This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/y3pDT-_t05xMN6p8BBEmb8nWIR4.roa File: y3pDT-_t05xMN6p8BBEmb8nWIR4.roa (raw, json) Hash identifier: 84Kw+MwUR+nKbSyLZQ+w6AY/mfziS6lL6jMcSa61CLk= Subject key identifier: CB:7A:43:4F:EF:ED:D3:9C:4C:37:AA:7C:04:11:26:6F:C9:D6:21:1E Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB8A7BDCFC4145D4FE5A6BA80D72FD Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/y3pDT-_t05xMN6p8BBEmb8nWIR4.roa Signing time: Fri 02 Jan 2026 08:20:49 +0000 ROA not before: Fri 02 Jan 2026 08:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212396 IP address blocks: 151.241.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:8a:7b:dc:fc:41:45:d4:fe:5a:6b:a8:0d:72:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb7a434fefedd39c4c37aa7c0411266fc9d6211e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:89:50:7e:81:e0:46:68:5e:6d:00:c5:3a:80: e5:59:65:53:3f:72:d1:e3:9a:5c:02:49:44:00:a9: ba:da:86:d6:04:c0:68:24:26:e4:77:ff:5f:22:bf: df:e8:09:66:46:08:c1:77:bc:c7:24:14:90:63:8b: 32:81:d6:40:f7:e5:cc:73:26:1d:8c:27:61:e4:b1: 2f:3d:d0:23:c5:14:09:54:7b:4c:e0:31:bc:4d:24: ea:06:11:5c:5c:22:c6:de:81:73:ab:bb:ea:79:2a: ed:29:51:10:2b:3b:8a:6d:6a:01:55:26:bf:8d:1c: 59:b9:24:b5:5b:8e:55:b7:9b:66:18:39:e3:a8:05: f7:54:cf:90:27:2e:2d:6f:94:81:42:97:7b:d9:bd: a2:53:ed:f0:3e:b7:38:47:df:06:e0:1c:58:2d:62: 5d:d5:7a:3d:a6:21:d3:42:5a:a4:6e:8d:b0:94:9e: 2b:43:61:ab:71:b3:f3:6f:a1:7d:87:c9:00:3f:34: b5:3e:d8:2c:ef:b4:60:b8:ef:fe:b4:13:31:19:6f: 8c:c7:48:45:bf:30:dc:61:db:a5:d5:59:23:9b:6b: 73:d3:dc:9e:f8:e0:69:a0:24:88:a5:95:15:bd:d7: 8f:ab:05:f2:46:68:6b:e8:12:6a:53:d3:ba:ce:97: 46:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:7A:43:4F:EF:ED:D3:9C:4C:37:AA:7C:04:11:26:6F:C9:D6:21:1E X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/y3pDT-_t05xMN6p8BBEmb8nWIR4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.75.0/24 Signature Algorithm: sha256WithRSAEncryption 82:51:9d:61:c7:a5:e1:ec:00:3e:e4:fb:b4:ab:ea:44:53:04: c7:c7:cf:26:4b:63:3f:f6:a4:c6:c2:ea:b2:ab:56:29:5c:89: f2:d0:f9:d4:f9:7b:da:30:ca:c4:cf:dd:f4:27:97:7a:fe:7b: e4:6a:d8:1e:03:09:b0:c6:82:70:4a:a4:fa:d5:91:b3:91:b0: 32:f4:72:cd:28:40:12:15:bc:0a:7f:3e:4f:bc:0e:ce:1a:6c: 1b:ea:02:4d:ee:38:e0:4b:e5:d9:9f:9f:31:f6:93:b0:34:9d: 28:05:ec:da:c4:c5:c7:07:38:98:06:c5:7d:94:1e:fe:0b:f2: fe:09:2c:ac:4a:82:7b:e7:bf:5b:c5:24:d5:26:70:cb:54:41: b5:2f:2d:07:ee:55:41:02:5a:0c:4f:01:f2:5c:0d:ae:c6:f5: 5a:0d:0e:4d:48:d2:2e:ca:84:d7:7c:8e:6c:55:33:d1:da:fc: 18:e2:bc:a9:53:89:e7:6f:3c:da:02:84:ed:a7:c7:5c:8d:5f: b0:21:b0:6e:0f:8e:4f:35:13:b1:8c:38:93:81:fa:80:47:fb: c1:73:e8:9c:e8:12:9b:61:27:7c:dd:b2:82:50:1f:00:cb:9d: f6:a5:8a:3e:8d:88:ca:1f:31:61:8c:dd:a8:82:85:7b:4e:c3: aa:d1:60:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y4p73PxBRdT+WmuoDXL9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjdhNDM0ZmVmZWRkMzljNGMzN2FhN2MwNDExMjY2ZmM5ZDYyMTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIlQfoHgRmhebQDFOoDlWWVTP3LR 45pcAklEAKm62obWBMBoJCbkd/9fIr/f6AlmRgjBd7zHJBSQY4sygdZA9+XMcyYd jCdh5LEvPdAjxRQJVHtM4DG8TSTqBhFcXCLG3oFzq7vqeSrtKVEQKzuKbWoBVSa/ jRxZuSS1W45Vt5tmGDnjqAX3VM+QJy4tb5SBQpd72b2iU+3wPrc4R98G4BxYLWJd 1Xo9piHTQlqkbo2wlJ4rQ2GrcbPzb6F9h8kAPzS1Ptgs77RguO/+tBMxGW+Mx0hF vzDcYdul1Vkjm2tz09ye+OBpoCSIpZUVvdePqwXyRmhr6BJqU9O6zpdGHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMt6Q0/v7dOcTDeqfAQRJm/J1iEeMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEveTNwRFQtX3QwNXhNTjZwOEJCRW1iOG5XSVI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/FLMA0G CSqGSIb3DQEBCwUAA4IBAQCCUZ1hx6Xh7AA+5Pu0q+pEUwTHx88mS2M/9qTGwuqy q1YpXIny0PnU+XvaMMrEz930J5d6/nvkatgeAwmwxoJwSqT61ZGzkbAy9HLNKEAS FbwKfz5PvA7OGmwb6gJN7jjgS+XZn58x9pOwNJ0oBezaxMXHBziYBsV9lB7+C/L+ CSysSoJ7579bxSTVJnDLVEG1Ly0H7lVBAloMTwHyXA2uxvVaDQ5NSNIuyoTXfI5s VTPR2vwY4rypU4nnbzzaAoTtp8dcjV+wIbBuD45PNROxjDiTgfqAR/vBc+ic6BKb YSd83bKCUB8Ay532pYo+jYjKHzFhjN2ogoV7TsOq0WDF -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:07 2026 by rpki-client