This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/R9EYWDWbFyIowERkQv1v0JtSffs.roa File: R9EYWDWbFyIowERkQv1v0JtSffs.roa (raw, json) Hash identifier: UZd3m4a2szallkaOjNZ7VHm5NhVRaDO2lmc6VL9YvRg= Subject key identifier: 47:D1:18:58:35:9B:17:22:28:C0:44:64:42:FD:6F:D0:9B:52:7D:FB Certificate issuer: /CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f Certificate serial: 019B7758D407AA9BFF7643E1024DF2887DD4 Authority key identifier: CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/R9EYWDWbFyIowERkQv1v0JtSffs.roa Signing time: Thu 01 Jan 2026 02:17:48 +0000 ROA not before: Thu 01 Jan 2026 02:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 51.149.8.0/24 maxlen: 24 51.149.14.0/24 maxlen: 24 51.149.250.0/24 maxlen: 24 51.149.251.0/24 maxlen: 24 51.149.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.mft rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 08:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:d4:07:aa:9b:ff:76:43:e1:02:4d:f2:88:7d:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced2d800dc6c33b69fa47291e2f15b335ea3600f Validity Not Before: Jan 1 02:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47d11858359b172228c0446442fd6fd09b527dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b4:b0:8a:03:13:69:1e:2b:9f:c9:b2:1b:09: 0f:5c:f6:92:2e:62:62:93:f9:0e:d6:e4:be:8f:01: d2:ee:79:9f:a9:0f:49:80:81:d8:b2:6c:af:49:38: c6:a5:5a:64:f2:11:4f:6d:e1:91:21:18:c6:7f:0e: 91:41:7b:ce:0d:7f:18:71:3a:99:c9:3d:fd:2c:6b: ad:f6:2f:f8:f9:01:2f:4e:7d:40:d3:1c:db:92:fa: 5f:50:f1:88:7d:22:af:48:13:c3:43:5a:97:62:84: 74:63:fe:09:e9:01:e0:4e:8f:20:30:d9:59:82:31: e8:df:e8:73:ac:cb:ca:29:cc:d2:5c:f9:02:53:8e: 2b:fb:c9:0e:9f:c4:5e:b2:d4:f4:b8:53:8e:80:da: ca:51:1a:83:3e:23:61:36:16:3f:16:ea:ea:05:64: 0d:ef:6f:af:d6:1e:34:05:11:15:45:88:f4:07:5a: aa:f4:a0:8e:ec:56:a8:6b:cc:ca:b4:e8:17:3f:13: 1b:b3:d0:ab:3e:05:32:19:1d:e4:01:13:e7:ff:94: 7e:22:7b:44:62:27:c3:28:f2:77:a3:b1:cc:12:8b: 7f:a9:34:01:b5:ad:e4:77:85:45:a7:cd:f8:57:f7: b1:f3:27:60:6f:8f:68:02:dd:36:d6:83:88:25:4a: b3:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D1:18:58:35:9B:17:22:28:C0:44:64:42:FD:6F:D0:9B:52:7D:FB X509v3 Authority Key Identifier: keyid:CE:D2:D8:00:DC:6C:33:B6:9F:A4:72:91:E2:F1:5B:33:5E:A3:60:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztLYANxsM7afpHKR4vFbM16jYA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/R9EYWDWbFyIowERkQv1v0JtSffs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ztLYANxsM7afpHKR4vFbM16jYA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 