This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xO_7Igy0xUJVCQZCS3cz3HLYKj4.roa File: xO_7Igy0xUJVCQZCS3cz3HLYKj4.roa (raw, json) Hash identifier: J/okBnN8zuQyQaSL9Ujd5TgC0y8mK3NAu1ej26ZINwk= Subject key identifier: C4:EF:FB:22:0C:B4:C5:42:55:09:06:42:4B:77:33:DC:72:D8:2A:3E Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCBB440E0676B3A1247BEAB2E1D1F62 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xO_7Igy0xUJVCQZCS3cz3HLYKj4.roa Signing time: Fri 02 Jan 2026 08:21:00 +0000 ROA not before: Fri 02 Jan 2026 08:21:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400906 IP address blocks: 151.243.172.0/24 maxlen: 24 151.245.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:b4:40:e0:67:6b:3a:12:47:be:ab:2e:1d:1f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:21:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4effb220cb4c542550906424b7733dc72d82a3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:46:a0:3e:93:6a:8c:51:a6:89:d2:bc:e5:f2: 14:db:23:b9:58:83:88:db:46:d7:50:90:16:ff:6b: 72:6c:f2:1e:8d:b1:61:65:5b:cb:b1:57:a2:13:49: ec:8b:d6:c8:64:89:58:b5:71:2e:6c:8c:8e:62:13: 55:ab:b2:39:02:b9:c6:c6:f4:3c:92:10:f1:bd:77: a4:1d:64:7f:0f:bf:b0:42:ea:d1:6d:69:75:7e:c2: a2:b5:45:d4:74:e2:a3:72:b0:eb:9b:73:e0:5b:5d: 72:7d:09:8d:ae:65:f5:9a:a8:f9:cc:bd:fd:c8:f7: e4:89:ce:fc:f7:18:31:51:70:7d:de:a0:da:e3:2c: 04:f9:75:db:9c:2c:55:bc:aa:3c:17:6a:ae:13:5c: f7:37:20:64:50:26:ab:4d:49:6c:3c:07:78:fe:68: bd:b1:b8:83:2e:3c:5c:a2:a5:b0:b6:5e:f9:11:24: 61:ca:1d:89:48:6d:a4:5c:37:65:9c:c6:a2:c2:b7: 7b:4b:4d:3d:f7:8b:e6:e8:20:9c:42:e4:aa:96:ae: d2:32:d0:57:51:35:bf:bc:14:f7:d9:4d:a6:ce:ab: 4c:73:f1:7c:96:fa:bc:ab:ce:36:86:2e:16:ba:f9: 4c:eb:dd:7c:3b:28:32:5a:0c:c4:19:fd:b1:aa:f0: b4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:EF:FB:22:0C:B4:C5:42:55:09:06:42:4B:77:33:DC:72:D8:2A:3E X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xO_7Igy0xUJVCQZCS3cz3HLYKj4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.172.0/24 151.245.86.0/24 Signature Algorithm: sha256WithRSAEncryption 12:70:50:d0:f6:e7:4d:c6:8c:30:d5:04:6e:e7:85:f9:66:94: 61:0b:ea:d3:dc:4e:22:59:a8:cd:ce:a9:0c:67:52:4a:7f:0a: 89:f7:1c:b4:09:19:62:ca:c3:b5:b0:8f:5b:a0:c2:76:65:ee: 44:04:03:f2:5d:f1:d4:74:1b:4c:8f:f0:1b:c0:66:d1:c1:b5: 5c:c4:53:e7:00:a0:6c:8a:a5:8b:fd:f9:fc:73:10:c0:e1:b4: ca:c3:71:63:b9:57:25:1f:3c:4a:d3:80:f9:ce:47:b1:3d:2a: a3:80:0e:86:03:69:63:e5:b6:95:6b:98:5d:56:91:2f:a5:5b: ed:67:34:de:ad:47:92:c9:00:ac:5a:5e:66:1f:78:d2:8a:c8: 86:1d:06:1b:21:00:e5:26:72:83:34:58:fc:b8:90:66:9b:c3: c6:e9:e6:54:b2:d0:b3:f6:42:f1:d3:d7:af:95:0e:f5:11:17: df:b1:a0:4e:45:91:34:7b:01:a5:76:b6:47:11:b4:d4:52:f2: 97:3f:3e:fb:a9:5a:2a:87:28:f7:6a:7c:1b:3d:43:e4:85:d6: f1:be:f0:4d:52:a0:5d:12:21:6d:59:cd:4e:81:c1:8e:21:c2: cd:22:a1:e3:25:be:ad:c5:5b:dd:94:8e:16:6c:63:9d:0d:e7: e4:08:9f:51 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y7RA4GdrOhJHvqsuHR9iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGVmZmIyMjBjYjRjNTQyNTUwOTA2NDI0Yjc3MzNkYzcyZDgyYTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkagPpNqjFGmidK85fIU2yO5WIOI 20bXUJAW/2tybPIejbFhZVvLsVeiE0nsi9bIZIlYtXEubIyOYhNVq7I5ArnGxvQ8 khDxvXekHWR/D7+wQurRbWl1fsKitUXUdOKjcrDrm3PgW11yfQmNrmX1mqj5zL39 yPfkic789xgxUXB93qDa4ywE+XXbnCxVvKo8F2quE1z3NyBkUCarTUlsPAd4/mi9 sbiDLjxcoqWwtl75ESRhyh2JSG2kXDdlnMaiwrd7S00994vm6CCcQuSqlq7SMtBX UTW/vBT32U2mzqtMc/F8lvq8q842hi4WuvlM6918OygyWgzEGf2xqvC01wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMTv+yIMtMVCVQkGQkt3M9xy2Co+MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEveE9fN0lneTB4VUpWQ1FaQ1MzY3ozSExZS2o0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/OsAwQA l/VWMA0GCSqGSIb3DQEBCwUAA4IBAQAScFDQ9udNxoww1QRu54X5ZpRhC+rT3E4i WajNzqkMZ1JKfwqJ9xy0CRliysO1sI9boMJ2Ze5EBAPyXfHUdBtMj/AbwGbRwbVc xFPnAKBsiqWL/fn8cxDA4bTKw3FjuVclHzxK04D5zkexPSqjgA6GA2lj5baVa5hd VpEvpVvtZzTerUeSyQCsWl5mH3jSisiGHQYbIQDlJnKDNFj8uJBmm8PG6eZUstCz 9kLx09evlQ71ERffsaBORZE0ewGldrZHEbTUUvKXPz77qVoqhyj3anwbPUPkhdbx vvBNUqBdEiFtWc1OgcGOIcLNIqHjJb6txVvdlI4WbGOdDefkCJ9R -----END CERTIFICATE-----Generated at Sun Jan 18 06:28:52 2026 by rpki-client