This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m6WooqEeFH4H4roTMYWnqHAwhmE.roa File: m6WooqEeFH4H4roTMYWnqHAwhmE.roa (raw, json) Hash identifier: +MI31NRos9AoImtuD/NcI/0fiuonNx1ZDyc7l6mxVWI= Subject key identifier: 9B:A5:A8:A2:A1:1E:14:7E:07:E2:BA:13:31:85:A7:A8:70:30:86:61 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BEFF94F001A17E9AC7FFA11FFF6E285DE Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m6WooqEeFH4H4roTMYWnqHAwhmE.roa Signing time: Sat 24 Jan 2026 12:27:31 +0000 ROA not before: Sat 24 Jan 2026 12:27:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 984 IP address blocks: 151.242.54.0/24 maxlen: 24 151.242.134.0/24 maxlen: 24 151.243.107.0/24 maxlen: 24 151.243.108.0/24 maxlen: 24 151.244.6.0/24 maxlen: 24 151.244.16.0/21 maxlen: 24 151.244.30.0/24 maxlen: 24 151.244.168.0/23 maxlen: 24 151.244.216.0/23 maxlen: 24 151.244.218.0/24 maxlen: 24 151.246.48.0/21 maxlen: 24 151.246.56.0/21 maxlen: 24 151.246.80.0/21 maxlen: 24 151.246.88.0/21 maxlen: 24 151.246.96.0/21 maxlen: 24 151.246.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ef:f9:4f:00:1a:17:e9:ac:7f:fa:11:ff:f6:e2:85:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 24 12:27:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9ba5a8a2a11e147e07e2ba133185a7a870308661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5c:2b:28:35:1b:7b:72:b7:da:2f:5c:cb:d3: 0b:ad:ca:0c:2a:95:5a:4a:d8:68:a8:9a:76:e7:1f: 74:67:db:82:c9:7c:4a:e5:88:ce:d6:06:b3:08:fc: f7:ed:0d:7a:d9:82:c3:16:21:41:a3:18:d8:89:83: 07:99:9c:ae:74:97:7d:84:d2:d5:ad:90:17:43:91: 97:dd:c0:44:87:5d:4a:9c:37:8d:78:17:61:52:ee: 57:e7:31:d6:06:b6:0c:38:3c:43:76:3b:6f:6d:c4: 41:d3:c6:32:7d:95:75:4c:f3:90:47:84:86:47:db: 12:ea:98:e9:23:de:f5:89:c5:1b:71:fb:f6:88:e3: bf:7d:df:dd:53:25:72:7e:72:1f:9e:a3:19:26:2b: 8a:d1:8d:5a:27:e8:31:fe:4c:0f:d2:ed:68:d8:59: c4:e0:18:30:30:a7:8d:e0:a1:71:a3:89:7f:1a:ae: 3a:f5:ce:61:99:a9:ab:08:40:cd:ce:d5:05:58:b0: bd:98:4f:a3:cc:f8:59:09:3b:3e:bf:92:f5:f0:73: 90:d1:5b:0c:59:23:3d:ee:f4:fd:fb:87:6c:ad:94: a9:5d:28:89:43:fd:58:5b:01:a2:51:3f:96:6a:e5: a2:04:f1:26:64:c0:36:1d:4c:54:d5:7a:a1:de:89: 18:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A5:A8:A2:A1:1E:14:7E:07:E2:BA:13:31:85:A7:A8:70:30:86:61 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m6WooqEeFH4H4roTMYWnqHAwhmE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.54.0/24 151.242.134.0/24 151.243.107.0-151.243.108.255 