This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xW7QKfo0QhCa0gMYHK73HioeFFo.roa File: xW7QKfo0QhCa0gMYHK73HioeFFo.roa (raw, json) Hash identifier: EO4K33QnZjCRKMG6eptZyrAN26HfeHWppJHlbJ4U0us= Subject key identifier: C5:6E:D0:29:FA:34:42:10:9A:D2:03:18:1C:AE:F7:1E:2A:1E:14:5A Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB153F9433DB69487D8531039658E4 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xW7QKfo0QhCa0gMYHK73HioeFFo.roa Signing time: Fri 02 Jan 2026 08:20:19 +0000 ROA not before: Fri 02 Jan 2026 08:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14445 IP address blocks: 151.243.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:15:3f:94:33:db:69:48:7d:85:31:03:96:58:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c56ed029fa3442109ad203181caef71e2a1e145a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:76:ae:fa:eb:16:89:c2:1e:62:d4:61:b1:15: 68:fd:4c:ca:de:6a:ae:63:00:80:a4:13:d5:18:14: ff:96:34:c1:7c:3d:f3:eb:2e:f3:2a:ff:61:96:b7: 71:42:c9:c3:13:a8:a1:07:44:c6:c7:c9:70:02:0c: 55:0b:b9:0d:80:7f:9a:34:70:c7:e5:7c:da:93:22: 2c:8f:84:b8:15:a4:ac:12:0d:19:8b:7c:f7:a0:b5: 4c:61:56:e2:7a:69:3c:6f:26:fe:f7:14:ac:dd:39: 70:f8:a2:83:ec:33:b5:c5:ba:2b:9d:0b:b0:74:72: 80:9e:c3:86:55:d7:56:c8:6b:1b:37:84:39:a0:9c: 8c:b6:76:18:45:6c:f9:b1:76:dc:8a:94:c1:61:d5: b1:0b:e7:33:49:12:1d:80:ee:48:f8:68:48:c8:92: 22:0b:57:6d:98:4c:4a:40:61:ba:59:77:1c:07:24: f9:ac:df:d2:27:40:3c:81:9d:0b:22:13:de:93:14: 1b:9b:3b:22:41:bf:c2:c4:15:db:70:d6:0e:7a:ec: e2:0a:06:bc:96:fb:fd:43:1b:7c:92:d4:2f:89:93: bf:2d:4d:61:a8:99:d5:6a:70:87:b8:cb:e4:3e:98: 14:a5:59:b4:66:02:a7:e2:8c:7a:cd:1c:11:1f:b0: 5a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:6E:D0:29:FA:34:42:10:9A:D2:03:18:1C:AE:F7:1E:2A:1E:14:5A X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xW7QKfo0QhCa0gMYHK73HioeFFo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.19.0/24 Signature Algorithm: sha256WithRSAEncryption b5:ca:79:61:0b:2c:00:9b:02:f1:20:46:3c:09:96:8e:9f:e9: 5c:20:71:cb:66:63:cb:b1:dd:b7:54:95:11:87:44:75:2f:d3: 9b:59:a1:bf:09:71:54:c5:45:f5:d0:ef:ad:5c:2b:ee:28:94: 7b:a0:51:35:ff:6f:fe:d3:dd:46:69:9c:2d:87:20:12:1b:b7: 5b:37:c1:61:cd:39:fb:b7:97:b5:92:94:45:1b:bb:3e:03:06: 96:a0:06:04:19:0a:9b:e9:8f:57:88:3f:92:f6:81:2e:b4:63: 21:2b:f9:34:26:4d:b4:4f:bf:79:93:41:1d:4d:b3:2c:ef:db: 3a:4c:a6:6f:07:ca:87:84:af:ca:e0:18:fd:82:05:dd:2f:e7: d5:a2:3c:00:1b:f6:08:97:a1:4f:b1:01:b0:fb:cc:d3:14:e2: e3:6b:ab:ed:38:42:69:4f:2b:e8:7a:f8:13:c3:0a:08:80:77: ab:37:23:02:d7:d8:16:35:05:b1:14:55:07:7b:3f:c8:96:37: dd:13:e1:1b:5f:ca:7c:f2:73:63:20:af:23:27:11:b5:95:8d: 38:97:38:d3:ee:91:d2:a1:64:db:f2:89:cd:8f:11:ea:99:29: 81:27:b3:1a:18:ed:c3:36:42:d4:34:d7:a3:d0:3b:d9:8c:60: b5:ad:9e:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yxU/lDPbaUh9hTEDlljkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTZlZDAyOWZhMzQ0MjEwOWFkMjAzMTgxY2FlZjcxZTJhMWUxNDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnau+usWicIeYtRhsRVo/UzK3mqu YwCApBPVGBT/ljTBfD3z6y7zKv9hlrdxQsnDE6ihB0TGx8lwAgxVC7kNgH+aNHDH 5XzakyIsj4S4FaSsEg0Zi3z3oLVMYVbiemk8byb+9xSs3Tlw+KKD7DO1xbornQuw dHKAnsOGVddWyGsbN4Q5oJyMtnYYRWz5sXbcipTBYdWxC+czSRIdgO5I+GhIyJIi C1dtmExKQGG6WXccByT5rN/SJ0A8gZ0LIhPekxQbmzsiQb/CxBXbcNYOeuziCga8 lvv9Qxt8ktQviZO/LU1hqJnVanCHuMvkPpgUpVm0ZgKn4ox6zRwRH7Ba/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMVu0Cn6NEIQmtIDGByu9x4qHhRaMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEveFc3UUtmbzBRaENhMGdNWUhLNzNIaW9lRkZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/MTMA0G CSqGSIb3DQEBCwUAA4IBAQC1ynlhCywAmwLxIEY8CZaOn+lcIHHLZmPLsd23VJUR h0R1L9ObWaG/CXFUxUX10O+tXCvuKJR7oFE1/2/+091GaZwthyASG7dbN8FhzTn7 t5e1kpRFG7s+AwaWoAYEGQqb6Y9XiD+S9oEutGMhK/k0Jk20T795k0EdTbMs79s6 TKZvB8qHhK/K4Bj9ggXdL+fVojwAG/YIl6FPsQGw+8zTFOLja6vtOEJpTyvoevgT wwoIgHerNyMC19gWNQWxFFUHez/IljfdE+EbX8p88nNjIK8jJxG1lY04lzjT7pHS oWTb8onNjxHqmSmBJ7MaGO3DNkLUNNej0DvZjGC1rZ4h -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:10 2026 by rpki-client