This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XEFBp9S2JrU50Pt4Aq0LnfI5SK4.roa File: XEFBp9S2JrU50Pt4Aq0LnfI5SK4.roa (raw, json) Hash identifier: 27EEx/aMCZNSDI1EDsk99xcCFCC8iZav9T4fhrYYcEs= Subject key identifier: 5C:41:41:A7:D4:B6:26:B5:39:D0:FB:78:02:AD:0B:9D:F2:39:48:AE Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB6858CDF2D20EF22A11AC7807BF7C Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XEFBp9S2JrU50Pt4Aq0LnfI5SK4.roa Signing time: Fri 02 Jan 2026 08:20:41 +0000 ROA not before: Fri 02 Jan 2026 08:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203771 IP address blocks: 151.242.129.0/24 maxlen: 24 151.243.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:68:58:cd:f2:d2:0e:f2:2a:11:ac:78:07:bf:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5c4141a7d4b626b539d0fb7802ad0b9df23948ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:82:84:46:10:c2:3f:87:0a:a5:06:1c:a0:50: ce:d3:6d:ae:f9:23:b3:8a:5c:e0:cc:fa:b0:34:e1: b1:b8:3e:83:7e:d0:6d:f2:a0:94:27:30:d3:2f:d5: 14:39:d0:13:ae:68:92:f0:1b:5a:7b:81:a7:af:7e: 47:62:3a:bd:18:b1:55:cf:4d:d6:c7:07:d1:3c:e0: 6c:be:59:f6:2b:01:1d:6d:94:cb:b6:01:50:fc:71: 62:e1:87:4a:6b:38:b0:71:22:63:8e:03:75:01:e7: 08:32:e7:8a:e2:2e:68:6c:f3:a8:06:f3:22:bc:ea: 2d:97:9e:d1:5e:cd:dc:ac:96:d5:19:58:47:b7:87: df:12:b4:2f:53:a3:95:74:83:c5:03:b1:ea:6e:d1: 5f:4c:18:e8:8e:99:fd:82:a3:b5:1c:96:bc:7f:e4: 76:1c:51:54:a0:30:ed:c5:8c:32:8e:22:ef:b1:52: f2:25:f1:38:16:83:b9:01:f7:98:c2:06:a5:b5:a3: 71:c1:35:f0:a5:c5:74:32:0a:ab:12:71:71:a4:49: d4:44:5e:d6:41:0b:5f:90:f1:76:d2:bb:e5:7e:73: 28:33:57:a3:c9:45:df:22:42:9a:e9:04:c1:ab:9a: 8b:e0:a6:32:19:87:2d:ab:4b:6d:7a:19:e9:82:38: 4a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:41:41:A7:D4:B6:26:B5:39:D0:FB:78:02:AD:0B:9D:F2:39:48:AE X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XEFBp9S2JrU50Pt4Aq0LnfI5SK4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.129.0/24 151.243.240.0/24 Signature Algorithm: sha256WithRSAEncryption 91:9f:3f:2e:b1:62:25:36:61:a8:13:37:03:3b:89:bf:75:3a: e2:ad:75:b2:38:ba:3b:4a:68:9d:81:71:4e:a2:61:b1:6f:e0: 1b:cb:59:d3:a0:8f:f0:1f:42:72:f7:63:44:ab:f7:fd:ee:03: 57:9d:ff:63:41:fb:4d:0d:a2:e1:42:3d:04:92:e3:45:6e:53: d8:b6:73:8e:05:1d:89:8a:67:85:fe:85:14:3f:bc:b6:cd:c5: 65:f4:40:7e:e3:5d:cb:ea:c0:e7:31:47:80:26:09:c1:66:f0: 66:5e:e1:84:85:a6:36:41:9c:ed:86:69:56:55:d1:42:85:4c: 2f:30:a5:10:6a:15:19:e7:3b:92:db:7f:eb:a6:80:1d:7b:96: a3:9a:69:d8:a3:d0:bf:8f:71:3a:36:b9:c8:48:17:ac:69:05: c3:ce:29:f1:8a:31:35:01:fb:1c:60:d9:80:c2:a0:82:42:e7: f6:58:70:9a:02:7b:04:67:3c:b6:ad:47:32:73:c4:f7:2d:d0: 62:01:96:4f:59:1f:f3:8d:ce:f1:c4:ae:c8:86:6b:29:77:57: d9:21:43:f2:9d:0a:98:e5:0a:06:de:bd:85:4a:8e:e7:e2:4c: 37:6b:ec:40:37:c2:c7:a3:f1:17:3f:a6:f4:7e:2b:0e:6f:da: 60:e2:39:02 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y2hYzfLSDvIqEax4B798MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YzQxNDFhN2Q0YjYyNmI1MzlkMGZiNzgwMmFkMGI5ZGYyMzk0OGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4KERhDCP4cKpQYcoFDO022u+SOz ilzgzPqwNOGxuD6DftBt8qCUJzDTL9UUOdATrmiS8Btae4Gnr35HYjq9GLFVz03W xwfRPOBsvln2KwEdbZTLtgFQ/HFi4YdKaziwcSJjjgN1AecIMueK4i5obPOoBvMi vOotl57RXs3crJbVGVhHt4ffErQvU6OVdIPFA7HqbtFfTBjojpn9gqO1HJa8f+R2 HFFUoDDtxYwyjiLvsVLyJfE4FoO5AfeYwgaltaNxwTXwpcV0MgqrEnFxpEnURF7W QQtfkPF20rvlfnMoM1ejyUXfIkKa6QTBq5qL4KYyGYctq0ttehnpgjhKwQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFxBQafUtia1OdD7eAKtC53yOUiuMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvWEVGQnA5UzJKclU1MFB0NEFxMExuZkk1U0s0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/KBAwQA l/PwMA0GCSqGSIb3DQEBCwUAA4IBAQCRnz8usWIlNmGoEzcDO4m/dTrirXWyOLo7 SmidgXFOomGxb+Aby1nToI/wH0Jy92NEq/f97gNXnf9jQftNDaLhQj0EkuNFblPY tnOOBR2JimeF/oUUP7y2zcVl9EB+413L6sDnMUeAJgnBZvBmXuGEhaY2QZzthmlW VdFChUwvMKUQahUZ5zuS23/rpoAde5ajmmnYo9C/j3E6NrnISBesaQXDzinxijE1 AfscYNmAwqCCQuf2WHCaAnsEZzy2rUcyc8T3LdBiAZZPWR/zjc7xxK7Ihmspd1fZ IUPynQqY5QoG3r2FSo7n4kw3a+xAN8LHo/EXP6b0fisOb9pg4jkC -----END CERTIFICATE-----Generated at Sun Jan 25 10:14:21 2026 by rpki-client