This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/py9f45XFOY4a0Dh5dBlcdv4AS_s.roa File: py9f45XFOY4a0Dh5dBlcdv4AS_s.roa (raw, json) Hash identifier: Z6WhMTO/jPes+I3QvAbFusH4kvTXyEmycOwo2h6028w= Subject key identifier: A7:2F:5F:E3:95:C5:39:8E:1A:D0:38:79:74:19:5C:76:FE:00:4B:FB Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB77DD7223C961BB2F05BE54675824 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/py9f45XFOY4a0Dh5dBlcdv4AS_s.roa Signing time: Fri 02 Jan 2026 08:20:44 +0000 ROA not before: Fri 02 Jan 2026 08:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208686 IP address blocks: 151.240.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:77:dd:72:23:c9:61:bb:2f:05:be:54:67:58:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a72f5fe395c5398e1ad0387974195c76fe004bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bf:38:e5:26:a8:de:ef:d0:4f:33:16:7c:80: 39:a3:ab:90:41:15:a4:c1:0b:c0:04:52:98:c2:5e: 36:1f:71:b4:fb:f1:e6:ec:9f:c1:18:3c:46:a3:70: f6:aa:0d:f4:ec:61:bb:d2:3b:55:68:ea:5a:2e:92: ab:45:3f:c3:bb:f5:0f:05:29:79:fa:ed:34:11:ec: 31:6b:bf:e1:34:aa:60:b3:b8:e0:47:73:23:e3:01: b0:6a:5a:76:2d:e0:8f:5f:29:53:af:65:d2:25:f8: 87:60:a3:a6:df:4a:2c:74:2c:40:5a:4d:a7:da:63: a0:84:17:ad:a1:fe:f5:f0:58:f8:60:2e:91:d4:97: 02:09:a9:44:4c:0c:8b:12:f2:e9:96:47:6a:98:f5: 16:b1:0a:34:6f:a0:2a:59:b1:13:47:7b:ce:fc:12: f1:48:82:9a:9c:d6:f9:79:fb:23:b5:39:3a:80:5d: 0b:37:01:1a:60:ba:48:af:cc:a5:08:5e:c1:03:e9: 38:21:8a:8e:24:ff:4b:5e:3c:1d:18:9d:e7:24:21: a0:9f:d5:a6:20:da:62:95:c0:54:1c:dc:4d:3d:7a: 94:f5:31:bc:40:be:b6:2f:46:6b:0e:e5:31:c7:53: 39:fc:06:76:24:b7:60:b3:61:47:ab:25:5c:b1:9a: 6e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2F:5F:E3:95:C5:39:8E:1A:D0:38:79:74:19:5C:76:FE:00:4B:FB X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/py9f45XFOY4a0Dh5dBlcdv4AS_s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.121.0/24 Signature Algorithm: sha256WithRSAEncryption ae:42:ae:da:b9:cd:72:eb:c0:7f:44:9f:25:c6:7d:97:db:d2: f6:ea:e2:ca:5a:4f:cc:a5:08:37:70:de:79:fd:58:0b:b5:5b: 61:d5:82:61:9e:98:1e:ed:5c:14:22:55:89:4c:7d:73:1a:c1: ae:87:ec:9d:ad:5f:6e:ff:94:8e:1a:75:28:f2:b2:74:df:cd: 54:06:f7:b4:38:ae:7a:26:fd:ad:f5:b5:e3:c6:c5:e6:92:09: 60:71:f4:a0:91:5e:20:80:e1:ea:0e:ca:68:e6:68:da:7b:20: 37:8c:55:eb:20:d9:aa:51:81:6a:15:27:e1:e9:49:12:9e:92: 49:77:a2:c4:06:a0:4d:81:5a:ea:f8:47:37:b1:37:fd:0c:1d: 2f:69:b1:08:3d:22:41:b7:8e:30:24:c1:0a:00:11:64:90:39: 0e:90:26:98:15:4e:8d:73:90:72:7e:88:4d:25:03:e0:4d:70: cf:17:fb:51:8f:33:ae:6e:6b:a1:93:56:d3:3e:b4:83:5f:81: 6b:63:41:c9:7d:b1:7b:4e:74:d3:de:6b:e9:96:b3:7c:d6:e0: 8e:6f:5b:6f:35:1b:61:6c:a7:e9:ed:8a:2f:ce:fb:f3:4d:cc: 35:00:0e:f2:be:d9:a4:cd:9a:d6:5b:86:e9:73:2c:6e:4b:7f: 9d:05:ab:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y3fdciPJYbsvBb5UZ1gkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzJmNWZlMzk1YzUzOThlMWFkMDM4Nzk3NDE5NWM3NmZlMDA0YmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvL845Sao3u/QTzMWfIA5o6uQQRWk wQvABFKYwl42H3G0+/Hm7J/BGDxGo3D2qg307GG70jtVaOpaLpKrRT/Du/UPBSl5 +u00Eewxa7/hNKpgs7jgR3Mj4wGwalp2LeCPXylTr2XSJfiHYKOm30osdCxAWk2n 2mOghBetof718Fj4YC6R1JcCCalETAyLEvLplkdqmPUWsQo0b6AqWbETR3vO/BLx SIKanNb5efsjtTk6gF0LNwEaYLpIr8ylCF7BA+k4IYqOJP9LXjwdGJ3nJCGgn9Wm INpilcBUHNxNPXqU9TG8QL62L0ZrDuUxx1M5/AZ2JLdgs2FHqyVcsZpuawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKcvX+OVxTmOGtA4eXQZXHb+AEv7MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvcHk5ZjQ1WEZPWTRhMERoNWRCbGNkdjRBU19zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/B5MA0G CSqGSIb3DQEBCwUAA4IBAQCuQq7auc1y68B/RJ8lxn2X29L26uLKWk/MpQg3cN55 /VgLtVth1YJhnpge7VwUIlWJTH1zGsGuh+ydrV9u/5SOGnUo8rJ0381UBve0OK56 Jv2t9bXjxsXmkglgcfSgkV4ggOHqDspo5mjaeyA3jFXrINmqUYFqFSfh6UkSnpJJ d6LEBqBNgVrq+Ec3sTf9DB0vabEIPSJBt44wJMEKABFkkDkOkCaYFU6Nc5ByfohN JQPgTXDPF/tRjzOubmuhk1bTPrSDX4FrY0HJfbF7TnTT3mvplrN81uCOb1tvNRth bKfp7YovzvvzTcw1AA7yvtmkzZrWW4bpcyxuS3+dBavh -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:28 2026 by rpki-client