbiM-RXXDfbJ8.roa Signing time: Fri 02 Jan 2026 08:20:51 +0000 ROA not before: Fri 02 Jan 2026 08:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213800 IP address blocks: 151.243.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:8f:6e:1c:56:9c:ad:c6:f8:ce:32:a3:8c:82:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a550c4d2a84a8b25525d5adb88cf915d70df6c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:62:94:74:9a:77:22:29:b5:48:02:e8:b3:3b: 1b:52:6e:08:5c:6a:14:e8:9d:3a:a9:0a:e0:51:ed: 44:d6:bc:3a:6c:56:34:32:05:a1:dd:38:57:26:42: 4a:33:a2:a4:a3:80:56:23:5a:03:17:9d:35:ae:0c: 3b:93:91:74:7d:02:4d:34:b5:71:c4:0b:45:24:a9: ac:5b:89:3f:c7:63:0f:97:11:b9:cb:76:1b:e8:c8: a0:55:8d:42:a9:f7:f5:6f:18:87:cb:ed:2d:21:ab: 0e:9d:9e:d2:b1:5d:e0:fa:a2:1d:41:42:f1:2f:48: 02:76:80:85:ac:d8:dd:2a:13:a8:ff:93:07:c1:16: 10:6a:3c:aa:fb:03:f1:20:6f:1b:96:dc:9e:f5:3c: 98:50:5b:23:c3:ff:b6:1a:69:dc:ba:6b:bd:a5:5d: 87:b9:60:e1:ba:e4:13:1a:8d:15:ab:cd:23:a8:4c: cd:1e:58:7e:1a:6c:e8:47:a3:16:8c:95:f8:a9:6d: 04:18:4c:17:a7:8e:2f:14:93:45:42:20:9a:31:31: f2:f3:47:5d:d8:de:17:b6:07:61:a4:80:89:84:aa: 3e:dc:88:f8:dc:3f:73:5d:0b:81:f1:fb:ec:96:dd: 99:dd:0d:fc:ba:86:3e:04:14:42:e2:d7:0b:f6:10: 3e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:50:C4:D2:A8:4A:8B:25:52:5D:5A:DB:88:CF:91:5D:70:DF:6C:9F X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pVDE0qhKiyVSXVrbiM-RXXDfbJ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.151.0/24 Signature Algorithm: sha256WithRSAEncryption 30:8e:27:9e:8c:99:e3:cc:9d:65:67:7a:2d:35:e4:ef:db:02: 6b:5a:8d:a3:10:3e:38:90:b2:53:80:6c:82:a2:76:72:49:33: 7c:0c:48:1e:cb:a1:63:b6:8c:f4:27:fc:20:95:7c:5e:d0:7d: f8:a5:cd:30:95:ef:a3:f5:70:a0:7f:80:98:49:e8:0c:ba:47: 43:9c:46:98:97:aa:f6:37:56:95:10:ef:10:da:53:a0:dd:2b: 83:a2:e1:04:02:fb:6a:a1:c8:2a:f4:b1:28:70:84:05:59:03: f8:8c:40:c3:ff:cf:9f:87:5e:fb:25:31:dd:f3:b9:8b:4c:6b: 03:4e:60:6c:b6:f8:58:50:4c:fb:c1:cb:8e:d8:44:db:4d:82: 4f:2b:e5:3e:8d:dd:ac:58:df:b7:01:c1:ca:fc:98:16:3f:b3: fc:77:8a:25:f2:1d:69:8e:fc:f1:86:78:46:32:a4:08:a4:58: ac:9c:80:85:ee:7d:b1:da:0b:fc:7b:a4:25:a7:d0:e2:0a:47: 9a:93:84:e0:9d:af:dd:51:b1:06:99:79:b1:8c:44:5b:68:2b: 44:e4:f6:aa:f9:d3:09:bd:f0:39:7b:96:e8:7b:65:79:da:79: 32:a0:2c:2e:dd:3a:57:c9:5a:52:98:c6:84:c2:36:89:08:2d: bb:18:15:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y49uHFacrcb4zjKjjIKKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNTUwYzRkMmE4NGE4YjI1NTI1ZDVhZGI4OGNmOTE1ZDcwZGY2YzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WKUdJp3Iim1SALoszsbUm4IXGoU 6J06qQrgUe1E1rw6bFY0MgWh3ThXJkJKM6Kko4BWI1oDF501rgw7k5F0fQJNNLVx xAtFJKmsW4k/x2MPlxG5y3Yb6MigVY1Cqff1bxiHy+0tIasOnZ7SsV3g+qIdQULx L0gCdoCFrNjdKhOo/5MHwRYQajyq+wPxIG8bltye9TyYUFsjw/+2Gmncumu9pV2H uWDhuuQTGo0Vq80jqEzNHlh+GmzoR6MWjJX4qW0EGEwXp44vFJNFQiCaMTHy80dd 2N4XtgdhpICJhKo+3Ij43D9zXQuB8fvslt2Z3Q38uoY+BBRC4tcL9hA+KwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKVQxNKoSoslUl1a24jPkV1w32yfMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvcFZERTBxaEtpeVZTWFZyYmlNLVJYWERmYko4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/OXMA0G CSqGSIb3DQEBCwUAA4IBAQAwjieejJnjzJ1lZ3otNeTv2wJrWo2jED44kLJTgGyC onZySTN8DEgey6Fjtoz0J/wglXxe0H34pc0wle+j9XCgf4CYSegMukdDnEaYl6r2 N1aVEO8Q2lOg3SuDouEEAvtqocgq9LEocIQFWQP4jEDD/8+fh177JTHd87mLTGsD TmBstvhYUEz7wcuO2ETbTYJPK+U+jd2sWN+3AcHK/JgWP7P8d4ol8h1pjvzxhnhG MqQIpFisnICF7n2x2gv8e6Qlp9DiCkeak4Tgna/dUbEGmXmxjERbaCtE5Paq+dMJ vfA5e5boe2V52nkyoCwu3TpXyVpSmMaEwjaJCC27GBWv -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:34 2026 by rpki-client