This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yO8nPBP7MEQpMbmeqy6fFjgsxh4.roa File: yO8nPBP7MEQpMbmeqy6fFjgsxh4.roa (raw, json) Hash identifier: llgVteiAtD91a4DdlXYib1gbj4jL1EI9USM2P4PY5hQ= Subject key identifier: C8:EF:27:3C:13:FB:30:44:29:31:B9:9E:AB:2E:9F:16:38:2C:C6:1E Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BDFBB30595A3090724A2F35F324FFD023 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yO8nPBP7MEQpMbmeqy6fFjgsxh4.roa Signing time: Wed 21 Jan 2026 08:45:45 +0000 ROA not before: Wed 21 Jan 2026 08:45:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399486 IP address blocks: 151.241.154.0/24 maxlen: 24 151.242.63.0/24 maxlen: 24 151.244.125.0/24 maxlen: 24 151.244.234.0/24 maxlen: 24 151.245.121.0/24 maxlen: 24 151.247.22.0/24 maxlen: 24 151.247.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:bb:30:59:5a:30:90:72:4a:2f:35:f3:24:ff:d0:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 21 08:45:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c8ef273c13fb30442931b99eab2e9f16382cc61e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:92:6d:61:ac:4e:84:7a:03:32:2c:db:e0:ff: 19:9b:1e:32:3f:5a:b8:27:c1:94:fb:91:6b:84:1b: f8:ab:a1:2f:7f:da:e6:b9:00:c6:c7:f8:ad:8a:7c: 21:74:e2:ab:dd:99:3d:17:b9:0f:d5:ba:a2:db:33: e2:f6:fc:76:33:1c:9a:d9:7b:70:87:95:e4:91:f0: 45:92:6a:98:ca:34:bb:14:f4:a0:1d:a6:42:45:31: b6:d5:9f:84:6f:96:61:7c:b4:db:9d:62:0e:69:c3: 28:c3:24:10:7c:1f:29:da:d0:84:41:41:4c:08:f6: 63:f6:95:b6:3b:b2:19:fe:51:70:73:c7:5c:a9:cc: 7a:79:73:a3:a6:1e:81:bb:b4:eb:05:23:4e:54:24: a7:c7:f0:f3:64:e4:2e:a2:68:15:74:1b:78:71:26: a4:1e:69:61:05:7c:4e:1a:56:05:b5:12:7e:5a:6e: 0c:57:7c:f2:b2:17:76:21:45:bc:a3:c5:8d:bc:0f: 5a:db:2c:34:1d:a9:92:3e:e3:fa:df:e4:25:21:4d: 36:4c:44:7a:21:99:72:8b:6e:ab:0e:e8:74:d1:38: 01:3a:0d:47:c6:5c:45:b7:45:0c:66:2c:dd:89:45: e6:9c:0e:e4:5f:a5:91:d0:ce:e3:53:a8:08:df:69: 65:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EF:27:3C:13:FB:30:44:29:31:B9:9E:AB:2E:9F:16:38:2C:C6:1E X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yO8nPBP7MEQpMbmeqy6fFjgsxh4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.154.0/24 151.242.63.0/24 151.244.125.0/24 151.244.234.0/24 151.245.121.0/24 151.247.22.0/24 151.247.193.0/24 Signature Algorithm: sha256WithRSAEncryption 12:13:3d:43:04:a8:54:77:61:e7:8b:49:85:b1:39:01:3d:30: 88:cc:8a:91:10:48:16:33:7c:be:f7:25:8b:d7:0e:86:7f:42: 66:a5:e5:d2:e2:80:0e:34:55:85:82:7f:e0:4d:ce:52:6b:5e: e5:0a:a5:59:15:cb:52:2d:ad:28:bc:cb:dd:c9:07:71:99:e2: 75:21:25:45:eb:d8:a9:a4:f7:e2:df:9b:2b:27:b8:f5:82:ec: b1:5a:6f:5a:fd:07:3b:93:98:2a:05:d7:38:83:b9:7b:3a:8c: 86:ff:c9:fd:5e:5a:9d:cb:09:35:5d:a2:18:4e:e3:de:95:a6: 67:b8:c1:8d:13:c2:31:19:e4:2e:4f:46:a1:09:2f:35:08:bf: af:58:30:d6:21:56:00:03:47:e2:cf:28:1b:65:8c:0a:df:5b: c9:5b:07:25:57:e2:31:88:5d:41:6f:88:a5:99:d2:5e:8c:c2: 53:ea:a1:91:47:9b:73:22:f6:40:0c:4f:3f:41:68:18:0a:fa: d9:e7:1f:75:b1:6b:18:1a:e6:d9:35:01:a4:a3:03:38:bb:e1: 9c:35:73:82:b2:eb:03:da:81:f5:b9:a4:76:38:82:ac:34:34: f8:5c:69:cd:43:c5:b8:32:43:8f:0f:d6:0d:c7:d2:f0:9a:1f: 6c:e8:12:58 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZvfuzBZWjCQckovNfMk/9AjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTIxMDg0NTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOGVmMjczYzEzZmIzMDQ0MjkzMWI5OWVhYjJlOWYxNjM4MmNjNjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJJtYaxOhHoDMizb4P8Zmx4yP1q4 J8GU+5FrhBv4q6Evf9rmuQDGx/itinwhdOKr3Zk9F7kP1bqi2zPi9vx2Mxya2Xtw h5XkkfBFkmqYyjS7FPSgHaZCRTG21Z+Eb5ZhfLTbnWIOacMowyQQfB8p2tCEQUFM CPZj9pW2O7IZ/lFwc8dcqcx6eXOjph6Bu7TrBSNOVCSnx/DzZOQuomgVdBt4cSak HmlhBXxOGlYFtRJ+Wm4MV3zyshd2IUW8o8WNvA9a2yw0HamSPuP63+QlIU02TER6 IZlyi26rDuh00TgBOg1HxlxFt0UMZizdiUXmnA7kX6WR0M7jU6gI32llpwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFMjvJzwT+zBEKTG5nqsunxY4LMYeMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEveU84blBCUDdNRVFwTWJtZXF5NmZGamdzeGg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAl/GaAwQA l/I/AwQAl/R9AwQAl/TqAwQAl/V5AwQAl/cWAwQAl/fBMA0GCSqGSIb3DQEBCwUA A4IBAQASEz1DBKhUd2Hni0mFsTkBPTCIzIqREEgWM3y+9yWL1w6Gf0JmpeXS4oAO NFWFgn/gTc5Sa17lCqVZFctSLa0ovMvdyQdxmeJ1ISVF69ippPfi35srJ7j1guyx Wm9a/Qc7k5gqBdc4g7l7OoyG/8n9Xlqdywk1XaIYTuPelaZnuMGNE8IxGeQuT0ah CS81CL+vWDDWIVYAA0fizygbZYwK31vJWwclV+IxiF1Bb4ilmdJejMJT6qGRR5tz IvZADE8/QWgYCvrZ5x91sWsYGubZNQGkowM4u+GcNXOCsusD2oH1uaR2OIKsNDT4 XGnNQ8W4MkOPD9YNx9Lwmh9s6BJY -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:24 2026 by rpki-client