This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wYQrQdANn0s7z-rNYp-bVoil2HU.roa File: wYQrQdANn0s7z-rNYp-bVoil2HU.roa (raw, json) Hash identifier: pNEVnYDd62BXzM/3lgQ+VI7DnHChfiTerhv7IRfHE9c= Subject key identifier: C1:84:2B:41:D0:0D:9F:4B:3B:CF:EA:CD:62:9F:9B:56:88:A5:D8:75 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BC62609E2120BD616C5799F3C881FDB92 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wYQrQdANn0s7z-rNYp-bVoil2HU.roa Signing time: Fri 16 Jan 2026 09:32:20 +0000 ROA not before: Fri 16 Jan 2026 09:32:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 151.240.1.0/24 maxlen: 24 151.240.9.0/24 maxlen: 24 151.240.17.0/24 maxlen: 24 151.240.24.0/24 maxlen: 24 151.241.8.0/24 maxlen: 24 151.241.68.0/24 maxlen: 24 151.242.67.0/24 maxlen: 24 151.242.103.0/24 maxlen: 24 151.242.117.0/24 maxlen: 24 151.243.6.0/24 maxlen: 24 151.243.120.0/24 maxlen: 24 151.243.160.0/22 maxlen: 22 151.243.236.0/24 maxlen: 24 151.244.78.0/24 maxlen: 24 151.244.192.0/24 maxlen: 24 151.245.54.0/24 maxlen: 24 151.245.120.0/24 maxlen: 24 151.245.127.0/24 maxlen: 24 151.245.238.0/24 maxlen: 24 151.246.177.0/24 maxlen: 24 151.246.190.0/24 maxlen: 24 151.247.192.0/24 maxlen: 24 151.247.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c6:26:09:e2:12:0b:d6:16:c5:79:9f:3c:88:1f:db:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 16 09:32:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1842b41d00d9f4b3bcfeacd629f9b5688a5d875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:33:b8:4f:e5:2b:96:d6:8b:e3:53:62:a2:1c: ed:61:c4:95:3e:4b:15:11:2f:bd:80:9f:d8:e7:b9: 1b:8d:91:b7:bf:4e:5e:30:e9:78:85:67:c5:9d:43: 46:71:b9:d9:91:99:56:86:e5:81:0c:90:9b:7c:3c: fe:04:1a:24:21:e2:75:84:af:27:0c:14:32:a4:d7: 41:ab:72:b5:c7:69:75:72:26:de:f0:e1:2e:3c:e5: 04:15:a4:08:c1:40:83:9b:0e:7a:28:56:b9:bf:b0: 24:55:7d:e0:e1:c4:27:bf:eb:8c:1e:e9:a5:f6:a1: 5f:49:f4:6c:ab:c9:a3:3f:53:5f:f1:4f:1e:0b:c8: 1c:3a:2e:b1:71:b4:ec:a6:83:7a:1a:89:20:d5:8c: 22:36:f5:02:4b:2a:61:61:1f:03:37:d2:00:6f:d6: b3:d8:a2:a0:d8:b0:0c:ac:1e:9c:46:01:42:69:fe: 26:8e:f7:99:43:a4:45:bb:ed:91:1b:6b:6b:6f:98: 62:55:b3:6d:2e:a6:4b:c2:42:9e:ea:e0:0a:5e:4a: c1:3c:2d:38:8c:08:b8:97:bb:37:5e:38:c8:6e:72: 55:5f:ab:dc:ac:3b:ae:42:48:67:c4:4b:c3:9c:94: c2:19:12:af:95:37:f5:54:2d:23:f6:ae:98:fa:60: 01:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:84:2B:41:D0:0D:9F:4B:3B:CF:EA:CD:62:9F:9B:56:88:A5:D8:75 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wYQrQdANn0s7z-rNYp-bVoil2HU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.1.0/24 151.240.9.0/24 151.240.17.0/24 151.240.24.0/24 151.241.8.0/24 151.241.68.0/24 