51.149.8.0/24 51.149.14.0/24 51.149.250.0-51.149.252.255 Signature Algorithm: sha256WithRSAEncryption 67:a2:04:a1:75:2f:de:bd:08:f8:1b:8f:17:08:d4:9f:30:80: 48:8c:37:de:03:6c:1e:00:c4:36:fe:9f:b8:a1:37:b3:dd:3b: 21:2b:6f:93:6e:66:ae:cf:6b:fc:e6:53:7a:75:36:11:8e:52: 83:d5:cf:12:a6:d2:42:95:58:31:a6:1f:cf:60:a8:4d:f6:e5: fa:7e:72:92:6e:80:b6:1a:6f:8e:e2:4c:c7:4e:0f:d2:66:25: f8:95:c9:b1:fd:e0:6a:5a:43:7b:75:7b:bd:62:83:6c:81:6d: 31:89:da:f3:44:1e:4c:f3:2a:b7:07:56:89:40:d4:9c:63:9c: 90:72:9d:a3:55:6c:f6:7b:c8:30:e3:7a:6f:10:55:a7:89:f1: 94:ee:9a:20:39:b2:53:be:12:5a:94:1a:e0:27:48:38:e0:04: 4c:1f:87:f3:35:13:3f:a4:5a:16:c5:41:09:d8:31:da:f8:ec: f5:44:ab:90:2f:b3:a1:e1:ba:58:13:d0:7c:d3:2e:e9:c6:c1: bc:d3:ba:a5:e4:9f:b7:d5:a5:bf:15:11:02:63:00:ad:33:f5: 8e:f5:29:57:ba:c2:dc:a7:c7:8d:b7:00:a3:e7:27:da:d6:b6: e5:f6:cd:7a:e1:e5:23:15:eb:3b:17:64:2c:a4:a2:0d:ee:ea: 01:89:98:fd -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt3WNQHqpv/dkPhAk3yiH3UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDJkODAwZGM2YzMzYjY5ZmE0NzI5MWUyZjE1YjMzNWVh MzYwMGYwHhcNMjYwMTAxMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2QxMTg1ODM1OWIxNzIyMjhjMDQ0NjQ0MmZkNmZkMDliNTI3ZGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7SwigMTaR4rn8myGwkPXPaSLmJi k/kO1uS+jwHS7nmfqQ9JgIHYsmyvSTjGpVpk8hFPbeGRIRjGfw6RQXvODX8YcTqZ yT39LGut9i/4+QEvTn1A0xzbkvpfUPGIfSKvSBPDQ1qXYoR0Y/4J6QHgTo8gMNlZ gjHo3+hzrMvKKczSXPkCU44r+8kOn8RestT0uFOOgNrKURqDPiNhNhY/FurqBWQN 72+v1h40BREVRYj0B1qq9KCO7Faoa8zKtOgXPxMbs9CrPgUyGR3kARPn/5R+IntE YifDKPJ3o7HMEot/qTQBta3kd4VFp834V/ex8ydgb49oAt021oOIJUqztwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFEfRGFg1mxciKMBEZEL9b9CbUn37MB8GA1UdIwQY MBaAFM7S2ADcbDO2n6RykeLxWzNeo2APMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mODg4NTctY2MwNS00YmRiLTkxZTYt ZWQ0ZjA2NDNiZjI1LzEvUjlFWVdEV2JGeUlvd0VSa1F2MXYwSnRTZmZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9mODg4NTctY2MwNS00YmRiLTkxZTYtZWQ0ZjA2NDNiZjI1 LzEvenRMWUFOeHNNN2FmcEhLUjR2RmJNMTZqWUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQAM5UIAwQA M5UOMAwDBAEzlfoDBAAzlfwwDQYJKoZIhvcNAQELBQADggEBAGeiBKF1L969CPgb jxcI1J8wgEiMN94DbB4AxDb+n7ihN7PdOyErb5NuZq7Pa/zmU3p1NhGOUoPVzxKm 0kKVWDGmH89gqE325fp+cpJugLYab47iTMdOD9JmJfiVybH94GpaQ3t1e71ig2yB bTGJ2vNEHkzzKrcHVolA1JxjnJBynaNVbPZ7yDDjem8QVaeJ8ZTumiA5slO+ElqU GuAnSDjgBEwfh/M1Ez+kWhbFQQnYMdr47PVEq5Avs6HhulgT0HzTLunGwbzTuqXk n7fVpb8VEQJjAK0z9Y71KVe6wtynx423AKPnJ9rWtuX2zXrh5SMV6zsXZCykog3u 6gGJmP0= -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:12 2026 by rpki-client