This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/8MHily8SQRnSnqa8jdWwNxzJOJ0.roa File: 8MHily8SQRnSnqa8jdWwNxzJOJ0.roa (raw, json) Hash identifier: Mz5ev1bJoNfDfpyakjMaD33JbMOyNCdahq2K77uSBgA= Subject key identifier: F0:C1:E2:97:2F:12:41:19:D2:9E:A6:BC:8D:D5:B0:37:1C:C9:38:9D Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED941A569FDAE23AC67EF7FDF92FB9 Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/8MHily8SQRnSnqa8jdWwNxzJOJ0.roa Signing time: Fri 02 Jan 2026 04:18:23 +0000 ROA not before: Fri 02 Jan 2026 04:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211159 IP address blocks: 151.237.19.0/24 maxlen: 24 151.237.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:94:1a:56:9f:da:e2:3a:c6:7e:f7:fd:f9:2f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0c1e2972f124119d29ea6bc8dd5b0371cc9389d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:45:74:29:b4:14:fa:6a:a6:ac:6e:0a:2f:89: c0:c3:50:e9:24:49:17:78:90:ce:bc:69:bd:3a:15: 59:32:c1:53:1e:38:ad:df:c9:25:90:1a:f7:1a:a7: c6:13:88:3e:5d:53:71:81:db:26:ed:2b:28:f6:79: 1c:be:bb:aa:61:f6:9d:2c:91:6c:50:e4:67:d7:26: 78:8e:68:24:e2:8f:56:ea:f7:9c:7c:31:1c:c6:61: 7b:a8:34:11:9f:7a:7c:21:3e:86:b6:22:6d:c4:fa: e9:c9:4e:47:70:60:22:a0:73:75:58:39:8e:70:98: e2:c8:f9:b1:13:68:54:34:1e:a8:f2:cf:48:64:19: 36:d2:68:b3:6d:ed:c6:bd:0c:85:51:95:a9:9c:dd: 00:8d:c1:78:61:4a:57:e0:f4:e1:da:00:68:6a:bc: cb:1e:72:b3:80:fa:8f:94:3a:29:99:89:32:b1:9f: c6:9a:1d:b0:36:77:c7:d6:8d:07:78:72:da:32:ff: d0:fc:c4:c4:fe:82:4f:07:36:1f:f9:1b:cc:79:60: a5:46:bc:8b:55:a9:a5:71:da:07:f9:ca:12:2d:8b: d1:52:01:76:74:3e:b6:09:35:d4:1a:51:c4:6f:d9: b9:0a:2e:fd:7f:48:75:8a:3d:6e:56:30:c2:69:d6: 5d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C1:E2:97:2F:12:41:19:D2:9E:A6:BC:8D:D5:B0:37:1C:C9:38:9D X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/8MHily8SQRnSnqa8jdWwNxzJOJ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.237.19.0/24 151.237.24.0/24 Signature Algorithm: sha256WithRSAEncryption 17:5f:e9:a9:dd:f3:b0:96:17:80:96:45:e0:be:93:28:dd:66: 31:bf:04:35:e9:58:dd:07:7b:93:cb:2d:85:a0:96:5b:d0:9c: 3f:d8:66:95:8e:46:98:e5:7a:6d:f9:4b:a8:ef:d9:2e:29:52: 49:69:0e:bd:07:ee:2c:32:35:f2:cd:5e:d1:66:48:ba:c3:75: 83:e0:55:f7:da:bc:b4:9a:92:ce:94:85:ba:69:5f:08:2e:7c: e1:d5:0c:2b:b9:cb:d6:ef:c1:08:f2:bd:20:10:37:7b:47:12: 4d:15:f4:87:1f:bd:1c:74:03:10:d0:2a:6e:c6:87:8a:87:ef: d1:79:f0:41:37:44:3c:4a:34:fc:21:79:ce:df:85:04:ef:49: b3:6f:5d:bb:3a:6d:89:13:61:64:64:3b:a6:bb:c5:d3:5f:84: af:41:e4:da:cd:6b:fb:3e:e7:f8:9e:b1:d4:9d:38:3d:82:42: 75:cb:ad:4e:6b:6f:04:25:53:49:0a:13:a3:95:ff:66:ca:f8: a5:a2:f1:76:e8:e1:2a:6a:00:b9:7b:da:7c:4a:f6:20:4d:67: 2d:6f:f8:d3:ed:25:f9:11:30:fc:11:76:16:72:21:bf:57:50: ea:f9:f4:e4:e7:9b:8d:ce:34:16:b8:38:71:79:3b:c2:bb:61: d9:a7:55:b8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87ZQaVp/a4jrGfvf9+S+5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGMxZTI5NzJmMTI0MTE5ZDI5ZWE2YmM4ZGQ1YjAzNzFjYzkzODlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EV0KbQU+mqmrG4KL4nAw1DpJEkX eJDOvGm9OhVZMsFTHjit38klkBr3GqfGE4g+XVNxgdsm7Sso9nkcvruqYfadLJFs UORn1yZ4jmgk4o9W6vecfDEcxmF7qDQRn3p8IT6GtiJtxPrpyU5HcGAioHN1WDmO cJjiyPmxE2hUNB6o8s9IZBk20mizbe3GvQyFUZWpnN0AjcF4YUpX4PTh2gBoarzL HnKzgPqPlDopmYkysZ/Gmh2wNnfH1o0HeHLaMv/Q/MTE/oJPBzYf+RvMeWClRryL VamlcdoH+coSLYvRUgF2dD62CTXUGlHEb9m5Ci79f0h1ij1uVjDCadZdQwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPDB4pcvEkEZ0p6mvI3VsDccyTidMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvOE1IaWx5OFNRUm5TbnFhOGpkV3dOeHpKT0owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl+0TAwQA l+0YMA0GCSqGSIb3DQEBCwUAA4IBAQAXX+mp3fOwlheAlkXgvpMo3WYxvwQ16Vjd B3uTyy2FoJZb0Jw/2GaVjkaY5Xpt+Uuo79kuKVJJaQ69B+4sMjXyzV7RZki6w3WD 4FX32ry0mpLOlIW6aV8ILnzh1QwrucvW78EI8r0gEDd7RxJNFfSHH70cdAMQ0Cpu xoeKh+/RefBBN0Q8SjT8IXnO34UE70mzb127Om2JE2FkZDumu8XTX4SvQeTazWv7 Puf4nrHUnTg9gkJ1y61Oa28EJVNJChOjlf9myvilovF26OEqagC5e9p8SvYgTWct b/jT7SX5ETD8EXYWciG/V1Dq+fTk55uNzjQWuDhxeTvCu2HZp1W4 -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:48 2026 by rpki-client