This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/p0n9o8cWsap486TlFaXze5SalOY.roa File: p0n9o8cWsap486TlFaXze5SalOY.roa (raw, json) Hash identifier: w7wWirLW3vs+UqCJ+xGkXeWCORDVtlnv5eIhVyIqb+g= Subject key identifier: A7:49:FD:A3:C7:16:B1:AA:78:F3:A4:E5:15:A5:F3:7B:94:9A:94:E6 Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b Certificate serial: 019B7AC88ABCA628B6848E7D089A82BFC50A Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/p0n9o8cWsap486TlFaXze5SalOY.roa Signing time: Thu 01 Jan 2026 18:18:41 +0000 ROA not before: Thu 01 Jan 2026 18:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199606 IP address blocks: 151.248.8.0/21 maxlen: 24 151.248.8.0/22 maxlen: 22 2a01:a7c0::/32 maxlen: 37 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.mft rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:8a:bc:a6:28:b6:84:8e:7d:08:9a:82:bf:c5:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b Validity Not Before: Jan 1 18:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a749fda3c716b1aa78f3a4e515a5f37b949a94e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:7e:b5:75:21:ed:97:59:67:a5:0b:68:c5:c6: 51:11:99:52:cf:05:3e:64:51:68:4d:83:4d:cf:27: 59:e9:22:8a:20:2d:57:a1:f5:ca:09:2c:77:8f:23: 9d:b0:f2:99:ae:48:cc:74:20:b0:be:9d:42:a1:87: ac:48:7a:4c:b1:76:50:5f:61:7c:c0:7f:b9:b0:64: 1c:cb:fc:4f:bd:58:93:d6:82:a8:8d:56:27:36:80: de:37:c6:31:ef:5d:84:0d:bd:96:3a:9d:26:3c:67: b1:03:48:65:b4:71:0e:f3:65:f6:2a:96:df:73:8e: 6a:d2:67:b6:3a:93:eb:2c:34:bf:32:1f:83:d7:f4: 29:b0:db:ee:64:8b:fc:73:89:d0:8f:ba:a7:09:99: b0:6c:52:be:cd:b4:ec:61:84:4d:43:bc:96:f6:0d: bf:8f:1c:c0:ba:0e:69:95:17:fa:fd:5b:40:1f:7f: 37:08:a8:13:4d:79:4b:62:84:c3:2d:b9:b7:25:65: 68:6b:0d:85:6f:cb:5f:da:07:93:3d:04:9a:ca:9d: c8:7f:8d:8e:00:cd:fc:d9:83:ac:1e:1d:85:e7:2c: 9c:d5:7b:cf:e0:45:cf:2e:5f:f5:f1:89:94:c4:63: cd:62:39:20:84:41:b8:fa:65:01:3f:31:4b:c8:de: 4a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:49:FD:A3:C7:16:B1:AA:78:F3:A4:E5:15:A5:F3:7B:94:9A:94:E6 X509v3 Authority Key Identifier: keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/p0n9o8cWsap486TlFaXze5SalOY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.248.8.0/21 IPv6: 2a01:a7c0::/32 Signature Algorithm: sha256WithRSAEncryption 0d:db:ae:c9:da:76:1e:6b:03:5f:cc:f4:8a:b5:63:c4:bd:41: 50:7a:63:13:3b:8a:a6:33:09:eb:aa:8a:b0:87:4a:8f:c0:8e: 5a:3b:89:55:29:9a:5b:40:cc:73:33:e5:17:64:50:cc:d1:5e: e0:80:59:c0:87:a9:2d:6b:ab:86:70:57:62:ff:cd:c8:40:93: 6f:9f:65:73:3d:17:39:68:54:f2:8a:8e:6a:b4:00:f2:ed:d5: ee:f9:e8:db:39:c7:bc:9f:1d:7b:f6:2e:b5:56:9c:44:95:63: 84:6b:11:a2:9d:a9:f8:40:ad:a8:00:b4:e8:85:77:af:b2:32: c3:05:76:8e:68:a8:14:f3:f0:63:38:a6:86:87:22:7d:90:0a: 1a:5c:d9:1a:86:8e:49:b7:71:1b:db:b2:23:15:07:e2:7f:df: ee:eb:c0:08:26:0d:96:2a:36:11:a5:44:e8:8e:57:ac:c5:24: c6:f3:09:a8:27:fa:b4:62:4e:01:a9:85:87:68:d3:08:c2:92: 3b:19:9a:ba:ab:fe:e3:08:a1:ce:cb:3b:a3:78:1d:52:55:be: 8e:67:36:a8:99:cd:e3:61:55:6f:a5:c5:cf:73:3b:df:38:28: d3:e1:af:e2:87:7c:3b:b9:92:fd:dc:7c:f9:cb:95:56:fd:9c: da:5f:40:08 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yIq8pii2hI59CJqCv8UKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNWMwYzcxMTFlMmY1N2ZjYWY4MTEzYTQyZTU1NmU4ODJk ZDVjNGIwHhcNMjYwMTAxMTgxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzQ5ZmRhM2M3MTZiMWFhNzhmM2E0ZTUxNWE1ZjM3Yjk0OWE5NGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9H61dSHtl1lnpQtoxcZREZlSzwU+ ZFFoTYNNzydZ6SKKIC1XofXKCSx3jyOdsPKZrkjMdCCwvp1CoYesSHpMsXZQX2F8 wH+5sGQcy/xPvViT1oKojVYnNoDeN8Yx712EDb2WOp0mPGexA0hltHEO82X2Kpbf c45q0me2OpPrLDS/Mh+D1/QpsNvuZIv8c4nQj7qnCZmwbFK+zbTsYYRNQ7yW9g2/ jxzAug5plRf6/VtAH383CKgTTXlLYoTDLbm3JWVoaw2Fb8tf2geTPQSayp3If42O AM382YOsHh2F5yyc1XvP4EXPLl/18YmUxGPNYjkghEG4+mUBPzFLyN5KXwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKdJ/aPHFrGqePOk5RWl83uUmpTmMB8GA1UdIwQY MBaAFHJcDHER4vV/yvgROkLlVuiC3VxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYt NzYxMGFhYmFhMjc0LzEvcDBuOW84Y1dzYXA0ODZUbEZhWHplNVNhbE9ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYtNzYxMGFhYmFhMjc0 LzEvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDl/gIMA0E AgACMAcDBQAqAafAMA0GCSqGSIb3DQEBCwUAA4IBAQAN267J2nYeawNfzPSKtWPE vUFQemMTO4qmMwnrqoqwh0qPwI5aO4lVKZpbQMxzM+UXZFDM0V7ggFnAh6kta6uG cFdi/83IQJNvn2VzPRc5aFTyio5qtADy7dXu+ejbOce8nx179i61VpxElWOEaxGi nan4QK2oALTohXevsjLDBXaOaKgU8/BjOKaGhyJ9kAoaXNkaho5Jt3Eb27IjFQfi f9/u68AIJg2WKjYRpUTojlesxSTG8wmoJ/q0Yk4BqYWHaNMIwpI7GZq6q/7jCKHO yzujeB1SVb6OZzaomc3jYVVvpcXPczvfOCjT4a/ih3w7uZL93Hz5y5VW/ZzaX0AI -----END CERTIFICATE-----Generated at Sun Jan 25 22:51:06 2026 by rpki-client