This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/u5VQAWA_YsVMolh_-13VW9FFskk.roa File: u5VQAWA_YsVMolh_-13VW9FFskk.roa (raw, json) Hash identifier: kKXvF7mzFPdC3S6CU20DbLScqgNdR1BIbh5mjRAfEf8= Subject key identifier: BB:95:50:01:60:3F:62:C5:4C:A2:58:7F:FB:5D:D5:5B:D1:45:B2:49 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019C1E6EED007535161F1240BDEE5CDEE4C4 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/u5VQAWA_YsVMolh_-13VW9FFskk.roa Signing time: Mon 02 Feb 2026 12:58:31 +0000 ROA not before: Mon 02 Feb 2026 12:58:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400031 IP address blocks: 151.247.84.0/22 maxlen: 24 151.247.96.0/22 maxlen: 24 151.247.104.0/22 maxlen: 24 151.247.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 06:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:6e:ed:00:75:35:16:1f:12:40:bd:ee:5c:de:e4:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Feb 2 12:58:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb955001603f62c54ca2587ffb5dd55bd145b249 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:86:2b:33:d9:fe:2c:58:ae:93:d1:7d:cd:59: d4:9a:2d:04:a1:be:00:e5:02:d0:c0:6e:3e:ad:24: e5:4f:1f:0c:9a:89:0c:11:01:75:5a:8b:e8:f8:16: 88:43:b4:13:b4:e5:32:66:02:43:35:1e:2f:c9:65: 1f:22:9c:d9:a5:83:82:c3:47:d5:89:cb:7b:af:ef: 05:7d:8a:6b:53:8c:aa:c8:65:e9:2b:f4:31:02:8e: 5a:ae:fc:0b:41:d6:6c:98:c7:25:da:0d:13:37:30: 0c:a0:66:61:bc:e9:f0:cd:f0:7f:3e:7c:f0:88:ba: 03:25:d5:dd:f4:7c:c2:9f:87:89:a9:f0:8e:da:04: 39:7c:f4:71:57:16:d7:b9:85:12:ac:1a:45:b7:3c: f8:f5:24:dd:1f:bb:e0:06:16:91:92:bf:43:c5:24: 88:00:5f:c8:44:25:43:63:ab:70:62:12:c4:d1:8c: 2c:64:cc:39:a5:a0:4d:5b:ed:c2:b9:f9:0c:dd:86: c3:d1:70:b7:44:f7:be:a4:81:36:96:74:2c:49:cc: c9:f9:6f:f3:4c:67:57:0e:7f:1b:b2:f1:67:d5:0f: 4a:63:c9:09:ad:14:49:e1:49:5b:56:37:0d:dd:86: 4e:12:6a:ee:2d:b8:88:97:5c:ae:4f:35:84:ed:fe: 6a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:95:50:01:60:3F:62:C5:4C:A2:58:7F:FB:5D:D5:5B:D1:45:B2:49 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/u5VQAWA_YsVMolh_-13VW9FFskk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.247.84.0/22 151.247.96.0/22 151.247.104.0/22 151.247.168.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:0e:94:fc:b3:ea:55:2f:22:81:41:f2:a8:d2:2f:e1:50:b8: de:4d:eb:61:65:99:02:2b:cf:4f:f6:4b:28:1e:3d:a3:dd:7b: a0:81:d6:57:ab:66:7a:5c:8b:ec:a8:df:35:83:2b:e2:39:db: 2b:8b:ef:e1:1f:18:c3:0b:a9:08:c9:4c:91:d7:cf:8f:c8:d0: e4:5f:4d:c7:50:14:2d:69:16:d1:83:57:f1:f8:d1:0f:75:28: 7d:0d:cb:a8:46:e0:8e:99:c7:0b:ee:8b:35:29:64:d5:65:69: 62:ba:d9:5a:3d:e8:09:a5:b6:f0:e9:af:29:5a:62:9d:36:3a: e8:6f:60:a7:73:ca:7a:56:f6:dc:4f:0c:3f:ff:53:7a:99:8c: 13:dd:9b:b9:23:0f:89:51:79:c7:a2:cd:4b:24:b7:79:67:c9: 41:ec:e7:cf:51:76:f1:6a:e1:5e:dc:7f:fa:2f:9c:e0:12:d7: 09:7f:e8:44:29:22:5f:ce:6d:1c:f8:06:d1:04:03:8f:b3:9b: e2:7e:c6:46:10:c7:b8:72:63:ea:aa:ce:82:0a:11:7a:ab:bd: 5f:23:65:a3:b4:73:9a:53:db:cf:42:41:95:6c:65:77:20:84: 82:4f:df:da:b1:be:a4:35:70:6c:a1:44:ea:93:fa:84:b7:99: f7:ea:fc:89 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZwebu0AdTUWHxJAve5c3uTEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMjAyMTI1ODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjk1NTAwMTYwM2Y2MmM1NGNhMjU4N2ZmYjVkZDU1YmQxNDViMjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4YrM9n+LFiuk9F9zVnUmi0Eob4A 5QLQwG4+rSTlTx8MmokMEQF1Wovo+BaIQ7QTtOUyZgJDNR4vyWUfIpzZpYOCw0fV ict7r+8FfYprU4yqyGXpK/QxAo5arvwLQdZsmMcl2g0TNzAMoGZhvOnwzfB/Pnzw iLoDJdXd9HzCn4eJqfCO2gQ5fPRxVxbXuYUSrBpFtzz49STdH7vgBhaRkr9DxSSI AF/IRCVDY6twYhLE0YwsZMw5paBNW+3CufkM3YbD0XC3RPe+pIE2lnQsSczJ+W/z TGdXDn8bsvFn1Q9KY8kJrRRJ4UlbVjcN3YZOEmruLbiIl1yuTzWE7f5qiQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFLuVUAFgP2LFTKJYf/td1VvRRbJJMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvdTVWUUFXQV9Zc1ZNb2xoXy0xM1ZXOUZGc2trLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCl/dUAwQC l/dgAwQCl/doAwQCl/eoMA0GCSqGSIb3DQEBCwUAA4IBAQBtDpT8s+pVLyKBQfKo 0i/hULjeTethZZkCK89P9ksoHj2j3XuggdZXq2Z6XIvsqN81gyviOdsri+/hHxjD C6kIyUyR18+PyNDkX03HUBQtaRbRg1fx+NEPdSh9DcuoRuCOmccL7os1KWTVZWli utlaPegJpbbw6a8pWmKdNjrob2Cnc8p6VvbcTww//1N6mYwT3Zu5Iw+JUXnHos1L JLd5Z8lB7OfPUXbxauFe3H/6L5zgEtcJf+hEKSJfzm0c+AbRBAOPs5vifsZGEMe4 cmPqqs6CChF6q71fI2WjtHOaU9vPQkGVbGV3IISCT9/asb6kNXBsoUTqk/qEt5n3 6vyJ -----END CERTIFICATE-----Generated at Tue Feb 10 14:13:25 2026 by rpki-client