This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/igce6sXyWMRuLXM6rVKdhvvPUvA.roa File: igce6sXyWMRuLXM6rVKdhvvPUvA.roa (raw, json) Hash identifier: lJbTpwGiJnAGTrBCWtuwGuLG+y5pdRw8UdMiLvljmjQ= Subject key identifier: 8A:07:1E:EA:C5:F2:58:C4:6E:2D:73:3A:AD:52:9D:86:FB:CF:52:F0 Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED8431806D2B21E672E35E99FE1F8E Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/igce6sXyWMRuLXM6rVKdhvvPUvA.roa Signing time: Fri 02 Jan 2026 04:18:19 +0000 ROA not before: Fri 02 Jan 2026 04:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50186 IP address blocks: 151.237.96.0/21 maxlen: 21 151.237.98.0/24 maxlen: 24 151.237.99.0/24 maxlen: 24 151.237.100.0/24 maxlen: 24 151.237.101.0/24 maxlen: 24 151.237.102.0/24 maxlen: 24 151.237.103.0/24 maxlen: 24 151.237.104.0/23 maxlen: 23 151.237.104.0/24 maxlen: 24 151.237.105.0/24 maxlen: 24 151.237.106.0/24 maxlen: 24 151.237.107.0/24 maxlen: 24 151.237.108.0/23 maxlen: 23 151.237.108.0/24 maxlen: 24 151.237.109.0/24 maxlen: 24 151.237.110.0/24 maxlen: 24 151.237.111.0/24 maxlen: 24 151.237.112.0/24 maxlen: 24 151.237.113.0/24 maxlen: 24 151.237.114.0/24 maxlen: 24 151.237.115.0/24 maxlen: 24 151.237.116.0/24 maxlen: 24 151.237.117.0/24 maxlen: 24 151.237.118.0/24 maxlen: 24 151.237.119.0/24 maxlen: 24 151.237.120.0/24 maxlen: 24 151.237.122.0/24 maxlen: 24 151.237.123.0/24 maxlen: 24 151.237.124.0/24 maxlen: 24 151.237.125.0/24 maxlen: 24 151.237.126.0/24 maxlen: 24 151.237.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:84:31:80:6d:2b:21:e6:72:e3:5e:99:fe:1f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8a071eeac5f258c46e2d733aad529d86fbcf52f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:45:6b:b2:ec:95:17:90:37:6c:bb:25:82:e5: a8:56:33:c4:1c:ae:7a:b5:af:a6:69:5e:20:f4:b3: 19:a6:8f:50:50:3e:9c:b7:8e:72:a6:ad:88:55:97: 13:22:4f:97:4f:b5:83:03:42:65:8a:8e:40:23:a9: d2:1a:97:28:ef:ac:49:ee:83:21:d2:e5:b8:c1:a9: 28:08:96:c4:90:d4:b0:e2:ff:3d:3d:a2:72:3e:af: d5:df:6c:f8:53:20:9d:2b:ef:6a:d6:b0:f2:fa:01: 4d:4d:c1:41:ad:a0:f1:b5:78:6f:c2:11:69:df:8d: 59:35:03:aa:64:27:39:8b:83:0a:ff:68:91:1c:d6: 12:2a:29:ee:19:38:0f:77:82:03:92:47:7f:31:1f: b7:1e:d6:f8:dc:16:a8:23:4e:1b:51:ca:31:76:42: 3e:c4:2d:b0:a5:76:57:58:e6:b4:9f:55:c0:0f:0f: 04:09:69:73:41:58:52:fc:5d:8a:8f:40:5d:36:62: 92:78:3c:d9:e8:13:48:dc:93:cd:41:fc:38:e5:43: 5c:9a:12:80:4b:76:39:a7:c4:ed:f6:a8:bf:10:35: 9d:5e:86:78:ac:bf:6f:87:dc:ce:8e:34:14:f4:6c: