This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8y3taQE842LLQ9pokzMDEUKxXW8.roa File: 8y3taQE842LLQ9pokzMDEUKxXW8.roa (raw, json) Hash identifier: inOLhWqdL/PNxMHC66eyZuIpD89Qp4tVFDyjZ6B6RXw= Subject key identifier: F3:2D:ED:69:01:3C:E3:62:CB:43:DA:68:93:33:03:11:42:B1:5D:6F Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB7467B007C6D50F9AAE6C6D291C2C Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8y3taQE842LLQ9pokzMDEUKxXW8.roa Signing time: Fri 02 Jan 2026 08:20:44 +0000 ROA not before: Fri 02 Jan 2026 08:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207847 IP address blocks: 151.242.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:74:67:b0:07:c6:d5:0f:9a:ae:6c:6d:29:1c:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f32ded69013ce362cb43da689333031142b15d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:48:db:26:e7:a7:7d:22:eb:df:af:b1:b5:0a: 7e:07:43:8e:19:3a:39:39:2d:93:cf:e5:7e:9b:09: 6c:13:fa:f5:e9:eb:ce:d6:f3:2c:16:37:57:33:1a: 15:3e:ac:0c:46:84:44:07:a7:c0:3c:47:e8:8a:f0: 91:f5:f9:7e:0e:e8:74:89:74:6f:7c:3e:c1:44:f1: d6:14:26:77:7d:bd:f4:33:b5:de:64:b8:24:c1:7a: f2:d2:76:83:e2:48:eb:96:38:23:b2:27:7b:1e:73: 54:ce:9f:9f:f5:c0:2c:11:9c:0f:16:ba:52:11:2c: 09:7e:d2:58:6e:92:4d:b0:b7:9a:a9:7b:dd:99:58: 95:e6:6b:2a:8e:f2:f2:e9:b8:c4:2d:00:a2:46:c3: 4b:4d:32:5d:fd:4f:72:74:c7:7d:a7:42:de:ee:03: fc:ea:10:76:6d:c4:14:8a:6c:05:63:bb:e8:fd:57: 57:ae:ec:d2:e0:e5:81:d4:5b:60:e2:cc:ff:ce:1c: de:14:9e:cc:2d:73:fd:ac:49:ce:90:62:09:89:37: 55:d7:a4:10:45:17:e3:f2:ee:39:01:c2:7e:a7:a3: 60:6f:2a:40:82:29:b2:94:94:3d:79:13:68:3e:3e: d1:12:57:00:05:15:e4:b2:33:35:6c:4d:16:29:5a: 05:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:2D:ED:69:01:3C:E3:62:CB:43:DA:68:93:33:03:11:42:B1:5D:6F X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8y3taQE842LLQ9pokzMDEUKxXW8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.2.0/24 Signature Algorithm: sha256WithRSAEncryption 21:9e:df:9b:df:8d:54:6e:22:70:85:32:06:88:fc:72:fb:d4: 73:26:d2:28:a5:5d:30:dc:dd:6a:fe:18:fc:21:4f:45:c0:e1: 95:65:f8:bb:41:41:6c:0e:0e:3e:1d:da:36:02:cd:0f:2f:8e: 8c:05:9a:cc:21:81:d7:97:45:21:e9:a9:0c:61:a3:42:a6:62: 2d:f9:c8:45:d9:dd:ea:e8:61:00:b5:ec:e9:bc:c4:77:cb:e1: a0:4d:6e:03:1c:3c:fb:ed:79:b4:5b:f4:ac:b6:bb:62:10:34: 22:b9:14:35:e3:c4:e5:3c:e1:14:a4:ea:fa:20:e0:e2:75:52: 76:8a:68:ea:88:aa:84:43:f5:34:f0:52:6e:a5:c4:a2:09:1a: 6a:5b:c1:80:03:ad:3e:bc:ac:6a:f1:13:ed:ff:34:fc:71:c6: 2c:31:82:07:e8:eb:34:55:25:3d:82:8d:f9:2d:30:e0:3c:17: ef:fd:94:f6:b5:18:55:3c:38:29:8a:b1:8c:ad:0c:f5:1d:58: 98:b8:8f:92:35:bc:55:4c:49:ba:c1:2f:94:ef:a0:ea:c5:22: bf:20:4f:fa:23:ba:97:6a:1f:e7:8a:e4:2f:cd:25:c5:9b:45: 02:87:e7:fb:9e:d5:00:8a:b8:3a:cd:90:39:69:49:62:11:ba: db:23:3c:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y3RnsAfG1Q+armxtKRwsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzJkZWQ2OTAxM2NlMzYyY2I0M2RhNjg5MzMzMDMxMTQyYjE1ZDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEjbJuenfSLr36+xtQp+B0OOGTo5 OS2Tz+V+mwlsE/r16evO1vMsFjdXMxoVPqwMRoREB6fAPEfoivCR9fl+Duh0iXRv fD7BRPHWFCZ3fb30M7XeZLgkwXry0naD4kjrljgjsid7HnNUzp+f9cAsEZwPFrpS ESwJftJYbpJNsLeaqXvdmViV5msqjvLy6bjELQCiRsNLTTJd/U9ydMd9p0Le7gP8 6hB2bcQUimwFY7vo/VdXruzS4OWB1Ftg4sz/zhzeFJ7MLXP9rEnOkGIJiTdV16QQ RRfj8u45AcJ+p6NgbypAgimylJQ9eRNoPj7RElcABRXksjM1bE0WKVoF1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPMt7WkBPONiy0PaaJMzAxFCsV1vMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvOHkzdGFRRTg0MkxMUTlwb2t6TURFVUt4WFc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/ICMA0G CSqGSIb3DQEBCwUAA4IBAQAhnt+b341UbiJwhTIGiPxy+9RzJtIopV0w3N1q/hj8 IU9FwOGVZfi7QUFsDg4+Hdo2As0PL46MBZrMIYHXl0Uh6akMYaNCpmIt+chF2d3q 6GEAtezpvMR3y+GgTW4DHDz77Xm0W/SstrtiEDQiuRQ148TlPOEUpOr6IODidVJ2 imjqiKqEQ/U08FJupcSiCRpqW8GAA60+vKxq8RPt/zT8ccYsMYIH6Os0VSU9go35 LTDgPBfv/ZT2tRhVPDgpirGMrQz1HViYuI+SNbxVTEm6wS+U76DqxSK/IE/6I7qX ah/niuQvzSXFm0UCh+f7ntUAirg6zZA5aUliEbrbIzxZ -----END CERTIFICATE-----Generated at Mon Jan 12 04:58:59 2026 by rpki-client