This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7Y7fBvPL6O8km-UUFE53xvZSS7M.roa File: 7Y7fBvPL6O8km-UUFE53xvZSS7M.roa (raw, json) Hash identifier: SRme/Vmb5mmT1ub0AzaiiBALiQpom0dJ69BvFTcivOs= Subject key identifier: ED:8E:DF:06:F3:CB:E8:EF:24:9B:E5:14:14:4E:77:C6:F6:52:4B:B3 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BDFB4BDD644841F248A15A8E5F0B48B8A Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7Y7fBvPL6O8km-UUFE53xvZSS7M.roa Signing time: Wed 21 Jan 2026 08:38:42 +0000 ROA not before: Wed 21 Jan 2026 08:38:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 274581 IP address blocks: 151.247.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:b4:bd:d6:44:84:1f:24:8a:15:a8:e5:f0:b4:8b:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 21 08:38:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed8edf06f3cbe8ef249be514144e77c6f6524bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:e9:3c:aa:e8:fa:2f:a7:f0:16:12:c1:80:15: ec:53:b6:ba:f7:17:be:a6:ce:2b:76:10:88:d6:05: 11:b4:9d:9b:d3:37:87:40:7c:e2:15:d5:e3:81:31: 85:cb:f5:62:e6:99:f2:66:6c:07:cd:4e:cc:f3:bb: 32:1a:ac:ad:1e:df:57:e6:d2:7f:0e:2d:d0:1f:79: 1f:c4:b2:f3:66:0a:9e:3d:96:25:a0:74:df:98:36: 83:7b:7e:32:92:c5:24:f3:6d:9a:8a:72:16:6c:6f: cf:a1:cd:ae:72:f3:c5:35:a1:04:f1:5a:91:7d:7e: 1c:b4:67:ce:42:7d:17:9f:a1:d0:5f:52:ac:f2:cb: eb:3a:0e:f5:9e:27:09:db:16:20:9a:bc:1d:13:1a: c0:b3:dc:1c:0f:be:87:7d:f5:e1:3a:f0:ad:4a:d9: 63:01:64:d3:47:4f:61:5c:41:64:f3:1e:d9:e8:7e: b5:ad:7a:70:b0:2f:2d:1c:cf:75:38:83:46:77:77: 17:52:8c:76:6b:e4:53:cf:61:a0:6f:cb:30:c3:60: 80:4c:b5:f1:ac:e7:6d:85:de:66:b8:ad:cc:ae:52: 76:6e:33:ab:71:7b:bd:e5:d4:cd:30:28:2c:de:4f: 1d:81:8e:6b:b2:f7:62:b5:19:12:f5:cc:91:b8:2c: 28:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:8E:DF:06:F3:CB:E8:EF:24:9B:E5:14:14:4E:77:C6:F6:52:4B:B3 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7Y7fBvPL6O8km-UUFE53xvZSS7M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.247.21.0/24 Signature Algorithm: sha256WithRSAEncryption b3:9a:40:14:43:a2:53:30:02:ed:18:16:7c:d2:42:8e:fe:cf: ac:ad:bd:86:70:47:15:c0:d3:ed:c3:5c:f9:02:68:19:61:cd: a7:8d:15:ed:f0:91:b4:88:e2:61:4b:16:43:a7:a8:62:5a:bc: d3:4f:28:87:0e:25:5d:d9:34:ff:01:ce:33:f6:70:87:57:42: 92:bf:ac:e4:e1:a6:32:d2:88:3e:4d:d9:43:17:1f:88:92:ec: cb:3a:bf:78:fa:36:11:55:e6:d6:f3:d8:a7:53:09:e8:86:f3: 9e:e7:99:83:39:c7:08:26:ac:1c:c4:f9:9f:55:35:52:d9:82: 23:9a:49:1f:ce:72:87:28:d0:e1:c2:14:6f:7e:6f:b7:f0:7d: 2b:28:23:a6:8a:cf:97:76:c0:30:28:2f:08:67:74:61:31:3a: 6f:d7:6f:ac:c9:c1:bb:0b:38:d3:7d:91:f2:37:81:88:9f:4d: d0:90:0a:a0:12:88:2d:cf:ac:70:b0:ac:ab:4c:5b:bf:2d:51: 8d:a5:85:f2:5a:3e:29:59:55:c3:e3:27:f7:ab:e9:f5:75:87: 2b:9a:3e:ad:a4:c1:b0:8c:d7:89:ae:2b:fe:b5:54:15:59:b6: 63:a9:3b:3b:65:22:60:b6:ef:f0:f6:0b:ee:74:96:f1:6b:9d: 22:5e:f7:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvftL3WRIQfJIoVqOXwtIuKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTIxMDgzODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDhlZGYwNmYzY2JlOGVmMjQ5YmU1MTQxNDRlNzdjNmY2NTI0YmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA++k8quj6L6fwFhLBgBXsU7a69xe+ ps4rdhCI1gURtJ2b0zeHQHziFdXjgTGFy/Vi5pnyZmwHzU7M87syGqytHt9X5tJ/ Di3QH3kfxLLzZgqePZYloHTfmDaDe34yksUk822ainIWbG/Poc2ucvPFNaEE8VqR fX4ctGfOQn0Xn6HQX1Ks8svrOg71nicJ2xYgmrwdExrAs9wcD76HffXhOvCtStlj AWTTR09hXEFk8x7Z6H61rXpwsC8tHM91OINGd3cXUox2a+RTz2Ggb8sww2CATLXx rOdthd5muK3MrlJ2bjOrcXu95dTNMCgs3k8dgY5rsvditRkS9cyRuCwopQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO2O3wbzy+jvJJvlFBROd8b2UkuzMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvN1k3ZkJ2UEw2TzhrbS1VVUZFNTN4dlpTUzdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/cVMA0G CSqGSIb3DQEBCwUAA4IBAQCzmkAUQ6JTMALtGBZ80kKO/s+srb2GcEcVwNPtw1z5 AmgZYc2njRXt8JG0iOJhSxZDp6hiWrzTTyiHDiVd2TT/Ac4z9nCHV0KSv6zk4aYy 0og+TdlDFx+IkuzLOr94+jYRVebW89inUwnohvOe55mDOccIJqwcxPmfVTVS2YIj mkkfznKHKNDhwhRvfm+38H0rKCOmis+XdsAwKC8IZ3RhMTpv12+sycG7CzjTfZHy N4GIn03QkAqgEogtz6xwsKyrTFu/LVGNpYXyWj4pWVXD4yf3q+n1dYcrmj6tpMGw jNeJriv+tVQVWbZjqTs7ZSJgtu/w9gvudJbxa50iXve8 -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:36 2026 by rpki-client