This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rKZ9IcrBDCLIWJrsgmKCojGhV7k.roa File: rKZ9IcrBDCLIWJrsgmKCojGhV7k.roa (raw, json) Hash identifier: qdtRXMzzWdqLMRhWFAKaP9JfTnJ+KEjL3TUGGB9eTu0= Subject key identifier: AC:A6:7D:21:CA:C1:0C:22:C8:58:9A:EC:82:62:82:A2:31:A1:57:B9 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB5E2D2626E5274590AB3213AD4EB1 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rKZ9IcrBDCLIWJrsgmKCojGhV7k.roa Signing time: Fri 02 Jan 2026 08:20:38 +0000 ROA not before: Fri 02 Jan 2026 08:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198831 IP address blocks: 151.242.159.0/24 maxlen: 24 151.242.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5e:2d:26:26:e5:27:45:90:ab:32:13:ad:4e:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aca67d21cac10c22c8589aec826282a231a157b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e6:0c:59:60:f1:a0:f5:36:6f:b3:13:10:f2: 61:93:45:3c:7a:65:40:16:47:ed:53:4c:8a:6c:c5: 20:7c:59:e0:7b:4b:ef:31:61:7d:3f:9e:73:88:77: 77:92:24:e8:3f:63:5c:10:76:02:3c:b5:b0:26:03: e1:10:e5:8a:d8:05:ea:f8:a9:95:01:24:d8:af:4c: c8:b8:dd:ed:aa:e3:01:ba:c5:8f:77:b7:9b:1f:80: e4:cc:62:1c:9b:cc:71:ad:75:82:8e:7e:9f:6e:ff: 16:bc:b9:07:13:76:63:c2:04:13:5e:2b:11:63:57: 1c:1f:9f:e2:5a:d8:a9:06:a7:aa:70:b0:f7:c9:9a: 11:cc:51:d4:79:97:85:e8:85:9c:6b:de:29:80:c4: 6c:55:2a:d7:83:e1:13:8c:f5:72:69:d8:40:0f:ef: 1b:f7:72:33:da:6b:7f:00:8f:a0:58:ab:98:7a:dc: 2f:7b:c2:71:c9:52:d5:26:5a:a7:49:44:ef:09:cb: 2b:b7:6d:31:80:2b:b3:9c:7e:75:4f:b1:b4:9a:da: b5:4d:0b:1c:da:b5:50:3d:af:14:8c:45:51:62:c8: 3a:3d:dc:5a:07:be:93:71:40:3b:de:14:40:28:86: b4:b9:75:c1:29:0c:4b:e9:13:a4:55:87:34:50:15: 78:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A6:7D:21:CA:C1:0C:22:C8:58:9A:EC:82:62:82:A2:31:A1:57:B9 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rKZ9IcrBDCLIWJrsgmKCojGhV7k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.159.0/24 151.242.255.0/24 Signature Algorithm: sha256WithRSAEncryption 94:7a:0a:f0:0d:7d:d1:65:4a:20:9d:7c:a3:49:6a:30:97:ad: 3a:24:92:79:33:f5:f9:95:b0:7d:d9:2c:43:fc:09:66:53:18: ee:46:ce:f5:b0:5a:13:ba:b2:d2:e1:f1:c3:2d:c4:c3:c2:62: 7d:39:6c:33:c1:37:43:b7:4b:47:f6:c1:eb:03:ef:7b:2b:c9: 99:59:d9:01:fc:73:8d:91:1e:db:8b:53:7f:1b:6f:1c:f0:85: d3:21:83:4a:f2:3f:0a:3b:bc:1a:ba:09:5d:61:8e:9c:61:7b: 7b:26:8e:c7:e3:48:c9:7b:4a:80:e0:24:08:98:f8:3f:d5:29: 56:c5:e1:79:0c:50:0e:d5:d7:f8:99:53:89:82:a4:c9:f9:e5: a8:41:2b:dc:72:b5:0a:54:40:5b:5c:40:d2:c6:77:53:3f:3a: 11:6c:63:71:ab:13:b2:28:a8:d8:bd:5b:b0:75:e6:ca:ad:e6: de:4e:6e:08:52:a5:5a:d6:05:a1:99:51:ad:48:90:8d:1f:80: ed:9a:bc:a3:b5:62:8f:68:26:df:5a:ba:d1:10:d2:f7:3d:4d: 75:d5:73:3d:f9:0f:1a:f8:d7:f8:fc:26:b9:9d:43:0f:b9:66: 7f:6e:7b:28:90:81:cc:ee:1e:2e:4b:c0:ea:1b:50:9c:8c:9e: d4:96:ae:c9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y14tJiblJ0WQqzITrU6xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2E2N2QyMWNhYzEwYzIyYzg1ODlhZWM4MjYyODJhMjMxYTE1N2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeYMWWDxoPU2b7MTEPJhk0U8emVA FkftU0yKbMUgfFnge0vvMWF9P55ziHd3kiToP2NcEHYCPLWwJgPhEOWK2AXq+KmV ASTYr0zIuN3tquMBusWPd7ebH4DkzGIcm8xxrXWCjn6fbv8WvLkHE3ZjwgQTXisR Y1ccH5/iWtipBqeqcLD3yZoRzFHUeZeF6IWca94pgMRsVSrXg+ETjPVyadhAD+8b 93Iz2mt/AI+gWKuYetwve8JxyVLVJlqnSUTvCcsrt20xgCuznH51T7G0mtq1TQsc 2rVQPa8UjEVRYsg6PdxaB76TcUA73hRAKIa0uXXBKQxL6ROkVYc0UBV4ZwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKymfSHKwQwiyFia7IJigqIxoVe5MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvcktaOUljckJEQ0xJV0pyc2dtS0NvakdoVjdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/KfAwQA l/L/MA0GCSqGSIb3DQEBCwUAA4IBAQCUegrwDX3RZUognXyjSWowl606JJJ5M/X5 lbB92SxD/AlmUxjuRs71sFoTurLS4fHDLcTDwmJ9OWwzwTdDt0tH9sHrA+97K8mZ WdkB/HONkR7bi1N/G28c8IXTIYNK8j8KO7waugldYY6cYXt7Jo7H40jJe0qA4CQI mPg/1SlWxeF5DFAO1df4mVOJgqTJ+eWoQSvccrUKVEBbXEDSxndTPzoRbGNxqxOy KKjYvVuwdebKrebeTm4IUqVa1gWhmVGtSJCNH4DtmryjtWKPaCbfWrrRENL3PU11 1XM9+Q8a+Nf4/Ca5nUMPuWZ/bnsokIHM7h4uS8DqG1CcjJ7Ulq7J -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:50 2026 by rpki-client