This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qme8-d7OOcAwaQnBBaUj6dK_8TE.roa File: qme8-d7OOcAwaQnBBaUj6dK_8TE.roa (raw, json) Hash identifier: CmEsisZ30ji5c8YlIVGLwCEaS75mejLGw/WKqph+IXw= Subject key identifier: AA:67:BC:F9:DE:CE:39:C0:30:69:09:C1:05:A5:23:E9:D2:BF:F1:31 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BB5AF7EF7D8992A380C504389A3679AE6 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qme8-d7OOcAwaQnBBaUj6dK_8TE.roa Signing time: Tue 13 Jan 2026 04:48:55 +0000 ROA not before: Tue 13 Jan 2026 04:48:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9457 IP address blocks: 151.246.129.0/24 maxlen: 24 151.246.157.0/24 maxlen: 24 151.247.79.0/24 maxlen: 24 151.247.95.0/24 maxlen: 24 151.247.100.0/24 maxlen: 24 151.247.111.0/24 maxlen: 24 151.247.174.0/24 maxlen: 24 151.247.176.0/24 maxlen: 24 151.247.178.0/24 maxlen: 24 151.247.180.0/24 maxlen: 24 151.247.212.0/24 maxlen: 24 151.247.237.0/24 maxlen: 24 151.247.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b5:af:7e:f7:d8:99:2a:38:0c:50:43:89:a3:67:9a:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 13 04:48:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa67bcf9dece39c0306909c105a523e9d2bff131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:62:7f:ef:e6:aa:1f:e6:89:14:53:80:ed:3e: 2f:80:7f:6c:54:a4:e0:3d:71:74:fb:df:ec:71:ad: 15:63:80:94:01:31:cc:1a:7b:c3:ef:fd:b5:3b:2e: ee:3e:24:36:d9:9d:ca:9e:34:be:db:ee:1a:1d:e3: 9b:b2:55:a3:71:ba:c0:eb:5a:1a:9f:00:4d:f6:fa: f6:48:05:d6:54:e9:f0:75:3b:04:13:e5:f0:7b:74: 0b:f1:b1:83:b6:af:08:19:8c:06:3b:33:93:f0:06: d5:40:c8:da:b6:c4:ec:c3:f9:1e:83:ae:c5:2e:e3: ca:05:61:a2:e9:0e:2f:e7:78:95:36:be:8f:53:44: 12:7f:97:e8:65:90:e6:14:d0:47:28:c5:6a:02:b6: 2f:7b:9a:3d:d9:07:f1:05:fd:8e:ca:17:f4:a7:db: f5:39:2b:6c:8a:e8:8a:7a:2a:ea:41:9f:8c:19:3c: e1:1c:d2:c1:b1:87:eb:75:ed:0f:63:a4:df:15:38: 6d:ff:18:61:14:b0:09:6a:c6:36:1c:84:0a:28:81: 74:5a:51:a4:82:b9:5f:72:aa:10:4c:5b:77:58:04: fd:2f:1a:97:7a:9b:82:ad:57:89:ff:b7:df:65:64: 73:29:5b:dd:13:3f:33:ed:f5:85:96:22:ae:7b:a2: d7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:67:BC:F9:DE:CE:39:C0:30:69:09:C1:05:A5:23:E9:D2:BF:F1:31 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qme8-d7OOcAwaQnBBaUj6dK_8TE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.246.129.0/24 151.246.157.0/24 151.247.79.0/24 151.247.95.0/24 151.247.100.0/24 