This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/anpAOZnDx4-TR8cyr3OFO7WxcFk.roa File: anpAOZnDx4-TR8cyr3OFO7WxcFk.roa (raw, json) Hash identifier: o8+0HsdkKzr4PTbvBwUvpB8+9IJIEwn5pV1hE09jmLE= Subject key identifier: 6A:7A:40:39:99:C3:C7:8F:93:47:C7:32:AF:73:85:3B:B5:B1:70:59 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BE1AB31854BD63E14A4B1C44AEF5990BE Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/anpAOZnDx4-TR8cyr3OFO7WxcFk.roa Signing time: Wed 21 Jan 2026 17:47:31 +0000 ROA not before: Wed 21 Jan 2026 17:47:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 151.240.128.0/21 maxlen: 24 151.240.136.0/21 maxlen: 24 151.240.145.0/24 maxlen: 24 151.240.171.0/24 maxlen: 24 151.241.105.0/24 maxlen: 24 151.241.106.0/24 maxlen: 24 151.241.107.0/24 maxlen: 24 151.241.132.0/22 maxlen: 22 151.242.56.0/24 maxlen: 24 151.242.70.0/24 maxlen: 24 151.242.71.0/24 maxlen: 24 151.242.135.0/24 maxlen: 24 151.243.8.0/23 maxlen: 23 151.243.204.0/23 maxlen: 23 151.244.56.0/24 maxlen: 24 151.245.2.0/24 maxlen: 24 151.245.22.0/24 maxlen: 24 151.245.56.0/22 maxlen: 22 151.245.185.0/24 maxlen: 24 151.245.187.0/24 maxlen: 24 151.245.188.0/24 maxlen: 24 151.246.8.0/21 maxlen: 24 151.247.75.0/24 maxlen: 24 151.247.77.0/24 maxlen: 24 151.247.133.0/24 maxlen: 24 151.247.134.0/24 maxlen: 24 151.247.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:ab:31:85:4b:d6:3e:14:a4:b1:c4:4a:ef:59:90:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 21 17:47:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a7a403999c3c78f9347c732af73853bb5b17059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:83:22:67:9a:9e:fe:6f:bf:37:84:f9:71:fb: 48:1c:bd:13:a6:e0:f1:79:70:5e:c9:04:f0:c0:83: f7:f9:30:36:59:31:c6:1b:c9:00:c9:e7:42:5c:c1: 47:aa:90:78:f2:09:f9:76:11:7a:35:5e:b3:5c:2c: 99:c6:7a:10:7a:51:67:2c:fc:3a:8d:39:d3:45:3a: dd:3e:c7:35:61:ab:47:15:61:aa:02:7a:4c:8c:5e: e7:87:6c:6f:c9:ce:87:0b:b5:4c:fc:9b:9e:77:da: 2c:f4:a0:67:35:33:4d:cc:f0:57:fa:4d:91:d9:a0: d8:47:1b:0c:8f:7c:63:70:42:62:77:cd:6d:d6:a4: 99:71:13:0b:a8:2c:87:08:c1:5c:e0:8c:93:4d:3f: 9c:48:0c:3e:c6:53:92:28:10:32:50:98:62:d5:7f: cd:29:3c:4a:4b:42:15:5b:92:17:df:ae:5f:c4:df: 56:e0:3d:bd:a8:96:6d:ec:41:29:65:87:ee:7d:c7: be:f5:4d:1a:d1:1c:f5:05:92:5d:eb:c9:3b:de:27: d8:37:a1:48:5e:14:6a:9f:0b:8d:5e:48:a5:41:03: 04:6e:4d:e3:64:f6:5f:f4:d3:56:af:21:6b:8d:c1: 2c:c1:dd:04:f5:e6:52:73:b2:2d:24:b7:1b:37:98: e7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7A:40:39:99:C3:C7:8F:93:47:C7:32:AF:73:85:3B:B5:B1:70:59 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/anpAOZnDx4-TR8cyr3OFO7WxcFk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.128.0/20 