This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oLgBeyvkQX_YmS1nbBgHUApUNwA.roa File: oLgBeyvkQX_YmS1nbBgHUApUNwA.roa (raw, json) Hash identifier: MhOg79VDxCDrLf8UbMKJSN1jVEXCGG9e9HoOgU+TXlM= Subject key identifier: A0:B8:01:7B:2B:E4:41:7F:D8:99:2D:67:6C:18:07:50:0A:54:37:00 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BE1AB31D9BFA82B9CFC08A988F58776D8 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oLgBeyvkQX_YmS1nbBgHUApUNwA.roa Signing time: Wed 21 Jan 2026 17:47:31 +0000 ROA not before: Wed 21 Jan 2026 17:47:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 151.240.128.0/21 maxlen: 24 151.240.136.0/21 maxlen: 24 151.240.145.0/24 maxlen: 24 151.240.171.0/24 maxlen: 24 151.241.105.0/24 maxlen: 24 151.241.106.0/24 maxlen: 24 151.241.107.0/24 maxlen: 24 151.241.132.0/22 maxlen: 22 151.242.56.0/24 maxlen: 24 151.242.70.0/24 maxlen: 24 151.242.71.0/24 maxlen: 24 151.242.135.0/24 maxlen: 24 151.243.8.0/23 maxlen: 23 151.243.204.0/23 maxlen: 23 151.244.56.0/24 maxlen: 24 151.245.2.0/24 maxlen: 24 151.245.22.0/24 maxlen: 24 151.245.56.0/22 maxlen: 22 151.245.185.0/24 maxlen: 24 151.245.187.0/24 maxlen: 24 151.245.188.0/24 maxlen: 24 151.246.8.0/21 maxlen: 24 151.247.75.0/24 maxlen: 24 151.247.77.0/24 maxlen: 24 151.247.133.0/24 maxlen: 24 151.247.134.0/24 maxlen: 24 151.247.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:ab:31:d9:bf:a8:2b:9c:fc:08:a9:88:f5:87:76:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 21 17:47:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a0b8017b2be4417fd8992d676c1807500a543700 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:47:0e:ff:df:8e:fc:a8:8a:dc:e5:97:03:ea: 6c:69:61:fb:9a:48:f2:ae:19:2f:bb:b4:fe:7d:f0: 06:df:da:d0:26:cb:18:7a:8d:2c:15:46:e2:ce:5b: 9b:a4:a1:2a:20:7e:fd:f5:94:6b:65:03:0f:2b:0b: 61:8a:22:6b:90:b7:71:1e:85:8e:59:3e:51:98:a4: 8b:c6:da:9d:09:c2:8f:a0:e5:65:42:47:5b:52:a1: 37:e4:fe:3f:ca:25:0b:e8:54:c6:79:9d:fe:5a:d7: be:93:4c:14:33:59:42:81:e8:86:2d:3f:8b:1b:21: 59:cf:3a:70:a4:52:b5:40:bb:53:6c:ff:7d:d7:c4: 23:ff:74:ee:d2:c1:b3:69:ac:71:11:ab:2c:a7:4e: 11:70:7c:57:53:12:ef:2d:56:7f:1e:68:34:bc:03: fa:9c:5e:83:b6:f0:98:27:12:1f:7c:f8:f5:b1:7c: 7c:7b:82:9e:82:83:a9:9e:0d:a0:4e:31:57:ea:d3: 7f:90:7e:43:58:96:4b:98:10:3b:ca:90:4d:76:56: d5:52:15:79:44:2f:47:ef:18:4b:c8:55:c6:c1:43: ce:af:46:c6:70:b0:e6:f8:87:21:c2:b7:02:f6:ff: 7b:a9:09:af:ee:96:39:f5:36:b2:31:aa:b5:01:cc: 69:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:B8:01:7B:2B:E4:41:7F:D8:99:2D:67:6C:18:07:50:0A:54:37:00 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oLgBeyvkQX_YmS1nbBgHUApUNwA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.128.0/20 