This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uDGpDYRy_sFCcuiBh798P5ZcRaM.roa File: uDGpDYRy_sFCcuiBh798P5ZcRaM.roa (raw, json) Hash identifier: TCq5jesVRc2o830AakXfA+KgXrr12RosBXY8Inwed10= Subject key identifier: B8:31:A9:0D:84:72:FE:C1:42:72:E8:81:87:BF:7C:3F:96:5C:45:A3 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB6B5C9974A32A906DB723BD5BFD2B Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uDGpDYRy_sFCcuiBh798P5ZcRaM.roa Signing time: Fri 02 Jan 2026 08:20:41 +0000 ROA not before: Fri 02 Jan 2026 08:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205733 IP address blocks: 151.242.129.0/24 maxlen: 24 151.243.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:6b:5c:99:74:a3:2a:90:6d:b7:23:bd:5b:fd:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b831a90d8472fec14272e88187bf7c3f965c45a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:af:0c:58:67:56:d8:ef:56:e2:04:24:e6:f4: 10:c8:ef:ba:df:8e:67:57:3a:05:e2:ee:f2:eb:21: fc:a4:f3:e5:52:38:b3:33:c9:b0:4b:5e:5e:9b:4b: 64:5c:2e:12:e3:83:16:12:d5:ad:45:04:18:58:73: 78:f1:d6:cb:b0:2a:b5:01:8d:5d:5c:d9:a1:c5:f0: 89:8f:f4:fc:a3:4c:27:c5:d5:4a:22:6c:a5:48:d2: 4f:c1:87:e7:cc:67:06:2a:5d:27:9c:56:e2:b8:65: a2:9d:97:b5:de:3a:6c:7e:f5:89:ea:55:a6:24:c6: 60:fa:94:ae:cb:57:03:1c:c2:f4:6e:bb:5c:52:78: bb:1f:9e:d3:2e:66:ff:72:93:04:05:a8:7a:b5:bf: dc:e2:49:79:eb:7d:7d:2a:a2:3b:ca:51:40:15:b9: cf:11:81:cd:4d:eb:37:1f:39:e8:3b:69:f7:4c:af: 15:8a:24:7e:bf:14:87:47:c4:8c:50:f1:25:82:cc: b7:36:e7:17:3a:e1:f1:3a:40:e1:50:5b:16:e6:76: b6:9e:c3:1a:18:65:40:96:4f:7e:6f:4b:f7:5e:cf: c4:bd:96:b2:61:05:90:4c:aa:98:68:92:d0:4d:fd: f0:99:18:ee:21:40:c4:99:63:e6:93:80:be:5c:d2: 4c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:31:A9:0D:84:72:FE:C1:42:72:E8:81:87:BF:7C:3F:96:5C:45:A3 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uDGpDYRy_sFCcuiBh798P5ZcRaM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.129.0/24 151.243.240.0/24 Signature Algorithm: sha256WithRSAEncryption b1:48:21:4d:5c:12:e5:20:1c:c2:56:75:12:08:01:69:29:3d: 09:b2:05:e2:ce:52:76:f5:44:7b:0e:bc:9b:47:01:e3:36:63: fd:a1:1e:d2:cf:9c:f3:09:c0:12:e2:24:f9:94:4e:50:0f:f8: 61:50:e3:64:a6:cc:c0:f3:8d:83:36:f4:06:f3:9a:41:5f:89: d9:11:9e:04:87:05:eb:40:ed:3f:65:a9:6a:d9:17:66:b5:24: 0e:cc:a7:a8:a2:4a:71:13:96:f2:7d:b5:15:1c:f4:a9:cb:fd: c3:ff:46:26:85:f2:29:8e:bb:ee:ce:f5:96:9f:d9:30:cf:f3: e4:38:d7:36:13:90:91:00:34:0d:e7:78:6a:63:b7:88:53:7a: 9b:3a:28:98:13:71:78:13:af:54:39:ce:f5:d8:1d:c5:2d:e8: 8b:c7:4b:e4:2e:d1:9a:cd:f2:a8:63:6a:0a:9e:79:9e:be:3a: 9d:e4:c1:fa:c0:69:10:5c:6f:01:94:d6:29:96:32:7e:c2:80: 5e:5c:a8:ab:d8:75:7e:14:23:62:d3:59:45:33:c8:7f:7a:66: bf:a0:44:a4:70:e3:4a:bb:78:40:57:c7:3a:90:e3:f2:80:3b: 9e:4a:78:cc:ae:63:ff:c4:b3:fd:b1:4d:48:e8:13:ef:23:8e: 06:13:ca:43 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y2tcmXSjKpBttyO9W/0rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODMxYTkwZDg0NzJmZWMxNDI3MmU4ODE4N2JmN2MzZjk2NWM0NWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8a8MWGdW2O9W4gQk5vQQyO+6345n VzoF4u7y6yH8pPPlUjizM8mwS15em0tkXC4S44MWEtWtRQQYWHN48dbLsCq1AY1d XNmhxfCJj/T8o0wnxdVKImylSNJPwYfnzGcGKl0nnFbiuGWinZe13jpsfvWJ6lWm JMZg+pSuy1cDHML0brtcUni7H57TLmb/cpMEBah6tb/c4kl56319KqI7ylFAFbnP EYHNTes3HznoO2n3TK8ViiR+vxSHR8SMUPElgsy3NucXOuHxOkDhUFsW5na2nsMa GGVAlk9+b0v3Xs/EvZayYQWQTKqYaJLQTf3wmRjuIUDEmWPmk4C+XNJMOwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLgxqQ2Ecv7BQnLogYe/fD+WXEWjMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvdURHcERZUnlfc0ZDY3VpQmg3OThQNVpjUmFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/KBAwQA l/PwMA0GCSqGSIb3DQEBCwUAA4IBAQCxSCFNXBLlIBzCVnUSCAFpKT0JsgXizlJ2 9UR7DrybRwHjNmP9oR7Sz5zzCcAS4iT5lE5QD/hhUONkpszA842DNvQG85pBX4nZ EZ4EhwXrQO0/Zalq2RdmtSQOzKeookpxE5byfbUVHPSpy/3D/0YmhfIpjrvuzvWW n9kwz/PkONc2E5CRADQN53hqY7eIU3qbOiiYE3F4E69UOc712B3FLeiLx0vkLtGa zfKoY2oKnnmevjqd5MH6wGkQXG8BlNYpljJ+woBeXKir2HV+FCNi01lFM8h/ema/ oESkcONKu3hAV8c6kOPygDueSnjMrmP/xLP9sU1I6BPvI44GE8pD -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:33 2026 by rpki-client