This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/r9-QF7G7UwutXtvOF2MZo5l-kOk.roa File: r9-QF7G7UwutXtvOF2MZo5l-kOk.roa (raw, json) Hash identifier: 9+c2r5sf1M5/C04F0dAc9JrwokjMdtHBkYOeJa82QUA= Subject key identifier: AF:DF:90:17:B1:BB:53:0B:AD:5E:DB:CE:17:63:19:A3:99:7E:90:E9 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB68EE4D27D4EEE95D5C18C31EBC86 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/r9-QF7G7UwutXtvOF2MZo5l-kOk.roa Signing time: Fri 02 Jan 2026 08:20:41 +0000 ROA not before: Fri 02 Jan 2026 08:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204844 IP address blocks: 151.246.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:68:ee:4d:27:d4:ee:e9:5d:5c:18:c3:1e:bc:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afdf9017b1bb530bad5edbce176319a3997e90e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e9:4b:62:1c:60:a4:de:c9:1a:62:57:cd:fe: c2:5c:dc:1d:44:b0:6e:d5:f0:c5:ac:63:6e:09:20: cc:20:48:64:32:25:46:ae:c8:04:46:7a:d9:42:42: 50:6d:9b:c3:c8:d0:8c:fb:60:7f:33:b8:2a:71:1e: 54:a8:84:58:a1:c6:fe:67:ea:d4:52:34:7b:d3:91: 4d:15:86:35:6c:38:c0:bc:9d:00:50:8e:33:87:c2: 7e:14:d2:25:24:b7:4a:36:63:cc:aa:cb:47:12:cb: d3:00:59:bd:c0:de:91:5e:6a:06:73:18:5f:7c:de: 55:44:02:5a:46:ae:ad:0f:74:c5:10:a6:4e:43:be: c0:96:61:b2:ea:09:87:35:30:06:6d:36:8d:8b:64: c5:c9:20:c6:71:e9:fe:9e:2b:de:c7:66:c1:e6:44: 78:a7:59:e3:e2:f1:48:80:43:f7:07:4a:7e:7c:98: d4:e8:5c:e3:2d:a7:7a:44:c7:0e:ab:1f:d0:e5:16: ab:41:c5:cc:7c:f7:cb:45:fc:98:0d:c1:70:d4:2a: 69:41:85:f3:45:cd:26:f8:ea:25:41:24:db:04:ec: c2:b8:4e:5c:ff:da:c8:72:f3:6c:71:90:1c:b3:d7: 55:f5:d7:24:07:a2:36:3a:2b:71:f4:e2:4f:0a:b1: 75:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DF:90:17:B1:BB:53:0B:AD:5E:DB:CE:17:63:19:A3:99:7E:90:E9 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/r9-QF7G7UwutXtvOF2MZo5l-kOk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.246.244.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:e0:d6:62:77:81:6a:45:7a:ad:e5:76:a6:02:08:24:13:8d: 13:f6:f3:2a:a1:cf:77:ff:2c:d1:d5:8e:8a:70:8c:2e:d3:71: 88:a1:98:a8:b8:32:ab:eb:88:c2:8d:bd:fb:9d:ef:91:e1:62: ea:06:fc:a3:33:3a:a6:1d:26:76:53:b2:cc:88:0f:4f:24:ed: fe:b7:d4:24:5f:df:01:ed:a1:b2:e6:87:5c:d6:19:56:3f:04: 23:2f:28:05:17:bd:4b:c8:25:67:ee:e4:fd:4f:f5:69:45:b5: a6:23:cf:46:1d:c4:51:66:f0:cf:61:72:83:ee:e0:ab:32:85: 6f:3c:32:5a:49:e7:3b:67:8f:1f:15:93:b6:53:1f:f5:06:7c: 53:ff:7d:c2:bf:88:6b:70:fa:9a:78:fc:9c:ce:ca:85:f2:59: 74:51:17:dc:ad:46:ff:7b:9e:42:79:bf:4c:78:fd:c2:71:e2: 2a:73:85:73:16:51:05:6c:b8:85:02:e2:d5:93:81:77:96:dc: 9b:d4:0e:fa:44:4d:bb:6a:e6:ad:ae:63:82:7d:c0:b1:78:3f: 10:78:d3:fb:32:50:68:61:d5:45:cc:d1:61:30:f4:61:05:9d: fb:b3:8e:e6:dc:44:26:b8:56:ee:91:60:73:8f:b0:fe:4c:43: 0a:be:5a:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y2juTSfU7uldXBjDHryGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmRmOTAxN2IxYmI1MzBiYWQ1ZWRiY2UxNzYzMTlhMzk5N2U5MGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxelLYhxgpN7JGmJXzf7CXNwdRLBu 1fDFrGNuCSDMIEhkMiVGrsgERnrZQkJQbZvDyNCM+2B/M7gqcR5UqIRYocb+Z+rU UjR705FNFYY1bDjAvJ0AUI4zh8J+FNIlJLdKNmPMqstHEsvTAFm9wN6RXmoGcxhf fN5VRAJaRq6tD3TFEKZOQ77AlmGy6gmHNTAGbTaNi2TFySDGcen+nivex2bB5kR4 p1nj4vFIgEP3B0p+fJjU6FzjLad6RMcOqx/Q5RarQcXMfPfLRfyYDcFw1CppQYXz Rc0m+OolQSTbBOzCuE5c/9rIcvNscZAcs9dV9dckB6I2Oitx9OJPCrF1AQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK/fkBexu1MLrV7bzhdjGaOZfpDpMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvcjktUUY3RzdVd3V0WHR2T0YyTVpvNWwta09rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/b0MA0G CSqGSIb3DQEBCwUAA4IBAQBd4NZid4FqRXqt5XamAggkE40T9vMqoc93/yzR1Y6K cIwu03GIoZiouDKr64jCjb37ne+R4WLqBvyjMzqmHSZ2U7LMiA9PJO3+t9QkX98B 7aGy5odc1hlWPwQjLygFF71LyCVn7uT9T/VpRbWmI89GHcRRZvDPYXKD7uCrMoVv PDJaSec7Z48fFZO2Ux/1BnxT/33Cv4hrcPqaePyczsqF8ll0URfcrUb/e55Ceb9M eP3CceIqc4VzFlEFbLiFAuLVk4F3ltyb1A76RE27auatrmOCfcCxeD8QeNP7MlBo YdVFzNFhMPRhBZ37s47m3EQmuFbukWBzj7D+TEMKvlrM -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:50 2026 by rpki-client