151.240.145.0/24 151.240.171.0/24 151.241.105.0-151.241.107.255 151.241.132.0/22 151.242.56.0/24 151.242.70.0/23 151.242.135.0/24 151.243.8.0/23 151.243.204.0/23 151.244.56.0/24 151.245.2.0/24 151.245.22.0/24 151.245.56.0/22 151.245.185.0/24 151.245.187.0-151.245.188.255 151.246.8.0/21 151.247.75.0/24 151.247.77.0/24 151.247.133.0-151.247.135.255 Signature Algorithm: sha256WithRSAEncryption 57:60:a5:f4:19:f2:71:3d:f0:1f:f4:f4:2c:8c:d5:87:f4:bd: 9d:a4:0a:5d:f5:07:dd:93:17:d9:a5:4e:3f:df:f8:ca:4e:b7: ff:d0:60:a0:ba:79:30:ee:ea:02:70:38:a4:d7:43:73:ba:b4: 6b:23:c8:79:db:37:af:98:73:52:11:92:39:9a:2c:f2:8c:1c: cb:30:d4:73:77:7b:bc:a3:ba:a5:ac:38:e1:5f:4c:14:fe:0d: bf:a8:34:8d:43:4e:7d:4f:ad:3d:a0:94:9f:66:ff:f0:2c:f7: 97:eb:a3:d0:25:00:7e:ea:58:c6:c5:71:78:33:96:b6:ca:44: 3a:8e:36:04:6c:20:b9:81:8c:4a:45:36:75:1b:98:36:2b:67: ce:86:ca:04:26:da:15:f8:b0:09:bd:1c:72:a1:ce:bb:cf:89: 25:be:cc:58:81:3d:f1:62:3a:cd:f1:4e:b6:a0:f6:f8:30:39: da:2c:53:0d:39:ae:da:22:39:56:52:f6:16:cf:ce:17:a3:d2: b2:f6:09:f2:82:93:79:09:9b:24:75:02:7d:d7:05:11:3d:6d: 9f:47:30:5e:f4:7a:79:60:bd:b6:ef:8f:4b:de:46:91:ac:06: 96:08:13:be:e2:b8:85:1f:51:27:c7:3b:69:7c:bc:b6:c1:0f: bf:72:01:74 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgISAZvhqzHZv6grnPwIqYj1h3bYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTIxMTc0NzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGI4MDE3YjJiZTQ0MTdmZDg5OTJkNjc2YzE4MDc1MDBhNTQzNzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0cO/9+O/KiK3OWXA+psaWH7mkjy rhkvu7T+ffAG39rQJssYeo0sFUbizlubpKEqIH799ZRrZQMPKwthiiJrkLdxHoWO WT5RmKSLxtqdCcKPoOVlQkdbUqE35P4/yiUL6FTGeZ3+Wte+k0wUM1lCgeiGLT+L GyFZzzpwpFK1QLtTbP9918Qj/3Tu0sGzaaxxEassp04RcHxXUxLvLVZ/Hmg0vAP6 nF6DtvCYJxIffPj1sXx8e4KegoOpng2gTjFX6tN/kH5DWJZLmBA7ypBNdlbVUhV5 RC9H7xhLyFXGwUPOr0bGcLDm+IchwrcC9v97qQmv7pY59TayMaq1AcxphwIDAQAB o4ICmDCCApQwHQYDVR0OBBYEFKC4AXsr5EF/2JktZ2wYB1AKVDcAMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvb0xnQmV5dmtRWF9ZbVMxbmJCZ0hVQXBVTndBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZADBASX 8IADBACX8JEDBACX8KswDAMEAJfxaQMEApfxaAMEApfxhAMEAJfyOAMEAZfyRgME AJfyhwMEAZfzCAMEAZfzzAMEAJf0OAMEAJf1AgMEAJf1FgMEApf1OAMEAJf1uTAM AwQAl/W7AwQAl/W8AwQDl/YIAwQAl/dLAwQAl/dNMAwDBACX94UDBAOX94AwDQYJ KoZIhvcNAQELBQADggEBAFdgpfQZ8nE98B/09CyM1Yf0vZ2kCl31B92TF9mlTj/f +MpOt//QYKC6eTDu6gJwOKTXQ3O6tGsjyHnbN6+Yc1IRkjmaLPKMHMsw1HN3e7yj uqWsOOFfTBT+Db+oNI1DTn1PrT2glJ9m//As95fro9AlAH7qWMbFcXgzlrbKRDqO NgRsILmBjEpFNnUbmDYrZ86GygQm2hX4sAm9HHKhzrvPiSW+zFiBPfFiOs3xTrag 9vgwOdosUw05rtoiOVZS9hbPzhej0rL2CfKCk3kJmyR1An3XBRE9bZ9HMF70enlg vbbvj0veRpGsBpYIE77iuIUfUSfHO2l8vLbBD79yAXQ= -----END CERTIFICATE-----Generated at Sun Jan 25 05:57:47 2026 by rpki-client