This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/w3k7XbMtj_wrbsQ-4SBssQTeCtE.roa File: w3k7XbMtj_wrbsQ-4SBssQTeCtE.roa (raw, json) Hash identifier: CVbf6fyXMzNNnNmfXFn3E4zw+Ew1b4xSyGE6iWM5ye0= Subject key identifier: C3:79:3B:5D:B3:2D:8F:FC:2B:6E:C4:3E:E1:20:6C:B1:04:DE:0A:D1 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB5893C1564D9E6DE02354A146C858 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/w3k7XbMtj_wrbsQ-4SBssQTeCtE.roa Signing time: Fri 02 Jan 2026 08:20:37 +0000 ROA not before: Fri 02 Jan 2026 08:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152460 IP address blocks: 151.242.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:58:93:c1:56:4d:9e:6d:e0:23:54:a1:46:c8:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3793b5db32d8ffc2b6ec43ee1206cb104de0ad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:43:c5:2f:0c:e3:bf:c2:5a:a9:ec:ea:e5:a8: d1:ee:a6:7f:86:b2:35:2d:3d:b7:24:05:c5:8c:12: 24:e8:fc:f2:08:2c:95:aa:04:7e:83:bf:74:80:e1: a9:5a:50:a6:47:74:cc:85:57:04:35:d9:ff:da:42: 57:ca:94:95:20:3f:aa:c4:52:4b:69:ba:ea:97:e6: 18:01:7a:51:ca:ba:f3:24:50:9c:87:17:fa:f8:84: 14:4b:b9:97:10:ba:d3:f2:15:ce:ff:5c:4b:0d:0f: 62:25:4d:b7:1d:ae:8e:16:a3:c3:a8:ef:f9:a6:fe: 43:dd:ec:59:30:95:a1:57:e6:4b:80:7e:3e:d8:19: dc:cf:a5:11:dc:44:29:92:23:78:19:39:b6:0f:44: 67:2b:92:51:50:47:55:c4:6d:a9:ea:9a:30:13:fc: 93:3c:55:d4:70:a5:ee:05:0c:bb:9f:91:c4:06:ee: e1:79:89:a6:2a:33:c1:27:fd:34:ea:d3:b7:64:e9: be:51:2b:02:fb:1e:d6:92:95:cb:5c:2f:54:c4:c9: 72:d2:e7:a2:bb:28:f8:24:41:c7:f2:c8:d7:30:61: ca:82:6f:2f:c5:2c:b7:ed:3c:85:1a:fb:ec:d7:01: 1b:89:0e:0d:70:49:67:88:94:99:a1:ee:d9:86:c1: 27:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:79:3B:5D:B3:2D:8F:FC:2B:6E:C4:3E:E1:20:6C:B1:04:DE:0A:D1 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/w3k7XbMtj_wrbsQ-4SBssQTeCtE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.251.0/24 Signature Algorithm: sha256WithRSAEncryption 44:e3:28:d3:81:0a:d2:ac:42:93:f0:5b:37:8b:ef:61:99:18: df:3e:8d:23:ac:92:94:4f:f4:be:73:21:49:51:a6:60:69:e5: 77:6c:e5:4e:d7:2e:81:aa:da:f8:cd:60:a2:72:6d:8c:75:51: 31:f8:02:4d:b9:fa:b4:1e:9d:3d:bb:44:3e:4c:73:21:79:ef: d8:8e:dd:5d:36:98:4d:7e:e8:44:24:37:dd:8c:7e:01:a3:62: 74:43:ec:c2:d7:1f:e3:d2:67:22:6e:8f:87:5d:2f:b4:bb:8d: d0:35:94:08:87:ec:42:c1:ed:ff:8d:9e:4d:13:af:e6:5d:ed: cd:f0:fd:c7:13:4a:ce:f1:41:ea:e6:5a:17:20:6c:ba:e2:18: c9:34:7b:16:76:60:e1:02:be:7b:1e:e0:ba:f9:ed:ae:90:63: 7b:24:ef:73:28:bf:56:b2:a2:55:e5:61:70:72:08:6b:2f:2b: 5f:cb:9a:b0:d7:18:5f:2b:cf:08:ab:aa:c2:a7:3c:23:47:87: 91:6f:66:cb:46:ca:17:95:88:8e:48:3d:70:c4:fc:75:7d:89: d5:c0:5e:29:6e:c6:49:5b:d3:0e:25:1b:5e:1c:0f:72:04:7c: 92:a2:36:10:84:01:f8:d0:6c:51:3f:01:ef:55:c5:86:c2:6b: 39:9f:6f:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y1iTwVZNnm3gI1ShRshYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzc5M2I1ZGIzMmQ4ZmZjMmI2ZWM0M2VlMTIwNmNiMTA0ZGUwYWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEPFLwzjv8Jaqezq5ajR7qZ/hrI1 LT23JAXFjBIk6PzyCCyVqgR+g790gOGpWlCmR3TMhVcENdn/2kJXypSVID+qxFJL abrql+YYAXpRyrrzJFCchxf6+IQUS7mXELrT8hXO/1xLDQ9iJU23Ha6OFqPDqO/5 pv5D3exZMJWhV+ZLgH4+2Bncz6UR3EQpkiN4GTm2D0RnK5JRUEdVxG2p6powE/yT PFXUcKXuBQy7n5HEBu7heYmmKjPBJ/006tO3ZOm+USsC+x7WkpXLXC9UxMly0uei uyj4JEHH8sjXMGHKgm8vxSy37TyFGvvs1wEbiQ4NcElniJSZoe7ZhsEnaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMN5O12zLY/8K27EPuEgbLEE3grRMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvdzNrN1hiTXRqX3dyYnNRLTRTQnNzUVRlQ3RFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/L7MA0G CSqGSIb3DQEBCwUAA4IBAQBE4yjTgQrSrEKT8Fs3i+9hmRjfPo0jrJKUT/S+cyFJ UaZgaeV3bOVO1y6Bqtr4zWCicm2MdVEx+AJNufq0Hp09u0Q+THMhee/Yjt1dNphN fuhEJDfdjH4Bo2J0Q+zC1x/j0mcibo+HXS+0u43QNZQIh+xCwe3/jZ5NE6/mXe3N 8P3HE0rO8UHq5loXIGy64hjJNHsWdmDhAr57HuC6+e2ukGN7JO9zKL9WsqJV5WFw cghrLytfy5qw1xhfK88Iq6rCpzwjR4eRb2bLRsoXlYiOSD1wxPx1fYnVwF4pbsZJ W9MOJRteHA9yBHySojYQhAH40GxRPwHvVcWGwms5n28N -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:52 2026 by rpki-client