This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0fG2NSa0ctpe-jtD3PeT7IznWsY.roa File: 0fG2NSa0ctpe-jtD3PeT7IznWsY.roa (raw, json) Hash identifier: 5E801SK0l/EcNRyjs/zSjZ7SDJ4V79KkBWKz4GqYXdE= Subject key identifier: D1:F1:B6:35:26:B4:72:DA:5E:FA:3B:43:DC:F7:93:EC:8C:E7:5A:C6 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BB5A914A189CD0AC5EB5E790469FB7539 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0fG2NSa0ctpe-jtD3PeT7IznWsY.roa Signing time: Tue 13 Jan 2026 04:41:55 +0000 ROA not before: Tue 13 Jan 2026 04:41:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214693 IP address blocks: 37.202.197.0/24 maxlen: 24 151.242.194.0/24 maxlen: 24 151.245.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b5:a9:14:a1:89:cd:0a:c5:eb:5e:79:04:69:fb:75:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 13 04:41:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1f1b63526b472da5efa3b43dcf793ec8ce75ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4c:96:bb:f5:31:f8:25:45:21:a3:6b:29:6b: a4:2e:f5:69:fb:dd:96:4a:a8:a4:04:10:0d:84:e4: 3b:0a:9b:dd:ab:03:98:60:6f:a8:10:d2:8d:44:ea: 73:17:fd:3e:5e:74:f5:96:dc:c8:c5:63:75:81:17: 39:28:38:fe:32:0e:82:ba:94:a9:20:6d:bf:e2:39: f2:09:38:75:43:ff:91:7f:f0:52:d9:71:c1:af:bb: 48:18:79:33:c4:80:d8:3a:58:2e:00:a9:88:76:a8: 38:eb:03:af:cb:19:11:ea:3d:fa:2f:bd:24:8e:7c: cc:52:4a:a5:60:2b:06:63:42:9e:5d:9e:8b:0b:69: 08:03:4b:a4:dd:bc:6f:80:2b:c5:a4:5c:db:90:3f: 8c:f4:15:fe:fb:eb:2b:92:f4:15:1b:61:82:d2:4f: 1b:a4:b0:8e:60:be:24:76:2d:60:91:eb:c1:4e:11: c7:ad:ea:d5:61:2a:8e:43:5a:b8:43:2f:fd:38:b4: 13:c0:a2:11:9b:bd:c8:9d:c0:09:83:f1:ed:9b:a5: cb:64:d4:2f:dd:0a:64:92:3b:16:a5:5a:1e:75:dc: a8:77:82:49:4e:6b:8a:1e:ab:ec:21:db:53:44:b9: dd:7c:a6:65:d1:9e:17:c6:e8:6d:63:91:09:03:bc: a4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F1:B6:35:26:B4:72:DA:5E:FA:3B:43:DC:F7:93:EC:8C:E7:5A:C6 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0fG2NSa0ctpe-jtD3PeT7IznWsY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.197.0/24 151.242.194.0/24 151.245.3.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:ee:b3:e8:c2:1e:89:ca:de:eb:35:7a:95:19:1b:ef:f3:70: d5:2b:80:85:d3:da:57:4e:a6:74:b5:c6:05:56:01:87:bd:de: a7:53:64:be:ed:55:3f:44:e3:40:e7:d8:8c:26:26:2e:e9:86: b9:a6:49:91:b4:42:de:bd:91:f7:f3:42:7b:cd:a6:3c:18:8b: 99:dc:d4:bf:a3:cb:d2:32:d8:1f:ea:5c:e7:f9:cf:5a:12:0b: bf:3f:05:de:2e:5c:e0:5f:de:46:01:45:1c:ad:b9:be:64:2e: c1:55:66:96:06:44:8e:16:06:39:5b:a4:df:4b:d2:5e:af:8a: f0:fe:67:7e:56:bc:d7:58:a9:ae:12:7a:e5:a7:4e:e7:94:fa: 7d:bb:30:a7:a5:80:b8:39:cf:d8:ce:1c:c5:2f:16:4e:fb:73: d3:a5:d6:6a:04:28:ec:19:de:b0:b4:dc:b8:5f:f9:d9:0a:6c: c5:7c:d7:a5:7a:8f:60:d0:c6:73:15:04:f6:de:e1:f5:81:54: da:8d:3d:ef:b3:c6:19:ab:28:e1:b5:45:66:ab:ae:d2:3d:4c: 8c:5a:49:bf:13:b2:d6:32:d6:e6:5c:57:31:bf:50:e9:c7:a2: d0:33:0a:77:c6:cc:f8:db:29:d3:2b:54:ca:3a:bb:3c:d4:0e: 5c:75:86:1d -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZu1qRShic0KxeteeQRp+3U5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTEzMDQ0MTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWYxYjYzNTI2YjQ3MmRhNWVmYTNiNDNkY2Y3OTNlYzhjZTc1YWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UyWu/Ux+CVFIaNrKWukLvVp+92W SqikBBANhOQ7CpvdqwOYYG+oENKNROpzF/0+XnT1ltzIxWN1gRc5KDj+Mg6CupSp IG2/4jnyCTh1Q/+Rf/BS2XHBr7tIGHkzxIDYOlguAKmIdqg46wOvyxkR6j36L70k jnzMUkqlYCsGY0KeXZ6LC2kIA0uk3bxvgCvFpFzbkD+M9BX+++srkvQVG2GC0k8b pLCOYL4kdi1gkevBThHHrerVYSqOQ1q4Qy/9OLQTwKIRm73IncAJg/Htm6XLZNQv 3QpkkjsWpVoeddyod4JJTmuKHqvsIdtTRLndfKZl0Z4XxuhtY5EJA7ykxwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNHxtjUmtHLaXvo7Q9z3k+yM51rGMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvMGZHMk5TYTBjdHBlLWp0RDNQZVQ3SXpuV3NZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAJcrFAwQA l/LCAwQAl/UDMA0GCSqGSIb3DQEBCwUAA4IBAQB67rPowh6Jyt7rNXqVGRvv83DV K4CF09pXTqZ0tcYFVgGHvd6nU2S+7VU/RONA59iMJiYu6Ya5pkmRtELevZH380J7 zaY8GIuZ3NS/o8vSMtgf6lzn+c9aEgu/PwXeLlzgX95GAUUcrbm+ZC7BVWaWBkSO FgY5W6TfS9Jer4rw/md+VrzXWKmuEnrlp07nlPp9uzCnpYC4Oc/YzhzFLxZO+3PT pdZqBCjsGd6wtNy4X/nZCmzFfNeleo9g0MZzFQT23uH1gVTajT3vs8YZqyjhtUVm q67SPUyMWkm/E7LWMtbmXFcxv1Dpx6LQMwp3xsz42ynTK1TKOrs81A5cdYYd -----END CERTIFICATE-----Generated at Sun Jan 18 06:29:12 2026 by rpki-client