This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yZNjucAi5GfgcRnasQKPoX6OCsU.roa File: yZNjucAi5GfgcRnasQKPoX6OCsU.roa (raw, json) Hash identifier: agGYFSMB6n582Ga+k1YzWWuAXwV88X1QS1zzB/VTf48= Subject key identifier: C9:93:63:B9:C0:22:E4:67:E0:71:19:DA:B1:02:8F:A1:7E:8E:0A:C5 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB1BB78FD9F4B2829E168A98A36E46 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yZNjucAi5GfgcRnasQKPoX6OCsU.roa Signing time: Fri 02 Jan 2026 08:20:21 +0000 ROA not before: Fri 02 Jan 2026 08:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16611 IP address blocks: 151.241.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:1b:b7:8f:d9:f4:b2:82:9e:16:8a:98:a3:6e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c99363b9c022e467e07119dab1028fa17e8e0ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:20:da:91:51:ca:80:81:68:2b:1f:96:01:a5: 8a:5c:dc:65:3a:8c:87:7c:27:ce:bf:16:7c:49:80: 0a:d6:85:d5:d6:11:a2:8c:de:e7:f5:0e:5c:85:8f: fb:5d:4f:92:3b:dc:40:e7:4d:a8:1d:cf:ac:52:f4: ee:7c:1d:47:c6:d9:44:26:c7:ed:d9:2f:f1:67:74: 12:c6:17:ac:b0:67:85:79:d3:ab:64:1a:ad:30:76: da:9e:72:76:b5:93:01:79:3f:cf:00:ce:56:e1:80: a9:3b:ce:4c:0b:55:fe:f9:4e:0c:ae:83:67:94:0f: e3:ac:59:b2:80:e0:21:3a:69:f4:a0:1a:fb:70:8a: 5f:98:09:c0:5b:3a:f5:96:e7:91:fe:42:bb:eb:91: 77:38:d9:3b:29:c8:af:a2:c3:44:47:39:c4:8c:ec: c9:ec:05:53:3c:e0:a0:09:73:2a:f7:1a:2c:f3:ad: d6:5d:dc:d8:8f:04:2d:f6:a0:0e:f0:b6:75:28:e4: a7:91:99:48:65:0b:46:27:c8:38:1b:b5:df:14:f6: ea:7d:8c:ca:8a:c8:2b:3e:41:72:ce:7d:9c:60:ef: 31:d6:3f:a1:79:b9:e7:6f:a2:34:9d:cd:09:3f:71: 2c:60:8c:2b:08:3f:0c:40:f4:5e:01:b3:94:54:04: 0a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:93:63:B9:C0:22:E4:67:E0:71:19:DA:B1:02:8F:A1:7E:8E:0A:C5 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yZNjucAi5GfgcRnasQKPoX6OCsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.220.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:9d:9e:c3:50:fd:0b:58:47:e4:25:e1:44:ff:ae:38:5f:9f: fb:0b:05:51:34:86:2e:b1:7f:28:6d:f5:42:31:de:cc:50:32: 8c:66:d2:e9:fb:f5:92:b0:de:94:bd:e9:43:f0:d5:c0:8f:96: 8c:8c:46:5e:ad:17:3e:d8:f7:f2:c3:b0:6d:c7:e3:0c:de:93: 62:be:af:09:5c:f9:3b:a6:bc:fa:10:cc:66:38:d8:31:b9:6b: 14:84:8d:31:e4:dd:82:f6:99:88:07:6e:cf:b9:00:3d:01:a9: 2b:44:a2:f2:42:96:96:ab:35:dd:b3:f9:ad:0f:8a:92:23:b6: 88:1f:e7:bb:03:d5:53:33:a8:c1:06:53:4c:46:df:e7:46:a0: b1:46:02:76:7f:16:28:3f:2e:8e:ae:60:23:10:b3:7d:c2:da: d5:fe:40:73:44:9e:a9:a5:05:61:89:c1:2d:d9:e4:73:5b:3e: dd:3f:fd:80:5e:fc:b6:d5:bd:63:45:aa:f6:97:10:93:4e:d3: c7:aa:75:7d:d0:16:51:be:09:81:3a:0b:94:56:7a:c8:16:14: 49:f8:e0:ef:fa:84:fb:e8:ec:38:3c:51:ed:a2:ea:3b:52:b2: d0:38:78:24:c4:55:95:03:5a:a9:a2:9f:28:e5:56:42:1b:70: 60:07:ba:da -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yxu3j9n0soKeFoqYo25GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTkzNjNiOWMwMjJlNDY3ZTA3MTE5ZGFiMTAyOGZhMTdlOGUwYWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSDakVHKgIFoKx+WAaWKXNxlOoyH fCfOvxZ8SYAK1oXV1hGijN7n9Q5chY/7XU+SO9xA502oHc+sUvTufB1HxtlEJsft 2S/xZ3QSxhessGeFedOrZBqtMHbannJ2tZMBeT/PAM5W4YCpO85MC1X++U4MroNn lA/jrFmygOAhOmn0oBr7cIpfmAnAWzr1lueR/kK765F3ONk7KcivosNERznEjOzJ 7AVTPOCgCXMq9xos863WXdzYjwQt9qAO8LZ1KOSnkZlIZQtGJ8g4G7XfFPbqfYzK isgrPkFyzn2cYO8x1j+hebnnb6I0nc0JP3EsYIwrCD8MQPReAbOUVAQKIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMmTY7nAIuRn4HEZ2rECj6F+jgrFMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEveVpOanVjQWk1R2ZnY1JuYXNRS1BvWDZPQ3NVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/HcMA0G CSqGSIb3DQEBCwUAA4IBAQA6nZ7DUP0LWEfkJeFE/644X5/7CwVRNIYusX8obfVC Md7MUDKMZtLp+/WSsN6UvelD8NXAj5aMjEZerRc+2Pfyw7Btx+MM3pNivq8JXPk7 prz6EMxmONgxuWsUhI0x5N2C9pmIB27PuQA9AakrRKLyQpaWqzXds/mtD4qSI7aI H+e7A9VTM6jBBlNMRt/nRqCxRgJ2fxYoPy6OrmAjELN9wtrV/kBzRJ6ppQVhicEt 2eRzWz7dP/2AXvy21b1jRar2lxCTTtPHqnV90BZRvgmBOguUVnrIFhRJ+ODv+oT7 6Ow4PFHtouo7UrLQOHgkxFWVA1qpop8o5VZCG3BgB7ra -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:51 2026 by rpki-client