This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zPfgNDfeDFs5hsvKBA7muUfQdC0.roa File: zPfgNDfeDFs5hsvKBA7muUfQdC0.roa (raw, json) Hash identifier: 1GyeH3vkO4Zb3OwDm3fBwlJIgt0JSc8q9W6O7EHscTs= Subject key identifier: CC:F7:E0:34:37:DE:0C:5B:39:86:CB:CA:04:0E:E6:B9:47:D0:74:2D Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCBAC646FD172F790C70325D707C4F0 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zPfgNDfeDFs5hsvKBA7muUfQdC0.roa Signing time: Fri 02 Jan 2026 08:20:58 +0000 ROA not before: Fri 02 Jan 2026 08:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395793 IP address blocks: 151.242.8.0/24 maxlen: 24 151.243.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 19:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:ac:64:6f:d1:72:f7:90:c7:03:25:d7:07:c4:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccf7e03437de0c5b3986cbca040ee6b947d0742d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8c:5f:cc:04:e9:ca:bc:1e:25:73:f3:5b:2d: 65:bb:66:c4:fe:71:36:da:18:52:ec:0d:0a:e7:07: 43:7f:1c:b2:2d:1c:66:80:25:58:e3:23:b7:15:eb: 76:ee:57:6a:d2:4a:13:e5:58:d2:9b:b6:c4:df:8a: 66:0c:cc:9f:1d:15:ce:a3:7f:75:a0:31:34:14:3e: ce:a0:88:46:f1:11:fc:0e:4b:c2:19:03:5d:fd:bb: 1e:f2:07:3c:28:23:b8:3a:c4:3d:55:c6:ab:0a:16: ae:bc:83:63:a0:a5:81:81:00:d5:f7:c6:d5:ad:fc: 7e:45:ae:ce:d9:7d:7e:2c:63:9d:b2:6f:09:da:13: 91:d7:8b:26:cf:ca:61:b7:6c:ff:1d:9f:c3:93:7f: da:5e:c0:9a:ec:b8:a0:47:c0:3a:62:d8:c5:a1:72: 35:49:f3:4a:54:c3:28:ea:b0:b1:50:37:22:31:b9: bd:9f:88:19:b2:b6:0a:8b:2f:94:57:f7:24:b5:83: 1f:86:1d:56:64:9a:88:19:17:88:61:f3:be:b2:dc: 07:37:7b:72:23:d8:f2:8e:5f:f5:db:a7:0a:e7:ac: d1:30:6d:28:4f:75:ed:a0:7a:d9:a8:46:34:2c:85: bd:8b:53:49:63:96:57:74:8b:84:f9:39:fe:06:87: f8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F7:E0:34:37:DE:0C:5B:39:86:CB:CA:04:0E:E6:B9:47:D0:74:2D X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zPfgNDfeDFs5hsvKBA7muUfQdC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.8.0/24 151.243.42.0/24 Signature Algorithm: sha256WithRSAEncryption 13:0b:0b:5d:00:75:39:7e:27:c5:a5:2b:7b:63:00:02:9b:4c: 7c:17:62:b9:e3:dd:51:75:86:d1:53:8b:c3:39:4b:e9:c9:84: 54:91:2e:6e:2a:cd:34:51:fc:d8:2b:63:87:0c:6e:05:41:55: 54:1f:bf:a6:a5:e5:e2:aa:73:56:f2:bb:d6:17:f1:ee:bc:18: 0a:f4:16:dc:70:ea:a9:31:77:77:30:22:6c:0f:26:53:29:46: 02:f0:4b:ac:d3:11:4b:53:d5:10:13:f5:3d:db:f8:7d:b8:97: d0:dc:b6:ab:ef:f5:d9:34:56:55:26:3a:c1:4a:ab:1f:29:16: 56:3c:26:8d:82:78:09:5a:8c:54:f2:cd:86:1a:2a:c6:22:f8: 05:d9:c2:a9:e6:4a:38:2e:92:c9:b5:9f:f5:a2:aa:e9:d5:63: dd:2a:93:8d:b5:c2:67:ad:5a:40:eb:d0:c8:bd:50:2a:b9:9c: 12:13:1b:d4:a3:93:03:bb:49:f2:a9:d9:b3:ec:19:68:66:24: 54:99:8e:20:7a:cc:10:59:e6:fd:c7:fd:8d:06:90:6e:99:79: f9:5e:14:4e:ec:90:ed:48:03:11:b9:3d:7b:9e:47:7c:cf:90: aa:1e:5e:0e:54:e4:ab:f2:29:b4:53:7f:88:68:1f:91:89:af: d6:06:6a:e5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y6xkb9Fy95DHAyXXB8TwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2Y3ZTAzNDM3ZGUwYzViMzk4NmNiY2EwNDBlZTZiOTQ3ZDA3NDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoxfzATpyrweJXPzWy1lu2bE/nE2 2hhS7A0K5wdDfxyyLRxmgCVY4yO3Fet27ldq0koT5VjSm7bE34pmDMyfHRXOo391 oDE0FD7OoIhG8RH8DkvCGQNd/bse8gc8KCO4OsQ9VcarChauvINjoKWBgQDV98bV rfx+Ra7O2X1+LGOdsm8J2hOR14smz8pht2z/HZ/Dk3/aXsCa7LigR8A6YtjFoXI1 SfNKVMMo6rCxUDciMbm9n4gZsrYKiy+UV/cktYMfhh1WZJqIGReIYfO+stwHN3ty I9jyjl/126cK56zRMG0oT3XtoHrZqEY0LIW9i1NJY5ZXdIuE+Tn+Bof4qQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMz34DQ33gxbOYbLygQO5rlH0HQtMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvelBmZ05EZmVERnM1aHN2S0JBN211VWZRZEMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/IIAwQA l/MqMA0GCSqGSIb3DQEBCwUAA4IBAQATCwtdAHU5fifFpSt7YwACm0x8F2K5491R dYbRU4vDOUvpyYRUkS5uKs00UfzYK2OHDG4FQVVUH7+mpeXiqnNW8rvWF/HuvBgK 9BbccOqpMXd3MCJsDyZTKUYC8Eus0xFLU9UQE/U92/h9uJfQ3Lar7/XZNFZVJjrB SqsfKRZWPCaNgngJWoxU8s2GGirGIvgF2cKp5ko4LpLJtZ/1oqrp1WPdKpONtcJn rVpA69DIvVAquZwSExvUo5MDu0nyqdmz7BloZiRUmY4geswQWeb9x/2NBpBumXn5 XhRO7JDtSAMRuT17nkd8z5CqHl4OVOSr8im0U3+IaB+Ria/WBmrl -----END CERTIFICATE-----Generated at Sun Jan 18 04:08:45 2026 by rpki-client