This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/r3BqgT2iSbUxIbKu0O2TuAahyYg.roa File: r3BqgT2iSbUxIbKu0O2TuAahyYg.roa (raw, json) Hash identifier: Xh6iWblg55O6M63ARzsLnK/1q5RoRX52dEEDoDDxtt0= Subject key identifier: AF:70:6A:81:3D:A2:49:B5:31:21:B2:AE:D0:ED:93:B8:06:A1:C9:88 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB9C6460DD70564AEBB0AB45C7B7E8 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/r3BqgT2iSbUxIbKu0O2TuAahyYg.roa Signing time: Fri 02 Jan 2026 08:20:54 +0000 ROA not before: Fri 02 Jan 2026 08:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215152 IP address blocks: 151.243.157.0/24 maxlen: 24 151.247.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:9c:64:60:dd:70:56:4a:eb:b0:ab:45:c7:b7:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af706a813da249b53121b2aed0ed93b806a1c988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ba:70:3d:5e:b3:0f:6a:56:4f:49:0f:ec:38: 50:0e:b2:be:a1:5c:3b:c3:f2:10:7f:dc:44:5b:1a: 08:a7:aa:63:e0:18:24:80:95:eb:40:29:ef:70:ef: 4b:de:82:ef:9d:f3:e8:3c:fa:50:b4:92:71:c4:bc: 99:d1:5e:cb:c3:34:5a:ac:36:5e:69:94:8d:61:9f: 16:7e:38:3d:e6:12:1d:eb:7a:c9:15:fd:af:fb:49: b1:ad:20:8a:b2:c1:ae:83:a1:17:74:80:2f:80:1c: 5f:fa:18:71:9e:35:17:e6:94:98:73:0e:2d:fb:06: 77:ea:ea:49:63:aa:ea:37:ba:5e:08:56:53:3d:ff: 2f:80:ba:ca:9e:69:7f:24:5d:13:22:c5:48:88:76: 35:ee:ac:ea:f7:b7:a4:2b:56:1f:1c:ae:2f:d4:78: 66:78:71:bd:a0:51:99:11:c2:ea:dc:b2:2c:51:74: ee:13:79:40:20:8e:47:9e:cc:02:6e:6c:8e:d2:01: 30:e3:bb:c7:c4:97:dc:47:7a:5c:81:39:0f:05:c3: a0:07:25:b1:90:64:53:bc:39:07:bc:c0:f4:f9:6e: ee:10:5a:6b:91:f8:d1:2d:41:a1:cd:7f:d2:8e:07: 40:0f:bd:bc:e3:e3:34:b8:93:48:fd:0c:80:3f:cd: 64:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:70:6A:81:3D:A2:49:B5:31:21:B2:AE:D0:ED:93:B8:06:A1:C9:88 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/r3BqgT2iSbUxIbKu0O2TuAahyYg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.157.0/24 151.247.194.0/24 Signature Algorithm: sha256WithRSAEncryption b9:6f:01:6f:04:23:77:de:e0:7c:96:0b:88:50:21:4f:46:56: ea:3c:13:d7:39:81:cc:93:88:aa:ce:ff:ea:9b:bb:89:78:7d: 20:12:cf:fe:c5:2c:2c:13:12:09:1b:08:ff:c9:1b:0d:2d:05: 28:fa:0e:d1:2a:25:5a:18:29:bb:17:c4:82:4f:fc:0e:56:6f: 99:f6:fb:78:0e:ee:08:cd:fc:2f:89:e0:58:7d:3a:c0:90:9e: d8:73:87:2e:27:0f:8d:db:89:38:e1:e2:2b:3a:7c:50:85:73: 4e:58:d6:77:f1:0a:12:2e:b6:91:63:06:84:33:a9:d5:65:0a: 41:f0:da:22:9c:0f:2a:88:b2:6d:18:61:53:d1:74:c9:b7:c9: 8a:a3:ce:0e:f7:49:35:1c:ed:d3:3c:75:b6:c2:fc:cf:93:ae: 82:ef:5c:9e:58:22:10:10:0f:23:57:5e:2b:79:12:44:eb:3a: ee:5a:56:f1:02:75:67:9f:d9:3e:35:db:bd:61:36:fa:98:07: 02:f1:eb:67:79:82:b0:a1:42:4f:19:09:3b:f4:6d:cb:3c:4a: 99:a3:4c:85:71:81:ee:30:ee:8e:ec:e3:38:23:51:74:87:6a: cd:74:4d:40:1b:de:51:2a:8f:74:b0:58:17:ae:86:db:ab:44: f3:eb:e3:68 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y5xkYN1wVkrrsKtFx7foMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjcwNmE4MTNkYTI0OWI1MzEyMWIyYWVkMGVkOTNiODA2YTFjOTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LpwPV6zD2pWT0kP7DhQDrK+oVw7 w/IQf9xEWxoIp6pj4BgkgJXrQCnvcO9L3oLvnfPoPPpQtJJxxLyZ0V7LwzRarDZe aZSNYZ8Wfjg95hId63rJFf2v+0mxrSCKssGug6EXdIAvgBxf+hhxnjUX5pSYcw4t +wZ36upJY6rqN7peCFZTPf8vgLrKnml/JF0TIsVIiHY17qzq97ekK1YfHK4v1Hhm eHG9oFGZEcLq3LIsUXTuE3lAII5HnswCbmyO0gEw47vHxJfcR3pcgTkPBcOgByWx kGRTvDkHvMD0+W7uEFprkfjRLUGhzX/SjgdAD7284+M0uJNI/QyAP81kIwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK9waoE9okm1MSGyrtDtk7gGocmIMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvcjNCcWdUMmlTYlV4SWJLdTBPMlR1QWFoeVlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/OdAwQA l/fCMA0GCSqGSIb3DQEBCwUAA4IBAQC5bwFvBCN33uB8lguIUCFPRlbqPBPXOYHM k4iqzv/qm7uJeH0gEs/+xSwsExIJGwj/yRsNLQUo+g7RKiVaGCm7F8SCT/wOVm+Z 9vt4Du4IzfwvieBYfTrAkJ7Yc4cuJw+N24k44eIrOnxQhXNOWNZ38QoSLraRYwaE M6nVZQpB8NoinA8qiLJtGGFT0XTJt8mKo84O90k1HO3TPHW2wvzPk66C71yeWCIQ EA8jV14reRJE6zruWlbxAnVnn9k+Ndu9YTb6mAcC8etneYKwoUJPGQk79G3LPEqZ o0yFcYHuMO6O7OM4I1F0h2rNdE1AG95RKo90sFgXrobbq0Tz6+No -----END CERTIFICATE-----Generated at Sat Jan 10 22:50:57 2026 by rpki-client