cc:e4:b7:58:8a:c0:c1:a2:3b:f0:35:35:1c:ba:1f: e5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:07:1E:EA:C5:F2:58:C4:6E:2D:73:3A:AD:52:9D:86:FB:CF:52:F0 X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/igce6sXyWMRuLXM6rVKdhvvPUvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.237.96.0-151.237.120.255 151.237.122.0-151.237.127.255 Signature Algorithm: sha256WithRSAEncryption 99:98:bb:79:b3:0a:d9:2f:05:18:e8:0d:a1:fa:ff:c0:73:5f: af:ce:a0:ec:d2:9a:5a:e3:8c:4f:c1:a2:21:ca:76:e9:22:6e: 45:60:00:69:81:a4:a6:c0:fe:d8:0b:1d:a1:fd:a4:84:56:27: 2c:cc:e6:8b:dc:67:ed:5e:bc:66:65:3c:2e:be:aa:aa:13:d5: e7:3f:86:ab:b7:dc:1e:bf:8f:f5:c3:50:e3:c2:38:35:c1:29: 2d:43:e2:98:e7:e1:77:3a:08:ab:a3:f7:0e:1c:80:3a:e9:1d: ca:66:70:8b:f5:dc:df:80:7f:f8:89:02:ff:c6:4a:fa:ee:d6: 3f:8d:5a:62:5b:cd:e6:6c:23:5c:3b:60:bc:85:53:92:58:02: 35:18:98:71:30:cb:18:5c:ba:28:40:79:f2:7b:6e:a6:b5:f2: d5:10:94:a6:72:08:e8:4d:de:7d:4d:99:69:5d:27:ab:0a:24: 98:91:50:ba:01:84:80:b2:1a:22:46:44:99:39:bf:98:d7:20: c6:11:8b:e9:69:c1:2f:dd:e0:af:1d:04:d7:b4:b3:c5:64:87: f9:3d:a4:df:38:bb:ec:bf:43:f6:26:5c:22:41:b8:59:fd:6e: c7:1c:56:84:80:a7:fe:fe:2a:4f:b3:47:f7:fa:c2:6d:d5:a2: 2c:82:62:4b -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt87YQxgG0rIeZy416Z/h+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YTA3MWVlYWM1ZjI1OGM0NmUyZDczM2FhZDUyOWQ4NmZiY2Y1MmYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UVrsuyVF5A3bLslguWoVjPEHK56 ta+maV4g9LMZpo9QUD6ct45ypq2IVZcTIk+XT7WDA0Jlio5AI6nSGpco76xJ7oMh 0uW4wakoCJbEkNSw4v89PaJyPq/V32z4UyCdK+9q1rDy+gFNTcFBraDxtXhvwhFp 341ZNQOqZCc5i4MK/2iRHNYSKinuGTgPd4IDkkd/MR+3Htb43BaoI04bUcoxdkI+ xC2wpXZXWOa0n1XADw8ECWlzQVhS/F2Kj0BdNmKSeDzZ6BNI3JPNQfw45UNcmhKA S3Y5p8Tt9qi/EDWdXoZ4rL9vh9zOjjQU9GzM5LdYisDBojvwNTUcuh/lVQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFIoHHurF8ljEbi1zOq1SnYb7z1LwMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvaWdjZTZzWHlXTVJ1TFhNNnJWS2RodnZQVXZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAWX7WAD BACX7XgwDAMEAZftegMEB5ftADANBgkqhkiG9w0BAQsFAAOCAQEAmZi7ebMK2S8F GOgNofr/wHNfr86g7NKaWuOMT8GiIcp26SJuRWAAaYGkpsD+2Asdof2khFYnLMzm i9xn7V68ZmU8Lr6qqhPV5z+Gq7fcHr+P9cNQ48I4NcEpLUPimOfhdzoIq6P3DhyA OukdymZwi/Xc34B/+IkC/8ZK+u7WP41aYlvN5mwjXDtgvIVTklgCNRiYcTDLGFy6 KEB58ntuprXy1RCUpnII6E3efU2ZaV0nqwokmJFQugGEgLIaIkZEmTm/mNcgxhGL 6WnBL93grx0E17SzxWSH+T2k3zi77L9D9iZcIkG4Wf1uxxxWhICn/v4qT7NH9/rC bdWiLIJiSw== -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:40 2026 by rpki-client