This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zvS4ITfl5TYySELsNON0HKINxT0.roa File: zvS4ITfl5TYySELsNON0HKINxT0.roa (raw, json) Hash identifier: NJ7hE4K2SMmjsCu3eL/myTLS5pb/7OLTAf5S7StoLN8= Subject key identifier: CE:F4:B8:21:37:E5:E5:36:32:48:42:EC:34:E3:74:1C:A2:0D:C5:3D Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB8101C5FFE5F0917A724308AB20F5 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zvS4ITfl5TYySELsNON0HKINxT0.roa Signing time: Fri 02 Jan 2026 08:20:47 +0000 ROA not before: Fri 02 Jan 2026 08:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210554 IP address blocks: 151.243.24.0/24 maxlen: 24 151.244.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:81:01:c5:ff:e5:f0:91:7a:72:43:08:ab:20:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cef4b82137e5e536324842ec34e3741ca20dc53d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9c:48:c4:78:b2:db:93:84:be:61:93:22:d4: 66:2b:21:75:19:ec:33:01:5c:ec:10:dc:d1:28:69: 8c:e0:66:34:b8:78:e5:4e:f5:0d:16:4d:33:5b:24: ec:47:c9:be:ad:ea:17:51:03:ea:0f:f9:8d:b7:64: 99:31:48:73:f3:9a:ce:26:fb:8b:c6:f8:a9:b9:58: 15:02:77:db:23:3c:b4:79:75:b9:19:a6:0e:54:60: ca:93:76:0d:5a:fc:72:ec:f9:0a:d3:68:56:8a:da: ac:bd:e6:dc:83:b2:e0:87:73:ef:9b:26:5e:98:2a: 8a:89:7d:dc:f3:33:ed:8b:33:ea:25:83:9e:31:bc: b2:07:7e:e1:99:61:2a:00:47:8e:79:55:35:0f:16: ff:2f:5d:55:34:5d:09:cb:d1:09:76:87:74:88:db: 64:f9:74:a1:c5:9b:ee:af:0d:69:ff:88:67:52:8d: 4d:62:d6:2a:2c:80:72:32:37:6b:b1:e2:48:11:e8: 5a:b9:6f:51:12:9d:59:31:1c:aa:0b:67:ab:0b:cc: 77:7b:df:4d:b4:fc:7f:40:d3:7a:8f:17:cc:a9:6e: 97:00:5e:b7:a2:ef:0d:74:41:2d:0d:88:1d:f6:80: 95:72:d5:0a:45:0c:0f:60:22:f1:cf:8d:9c:84:b5: 36:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F4:B8:21:37:E5:E5:36:32:48:42:EC:34:E3:74:1C:A2:0D:C5:3D X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zvS4ITfl5TYySELsNON0HKINxT0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.24.0/24 151.244.40.0/24 Signature Algorithm: sha256WithRSAEncryption 19:37:b9:30:b9:63:9a:92:3b:bd:6b:1c:52:09:d0:97:64:89: 09:d4:98:20:12:c4:e8:22:c1:29:48:98:c1:26:ea:ca:bc:a4: 5e:c2:89:30:49:be:d0:e0:80:c0:77:07:de:3c:10:76:9f:d0: f3:ba:8f:2d:31:0a:d1:c7:4d:50:e2:1e:9c:e0:d1:b2:87:a1: 7b:cf:bc:78:60:96:aa:66:98:ed:36:c3:71:29:28:a0:bf:11: ae:17:9a:34:b9:ec:1d:73:91:8a:52:95:d8:15:64:26:f4:a0: 48:91:f0:10:65:09:c2:ee:5c:d9:16:29:6b:e4:67:ac:14:fa: c3:7d:c4:ff:22:37:69:e9:85:f9:88:53:76:e7:f0:cb:ad:e3: 6a:79:07:8a:f0:08:0b:b9:c2:99:15:36:e9:8e:b6:7a:49:de: 65:62:06:3d:a2:a3:a1:40:52:43:03:b7:45:e0:6f:f6:df:f6: ec:93:ef:ec:c2:99:6a:7a:b0:2b:dd:d6:29:50:f2:7a:ab:1b: f2:0e:31:c7:5c:5e:ab:49:92:37:02:7c:63:66:7e:c0:65:02: 56:e6:77:ae:be:aa:21:49:df:94:b3:43:d6:61:e0:57:4f:0d: 08:59:d7:4d:63:9b:95:6b:84:19:df:7e:21:c3:78:47:d0:ce: 61:72:15:4a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y4EBxf/l8JF6ckMIqyD1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZWY0YjgyMTM3ZTVlNTM2MzI0ODQyZWMzNGUzNzQxY2EyMGRjNTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZxIxHiy25OEvmGTItRmKyF1Gewz AVzsENzRKGmM4GY0uHjlTvUNFk0zWyTsR8m+reoXUQPqD/mNt2SZMUhz85rOJvuL xvipuVgVAnfbIzy0eXW5GaYOVGDKk3YNWvxy7PkK02hWitqsvebcg7Lgh3PvmyZe mCqKiX3c8zPtizPqJYOeMbyyB37hmWEqAEeOeVU1Dxb/L11VNF0Jy9EJdod0iNtk +XShxZvurw1p/4hnUo1NYtYqLIByMjdrseJIEehauW9REp1ZMRyqC2erC8x3e99N tPx/QNN6jxfMqW6XAF63ou8NdEEtDYgd9oCVctUKRQwPYCLxz42chLU2+wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFM70uCE35eU2MkhC7DTjdByiDcU9MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvenZTNElUZmw1VFl5U0VMc05PTjBIS0lOeFQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/MYAwQA l/QoMA0GCSqGSIb3DQEBCwUAA4IBAQAZN7kwuWOakju9axxSCdCXZIkJ1JggEsTo IsEpSJjBJurKvKRewokwSb7Q4IDAdwfePBB2n9Dzuo8tMQrRx01Q4h6c4NGyh6F7 z7x4YJaqZpjtNsNxKSigvxGuF5o0uewdc5GKUpXYFWQm9KBIkfAQZQnC7lzZFilr 5GesFPrDfcT/Ijdp6YX5iFN25/DLreNqeQeK8AgLucKZFTbpjrZ6Sd5lYgY9oqOh QFJDA7dF4G/23/bsk+/swplqerAr3dYpUPJ6qxvyDjHHXF6rSZI3AnxjZn7AZQJW 5neuvqohSd+Us0PWYeBXTw0IWddNY5uVa4QZ334hw3hH0M5hchVK -----END CERTIFICATE-----Generated at Sun Jan 11 16:13:03 2026 by rpki-client