This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/19AyMRR8TuSEPGoxjBDqJaaZZGE.roa File: 19AyMRR8TuSEPGoxjBDqJaaZZGE.roa (raw, json) Hash identifier: pW3URGd6hJtWQsm4MgvZqn0wHzpc2PfDf3Z0tuXBJYA= Subject key identifier: D7:D0:32:31:14:7C:4E:E4:84:3C:6A:31:8C:10:EA:25:A6:99:64:61 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB8B58BFF517350C19053375DC9125 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/19AyMRR8TuSEPGoxjBDqJaaZZGE.roa Signing time: Fri 02 Jan 2026 08:20:50 +0000 ROA not before: Fri 02 Jan 2026 08:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212669 IP address blocks: 151.240.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:8b:58:bf:f5:17:35:0c:19:05:33:75:dc:91:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7d03231147c4ee4843c6a318c10ea25a6996461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ec:29:46:da:9c:e2:61:2b:ea:54:fa:2c:96: 40:57:68:a9:27:3c:32:18:51:fc:31:3d:e0:65:25: b1:2e:11:61:af:43:28:e6:a0:7a:44:04:92:ad:50: 0f:05:ea:6e:39:28:eb:6b:be:40:b1:52:91:e2:ad: 7a:b1:76:0a:7d:49:1e:99:a9:7d:a3:cc:ad:b0:33: 91:0e:62:81:36:70:93:4d:df:85:29:70:bc:30:6a: bc:5c:50:27:a6:29:b3:a8:e0:78:c4:a9:64:db:87: 95:4c:f8:a4:3d:9e:56:6c:a8:d0:c7:84:29:4b:35: fa:d5:f0:4e:bd:d7:6c:95:c5:c8:32:c1:ae:91:f8: c4:66:e5:6b:d1:80:ac:01:e3:98:0d:e3:b5:3a:2e: 66:1c:37:23:5d:40:7d:bc:67:2f:f1:5a:96:ff:f8: 69:e3:fb:ec:af:91:10:68:18:09:36:21:f8:36:19: 01:f3:8f:21:54:36:36:46:6b:f2:88:99:0f:3c:4c: c2:60:bd:bc:63:54:ae:20:a7:26:24:05:6a:bb:3e: fa:ee:8c:e6:ee:5d:84:b7:0f:91:95:31:52:8e:e8: 3a:2b:2f:77:40:8b:d6:a0:c4:62:91:1a:f5:4b:94: 92:cb:bf:9c:ba:d3:31:fd:1f:d6:f6:a9:17:a9:9c: 0a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D0:32:31:14:7C:4E:E4:84:3C:6A:31:8C:10:EA:25:A6:99:64:61 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/19AyMRR8TuSEPGoxjBDqJaaZZGE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.125.0/24 Signature Algorithm: sha256WithRSAEncryption 49:71:50:39:75:ba:e6:41:9b:fa:aa:5c:d3:61:d1:32:d5:da: bf:7a:b2:a4:f5:0c:6b:b6:a5:6f:9a:9c:87:60:3b:e7:1d:bc: 60:1c:fc:a6:32:e9:b5:e4:90:d4:73:e6:4e:22:3f:6a:e8:0f: 19:cf:24:82:f0:8f:fc:d7:45:50:b8:37:08:49:a8:44:83:2d: 17:9f:6b:62:07:39:6a:aa:a0:fa:b6:42:88:3f:32:30:12:c6: bd:ca:fc:7d:2c:8d:9f:58:e7:85:16:5f:aa:65:57:5c:88:40: 2e:2d:07:7e:85:ca:5f:61:88:89:a3:a5:18:78:bc:f7:c4:ec: fb:57:ba:1a:c3:b1:1a:85:be:0c:38:99:2d:3f:9d:18:7e:f8: 91:db:34:74:6c:3b:fb:99:da:e9:ee:f0:35:4b:48:42:4a:84: 9e:93:59:f7:9f:29:88:51:4a:6b:3a:87:ec:63:a7:fc:c5:bd: 27:c2:3a:95:ea:d4:46:d6:12:e4:71:a0:cb:cd:c8:e9:03:0a: 46:78:b1:de:5c:36:cb:85:d5:f2:2d:34:c9:98:5e:e8:46:cd: 9f:1a:f1:03:ae:67:61:88:ab:1c:80:b3:3d:e5:27:84:33:c7: 54:20:5d:77:8b:aa:8f:98:fb:4f:94:35:82:e2:ad:bc:25:c4: 82:35:25:54 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y4tYv/UXNQwZBTN13JElMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2QwMzIzMTE0N2M0ZWU0ODQzYzZhMzE4YzEwZWEyNWE2OTk2NDYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+wpRtqc4mEr6lT6LJZAV2ipJzwy GFH8MT3gZSWxLhFhr0Mo5qB6RASSrVAPBepuOSjra75AsVKR4q16sXYKfUkemal9 o8ytsDORDmKBNnCTTd+FKXC8MGq8XFAnpimzqOB4xKlk24eVTPikPZ5WbKjQx4Qp SzX61fBOvddslcXIMsGukfjEZuVr0YCsAeOYDeO1Oi5mHDcjXUB9vGcv8VqW//hp 4/vsr5EQaBgJNiH4NhkB848hVDY2RmvyiJkPPEzCYL28Y1SuIKcmJAVquz767ozm 7l2Etw+RlTFSjug6Ky93QIvWoMRikRr1S5SSy7+cutMx/R/W9qkXqZwK0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNfQMjEUfE7khDxqMYwQ6iWmmWRhMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvMTlBeU1SUjhUdVNFUEdveGpCRHFKYWFaWkdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/B9MA0G CSqGSIb3DQEBCwUAA4IBAQBJcVA5dbrmQZv6qlzTYdEy1dq/erKk9QxrtqVvmpyH YDvnHbxgHPymMum15JDUc+ZOIj9q6A8ZzySC8I/810VQuDcISahEgy0Xn2tiBzlq qqD6tkKIPzIwEsa9yvx9LI2fWOeFFl+qZVdciEAuLQd+hcpfYYiJo6UYeLz3xOz7 V7oaw7Eahb4MOJktP50YfviR2zR0bDv7mdrp7vA1S0hCSoSek1n3nymIUUprOofs Y6f8xb0nwjqV6tRG1hLkcaDLzcjpAwpGeLHeXDbLhdXyLTTJmF7oRs2fGvEDrmdh iKscgLM95SeEM8dUIF13i6qPmPtPlDWC4q28JcSCNSVU -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:39 2026 by rpki-client