This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/5P0QhbX6zf-iCVzIaWNlfQLBJi8.roa File: 5P0QhbX6zf-iCVzIaWNlfQLBJi8.roa (raw, json) Hash identifier: r8XmFCLhzIdhrRfOLKnRvGbHmQ6BYjUJB7hpE6eDGTc= Subject key identifier: E4:FD:10:85:B5:FA:CD:FF:A2:09:5C:C8:69:63:65:7D:02:C1:26:2F Certificate issuer: /CN=a8b31004df135aa1a8b943033db14691b11a63dd Certificate serial: 019B7B36B7763015BF8A4E5BC20BD468FD24 Authority key identifier: A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/5P0QhbX6zf-iCVzIaWNlfQLBJi8.roa Signing time: Thu 01 Jan 2026 20:19:02 +0000 ROA not before: Thu 01 Jan 2026 20:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3242 IP address blocks: 151.1.0.0/18 maxlen: 18 151.1.0.0/23 maxlen: 23 151.1.0.0/24 maxlen: 24 151.1.1.0/24 maxlen: 24 151.1.2.0/23 maxlen: 23 151.1.4.0/22 maxlen: 22 151.1.7.0/24 maxlen: 24 151.1.8.0/21 maxlen: 21 151.1.16.0/20 maxlen: 20 151.1.24.0/21 maxlen: 21 151.1.32.0/19 maxlen: 19 151.1.32.0/21 maxlen: 21 151.1.40.0/23 maxlen: 23 151.1.42.0/23 maxlen: 23 151.1.44.0/23 maxlen: 23 151.1.46.0/23 maxlen: 23 151.1.48.0/24 maxlen: 24 151.1.49.0/24 maxlen: 24 151.1.50.0/24 maxlen: 24 151.1.62.0/24 maxlen: 24 151.1.66.0/23 maxlen: 23 151.1.68.0/22 maxlen: 22 151.1.72.0/24 maxlen: 24 151.1.74.0/23 maxlen: 23 151.1.76.0/22 maxlen: 22 151.1.80.0/20 maxlen: 20 151.1.84.0/24 maxlen: 24 151.1.96.0/22 maxlen: 22 151.1.100.0/22 maxlen: 22 151.1.101.0/24 maxlen: 24 151.1.104.0/21 maxlen: 21 151.1.112.0/20 maxlen: 20 151.1.128.0/18 maxlen: 18 151.1.192.0/18 maxlen: 18 151.1.192.0/22 maxlen: 22 151.1.192.0/24 maxlen: 24 151.1.194.0/24 maxlen: 24 151.1.195.0/24 maxlen: 24 151.1.196.0/22 maxlen: 22 151.1.200.0/21 maxlen: 21 151.1.203.0/24 maxlen: 24 151.1.208.0/21 maxlen: 21 151.1.212.0/24 maxlen: 24 151.1.216.0/21 maxlen: 21 151.1.224.0/19 maxlen: 19 151.1.227.0/24 maxlen: 24 151.1.232.0/21 maxlen: 21 151.1.244.0/24 maxlen: 24 151.2.0.0/20 maxlen: 20 151.2.32.0/19 maxlen: 19 151.2.36.0/24 maxlen: 24 151.2.96.0/20 maxlen: 20 151.2.102.0/24 maxlen: 24 2a01:65c0::/32 maxlen: 32 2a01:65c0:100::/48 maxlen: 48 2a01:65c0:101::/48 maxlen: 48 2a01:65c0:200::/40 maxlen: 40 2a01:65c0:e00::/48 maxlen: 48 2a01:65c0:e01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.mft rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b7:76:30:15:bf:8a:4e:5b:c2:0b:d4:68:fd:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b31004df135aa1a8b943033db14691b11a63dd Validity Not Before: Jan 1 20:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4fd1085b5facdffa2095cc86963657d02c1262f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0c:f9:be:69:b9:ac:66:05:6a:a9:1b:a5:91: ed:59:07:d0:d6:93:43:ff:3a:82:62:50:87:0a:28: 50:25:2a:34:46:37:a5:64:09:4f:b2:23:cc:df:a3: 82:ce:d8:a4:8e:59:c7:c6:cb:b4:73:05:2b:2c:06: 42:04:6d:9d:a7:12:20:7b:f0:ae:b3:29:a3:e2:dc: 4e:57:24:21:bf:cc:6a:7b:c4:c7:f4:8e:1c:e6:bc: ad:65:18:89:4b:4e:23:d7:7a:46:62:b5:8c:9b:9a: c9:81:7e:92:47:06:1e:1d:78:14:5a:47:46:a6:ec: 03:92:c8:e9:0d:ae:7c:79:97:f5:c3:25:52:7a:16: bb:f4:c4:34:24:af:07:79:94:fc:bb:ad:25:b5:ae: c5:96:a6:9f:bb:9a:9d:3f:ec:76:3d:a7:a0:ba:6e: 14:cb:b9:c1:92:b2:c4:73:5a:67:03:21:a9:4b:7e: fd:e7:f5:08:f5:fe:1f:25:da:2a:87:65:d2:9e:8d: 28:ac:67:18:1c:99:90:b1:f9:f6:34:a8:68:91:db: 68:bc:5c:90:72:1b:43:df:39:dd:a8:1c:23:c2:ec: e0:ca:17:c1:5b:46:1a:44:9e:63:16:31:ba:d0:64: 