This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zYpuJQ3CMWhbjwDOsyWBIm83eGg.roa File: zYpuJQ3CMWhbjwDOsyWBIm83eGg.roa (raw, json) Hash identifier: 98+ThVre2/rTivy5/lfFvTUqO9hwRU9JDXERrIpcKCk= Subject key identifier: CD:8A:6E:25:0D:C2:31:68:5B:8F:00:CE:B3:25:81:22:6F:37:78:68 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB11493CA1907E3CFE1CBEC3944D4D Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zYpuJQ3CMWhbjwDOsyWBIm83eGg.roa Signing time: Fri 02 Jan 2026 08:20:18 +0000 ROA not before: Fri 02 Jan 2026 08:20:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 10753 IP address blocks: 151.242.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:11:49:3c:a1:90:7e:3c:fe:1c:be:c3:94:4d:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd8a6e250dc231685b8f00ceb32581226f377868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2f:a1:d2:fb:f9:50:ee:ae:fe:ca:0c:0e:9f: 3d:0f:c4:69:a8:6a:35:85:de:74:8a:de:68:97:0e: 5b:82:1f:0f:48:ce:23:67:f0:f7:c3:f5:60:e8:f8: 00:cd:a7:e4:44:33:00:e3:2b:e9:3f:97:78:04:d1: 9b:36:4d:9d:f3:eb:ee:81:f9:7e:7a:29:f9:c7:ca: 25:76:91:e1:7d:bb:f8:81:0a:d9:4f:22:f3:e7:73: 19:46:3a:1d:24:a0:38:30:4e:08:bf:a2:69:84:32: ba:12:90:12:de:9a:0d:50:4e:f0:03:00:c0:62:f0: f7:f2:e5:b2:45:84:e2:8e:47:9f:4a:f3:70:29:17: 43:25:c5:6f:1b:a8:8b:7f:6a:be:ce:7c:18:4f:17: 51:a7:46:3a:6a:e4:16:e9:87:3f:26:fa:cb:78:4b: 38:44:db:a8:de:51:f9:c4:36:08:5e:a9:1e:0c:a5: ef:67:89:8e:b6:31:f1:3b:0a:96:6a:73:12:a7:15: 01:02:81:40:4c:4a:48:9e:61:3b:2e:08:b2:83:50: c4:16:46:8d:75:96:44:9c:b9:f6:82:65:72:55:53: 25:0a:25:0f:fd:55:f7:92:e6:e3:93:e4:cd:5c:03: 17:64:29:d2:56:c7:91:5c:c9:f5:53:ea:ef:27:07: d8:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8A:6E:25:0D:C2:31:68:5B:8F:00:CE:B3:25:81:22:6F:37:78:68 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zYpuJQ3CMWhbjwDOsyWBIm83eGg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.180.0/22 Signature Algorithm: sha256WithRSAEncryption 58:5d:3b:8c:e9:fb:81:d5:73:0d:91:b6:4b:fc:13:55:69:ef: f8:1e:88:2a:b0:97:96:1f:c3:78:be:f9:e7:89:c3:ca:2f:8a: c2:92:92:16:bc:f3:a7:46:41:f0:55:0e:74:9f:00:5a:9b:cf: 3b:35:e5:9d:be:71:2a:ab:4a:63:bf:c1:6e:44:53:1b:15:57: 19:29:3b:15:73:ed:22:ee:52:c6:00:b7:09:01:85:d9:7b:69: 14:d0:95:db:75:44:c1:61:ad:46:97:d4:7b:5e:e4:b9:87:2c: 98:19:15:ad:80:79:53:8f:2a:b2:9f:0e:0e:85:a0:8b:e6:be: 9c:21:e4:03:13:8b:0e:91:60:b8:84:a3:73:f8:ba:f8:e3:16: ce:8d:13:ff:1b:5d:cc:d9:5d:db:4c:2f:6e:85:a1:86:bb:f8: 7f:03:8f:e0:c4:6d:3b:7b:46:b1:02:63:99:24:de:b0:f9:3d: 01:40:b0:b2:bf:f9:4f:2c:b1:b1:c6:35:be:46:b3:ae:2b:42: 1d:92:79:c2:23:f2:84:93:64:15:aa:70:0b:99:67:76:27:30: 1f:4e:0c:a1:57:bd:ca:89:75:3a:33:63:04:42:09:65:ea:50: 04:b5:59:58:8c:aa:9f:df:9e:17:3e:be:80:ae:4d:ef:66:54: 80:08:21:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yxFJPKGQfjz+HL7DlE1NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDhhNmUyNTBkYzIzMTY4NWI4ZjAwY2ViMzI1ODEyMjZmMzc3ODY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S+h0vv5UO6u/soMDp89D8RpqGo1 hd50it5olw5bgh8PSM4jZ/D3w/Vg6PgAzafkRDMA4yvpP5d4BNGbNk2d8+vugfl+ ein5x8oldpHhfbv4gQrZTyLz53MZRjodJKA4ME4Iv6JphDK6EpAS3poNUE7wAwDA YvD38uWyRYTijkefSvNwKRdDJcVvG6iLf2q+znwYTxdRp0Y6auQW6Yc/JvrLeEs4 RNuo3lH5xDYIXqkeDKXvZ4mOtjHxOwqWanMSpxUBAoFATEpInmE7Lgiyg1DEFkaN dZZEnLn2gmVyVVMlCiUP/VX3kubjk+TNXAMXZCnSVseRXMn1U+rvJwfYiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM2KbiUNwjFoW48AzrMlgSJvN3hoMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvellwdUpRM0NNV2hiandET3N5V0JJbTgzZUdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl/K0MA0G CSqGSIb3DQEBCwUAA4IBAQBYXTuM6fuB1XMNkbZL/BNVae/4HogqsJeWH8N4vvnn icPKL4rCkpIWvPOnRkHwVQ50nwBam887NeWdvnEqq0pjv8FuRFMbFVcZKTsVc+0i 7lLGALcJAYXZe2kU0JXbdUTBYa1Gl9R7XuS5hyyYGRWtgHlTjyqynw4OhaCL5r6c IeQDE4sOkWC4hKNz+Lr44xbOjRP/G13M2V3bTC9uhaGGu/h/A4/gxG07e0axAmOZ JN6w+T0BQLCyv/lPLLGxxjW+RrOuK0IdknnCI/KEk2QVqnALmWd2JzAfTgyhV73K iXU6M2MEQgll6lAEtVlYjKqf354XPr6Ark3vZlSACCG9 -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:39 2026 by rpki-client