This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/z-V_D0o_UWWMMumK3eilSXvQufI.roa File: z-V_D0o_UWWMMumK3eilSXvQufI.roa (raw, json) Hash identifier: jHRa1vKdtk0IDjHUyRG7QBcNBX3I6oPsUqlDvXJGUxk= Subject key identifier: CF:E5:7F:0F:4A:3F:51:65:8C:32:E9:8A:DD:E8:A5:49:7B:D0:B9:F2 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB977E5A63DEF75C2144681FF1DC33 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/z-V_D0o_UWWMMumK3eilSXvQufI.roa Signing time: Fri 02 Jan 2026 08:20:53 +0000 ROA not before: Fri 02 Jan 2026 08:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214563 IP address blocks: 151.241.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:97:7e:5a:63:de:f7:5c:21:44:68:1f:f1:dc:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cfe57f0f4a3f51658c32e98adde8a5497bd0b9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2a:65:27:1b:92:2b:af:d3:b2:32:3a:4f:3b: 2b:f6:ef:44:70:86:92:87:da:75:e9:06:93:70:5b: 8e:6b:1c:50:d8:66:e0:62:8e:28:4d:74:d7:65:85: b0:a6:97:c9:fd:2b:3c:c5:e1:1b:0a:3f:37:85:f4: 64:e8:4d:30:9c:ef:e4:f4:2c:91:42:70:da:04:42: bf:b4:bc:7c:81:3d:d4:02:25:d5:b4:df:f4:76:83: 78:30:e5:1c:dd:77:72:48:d6:90:b7:c9:50:78:48: e4:cf:6e:56:51:a7:74:e1:38:ca:53:92:7e:8e:00: d2:e0:31:b6:58:ac:06:7d:c8:a1:40:a3:59:67:f3: 1e:be:e1:66:cd:39:36:20:67:68:a6:d0:da:62:f9: c9:ce:03:63:ac:e7:c3:8f:84:58:d4:7b:1c:8b:ae: 77:9d:d1:c9:6e:88:48:e2:ab:23:f8:e4:05:fa:a8: c6:6d:93:37:50:06:b9:63:c9:9d:71:3b:a4:bb:df: 5f:af:01:ec:98:be:fd:bf:b9:c0:43:54:2f:92:1b: 24:e0:01:06:13:de:f1:e3:e7:37:53:bb:2d:e2:63: eb:6c:8a:e1:89:c9:3e:24:80:79:e7:87:96:e0:45: dc:e6:2a:1c:0e:09:cc:29:c2:48:33:23:36:17:9d: 23:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:E5:7F:0F:4A:3F:51:65:8C:32:E9:8A:DD:E8:A5:49:7B:D0:B9:F2 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/z-V_D0o_UWWMMumK3eilSXvQufI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.23.0/24 Signature Algorithm: sha256WithRSAEncryption 98:30:9d:06:bc:b2:cc:f5:6f:25:21:e8:87:f6:cc:34:53:f2: a6:02:2d:85:b9:20:05:93:61:c9:54:aa:28:3c:e7:78:8a:07: 80:76:ee:69:89:27:a4:d1:9c:de:08:7a:6b:f1:39:26:7d:7b: ea:1f:21:84:dc:a6:8a:26:ea:13:5c:df:7a:fb:02:0a:c9:e9: d7:8a:b4:44:fb:ce:04:1b:be:d7:20:03:cf:3f:7c:af:e1:69: 2e:48:00:20:2e:2e:cb:08:85:e2:a2:9d:5f:d3:cf:54:a7:cb: 88:33:4a:d5:2d:32:73:a4:14:a4:16:da:40:ac:0f:0e:b7:0a: 4f:b1:2a:d0:9d:cf:81:47:79:3a:9e:ff:23:17:1b:86:9e:19: 40:67:61:e6:f2:0d:fc:69:00:24:ff:24:9e:16:65:e8:b3:2a: 7b:ae:d6:c6:21:27:53:a7:53:44:bb:03:0a:c0:ff:68:2a:7f: 56:94:26:7d:c4:85:16:38:97:ad:8e:64:88:a1:4e:6f:41:eb: 6d:8c:60:09:06:6a:be:44:4f:61:fc:30:b2:bf:1e:c3:ad:d4: 3e:04:9e:f8:6a:83:e1:d6:ab:b3:32:88:79:ba:6d:80:d8:71: 48:5b:9b:b0:39:26:73:bf:54:d8:70:16:a8:ee:43:43:81:68: 16:53:4d:97 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y5d+WmPe91whRGgf8dwzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZmU1N2YwZjRhM2Y1MTY1OGMzMmU5OGFkZGU4YTU0OTdiZDBiOWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSplJxuSK6/TsjI6Tzsr9u9EcIaS h9p16QaTcFuOaxxQ2GbgYo4oTXTXZYWwppfJ/Ss8xeEbCj83hfRk6E0wnO/k9CyR QnDaBEK/tLx8gT3UAiXVtN/0doN4MOUc3XdySNaQt8lQeEjkz25WUad04TjKU5J+ jgDS4DG2WKwGfcihQKNZZ/MevuFmzTk2IGdoptDaYvnJzgNjrOfDj4RY1Hsci653 ndHJbohI4qsj+OQF+qjGbZM3UAa5Y8mdcTuku99frwHsmL79v7nAQ1Qvkhsk4AEG E97x4+c3U7st4mPrbIrhick+JIB554eW4EXc5iocDgnMKcJIMyM2F50jbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM/lfw9KP1FljDLpit3opUl70LnyMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvei1WX0Qwb19VV1dNTXVtSzNlaWxTWHZRdWZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/EXMA0G CSqGSIb3DQEBCwUAA4IBAQCYMJ0GvLLM9W8lIeiH9sw0U/KmAi2FuSAFk2HJVKoo POd4igeAdu5piSek0ZzeCHpr8TkmfXvqHyGE3KaKJuoTXN96+wIKyenXirRE+84E G77XIAPPP3yv4WkuSAAgLi7LCIXiop1f089Up8uIM0rVLTJzpBSkFtpArA8OtwpP sSrQnc+BR3k6nv8jFxuGnhlAZ2Hm8g38aQAk/ySeFmXosyp7rtbGISdTp1NEuwMK wP9oKn9WlCZ9xIUWOJetjmSIoU5vQettjGAJBmq+RE9h/DCyvx7DrdQ+BJ74aoPh 1quzMoh5um2A2HFIW5uwOSZzv1TYcBao7kNDgWgWU02X -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:04 2026 by rpki-client