24:f8:78:44:75:af:0d:76:5f:ae:df:1b:eb:6b:e7: 36:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:FD:10:85:B5:FA:CD:FF:A2:09:5C:C8:69:63:65:7D:02:C1:26:2F X509v3 Authority Key Identifier: keyid:A8:B3:10:04:DF:13:5A:A1:A8:B9:43:03:3D:B1:46:91:B1:1A:63:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLMQBN8TWqGouUMDPbFGkbEaY90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/5P0QhbX6zf-iCVzIaWNlfQLBJi8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5e23ae-6338-48dd-a304-c2a43b080d6f/1/qLMQBN8TWqGouUMDPbFGkbEaY90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.1.0.0/18 151.1.66.0-151.1.72.255 151.1.74.0-151.2.15.255 151.2.32.0/19 151.2.96.0/20 IPv6: 2a01:65c0::/32 Signature Algorithm: sha256WithRSAEncryption 75:af:54:6e:6e:54:d2:74:36:41:e6:b0:93:eb:57:c6:c9:5a: 0a:7f:60:f2:00:f2:d6:f3:d8:e5:3f:6f:4d:fe:4a:1e:8d:6c: 14:6a:90:cd:9a:49:ec:91:66:03:79:52:30:d4:87:0f:c1:7b: 67:4c:40:9b:85:a4:f7:a6:9b:e4:e2:45:57:e8:31:cd:6f:fa: ae:75:75:f8:8d:13:ac:96:1c:01:6b:ac:c1:21:96:69:4b:83: 8b:3d:c6:ad:7c:8a:63:a8:39:6b:5c:f7:f6:e4:72:62:c0:a9: 5b:68:c2:82:5a:b3:eb:9c:77:f4:10:87:76:27:b4:e9:55:60: 45:28:34:37:2f:d5:37:0a:c3:e4:da:4b:86:95:60:a7:e0:13: a6:be:71:c7:67:08:b4:c7:e8:91:4b:0d:c0:24:0f:ab:46:55: 6a:02:b2:1d:50:0c:de:9a:6a:72:fc:05:e1:1c:ce:51:bd:9e: 37:4e:6f:68:12:dd:71:56:b3:7d:d6:1e:4a:09:f4:8e:1d:46: 1f:92:59:55:67:86:43:54:4e:5b:de:a0:7b:f8:98:b6:26:98: 49:5f:94:88:6c:5a:3a:75:a1:59:db:27:6a:71:d2:db:59:28: bf:8b:1b:04:3e:ee:07:94:dc:8c:e9:d4:8e:19:79:2e:f5:96: 3e:43:70:14 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgISAZt7Nrd2MBW/ik5bwgvUaP0kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YjMxMDA0ZGYxMzVhYTFhOGI5NDMwMzNkYjE0NjkxYjEx YTYzZGQwHhcNMjYwMTAxMjAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGZkMTA4NWI1ZmFjZGZmYTIwOTVjYzg2OTYzNjU3ZDAyYzEyNjJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgz5vmm5rGYFaqkbpZHtWQfQ1pND /zqCYlCHCihQJSo0RjelZAlPsiPM36OCztikjlnHxsu0cwUrLAZCBG2dpxIge/Cu symj4txOVyQhv8xqe8TH9I4c5rytZRiJS04j13pGYrWMm5rJgX6SRwYeHXgUWkdG puwDksjpDa58eZf1wyVSeha79MQ0JK8HeZT8u60lta7Flqafu5qdP+x2Paegum4U y7nBkrLEc1pnAyGpS3795/UI9f4fJdoqh2XSno0orGcYHJmQsfn2NKhokdtovFyQ chtD3zndqBwjwuzgyhfBW0YaRJ5jFjG60GQk+HhEda8Ndl+u3xvra+c20wIDAQAB o4ICQDCCAjwwHQYDVR0OBBYEFOT9EIW1+s3/oglcyGljZX0CwSYvMB8GA1UdIwQY MBaAFKizEATfE1qhqLlDAz2xRpGxGmPdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUxNUUJOOFRXcUdvdVVNRFBiRkdrYkVhWTkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS81ZTIzYWUtNjMzOC00OGRkLWEzMDQt YzJhNDNiMDgwZDZmLzEvNVAwUWhiWDZ6Zi1pQ1Z6SWFXTmxmUUxCSmk4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS81ZTIzYWUtNjMzOC00OGRkLWEzMDQtYzJhNDNiMDgwZDZm LzEvcUxNUUJOOFRXcUdvdVVNRFBiRkdrYkVhWTkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFYGCCsGAQUFBwEHAQH/BEcwRTA0BAIAATAuAwQGlwEAMAwD BAGXAUIDBACXAUgwDAMEAZcBSgMEBJcCAAMEBZcCIAMEBJcCYDANBAIAAjAHAwUA KgFlwDANBgkqhkiG9w0BAQsFAAOCAQEAda9Ubm5U0nQ2Qeawk+tXxslaCn9g8gDy 1vPY5T9vTf5KHo1sFGqQzZpJ7JFmA3lSMNSHD8F7Z0xAm4Wk96ab5OJFV+gxzW/6 rnV1+I0TrJYcAWuswSGWaUuDiz3GrXyKY6g5a1z39uRyYsCpW2jCglqz65x39BCH die06VVgRSg0Ny/VNwrD5NpLhpVgp+ATpr5xx2cItMfokUsNwCQPq0ZVagKyHVAM 3ppqcvwF4RzOUb2eN05vaBLdcVazfdYeSgn0jh1GH5JZVWeGQ1ROW96ge/iYtiaY SV+UiGxaOnWhWdsnanHS21kov4sbBD7uB5TcjOnUjhl5LvWWPkNwFA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:34 2026 by rpki-client