This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-oTmnbcbQ17PUCmCJvFXjxLmB4g.roa File: 1-oTmnbcbQ17PUCmCJvFXjxLmB4g.roa (raw, json) Hash identifier: PnHteVOREWI+Zym1vX7fXdqBT2bKuiLkwUk/+2K/Z6g= Subject key identifier: FA:84:E6:9D:B7:1B:43:5E:CF:50:29:82:26:F1:57:8F:12:E6:07:88 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB52A8FCD12825C12FDECFFE71AF71 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-oTmnbcbQ17PUCmCJvFXjxLmB4g.roa Signing time: Fri 02 Jan 2026 08:20:35 +0000 ROA not before: Fri 02 Jan 2026 08:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 141383 IP address blocks: 151.242.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:52:a8:fc:d1:28:25:c1:2f:de:cf:fe:71:af:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa84e69db71b435ecf50298226f1578f12e60788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:28:f1:e2:c6:c5:d8:8b:ab:80:7f:9d:fe:6a: 43:e3:8d:0b:49:58:ef:d8:4f:d7:a9:67:b7:09:2a: 3d:ab:42:e1:28:43:c0:57:c7:db:95:88:a6:6f:fb: fd:d7:5d:c6:37:22:1c:29:6c:8a:8d:db:3a:03:36: db:5a:2b:f8:c9:9b:a5:c4:5b:2a:81:c3:04:29:b7: 68:7b:25:a9:27:47:01:df:8b:00:0f:6f:f0:88:be: bf:aa:48:5f:14:03:3b:65:c0:eb:95:c9:21:aa:7d: db:77:6d:0e:1b:aa:bd:e5:46:0e:50:1f:26:da:bc: 3b:ea:ae:9d:39:15:a6:3e:74:b3:71:18:0f:8a:92: aa:f5:3e:c0:4e:18:b1:61:d4:ff:04:27:fa:c4:c9: 2c:b1:4a:06:ef:9e:01:64:18:2c:4e:2c:a9:14:d8: 6b:9d:55:aa:6b:3c:9c:38:4a:30:7b:5a:de:25:f6: 34:29:fd:71:d5:4d:20:a3:ae:35:37:ad:d9:4d:4a: 2e:20:25:5e:9a:77:20:71:21:64:08:77:a4:94:97: fd:31:41:26:51:fd:aa:b9:20:4f:8a:3e:06:33:80: 9a:46:ad:d7:27:fc:c6:ea:c9:b6:bd:d3:a6:8e:cb: 22:5d:16:46:05:7c:cc:f1:69:92:f8:1a:18:b1:d6: ed:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:84:E6:9D:B7:1B:43:5E:CF:50:29:82:26:F1:57:8F:12:E6:07:88 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-oTmnbcbQ17PUCmCJvFXjxLmB4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.150.0/23 Signature Algorithm: sha256WithRSAEncryption aa:52:1c:49:9d:e7:41:89:c7:63:c4:1f:61:00:1b:86:3f:5c: 99:63:2d:f8:cb:33:eb:b6:d1:76:8a:97:d8:14:2b:76:f2:d6: b1:fc:8f:4e:15:59:23:26:8e:2d:df:b4:da:aa:31:b8:a9:a0: 1e:01:64:75:49:00:af:79:03:3b:a9:8c:9f:14:9c:16:29:b0: 35:00:c1:7d:2d:5c:ca:aa:1d:69:8d:a6:d7:8d:4c:8f:c4:fa: 6e:ce:53:1f:8e:9f:a9:59:a9:97:27:42:23:f1:ed:65:e3:84: 41:b6:29:0c:35:92:4b:7f:d2:e3:b6:2f:31:b3:2a:8f:4a:95: a9:16:3f:6d:2b:c8:8e:4b:59:1c:f2:97:ea:5e:1f:ac:e3:a4: 5f:0f:f1:d1:35:ad:c3:1a:bb:fc:bd:90:93:46:fd:cc:dd:05: a4:73:75:c6:a8:6a:0f:e2:ef:65:f9:7a:46:df:f1:be:8f:3b: b9:41:b4:43:b3:5a:6f:7f:f8:18:d9:09:f6:1c:67:c0:55:55: cc:04:21:70:2c:06:1a:94:93:75:c1:ef:55:79:1f:e3:1a:53: bd:83:53:b4:e6:1f:45:84:bc:c4:fa:c1:e8:31:46:20:89:ee: d1:31:16:f1:cf:4f:01:b9:28:fd:1c:26:8b:f2:1d:f8:9b:ec: 4e:0a:dc:7b -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9y1Ko/NEoJcEv3s/+ca9xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTg0ZTY5ZGI3MWI0MzVlY2Y1MDI5ODIyNmYxNTc4ZjEyZTYwNzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ijx4sbF2IurgH+d/mpD440LSVjv 2E/XqWe3CSo9q0LhKEPAV8fblYimb/v9113GNyIcKWyKjds6AzbbWiv4yZulxFsq gcMEKbdoeyWpJ0cB34sAD2/wiL6/qkhfFAM7ZcDrlckhqn3bd20OG6q95UYOUB8m 2rw76q6dORWmPnSzcRgPipKq9T7AThixYdT/BCf6xMkssUoG754BZBgsTiypFNhr nVWqazycOEowe1reJfY0Kf1x1U0go641N63ZTUouICVemncgcSFkCHeklJf9MUEm Uf2quSBPij4GM4CaRq3XJ/zG6sm2vdOmjssiXRZGBXzM8WmS+BoYsdbtCQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPqE5p23G0Nez1ApgibxV48S5geIMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvMS1vVG1uYmNiUTE3UFVDbUNKdkZYanhMbUI0Zy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGUvZjQzYjFkLTllNTAtNDU1MS1hZTZhLTE3YjlkZTE0MTI1 Mi8xL3htSm05R2I3SkppamxGbXpOUzJpVVZHbHBNQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAZfyljAN BgkqhkiG9w0BAQsFAAOCAQEAqlIcSZ3nQYnHY8QfYQAbhj9cmWMt+Msz67bRdoqX 2BQrdvLWsfyPThVZIyaOLd+02qoxuKmgHgFkdUkAr3kDO6mMnxScFimwNQDBfS1c yqodaY2m141Mj8T6bs5TH46fqVmplydCI/HtZeOEQbYpDDWSS3/S47YvMbMqj0qV qRY/bSvIjktZHPKX6l4frOOkXw/x0TWtwxq7/L2Qk0b9zN0FpHN1xqhqD+LvZfl6 Rt/xvo87uUG0Q7Nab3/4GNkJ9hxnwFVVzAQhcCwGGpSTdcHvVXkf4xpTvYNTtOYf RYS8xPrB6DFGIInu0TEW8c9PAbko/Rwmi/Id+JvsTgrcew== -----END CERTIFICATE-----Generated at Mon Jan 12 01:33:25 2026 by rpki-client