This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qdWK7cDt2Tc3XH828CxEksVwUMc.roa File: qdWK7cDt2Tc3XH828CxEksVwUMc.roa (raw, json) Hash identifier: cpwE8ZHZ2+1fNVUJqri7hMbfi+nfqk9Oy8unymLws2w= Subject key identifier: A9:D5:8A:ED:C0:ED:D9:37:37:5C:7F:36:F0:2C:44:92:C5:70:50:C7 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BD70B56619D4FC3A66357552E25FF9164 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qdWK7cDt2Tc3XH828CxEksVwUMc.roa Signing time: Mon 19 Jan 2026 16:16:43 +0000 ROA not before: Mon 19 Jan 2026 16:16:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49608 IP address blocks: 151.245.25.0/24 maxlen: 24 151.245.30.0/24 maxlen: 24 151.247.144.0/24 maxlen: 24 151.247.206.0/24 maxlen: 24 151.247.214.0/24 maxlen: 24 151.247.222.0/24 maxlen: 24 151.247.240.0/24 maxlen: 24 151.247.247.0/24 maxlen: 24 151.247.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:0b:56:61:9d:4f:c3:a6:63:57:55:2e:25:ff:91:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 19 16:16:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a9d58aedc0edd937375c7f36f02c4492c57050c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:be:de:ab:6d:30:aa:cb:58:96:37:0b:d1:3d: ea:9d:d6:bc:58:1d:75:13:53:6f:28:06:10:69:9b: be:0f:84:3d:1e:5b:91:0d:bf:c9:94:0b:5a:8c:c2: 99:7a:af:86:5e:52:bb:ad:f4:6e:19:42:1c:c8:4e: 95:b1:f4:5a:9e:fb:e4:e5:b2:05:3f:a4:58:fc:98: cb:c7:46:d9:e1:a5:5c:30:d4:e4:73:72:df:2e:c8: f0:c1:e8:bf:93:b7:75:b2:53:0d:92:7b:31:0d:72: a8:e1:fe:63:26:a3:90:86:9c:17:d8:e1:89:a9:ee: 47:d7:79:52:ce:75:98:a4:be:f5:74:67:49:d2:3b: d8:af:01:4f:0c:5e:0c:d6:b6:4b:4e:64:f4:72:de: b0:73:00:f2:7c:16:bf:a6:ff:dd:7b:04:1e:07:02: b5:1a:d9:11:b8:f9:d5:ea:03:dc:81:7e:e8:16:45: 27:68:22:10:65:14:69:aa:b7:c5:16:7f:58:54:94: 20:b4:14:2d:82:77:40:c3:84:8e:f3:95:d6:ee:df: a8:f2:2d:44:ee:47:ed:19:0f:3d:61:61:f5:47:cb: 28:b8:7e:e8:20:39:1a:f8:a6:1a:25:ae:75:46:5c: dd:88:27:42:56:83:3e:ff:52:47:68:2e:85:ed:d1: 75:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D5:8A:ED:C0:ED:D9:37:37:5C:7F:36:F0:2C:44:92:C5:70:50:C7 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qdWK7cDt2Tc3XH828CxEksVwUMc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.245.25.0/24 151.245.30.0/24 151.247.144.0/24 151.247.206.0/24 151.247.214.0/24 151.247.222.0/24 151.247.240.0/24 151.247.247.0/24 151.247.255.0/24 Signature Algorithm: sha256WithRSAEncryption 47:3e:d0:cb:34:3e:80:ef:53:85:0a:3c:e3:2c:2e:85:85:ec: 81:12:b6:6c:20:b2:3b:6b:07:5e:85:d2:3d:d8:90:b0:d9:ac: 5f:3a:fa:7a:c3:90:72:72:82:33:cc:54:8f:04:81:e2:82:68: bf:bc:02:e3:b3:b8:21:1b:44:90:d1:b8:65:91:2a:61:10:b3: 42:4c:b8:94:94:72:5a:81:96:74:8d:4a:1e:ba:b6:29:3c:e8: 18:ad:02:9f:cb:65:1d:c3:5b:98:dc:35:d4:51:fa:75:da:d8: a5:17:14:bb:18:f3:41:4b:da:33:60:ed:36:81:f4:03:23:ad: 1e:42:68:82:02:c7:70:fe:24:b6:59:b5:0f:19:44:fa:99:da: c0:66:bc:2a:49:78:0d:f8:5a:f3:7b:fc:ac:31:79:a0:15:89: cd:b1:b5:14:b2:26:ca:d9:4b:92:db:f1:5e:18:84:af:40:10: 1d:3a:4f:4e:33:09:5a:98:38:98:30:bc:7e:c0:28:70:90:4f: f8:79:f8:24:e3:84:ba:9d:8b:bc:2f:95:20:90:36:76:ac:24: 8f:90:55:32:43:a8:9f:cb:0c:b8:c5:c8:09:7b:6a:aa:57:05: 9d:45:1c:a5:5d:b4:82:fe:bf:86:53:f1:f4:6f:d2:ea:52:17: 3e:de:2e:b6 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZvXC1ZhnU/DpmNXVS4l/5FkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTE5MTYxNjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhOWQ1OGFlZGMwZWRkOTM3Mzc1YzdmMzZmMDJjNDQ5MmM1NzA1MGM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor7eq20wqstYljcL0T3qnda8WB11 E1NvKAYQaZu+D4Q9HluRDb/JlAtajMKZeq+GXlK7rfRuGUIcyE6VsfRanvvk5bIF P6RY/JjLx0bZ4aVcMNTkc3LfLsjwwei/k7d1slMNknsxDXKo4f5jJqOQhpwX2OGJ qe5H13lSznWYpL71dGdJ0jvYrwFPDF4M1rZLTmT0ct6wcwDyfBa/pv/dewQeBwK1 GtkRuPnV6gPcgX7oFkUnaCIQZRRpqrfFFn9YVJQgtBQtgndAw4SO85XW7t+o8i1E 7kftGQ89YWH1R8souH7oIDka+KYaJa51RlzdiCdCVoM+/1JHaC6F7dF1aQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFKnViu3A7dk3N1x/NvAsRJLFcFDHMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvcWRXSzdjRHQyVGMzWEg4MjhDeEVrc1Z3VU1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAl/UZAwQA l/UeAwQAl/eQAwQAl/fOAwQAl/fWAwQAl/feAwQAl/fwAwQAl/f3AwQAl/f/MA0G CSqGSIb3DQEBCwUAA4IBAQBHPtDLND6A71OFCjzjLC6FheyBErZsILI7awdehdI9 2JCw2axfOvp6w5BycoIzzFSPBIHigmi/vALjs7ghG0SQ0bhlkSphELNCTLiUlHJa gZZ0jUoeurYpPOgYrQKfy2Udw1uY3DXUUfp12tilFxS7GPNBS9ozYO02gfQDI60e QmiCAsdw/iS2WbUPGUT6mdrAZrwqSXgN+Frze/ysMXmgFYnNsbUUsibK2UuS2/Fe GISvQBAdOk9OMwlamDiYMLx+wChwkE/4efgk44S6nYu8L5UgkDZ2rCSPkFUyQ6if ywy4xcgJe2qqVwWdRRylXbSC/r+GU/H0b9LqUhc+3i62 -----END CERTIFICATE-----Generated at Sun Jan 25 14:37:03 2026 by rpki-client