151.240.145.0/24 151.240.171.0/24 151.241.105.0-151.241.107.255 151.241.132.0/22 151.242.56.0/24 151.242.70.0/23 151.242.135.0/24 151.243.8.0/23 151.243.204.0/23 151.244.56.0/24 151.245.2.0/24 151.245.22.0/24 151.245.56.0/22 151.245.185.0/24 151.245.187.0-151.245.188.255 151.246.8.0/21 151.247.75.0/24 151.247.77.0/24 151.247.133.0-151.247.135.255 Signature Algorithm: sha256WithRSAEncryption 39:fc:db:6b:c1:e5:9c:5e:a4:c8:55:c5:a2:7f:fb:59:6b:bb: 19:5c:0f:82:0d:29:43:04:71:9e:4f:50:da:76:1c:7a:d3:51: f4:7e:a6:ee:2d:1b:80:72:c4:ac:4f:c8:2a:e5:b3:0c:3d:43: 86:eb:0d:dc:bd:cc:8e:1f:e0:48:44:08:3d:df:01:93:6c:75: 07:e8:a5:e4:02:58:79:a8:92:6d:5b:fd:c3:bc:27:c2:ca:c6: 1b:6d:8c:97:9c:17:65:b2:b8:4b:2d:6d:48:e3:16:e3:6d:a0: 9d:ad:92:17:59:6c:de:49:2a:50:19:72:03:be:64:ef:35:2c: b0:c4:99:09:2d:7d:b3:0f:2f:8f:2c:3a:4a:03:92:1e:0d:e9: 74:0a:73:c5:be:5d:a1:de:e6:6f:db:63:bf:29:fe:d0:53:02: 8b:94:d7:e9:9f:e7:48:39:13:ea:c9:8f:cf:72:5d:2d:84:9d: 8a:db:49:ef:dc:d1:26:94:3f:ac:a1:24:9a:d2:cd:ac:12:66: 44:32:0f:be:7d:70:c8:97:ca:60:af:83:1b:b2:f6:4c:f2:2a: 83:b2:2f:41:6b:a3:82:d8:52:51:6a:ca:c6:42:48:ea:87:28: 73:9a:3b:c8:11:c6:03:37:52:86:9f:f1:e5:1a:a5:00:17:8f: 91:20:bd:4a -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgISAZvhqzGFS9Y+FKSxxErvWZC+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTIxMTc0NzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTdhNDAzOTk5YzNjNzhmOTM0N2M3MzJhZjczODUzYmI1YjE3MDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4MiZ5qe/m+/N4T5cftIHL0TpuDx eXBeyQTwwIP3+TA2WTHGG8kAyedCXMFHqpB48gn5dhF6NV6zXCyZxnoQelFnLPw6 jTnTRTrdPsc1YatHFWGqAnpMjF7nh2xvyc6HC7VM/Jued9os9KBnNTNNzPBX+k2R 2aDYRxsMj3xjcEJid81t1qSZcRMLqCyHCMFc4IyTTT+cSAw+xlOSKBAyUJhi1X/N KTxKS0IVW5IX365fxN9W4D29qJZt7EEpZYfufce+9U0a0Rz1BZJd68k73ifYN6FI XhRqnwuNXkilQQMEbk3jZPZf9NNWryFrjcEswd0E9eZSc7ItJLcbN5jn9QIDAQAB o4ICmDCCApQwHQYDVR0OBBYEFGp6QDmZw8ePk0fHMq9zhTu1sXBZMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvYW5wQU9abkR4NC1UUjhjeXIzT0ZPN1d4Y0ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZADBASX 8IADBACX8JEDBACX8KswDAMEAJfxaQMEApfxaAMEApfxhAMEAJfyOAMEAZfyRgME AJfyhwMEAZfzCAMEAZfzzAMEAJf0OAMEAJf1AgMEAJf1FgMEApf1OAMEAJf1uTAM AwQAl/W7AwQAl/W8AwQDl/YIAwQAl/dLAwQAl/dNMAwDBACX94UDBAOX94AwDQYJ KoZIhvcNAQELBQADggEBADn822vB5ZxepMhVxaJ/+1lruxlcD4INKUMEcZ5PUNp2 HHrTUfR+pu4tG4ByxKxPyCrlsww9Q4brDdy9zI4f4EhECD3fAZNsdQfopeQCWHmo km1b/cO8J8LKxhttjJecF2WyuEstbUjjFuNtoJ2tkhdZbN5JKlAZcgO+ZO81LLDE mQktfbMPL48sOkoDkh4N6XQKc8W+XaHe5m/bY78p/tBTAouU1+mf50g5E+rJj89y XS2EnYrbSe/c0SaUP6yhJJrSzawSZkQyD759cMiXymCvgxuy9kzyKoOyL0Fro4LY UlFqysZCSOqHKHOaO8gRxgM3Uoaf8eUapQAXj5EgvUo= -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:01 2026 by rpki-client