151.247.111.0/24 151.247.174.0/24 151.247.176.0/24 151.247.178.0/24 151.247.180.0/24 151.247.212.0/24 151.247.237.0/24 151.247.251.0/24 Signature Algorithm: sha256WithRSAEncryption 46:5d:93:15:7a:35:34:9b:93:b1:39:0b:16:d4:39:0a:74:55: f1:e3:3c:69:e3:d3:92:9a:52:e5:17:90:d8:ae:2c:96:41:6f: a3:2e:c8:54:91:34:67:0f:29:d4:1a:66:7a:af:8d:69:1e:29: e2:e1:04:6b:75:ae:5a:13:35:c3:b0:d9:2a:e6:05:59:f2:5c: 83:1d:57:22:3a:16:ba:5a:35:81:ff:b9:29:5f:21:13:5d:ca: c5:4f:65:93:d0:2f:5f:1c:cb:46:17:02:f0:d0:dc:34:ce:c5: a3:9a:c5:a2:da:03:58:63:ff:c5:f5:9a:30:de:58:90:15:fc: 78:a5:65:7b:b0:68:d6:ba:6d:fb:20:a0:41:06:09:3e:4d:be: 2c:cb:45:41:06:15:58:a9:e2:2b:2b:c8:8e:b2:7a:26:83:89: 85:f5:07:3f:9c:19:46:22:a7:e6:74:fd:a8:ec:d2:e5:b1:33: 75:6e:bc:23:4f:72:a5:82:a5:98:b0:94:13:13:4f:f7:eb:b1: bf:ac:6c:f9:ec:cc:1b:b5:cb:56:13:0a:42:cf:0f:8b:97:fb: 0d:92:70:a7:f9:9c:f7:f7:03:f5:8c:75:a4:6a:30:ee:e5:55: 4f:27:66:3f:13:ab:70:ce:d4:31:a1:31:7c:c4:e6:96:54:8d: e6:7d:c6:ff -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZu1r3732JkqOAxQQ4mjZ5rmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTEzMDQ0ODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTY3YmNmOWRlY2UzOWMwMzA2OTA5YzEwNWE1MjNlOWQyYmZmMTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42J/7+aqH+aJFFOA7T4vgH9sVKTg PXF0+9/sca0VY4CUATHMGnvD7/21Oy7uPiQ22Z3KnjS+2+4aHeObslWjcbrA61oa nwBN9vr2SAXWVOnwdTsEE+Xwe3QL8bGDtq8IGYwGOzOT8AbVQMjatsTsw/keg67F LuPKBWGi6Q4v53iVNr6PU0QSf5foZZDmFNBHKMVqArYve5o92QfxBf2Oyhf0p9v1 OStsiuiKeirqQZ+MGTzhHNLBsYfrde0PY6TfFTht/xhhFLAJasY2HIQKKIF0WlGk grlfcqoQTFt3WAT9LxqXepuCrVeJ/7ffZWRzKVvdEz8z7fWFliKue6LXawIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFKpnvPnezjnAMGkJwQWlI+nSv/ExMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvcW1lOC1kN09PY0F3YVFuQkJhVWo2ZEtfOFRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQAl/aBAwQA l/adAwQAl/dPAwQAl/dfAwQAl/dkAwQAl/dvAwQAl/euAwQAl/ewAwQAl/eyAwQA l/e0AwQAl/fUAwQAl/ftAwQAl/f7MA0GCSqGSIb3DQEBCwUAA4IBAQBGXZMVejU0 m5OxOQsW1DkKdFXx4zxp49OSmlLlF5DYriyWQW+jLshUkTRnDynUGmZ6r41pHini 4QRrda5aEzXDsNkq5gVZ8lyDHVciOha6WjWB/7kpXyETXcrFT2WT0C9fHMtGFwLw 0Nw0zsWjmsWi2gNYY//F9Zow3liQFfx4pWV7sGjWum37IKBBBgk+Tb4sy0VBBhVY qeIrK8iOsnomg4mF9Qc/nBlGIqfmdP2o7NLlsTN1brwjT3KlgqWYsJQTE0/367G/ rGz57MwbtctWEwpCzw+Ll/sNknCn+Zz39wP1jHWkajDu5VVPJ2Y/E6twztQxoTF8 xOaWVI3mfcb/ -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:27 2026 by rpki-client