This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sBMI4bN4byflID1fNKnoq2yl9rg.roa File: sBMI4bN4byflID1fNKnoq2yl9rg.roa (raw, json) Hash identifier: M0wg70ajc4Y/R597C15Ve/Tae1ccShi+cDEa1cxVSO4= Subject key identifier: B0:13:08:E1:B3:78:6F:27:E5:20:3D:5F:34:A9:E8:AB:6C:A5:F6:B8 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BDFB693509FD865D28254A6B20B513008 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sBMI4bN4byflID1fNKnoq2yl9rg.roa Signing time: Wed 21 Jan 2026 08:40:43 +0000 ROA not before: Wed 21 Jan 2026 08:40:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 151.242.93.0/24 maxlen: 24 151.242.94.0/24 maxlen: 24 151.242.95.0/24 maxlen: 24 151.242.98.0/24 maxlen: 24 151.242.100.0/24 maxlen: 24 151.242.107.0/24 maxlen: 24 151.242.109.0/24 maxlen: 24 151.242.113.0/24 maxlen: 24 151.242.115.0/24 maxlen: 24 151.242.184.0/22 maxlen: 22 151.242.196.0/22 maxlen: 22 151.245.128.0/24 maxlen: 24 151.245.129.0/24 maxlen: 24 151.245.130.0/24 maxlen: 24 151.245.131.0/24 maxlen: 24 151.247.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:b6:93:50:9f:d8:65:d2:82:54:a6:b2:0b:51:30:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 21 08:40:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b01308e1b3786f27e5203d5f34a9e8ab6ca5f6b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:60:70:14:e9:13:b1:c0:c5:4e:c8:8c:f1:4f: 16:ed:6f:91:3b:65:64:a6:29:5c:a3:54:b4:25:4d: c1:42:1e:94:79:7e:ff:a6:46:89:43:c3:20:32:cd: a2:3d:cf:21:31:85:f6:73:ff:48:d3:68:6f:c4:a2: da:83:37:ac:a4:0a:4e:f4:31:a0:51:84:8e:ff:bc: a8:64:60:84:70:c8:b2:3a:6d:a5:7d:ab:3d:28:84: 16:df:0f:b0:09:2c:e4:3d:30:ba:83:ce:44:db:21: af:0f:2a:c1:76:ad:97:5e:c0:b9:bd:0e:7a:08:0f: 7d:96:bd:8a:c8:bd:ea:c0:81:83:4f:36:8e:9f:8c: dd:fa:3a:c5:04:4e:b5:8c:00:26:60:dd:68:96:89: d4:11:0b:38:31:73:69:76:99:11:0f:5d:dc:90:4e: 93:54:13:f3:fd:38:25:0f:60:03:ce:ba:5d:f5:09: bd:75:e8:43:6c:11:e3:af:73:95:ca:41:5e:0e:23: 06:a5:b8:c8:d2:71:82:f7:47:78:75:4c:07:ab:5f: 18:46:3a:db:1d:d4:e1:8e:1e:03:87:b2:44:58:8c: c3:9d:ae:4c:f3:c1:a3:78:d9:01:ed:8c:4a:fa:af: e6:37:8b:91:d9:34:7c:e1:7a:0e:b9:75:65:0c:43: 04:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:13:08:E1:B3:78:6F:27:E5:20:3D:5F:34:A9:E8:AB:6C:A5:F6:B8 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sBMI4bN4byflID1fNKnoq2yl9rg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.93.0-151.242.95.255 151.242.98.0/24 151.242.100.0/24 151.242.107.0/24 151.242.109.0/24 151.242.113.0/24 151.242.115.0/24 151.242.184.0/22 151.242.196.0/22 151.245.128.0/22 151.247.24.