This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/z--djVP3RwWN_0d3XtBzKi7Mxo0.roa File: z--djVP3RwWN_0d3XtBzKi7Mxo0.roa (raw, json) Hash identifier: hRWoy4lXyt07kUWGFOHFlgIWSV5Mv7kima5a5e28dkA= Subject key identifier: CF:EF:9D:8D:53:F7:47:05:8D:FF:47:77:5E:D0:73:2A:2E:CC:C6:8D Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB5ECA89F69CBAECF46E54B36A831B Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/z--djVP3RwWN_0d3XtBzKi7Mxo0.roa Signing time: Fri 02 Jan 2026 08:20:38 +0000 ROA not before: Fri 02 Jan 2026 08:20:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199058 IP address blocks: 151.241.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:5e:ca:89:f6:9c:ba:ec:f4:6e:54:b3:6a:83:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfef9d8d53f747058dff47775ed0732a2eccc68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e9:86:fb:50:61:06:af:9d:e1:66:dc:20:a2: 3e:5b:50:0a:b5:a0:00:43:68:86:68:e7:47:a2:99: b9:0d:2b:f2:b2:ee:86:28:cb:ef:c7:23:37:ea:20: 66:c3:ad:5d:57:24:89:2d:41:33:70:05:52:32:f5: 7d:de:01:66:7a:17:e1:ab:b5:aa:f3:f7:83:cc:2b: e1:50:84:09:fd:11:c9:1e:21:f3:ef:9b:f4:39:e5: 64:1d:ec:b4:6e:cf:c3:22:dd:60:4a:a3:0c:8f:b8: 43:55:f5:25:54:d9:f7:a2:64:99:e0:94:b3:e1:0f: 5c:32:67:14:e8:27:1d:c2:3b:75:c5:98:ba:45:16: b2:3c:82:77:87:d5:33:d6:b3:30:91:25:db:1f:48: 05:5b:6f:02:2f:85:f2:78:2e:ce:2c:31:b4:0e:84: a9:01:4a:24:d3:d1:40:7c:46:d3:3e:91:11:c4:de: 1b:a6:75:32:02:ef:09:fe:84:03:50:df:51:2e:d6: de:77:3f:b0:cd:04:8a:df:f5:02:5e:c3:1d:a6:63: 23:b7:cd:82:9f:9c:80:f5:18:41:a9:a8:19:a1:be: 2c:3b:8f:9a:6e:4c:c3:9c:5a:de:93:6f:f9:fb:95: c4:b4:d2:45:30:31:21:92:a1:f3:ff:32:ea:1e:d3: 7d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:EF:9D:8D:53:F7:47:05:8D:FF:47:77:5E:D0:73:2A:2E:CC:C6:8D X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/z--djVP3RwWN_0d3XtBzKi7Mxo0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.173.0/24 Signature Algorithm: sha256WithRSAEncryption 06:90:b7:a7:15:41:ca:65:ae:a5:fc:a7:03:c7:03:b1:08:79: ea:45:b4:aa:6f:48:dd:46:6e:65:bf:55:2f:54:df:1d:22:2c: ad:84:c6:78:d5:e0:b1:70:5c:95:04:82:6e:84:54:ce:50:f1: 2b:0e:97:76:ee:4a:9b:5b:82:d4:f3:e6:6e:9c:ab:cd:7f:cd: de:22:74:55:fc:ae:5b:72:b7:51:6c:3a:5c:57:05:05:a9:aa: aa:4a:0b:00:1e:64:61:8e:4e:13:9b:c3:b9:01:27:d9:48:73: d4:4b:a0:4a:a1:17:f3:a9:3c:fe:fe:cf:37:d2:09:23:60:17: e3:df:1a:ff:a9:64:82:34:e8:d4:0c:b1:61:a5:46:bc:91:6a: 08:e9:c7:30:3e:59:07:cc:25:25:6e:70:73:04:fa:80:12:d1: e0:89:9f:02:2e:d2:e5:82:9e:f1:59:ef:83:ae:0e:2c:52:e9: e5:74:0c:3a:9c:7c:f1:fa:0f:fb:e4:91:70:e9:af:70:23:17: dc:4c:56:63:ac:8e:4e:7d:84:3f:14:d9:67:31:0c:a3:ef:a9: ec:32:69:8d:15:5a:c8:33:af:73:9d:ae:1c:ea:4a:29:30:8e: 2f:04:b9:a6:02:99:ad:8b:27:9c:34:6c:77:1e:ab:f2:d7:28: c7:40:ca:27 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y17Kifacuuz0blSzaoMbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmVmOWQ4ZDUzZjc0NzA1OGRmZjQ3Nzc1ZWQwNzMyYTJlY2NjNjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkumG+1BhBq+d4WbcIKI+W1AKtaAA Q2iGaOdHopm5DSvysu6GKMvvxyM36iBmw61dVySJLUEzcAVSMvV93gFmehfhq7Wq 8/eDzCvhUIQJ/RHJHiHz75v0OeVkHey0bs/DIt1gSqMMj7hDVfUlVNn3omSZ4JSz 4Q9cMmcU6Ccdwjt1xZi6RRayPIJ3h9Uz1rMwkSXbH0gFW28CL4XyeC7OLDG0DoSp AUok09FAfEbTPpERxN4bpnUyAu8J/oQDUN9RLtbedz+wzQSK3/UCXsMdpmMjt82C n5yA9RhBqagZob4sO4+abkzDnFrek2/5+5XEtNJFMDEhkqHz/zLqHtN93wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM/vnY1T90cFjf9Hd17QcyouzMaNMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvei0tZGpWUDNSd1dOXzBkM1h0QnpLaTdNeG8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/GtMA0G CSqGSIb3DQEBCwUAA4IBAQAGkLenFUHKZa6l/KcDxwOxCHnqRbSqb0jdRm5lv1Uv VN8dIiythMZ41eCxcFyVBIJuhFTOUPErDpd27kqbW4LU8+ZunKvNf83eInRV/K5b crdRbDpcVwUFqaqqSgsAHmRhjk4Tm8O5ASfZSHPUS6BKoRfzqTz+/s830gkjYBfj 3xr/qWSCNOjUDLFhpUa8kWoI6ccwPlkHzCUlbnBzBPqAEtHgiZ8CLtLlgp7xWe+D rg4sUunldAw6nHzx+g/75JFw6a9wIxfcTFZjrI5OfYQ/FNlnMQyj76nsMmmNFVrI M69zna4c6kopMI4vBLmmApmtiyecNGx3Hqvy1yjHQMon -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:07 2026 by rpki-client