This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ddFevTDjmOl0-8ETGw6HT2Cjx3M.roa File: ddFevTDjmOl0-8ETGw6HT2Cjx3M.roa (raw, json) Hash identifier: K1jKCJG2rVI//xf7DiArb2KDEACdp/4JQCLaeN5j9Ns= Subject key identifier: 75:D1:5E:BD:30:E3:98:E9:74:FB:C1:13:1B:0E:87:4F:60:A3:C7:73 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BD70897F1F46C65F8DEB4EBFAF1897452 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ddFevTDjmOl0-8ETGw6HT2Cjx3M.roa Signing time: Mon 19 Jan 2026 16:13:43 +0000 ROA not before: Mon 19 Jan 2026 16:13:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 271203 IP address blocks: 151.247.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:08:97:f1:f4:6c:65:f8:de:b4:eb:fa:f1:89:74:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 19 16:13:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=75d15ebd30e398e974fbc1131b0e874f60a3c773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2f:1d:9b:39:ae:e9:1d:ff:9b:d6:34:6d:df: 6c:f9:3c:1d:e9:9a:40:76:75:48:5e:cd:ae:c7:b4: 82:00:69:2f:6f:38:fa:8b:d8:cd:83:ad:24:5e:16: 2d:a2:46:75:d6:87:37:4e:de:68:a8:bd:a7:ec:9d: 21:6a:28:0d:22:4f:a2:bc:d5:0c:f6:e9:21:c0:3b: b4:d7:23:ae:6a:cb:2c:90:c5:9d:dc:e5:c4:ad:c9: 5c:68:00:29:49:53:7d:0b:0f:5a:9d:d0:e8:f0:2a: d1:31:b8:7b:f4:8d:7d:7e:96:60:6f:c5:ff:51:6b: 08:bb:22:fc:ff:d5:20:66:9f:96:55:95:4a:fc:d5: 5a:f6:80:e8:86:3b:8f:34:bc:fb:c7:2f:f6:c5:c8: b6:56:bb:49:ae:d7:0e:3a:2b:bf:1c:bd:a1:c1:44: 19:11:c1:c6:ce:13:ab:7e:37:08:94:58:35:56:c1: 5c:34:41:33:e6:ee:05:e5:20:8e:f6:4a:f1:6a:78: 28:4f:d9:07:31:88:87:0e:9c:bc:7d:f3:5c:b0:87: 30:56:ba:d9:29:1a:7c:8e:65:7f:b5:1d:87:ca:06: 3b:68:03:2e:14:1f:35:36:38:cf:d7:2e:d4:f6:d2: b2:33:c4:e1:e7:41:79:79:d6:a0:a4:1b:5c:88:63: 61:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D1:5E:BD:30:E3:98:E9:74:FB:C1:13:1B:0E:87:4F:60:A3:C7:73 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ddFevTDjmOl0-8ETGw6HT2Cjx3M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.247.16.0/23 Signature Algorithm: sha256WithRSAEncryption 51:4e:a2:60:a0:83:ff:fe:c1:4d:92:97:5a:a6:7a:30:d9:f5: 95:5c:6a:7b:62:f1:fe:6f:2a:d6:65:f3:63:b1:63:87:ea:c0: af:59:8e:7f:4f:da:5e:d8:9f:32:a4:92:01:3f:8e:e3:13:bc: 41:ff:2e:d8:1b:d0:6c:04:c9:d7:3f:9b:a9:04:b1:0e:79:eb: 53:ab:4d:60:bd:0b:cb:29:22:b0:03:fa:9a:68:75:2b:c3:64: 51:f4:91:e9:eb:9d:21:63:cb:75:fe:9f:0e:38:53:c3:fa:e3: 0c:38:77:47:81:bb:99:bd:df:66:44:70:e5:f2:46:c5:33:09: 99:e8:fd:95:d1:7b:5f:e9:50:a4:93:f3:3f:a4:52:48:64:b5: fa:60:f3:a8:2d:cf:ad:2b:34:a2:4c:aa:3b:46:d9:19:3f:ec: 1c:fe:07:fd:eb:b8:84:fb:f1:e3:b0:b1:69:22:5d:49:3a:09: d3:d7:90:97:23:38:4d:78:45:d4:2e:7b:8c:ce:d7:10:d4:f7: 2a:f1:ce:d1:ff:52:de:e0:9f:fc:c2:77:c6:91:bd:db:5c:69: 92:a1:2f:a0:53:f2:3e:5e:55:fa:a3:f4:94:48:28:0c:65:f6: 17:41:73:88:1f:6a:06:4a:14:7d:e1:47:06:7d:62:1f:fc:aa: f1:5a:f2:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvXCJfx9Gxl+N606/rxiXRSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTE5MTYxMzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NWQxNWViZDMwZTM5OGU5NzRmYmMxMTMxYjBlODc0ZjYwYTNjNzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsy8dmzmu6R3/m9Y0bd9s+Twd6ZpA dnVIXs2ux7SCAGkvbzj6i9jNg60kXhYtokZ11oc3Tt5oqL2n7J0haigNIk+ivNUM 9ukhwDu01yOuassskMWd3OXErclcaAApSVN9Cw9andDo8CrRMbh79I19fpZgb8X/ UWsIuyL8/9UgZp+WVZVK/NVa9oDohjuPNLz7xy/2xci2VrtJrtcOOiu/HL2hwUQZ EcHGzhOrfjcIlFg1VsFcNEEz5u4F5SCO9krxangoT9kHMYiHDpy8ffNcsIcwVrrZ KRp8jmV/tR2HygY7aAMuFB81NjjP1y7U9tKyM8Th50F5edagpBtciGNh4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHXRXr0w45jpdPvBExsOh09go8dzMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvZGRGZXZURGptT2wwLThFVEd3NkhUMkNqeDNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl/cQMA0G CSqGSIb3DQEBCwUAA4IBAQBRTqJgoIP//sFNkpdapnow2fWVXGp7YvH+byrWZfNj sWOH6sCvWY5/T9pe2J8ypJIBP47jE7xB/y7YG9BsBMnXP5upBLEOeetTq01gvQvL KSKwA/qaaHUrw2RR9JHp650hY8t1/p8OOFPD+uMMOHdHgbuZvd9mRHDl8kbFMwmZ 6P2V0Xtf6VCkk/M/pFJIZLX6YPOoLc+tKzSiTKo7RtkZP+wc/gf967iE+/HjsLFp Il1JOgnT15CXIzhNeEXULnuMztcQ1Pcq8c7R/1Le4J/8wnfGkb3bXGmSoS+gU/I+ XlX6o/SUSCgMZfYXQXOIH2oGShR94UcGfWIf/KrxWvJh -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:47 2026 by rpki-client