151.242.67.0/24 151.242.103.0/24 151.242.117.0/24 151.243.6.0/24 151.243.120.0/24 151.243.160.0/22 151.243.236.0/24 151.244.78.0/24 151.244.192.0/24 151.245.54.0/24 151.245.120.0/24 151.245.127.0/24 151.245.238.0/24 151.246.177.0/24 151.246.190.0/24 151.247.192.0/24 151.247.217.0/24 Signature Algorithm: sha256WithRSAEncryption 17:e3:b7:b4:7c:01:e1:33:9d:96:b2:f1:aa:02:46:ab:4e:22: ad:80:6e:63:82:aa:61:7a:7a:00:60:b0:2a:55:01:55:56:fd: 40:a6:6a:a9:87:e8:98:a8:8e:85:1c:9d:42:7b:88:7f:62:fd: 55:6b:48:48:2f:0f:33:69:87:2e:dd:3c:9f:95:d9:28:f1:c6: cf:e3:bb:03:c1:68:94:8d:96:a3:30:e7:43:e6:5a:f9:34:ce: cf:18:50:2d:59:3c:56:16:d4:8d:81:f9:06:aa:29:61:87:38: a3:3f:ad:d7:73:ae:1b:d0:c3:03:92:6a:9c:af:1d:97:ec:a8: ee:00:4b:02:9d:89:ff:ae:ab:26:9b:56:f6:f4:6c:a5:91:90: 8b:89:5f:e1:67:5a:9e:88:61:12:db:0b:f5:b4:45:40:37:85: 8c:4a:95:79:ee:80:a1:db:1e:70:04:6d:83:66:38:c1:4b:36: d6:4a:e0:7a:cf:af:0b:01:9a:1e:a5:cb:e0:ed:99:36:da:9b: f3:bb:4c:81:51:d5:a8:84:85:b6:71:8b:d7:8c:ae:f6:f1:34: 3e:b3:16:8a:ae:bd:ee:c3:26:a2:39:b1:30:2c:fd:ff:c3:42: 89:97:5f:e8:e7:1a:33:31:a0:01:b8:7c:26:1e:c1:29:80:60: 93:86:82:5c -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZvGJgniEgvWFsV5nzyIH9uSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTE2MDkzMjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTg0MmI0MWQwMGQ5ZjRiM2JjZmVhY2Q2MjlmOWI1Njg4YTVkODc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDO4T+UrltaL41NiohztYcSVPksV ES+9gJ/Y57kbjZG3v05eMOl4hWfFnUNGcbnZkZlWhuWBDJCbfDz+BBokIeJ1hK8n DBQypNdBq3K1x2l1cibe8OEuPOUEFaQIwUCDmw56KFa5v7AkVX3g4cQnv+uMHuml 9qFfSfRsq8mjP1Nf8U8eC8gcOi6xcbTspoN6Gokg1YwiNvUCSyphYR8DN9IAb9az 2KKg2LAMrB6cRgFCaf4mjveZQ6RFu+2RG2trb5hiVbNtLqZLwkKe6uAKXkrBPC04 jAi4l7s3XjjIbnJVX6vcrDuuQkhnxEvDnJTCGRKvlTf1VC0j9q6Y+mAB2QIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFMGEK0HQDZ9LO8/qzWKfm1aIpdh1MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvd1lRclFkQU5uMHM3ei1yTllwLWJWb2lsMkhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDCBkQQCAAEwgYoDBACX 8AEDBACX8AkDBACX8BEDBACX8BgDBACX8QgDBACX8UQDBACX8kMDBACX8mcDBACX 8nUDBACX8wYDBACX83gDBAKX86ADBACX8+wDBACX9E4DBACX9MADBACX9TYDBACX 9XgDBACX9X8DBACX9e4DBACX9rEDBACX9r4DBACX98ADBACX99kwDQYJKoZIhvcN AQELBQADggEBABfjt7R8AeEznZay8aoCRqtOIq2AbmOCqmF6egBgsCpVAVVW/UCm aqmH6JiojoUcnUJ7iH9i/VVrSEgvDzNphy7dPJ+V2Sjxxs/juwPBaJSNlqMw50Pm Wvk0zs8YUC1ZPFYW1I2B+QaqKWGHOKM/rddzrhvQwwOSapyvHZfsqO4ASwKdif+u qyabVvb0bKWRkIuJX+FnWp6IYRLbC/W0RUA3hYxKlXnugKHbHnAEbYNmOMFLNtZK 4HrPrwsBmh6ly+DtmTbam/O7TIFR1aiEhbZxi9eMrvbxND6zFoquve7DJqI5sTAs /f/DQomXX+jnGjMxoAG4fCYewSmAYJOGglw= -----END CERTIFICATE-----Generated at Sun Jan 18 06:32:03 2026 by rpki-client