This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/G4M1fC6N6uUpmwVd6L-hXyGibfc.roa File: G4M1fC6N6uUpmwVd6L-hXyGibfc.roa (raw, json) Hash identifier: RHcDhNIWyRkFXDmbrGSHquup2eFZZctuB6SSGrhn8b4= Subject key identifier: 1B:83:35:7C:2E:8D:EA:E5:29:9B:05:5D:E8:BF:A1:5F:21:A2:6D:F7 Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec Certificate serial: 019B797EDC93128ABBC5BF149B4531ECABA3 Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/G4M1fC6N6uUpmwVd6L-hXyGibfc.roa Signing time: Thu 01 Jan 2026 12:18:35 +0000 ROA not before: Thu 01 Jan 2026 12:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215361 IP address blocks: 151.251.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:dc:93:12:8a:bb:c5:bf:14:9b:45:31:ec:ab:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec Validity Not Before: Jan 1 12:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1b83357c2e8deae5299b055de8bfa15f21a26df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:08:18:e8:15:d6:c4:a0:cd:f7:34:05:ce:6a: 4b:d6:7c:3e:cc:6a:f5:aa:94:02:fd:03:1b:58:51: ba:20:a6:94:cc:70:e2:bf:60:ff:86:1c:1c:22:6a: e7:ec:e8:b9:a3:0e:a7:17:8f:00:42:98:d3:85:fc: 71:c2:54:b1:88:58:5d:2b:2e:88:af:48:38:00:c0: 91:0c:70:8b:46:6f:07:b0:4d:83:03:fb:cc:5a:2b: c5:65:47:b0:a7:37:a1:a0:96:b2:bd:03:63:8d:41: b8:e5:d7:79:aa:4e:f7:ab:40:e8:89:01:36:96:b5: 44:64:e1:e0:4d:70:12:39:25:97:46:df:66:42:57: 0a:38:2c:69:c5:97:38:9b:21:d3:15:1d:f7:05:e6: 39:1d:1f:e7:79:98:4f:6e:10:17:e9:5c:c1:81:3d: 08:dc:71:e3:4f:16:eb:ab:f5:ce:48:4f:07:8e:8d: 68:96:3e:75:12:b7:1d:eb:2f:2f:95:87:1e:bb:d5: 76:11:6d:e6:f3:d7:13:8c:1d:23:bb:f7:9f:f0:1b: 4d:c2:18:00:56:b3:59:8b:9c:42:09:6d:ad:20:2c: b7:5c:bd:07:a7:12:d3:ee:71:09:d8:d5:6a:31:61: ac:70:b9:a7:66:45:d7:ae:48:34:df:65:59:fc:96: 04:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:83:35:7C:2E:8D:EA:E5:29:9B:05:5D:E8:BF:A1:5F:21:A2:6D:F7 X509v3 Authority Key Identifier: keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/G4M1fC6N6uUpmwVd6L-hXyGibfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.251.38.0/24 Signature Algorithm: sha256WithRSAEncryption 44:e0:b9:fb:d3:8d:81:4d:cb:45:6e:6a:31:1e:f4:5a:9f:ee: 56:b7:c6:43:24:e4:d0:04:37:dc:f6:6e:41:2f:98:a3:4a:37: 7f:8b:84:41:9f:e8:08:47:e1:9b:45:d4:75:02:fd:5e:17:25: e6:16:4a:26:df:19:9b:b6:0a:e2:65:4a:f2:68:7b:cc:cc:45: 8c:1f:d6:d4:97:0c:b2:f2:60:86:29:35:26:10:d5:be:71:d3: 0f:6e:7e:75:5f:83:7a:9a:de:f8:16:af:ce:77:e0:bc:94:1d: 0a:9d:22:03:d1:81:30:7d:9d:37:09:fd:b6:8d:ad:fb:68:a0: a7:4e:02:32:c9:1c:c1:75:b9:71:bc:58:00:b0:0f:30:63:f6: d9:6f:b8:95:cf:f9:cd:0e:e9:aa:55:a6:09:bc:d7:6c:cf:14: f5:a2:dc:91:aa:8e:26:82:de:3b:04:f1:25:53:93:36:af:43: f1:11:00:ed:d7:f5:7e:1f:c0:bf:bd:47:2f:06:91:77:fa:c5: 3d:66:b4:b1:e3:07:6d:a3:3a:08:3c:59:f7:28:f4:7e:32:3f: ac:27:54:3d:40:b8:be:d7:01:d5:d3:1e:13:36:44:ba:b1:3b: a4:cd:94:6d:b8:b3:ee:94:31:e1:38:15:b4:3d:35:87:bb:35: e6:b1:50:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftyTEoq7xb8Um0Ux7KujMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj ZDgyZWMwHhcNMjYwMTAxMTIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYjgzMzU3YzJlOGRlYWU1Mjk5YjA1NWRlOGJmYTE1ZjIxYTI2ZGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwgY6BXWxKDN9zQFzmpL1nw+zGr1 qpQC/QMbWFG6IKaUzHDiv2D/hhwcImrn7Oi5ow6nF48AQpjThfxxwlSxiFhdKy6I r0g4AMCRDHCLRm8HsE2DA/vMWivFZUewpzehoJayvQNjjUG45dd5qk73q0DoiQE2 lrVEZOHgTXASOSWXRt9mQlcKOCxpxZc4myHTFR33BeY5HR/neZhPbhAX6VzBgT0I 3HHjTxbrq/XOSE8Hjo1olj51Ercd6y8vlYceu9V2EW3m89cTjB0ju/ef8BtNwhgA VrNZi5xCCW2tICy3XL0HpxLT7nEJ2NVqMWGscLmnZkXXrkg032VZ/JYEzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBuDNXwujerlKZsFXei/oV8hom33MB8GA1UdIwQY MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt N2ZiYmFlNmY5NDM3LzEvRzRNMWZDNk42dVVwbXdWZDZMLWhYeUdpYmZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3 LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/smMA0G CSqGSIb3DQEBCwUAA4IBAQBE4Ln7042BTctFbmoxHvRan+5Wt8ZDJOTQBDfc9m5B L5ijSjd/i4RBn+gIR+GbRdR1Av1eFyXmFkom3xmbtgriZUryaHvMzEWMH9bUlwyy 8mCGKTUmENW+cdMPbn51X4N6mt74Fq/Od+C8lB0KnSID0YEwfZ03Cf22ja37aKCn TgIyyRzBdblxvFgAsA8wY/bZb7iVz/nNDumqVaYJvNdszxT1otyRqo4mgt47BPEl U5M2r0PxEQDt1/V+H8C/vUcvBpF3+sU9ZrSx4wdtozoIPFn3KPR+Mj+sJ1Q9QLi+ 1wHV0x4TNkS6sTukzZRtuLPulDHhOBW0PTWHuzXmsVAq -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:21 2026 by rpki-client