This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sECV7tSE3DxPQzR0qLbDTmJZ_b0.roa File: sECV7tSE3DxPQzR0qLbDTmJZ_b0.roa (raw, json) Hash identifier: W9GNssPsUayVzTcLepWv1TTP6Ni0paltzXwOOIC0BV8= Subject key identifier: B0:40:95:EE:D4:84:DC:3C:4F:43:34:74:A8:B6:C3:4E:62:59:FD:BD Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B93417B947A40BF56550D13B100E6FD9C Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sECV7tSE3DxPQzR0qLbDTmJZ_b0.roa Signing time: Tue 06 Jan 2026 12:21:40 +0000 ROA not before: Tue 06 Jan 2026 12:21:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58212 IP address blocks: 151.244.108.0/24 maxlen: 24 151.247.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:93:41:7b:94:7a:40:bf:56:55:0d:13:b1:00:e6:fd:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 6 12:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b04095eed484dc3c4f433474a8b6c34e6259fdbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:eb:21:e0:b1:e7:81:2e:ae:c6:1d:7c:c0:3b: df:ad:6e:77:eb:bb:3a:6d:2a:48:0f:da:9c:b5:9a: 39:8a:bb:55:d1:a4:8f:3f:79:75:2f:ac:a8:a0:c6: ea:1e:ef:56:98:c6:77:65:07:1a:85:fb:4d:3c:1c: 1d:5e:40:51:a3:83:e4:93:4e:b9:18:5a:9a:88:ef: 73:22:97:c3:5d:62:6c:84:61:f5:1f:1e:2d:43:21: 7a:1e:d6:c2:91:9d:ff:ff:df:4f:d6:57:2b:2f:2c: c3:a8:7f:80:c3:0d:b7:c0:1c:1f:94:32:ba:d1:7f: 0d:c4:f3:c5:36:36:f1:76:1a:e2:8c:3b:9e:12:3d: b7:ae:35:01:0a:58:3c:fc:53:cb:ed:22:02:1a:e3: 9d:b0:98:28:4c:af:e8:b5:bf:4b:72:13:91:01:f9: 1d:d0:21:d3:ae:28:09:30:0c:c5:0b:a2:9e:73:7c: 98:a2:49:51:00:a2:41:be:db:38:3b:4d:4c:d3:94: 47:43:52:7c:46:8c:0d:11:bf:95:b5:6b:20:ce:73: 22:42:9b:d6:db:ed:1e:69:b6:9b:cc:e2:0d:da:c1: d7:16:ae:50:f7:09:9c:7c:01:fa:6e:c9:e3:a5:1e: 74:47:e0:06:db:bb:ca:4b:70:17:90:74:17:74:49: ea:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:40:95:EE:D4:84:DC:3C:4F:43:34:74:A8:B6:C3:4E:62:59:FD:BD X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sECV7tSE3DxPQzR0qLbDTmJZ_b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.108.0/24 151.247.205.0/24 Signature Algorithm: sha256WithRSAEncryption 56:4c:61:86:c6:0a:78:3d:fc:24:4f:b8:ec:ca:2f:43:f4:d6: 29:a1:54:cd:cf:c1:a3:55:0f:03:f2:e8:9a:d3:22:cf:96:e6: 51:0f:85:14:25:b2:3e:59:a6:73:38:9e:c6:d6:90:85:ce:28: aa:05:1b:bb:08:5b:97:a4:1a:a8:0a:04:0d:d0:0d:52:bf:f2: 09:dd:5e:f8:68:2a:8b:06:b3:9b:8a:6c:4d:ea:fb:cb:36:04: 8c:59:52:34:f8:77:de:6f:18:8c:ee:a4:6a:92:e1:67:3a:1b: 03:25:89:c0:bf:4b:cd:a4:11:75:5e:f3:01:26:41:cf:4f:92: f5:9c:36:8b:6c:64:51:8d:e1:a5:8e:36:3f:5a:26:87:c8:df: a1:34:3a:b3:9e:33:74:30:1b:22:66:8d:54:30:09:b0:16:d7: 1e:ce:3f:af:e0:47:16:26:73:a9:d4:84:58:77:ce:70:94:a3: ab:0f:6b:03:9f:22:d4:de:6c:57:09:c2:a7:c9:0f:dd:e1:e0: 3e:51:cd:7c:7f:88:dc:b1:2c:92:8b:5c:6b:3f:e2:e8:ef:4f: 60:23:f6:7a:bb:5f:c0:cf:97:2e:15:3e:2d:db:4d:94:7a:b8: bd:1c:9d:a2:e6:c3:24:c0:55:70:79:6e:b3:c7:61:cc:2e:04: ee:b7:3b:9a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuTQXuUekC/VlUNE7EA5v2cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTA2MTIyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDQwOTVlZWQ0ODRkYzNjNGY0MzM0NzRhOGI2YzM0ZTYyNTlmZGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvesh4LHngS6uxh18wDvfrW5367s6 bSpID9qctZo5irtV0aSPP3l1L6yooMbqHu9WmMZ3ZQcahftNPBwdXkBRo4Pkk065 GFqaiO9zIpfDXWJshGH1Hx4tQyF6HtbCkZ3//99P1lcrLyzDqH+Aww23wBwflDK6 0X8NxPPFNjbxdhrijDueEj23rjUBClg8/FPL7SICGuOdsJgoTK/otb9LchORAfkd 0CHTrigJMAzFC6Kec3yYoklRAKJBvts4O01M05RHQ1J8RowNEb+VtWsgznMiQpvW 2+0eababzOIN2sHXFq5Q9wmcfAH6bsnjpR50R+AG27vKS3AXkHQXdEnqSwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLBAle7UhNw8T0M0dKi2w05iWf29MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvc0VDVjd0U0UzRHhQUXpSMHFMYkRUbUpaX2IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/RsAwQA l/fNMA0GCSqGSIb3DQEBCwUAA4IBAQBWTGGGxgp4PfwkT7jsyi9D9NYpoVTNz8Gj VQ8D8uia0yLPluZRD4UUJbI+WaZzOJ7G1pCFziiqBRu7CFuXpBqoCgQN0A1Sv/IJ 3V74aCqLBrObimxN6vvLNgSMWVI0+HfebxiM7qRqkuFnOhsDJYnAv0vNpBF1XvMB JkHPT5L1nDaLbGRRjeGljjY/WiaHyN+hNDqznjN0MBsiZo1UMAmwFtcezj+v4EcW JnOp1IRYd85wlKOrD2sDnyLU3mxXCcKnyQ/d4eA+Uc18f4jcsSySi1xrP+Lo709g I/Z6u1/Az5cuFT4t202Ueri9HJ2i5sMkwFVweW6zx2HMLgTutzua -----END CERTIFICATE-----Generated at Sun Jan 18 06:29:58 2026 by rpki-client