This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yq0GxjzOQMiz6cIV7gSNlKDoF8Q.roa File: yq0GxjzOQMiz6cIV7gSNlKDoF8Q.roa (raw, json) Hash identifier: KAZZlwAOfEEmt8YTSCJMeNJr96wfsLueXoG3rKTJU3U= Subject key identifier: CA:AD:06:C6:3C:CE:40:C8:B3:E9:C2:15:EE:04:8D:94:A0:E8:17:C4 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB95247A18591AE2D62BC535AF656D Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yq0GxjzOQMiz6cIV7gSNlKDoF8Q.roa Signing time: Fri 02 Jan 2026 08:20:52 +0000 ROA not before: Fri 02 Jan 2026 08:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214346 IP address blocks: 151.243.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:95:24:7a:18:59:1a:e2:d6:2b:c5:35:af:65:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=caad06c63cce40c8b3e9c215ee048d94a0e817c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ad:bb:03:b5:af:fb:a1:68:62:c7:f9:b4:45: 8b:b8:1e:ad:7d:3c:d0:79:dd:75:33:7a:c1:a8:f3: 0a:a5:5a:8e:fa:ae:7e:df:7a:b1:4f:12:ea:a2:2d: 4a:98:81:e3:98:f3:15:a4:1b:20:f5:b2:1a:f2:cd: 69:de:56:bf:0f:90:cc:16:a8:9b:da:78:0b:44:23: 35:ed:68:83:9f:e5:ad:0b:4a:8e:9d:61:fb:38:95: b8:34:0c:2f:d2:11:e8:9f:6f:8a:b3:09:7c:fc:89: 1e:4d:32:a8:93:26:be:07:05:94:cd:a3:bc:8d:ce: 2d:fd:34:a5:e8:72:16:9b:8f:83:a1:3b:e5:e6:58: 5d:3f:43:df:1e:39:b9:44:a5:b7:98:7d:f4:a5:bc: f9:2d:49:64:71:0a:59:5c:41:61:37:73:91:48:b4: e6:de:d8:15:6f:a5:7a:3d:e9:84:55:3a:d2:a4:c4: 42:72:b3:62:5d:07:16:9d:f8:49:cd:c6:f6:7a:29: 8c:04:fc:02:92:46:45:d7:08:96:29:4b:9c:a8:1d: 02:f8:85:84:b7:33:9b:29:b1:57:b2:e0:3c:36:36: 42:c6:e9:9d:de:0a:92:8a:c8:37:7f:2b:b4:2d:b1: c2:24:e0:c1:28:97:72:95:2d:30:ed:49:a6:61:7b: 1f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AD:06:C6:3C:CE:40:C8:B3:E9:C2:15:EE:04:8D:94:A0:E8:17:C4 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yq0GxjzOQMiz6cIV7gSNlKDoF8Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.245.0/24 Signature Algorithm: sha256WithRSAEncryption 33:f0:54:fd:b2:c6:20:33:21:d2:b8:77:ba:02:3f:94:19:a8: 5c:4d:f8:b9:f8:a2:d1:7d:77:8c:d4:5e:fc:28:f1:73:e9:86: 7f:c2:f1:02:29:d1:c0:64:4b:f3:ac:cd:1d:54:d5:69:89:13: 06:d6:20:2f:e8:2d:39:c5:e3:c9:92:29:30:2b:d0:27:d6:2a: dc:ad:9c:a9:2f:cc:c9:cc:44:ea:d8:6b:08:18:a5:4b:68:17: 09:bf:12:20:df:51:64:bb:37:3b:96:14:55:b1:7c:70:5a:ab: 20:3d:4c:bf:c4:c4:5c:dd:b4:25:89:95:fd:a0:58:6b:ab:3a: cc:fb:77:cf:5f:9c:6a:23:60:7a:e3:72:cd:84:89:82:c9:89: c3:3e:d9:6d:e6:89:c8:f8:af:bc:08:42:03:51:30:1a:1b:86: 5e:2b:c9:73:91:3e:2b:4d:4e:87:6a:4c:bd:8b:bc:23:78:67: 19:06:8f:0a:04:92:74:55:af:3b:b1:c4:58:23:88:36:a6:17: 7b:82:92:fe:27:31:14:8a:b8:e2:8d:7e:36:8a:16:16:21:d8: 38:22:b6:de:83:e9:f7:d8:c3:fe:17:da:52:e4:c3:22:79:18: 9e:65:93:79:f2:e7:d3:53:5a:ea:cb:5b:9c:b3:d5:47:8c:04: 84:d4:36:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y5UkehhZGuLWK8U1r2VtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYWFkMDZjNjNjY2U0MGM4YjNlOWMyMTVlZTA0OGQ5NGEwZTgxN2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja27A7Wv+6FoYsf5tEWLuB6tfTzQ ed11M3rBqPMKpVqO+q5+33qxTxLqoi1KmIHjmPMVpBsg9bIa8s1p3la/D5DMFqib 2ngLRCM17WiDn+WtC0qOnWH7OJW4NAwv0hHon2+Kswl8/IkeTTKokya+BwWUzaO8 jc4t/TSl6HIWm4+DoTvl5lhdP0PfHjm5RKW3mH30pbz5LUlkcQpZXEFhN3ORSLTm 3tgVb6V6PemEVTrSpMRCcrNiXQcWnfhJzcb2eimMBPwCkkZF1wiWKUucqB0C+IWE tzObKbFXsuA8NjZCxumd3gqSisg3fyu0LbHCJODBKJdylS0w7UmmYXsfFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMqtBsY8zkDIs+nCFe4EjZSg6BfEMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEveXEwR3hqek9RTWl6NmNJVjdnU05sS0RvRjhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/P1MA0G CSqGSIb3DQEBCwUAA4IBAQAz8FT9ssYgMyHSuHe6Aj+UGahcTfi5+KLRfXeM1F78 KPFz6YZ/wvECKdHAZEvzrM0dVNVpiRMG1iAv6C05xePJkikwK9An1ircrZypL8zJ zETq2GsIGKVLaBcJvxIg31Fkuzc7lhRVsXxwWqsgPUy/xMRc3bQliZX9oFhrqzrM +3fPX5xqI2B643LNhImCyYnDPtlt5onI+K+8CEIDUTAaG4ZeK8lzkT4rTU6Haky9 i7wjeGcZBo8KBJJ0Va87scRYI4g2phd7gpL+JzEUirjijX42ihYWIdg4Irbeg+n3 2MP+F9pS5MMieRieZZN58ufTU1rqy1ucs9VHjASE1DbF -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:25 2026 by rpki-client