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:92:ea:11:f6:5b:0a:b0:c7:4e:e9:58:7b:b0:35:14:5d:6c: 12:96:e1:65:f2:f4:89:a6:0f:d7:9e:2a:b6:6a:07:eb:8b:d7: 15:51:22:2d:1d:88:6b:d3:eb:7c:cb:8e:35:3b:f1:27:14:a3: 97:e4:14:20:ef:97:31:17:f2:74:a5:ca:6c:0c:1d:a1:83:3d: d5:c3:71:de:01:73:b4:f2:d8:96:3c:40:28:40:bf:3c:75:e1: 28:10:1f:06:d1:b5:b5:98:f6:ec:32:11:08:63:d6:d5:12:ed: 99:17:e5:09:ec:0d:20:8b:96:8e:fa:67:bf:22:d4:1b:53:dd: d2:4c:9e:4f:66:78:5b:12:dc:8b:45:bf:e2:d0:9f:62:56:a8: f7:21:24:4e:86:b5:9a:bf:8b:8d:c6:ca:15:59:ca:57:f2:ff: 65:c2:6c:01:d5:92:53:05:38:d8:6f:ea:12:29:bf:ca:e4:f1: 7d:a5:cc:3f:a2:a3:53:ad:e1:a5:fc:c0:36:33:e5:7b:d5:f5: 49:49:fc:53:c5:27:98:d6:78:e6:b5:d4:2c:2d:5d:51:7d:9e: 9c:3a:fd:d2:e0:cd:35:8a:5b:76:37:6a:e0:82:fe:db:84:06: 9e:50:74:b2:e5:14:89:12:ab:16:1b:62:2e:14:29:75:f0:bf: b1:7e:0b:0b -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgISAZvftpNQn9hl0oJUprILUTAIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTIxMDg0MDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDEzMDhlMWIzNzg2ZjI3ZTUyMDNkNWYzNGE5ZThhYjZjYTVmNmI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmBwFOkTscDFTsiM8U8W7W+RO2Vk pilco1S0JU3BQh6UeX7/pkaJQ8MgMs2iPc8hMYX2c/9I02hvxKLagzespApO9DGg UYSO/7yoZGCEcMiyOm2lfas9KIQW3w+wCSzkPTC6g85E2yGvDyrBdq2XXsC5vQ56 CA99lr2KyL3qwIGDTzaOn4zd+jrFBE61jAAmYN1olonUEQs4MXNpdpkRD13ckE6T VBPz/TglD2ADzrpd9Qm9dehDbBHjr3OVykFeDiMGpbjI0nGC90d4dUwHq18YRjrb HdThjh4Dh7JEWIzDna5M88GjeNkB7YxK+q/mN4uR2TR84XoOuXVlDEMEVwIDAQAB o4ICTTCCAkkwHQYDVR0OBBYEFLATCOGzeG8n5SA9XzSp6Ktspfa4MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvc0JNSTRiTjRieWZsSUQxZk5Lbm9xMnlsOXJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKMAwDBACX8l0D BAWX8kADBACX8mIDBACX8mQDBACX8msDBACX8m0DBACX8nEDBACX8nMDBAKX8rgD BAKX8sQDBAKX9YADBACX9xgwDQYJKoZIhvcNAQELBQADggEBABqS6hH2Wwqwx07p WHuwNRRdbBKW4WXy9ImmD9eeKrZqB+uL1xVRIi0diGvT63zLjjU78ScUo5fkFCDv lzEX8nSlymwMHaGDPdXDcd4Bc7Ty2JY8QChAvzx14SgQHwbRtbWY9uwyEQhj1tUS 7ZkX5QnsDSCLlo76Z78i1BtT3dJMnk9meFsS3ItFv+LQn2JWqPchJE6GtZq/i43G yhVZylfy/2XCbAHVklMFONhv6hIpv8rk8X2lzD+io1Ot4aX8wDYz5XvV9UlJ/FPF J5jWeOa11CwtXVF9npw6/dLgzTWKW3Y3auCC/tuEBp5QdLLlFIkSqxYbYi4UKXXw v7F+Cws= -----END CERTIFICATE-----Generated at Sun Jan 25 14:37:52 2026 by rpki-client