151.244.6.0/24 151.244.16.0/21 151.244.30.0/24 151.244.168.0/23 151.244.216.0-151.244.218.255 151.246.48.0/20 151.246.80.0-151.246.103.255 151.246.112.0/21 Signature Algorithm: sha256WithRSAEncryption b8:e0:4a:64:5d:b5:c8:7f:a6:24:a7:e1:0f:b4:db:4c:ad:d7: ab:99:0e:c9:e6:53:0f:ab:cf:0c:45:30:bf:2f:23:db:ca:92: 9b:4b:de:7c:2d:fc:c3:1b:44:47:8f:dd:1b:9e:38:f4:59:11: d0:30:04:59:7f:ed:bc:69:1b:0d:80:1c:f8:ab:43:57:cd:9a: ec:35:17:b5:fd:a1:cf:2b:90:38:e3:78:3d:9a:0f:57:0a:8c: eb:fa:e6:41:2f:a8:df:ad:ea:e5:a5:73:bf:df:aa:d1:87:b9: 0d:59:09:bd:b1:63:fc:a2:b3:2e:61:d3:47:b2:39:08:65:87: d8:e2:8e:5f:97:f6:fc:70:12:32:56:a3:60:7f:4f:c8:07:45: 48:49:29:ed:04:69:b8:94:63:57:22:c6:63:d5:71:75:ae:c7: b9:8b:86:bd:95:6d:b0:25:5e:37:30:1e:a6:c6:ee:7d:2d:0f: f0:a4:96:90:5d:56:09:1c:37:d4:69:b7:bf:cc:08:95:91:dc: 78:e1:28:6d:84:11:4f:f4:82:c3:14:c3:34:fc:e6:82:b1:7e: e3:f3:47:4d:54:4f:10:45:57:64:94:57:89:f6:83:69:d6:cf: 59:c3:85:c3:6f:c0:fa:59:07:d3:e2:d3:88:20:f3:16:2f:e9: ec:1f:81:ac -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZvv+U8AGhfprH/6Ef/24oXeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTI0MTIyNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmE1YThhMmExMWUxNDdlMDdlMmJhMTMzMTg1YTdhODcwMzA4NjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1wrKDUbe3K32i9cy9MLrcoMKpVa SthoqJp25x90Z9uCyXxK5YjO1gazCPz37Q162YLDFiFBoxjYiYMHmZyudJd9hNLV rZAXQ5GX3cBEh11KnDeNeBdhUu5X5zHWBrYMODxDdjtvbcRB08YyfZV1TPOQR4SG R9sS6pjpI971icUbcfv2iOO/fd/dUyVyfnIfnqMZJiuK0Y1aJ+gx/kwP0u1o2FnE 4BgwMKeN4KFxo4l/Gq469c5hmamrCEDNztUFWLC9mE+jzPhZCTs+v5L18HOQ0VsM WSM97vT9+4dsrZSpXSiJQ/1YWwGiUT+WauWiBPEmZMA2HUxU1Xqh3okYmQIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFJulqKKhHhR+B+K6EzGFp6hwMIZhMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvbTZXb29xRWVGSDRINHJvVE1ZV25xSEF3aG1FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQAl/I2AwQA l/KGMAwDBACX82sDBACX82wDBACX9AYDBAOX9BADBACX9B4DBAGX9KgwDAMEA5f0 2AMEAJf02gMEBJf2MDAMAwQEl/ZQAwQDl/ZgAwQDl/ZwMA0GCSqGSIb3DQEBCwUA A4IBAQC44EpkXbXIf6Ykp+EPtNtMrdermQ7J5lMPq88MRTC/LyPbypKbS958LfzD G0RHj90bnjj0WRHQMARZf+28aRsNgBz4q0NXzZrsNRe1/aHPK5A443g9mg9XCozr +uZBL6jfrerlpXO/36rRh7kNWQm9sWP8orMuYdNHsjkIZYfY4o5fl/b8cBIyVqNg f0/IB0VISSntBGm4lGNXIsZj1XF1rse5i4a9lW2wJV43MB6mxu59LQ/wpJaQXVYJ HDfUabe/zAiVkdx44ShthBFP9ILDFMM0/OaCsX7j80dNVE8QRVdklFeJ9oNp1s9Z w4XDb8D6WQfT4tOIIPMWL+nsH4Gs -----END CERTIFICATE-----Generated at Sun Jan 25 14:37:54 2026 by rpki-client