This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vnaYuCEoVEU2Z4pNrTahzgn-Crw.roa File: vnaYuCEoVEU2Z4pNrTahzgn-Crw.roa (raw, json) Hash identifier: fYaUK1SANbVBUZuE36jsl8qvG0J7xDpAxXCon3lNHRg= Subject key identifier: BE:76:98:B8:21:28:54:45:36:67:8A:4D:AD:36:A1:CE:09:FE:0A:BC Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCBA353EE0C3A3DCF9D3FB4CE46AE4B Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vnaYuCEoVEU2Z4pNrTahzgn-Crw.roa Signing time: Fri 02 Jan 2026 08:20:56 +0000 ROA not before: Fri 02 Jan 2026 08:20:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216444 IP address blocks: 151.245.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:a3:53:ee:0c:3a:3d:cf:9d:3f:b4:ce:46:ae:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be7698b82128544536678a4dad36a1ce09fe0abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:69:24:70:d7:5b:25:c6:d0:74:70:78:c1:7f: 90:5c:c3:c0:13:07:6c:af:cb:9a:d5:b1:da:03:21: 1f:5f:08:9a:e9:7c:d5:70:54:ec:3e:6b:00:2f:1d: b9:2a:58:6e:b2:b8:be:b7:0d:52:fa:6e:b8:d4:25: 86:e9:8e:5e:5b:3d:ec:10:d0:32:46:1d:f2:ce:6d: 20:bb:cf:f1:99:8c:fe:2b:4d:fe:c3:cc:cf:9c:12: b0:2b:71:d5:45:87:18:ef:21:0f:34:e1:05:82:d7: f0:7e:15:c7:fd:a4:38:60:5c:17:77:a0:82:77:82: b5:a1:2e:14:de:5c:68:54:1d:ae:38:53:1a:89:87: 75:b1:57:70:bc:59:07:61:d5:75:39:45:cf:1b:e3: bc:83:05:2f:57:0d:06:df:37:1a:e5:4b:51:d6:80: 62:d7:31:30:7f:78:ac:6e:68:b6:73:55:84:63:67: 24:15:c8:fd:f2:8c:77:61:cf:16:e4:ff:b4:4b:63: 87:3b:29:f1:36:cb:6c:60:89:7b:48:2d:a1:f2:69: 91:b9:86:e5:cc:e8:1e:73:89:fd:47:51:ee:7e:dd: f7:3b:d1:85:1b:a1:18:1d:5e:f6:16:c6:da:9c:93: 33:d6:e8:34:28:8a:f5:58:09:a3:54:f0:3d:e1:46: 04:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:76:98:B8:21:28:54:45:36:67:8A:4D:AD:36:A1:CE:09:FE:0A:BC X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vnaYuCEoVEU2Z4pNrTahzgn-Crw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.245.186.0/24 Signature Algorithm: sha256WithRSAEncryption 25:fe:d6:8f:fa:9d:e2:4a:03:0a:86:f7:cd:31:9a:52:4e:5f: 18:11:ac:72:7c:ec:94:a9:4b:17:3d:20:23:ef:4b:53:d0:f2: 74:f6:42:00:fe:75:a2:3a:66:7b:a3:d0:97:c1:3c:ab:8b:82: 32:05:95:d2:11:b8:b7:69:76:d4:a5:76:f0:ec:94:46:12:90: 20:03:d1:b8:16:0f:ce:59:a0:f9:84:1e:9d:67:59:1b:af:6d: ab:f5:3c:44:ad:55:0d:ba:2b:6a:28:c3:53:4f:fe:2d:ff:d0: 07:72:cb:01:ac:d5:f8:8e:bf:7a:cf:b9:2a:ad:9a:a2:a1:e7: de:9d:8c:e5:e1:a7:07:1a:3b:d2:35:3b:34:9f:74:f6:f4:56: bd:09:99:55:1f:f1:2d:65:0d:93:df:05:fa:1f:81:d1:13:a9: 32:17:32:b6:6c:7b:09:d6:f1:a2:52:4f:0c:41:c5:2f:af:52: bb:d1:10:74:ea:19:fb:38:8d:02:a0:40:ef:c4:36:cc:78:b3: 5d:c2:7f:54:79:18:51:01:8a:de:9a:bf:da:bb:d8:04:1d:7f: 15:ae:6c:90:da:8c:13:9c:d2:9d:0c:38:d8:05:73:0d:1d:a5: 81:d1:8b:a4:f7:b5:8c:51:15:4d:53:aa:6a:e6:b3:3d:08:5c: 09:94:25:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y6NT7gw6Pc+dP7TORq5LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTc2OThiODIxMjg1NDQ1MzY2NzhhNGRhZDM2YTFjZTA5ZmUwYWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GkkcNdbJcbQdHB4wX+QXMPAEwds r8ua1bHaAyEfXwia6XzVcFTsPmsALx25Klhusri+tw1S+m641CWG6Y5eWz3sENAy Rh3yzm0gu8/xmYz+K03+w8zPnBKwK3HVRYcY7yEPNOEFgtfwfhXH/aQ4YFwXd6CC d4K1oS4U3lxoVB2uOFMaiYd1sVdwvFkHYdV1OUXPG+O8gwUvVw0G3zca5UtR1oBi 1zEwf3isbmi2c1WEY2ckFcj98ox3Yc8W5P+0S2OHOynxNstsYIl7SC2h8mmRuYbl zOgec4n9R1Huft33O9GFG6EYHV72FsbanJMz1ug0KIr1WAmjVPA94UYEmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL52mLghKFRFNmeKTa02oc4J/gq8MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvdm5hWXVDRW9WRVUyWjRwTnJUYWh6Z24tQ3J3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/W6MA0G CSqGSIb3DQEBCwUAA4IBAQAl/taP+p3iSgMKhvfNMZpSTl8YEaxyfOyUqUsXPSAj 70tT0PJ09kIA/nWiOmZ7o9CXwTyri4IyBZXSEbi3aXbUpXbw7JRGEpAgA9G4Fg/O WaD5hB6dZ1kbr22r9TxErVUNuitqKMNTT/4t/9AHcssBrNX4jr96z7kqrZqioefe nYzl4acHGjvSNTs0n3T29Fa9CZlVH/EtZQ2T3wX6H4HRE6kyFzK2bHsJ1vGiUk8M QcUvr1K70RB06hn7OI0CoEDvxDbMeLNdwn9UeRhRAYremr/au9gEHX8VrmyQ2owT nNKdDDjYBXMNHaWB0Yuk97WMURVNU6pq5rM9CFwJlCWb -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:28 2026 by rpki-client