This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1GwJfjRNiT3ibEugOJYkBTyyK4c.roa File: 1GwJfjRNiT3ibEugOJYkBTyyK4c.roa (raw, json) Hash identifier: iaTMt3QWwh0CBpDUmZ4B5D5CU5ir5RldwWe09Ijow6A= Subject key identifier: D4:6C:09:7E:34:4D:89:3D:E2:6C:4B:A0:38:96:24:05:3C:B2:2B:87 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB59C349357192FE30E243F6C5D432 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1GwJfjRNiT3ibEugOJYkBTyyK4c.roa Signing time: Fri 02 Jan 2026 08:20:37 +0000 ROA not before: Fri 02 Jan 2026 08:20:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 152918 IP address blocks: 151.243.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:59:c3:49:35:71:92:fe:30:e2:43:f6:c5:d4:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d46c097e344d893de26c4ba0389624053cb22b87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7a:9c:4f:f6:f3:35:08:1e:bb:06:2b:89:bf: 24:65:21:30:38:ce:7b:56:d1:b9:af:c7:58:16:5e: e4:b0:a9:0c:19:3c:e5:1a:0f:58:73:de:69:1d:ba: f2:0a:a4:97:9a:68:c1:0b:60:6c:15:50:a0:34:ce: 31:77:d9:7e:1d:bb:1c:17:c3:89:81:2e:7a:a7:2d: 2a:d3:a7:ed:ee:5c:7f:72:c3:c9:fa:3d:b0:82:fc: 9d:7a:3e:b6:ad:39:d9:59:22:3f:b9:3a:9d:2d:4b: 53:d4:ce:0d:9f:44:9a:e0:6c:86:e7:b1:98:6d:4c: ad:19:0e:12:bd:ca:6b:93:8e:2a:78:12:6c:cb:20: d1:eb:b5:84:ba:c4:5c:96:75:ad:b4:57:49:1b:41: c4:01:dc:be:55:7c:67:c8:8e:70:b0:6c:64:fb:de: f7:fa:a1:ca:36:21:a6:e7:2d:12:c3:6b:94:33:1d: 46:0b:a3:63:78:5c:2c:4d:60:bc:9f:1a:ee:72:4e: ba:d0:46:91:e8:9d:a1:34:f5:00:a0:3c:ed:71:b5: 92:6c:7f:a4:05:b3:48:57:74:9c:34:0a:fb:c9:37: 26:b8:41:b3:b9:35:63:ce:f3:37:d6:9d:15:ff:3f: c9:5c:3a:7c:33:e7:c0:c9:d4:a5:d8:16:96:49:ae: 53:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6C:09:7E:34:4D:89:3D:E2:6C:4B:A0:38:96:24:05:3C:B2:2B:87 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1GwJfjRNiT3ibEugOJYkBTyyK4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.60.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:8a:a0:94:a6:37:f0:55:02:37:17:2d:2e:08:d5:d2:2b:10: a8:18:a6:4c:a7:82:9b:07:f0:e1:51:44:53:25:80:0b:97:5a: 1a:43:13:05:14:55:b7:bc:61:39:e4:f1:a2:99:8c:c8:87:31: f3:83:56:dc:e0:ed:45:bc:d5:ef:1c:5a:92:61:cc:7f:6f:38: 33:f4:cd:57:39:1a:fc:e2:c9:0c:6c:ba:3e:9f:f1:46:67:5e: ed:c1:19:95:c9:4d:e8:e7:56:e5:e1:31:59:13:97:71:0e:bd: 4e:38:63:a9:8d:e8:bb:59:90:44:a0:16:ed:58:f5:df:10:82: 06:31:69:3f:e8:54:01:e7:d2:c3:76:6f:00:b9:f4:62:e7:59: 56:bd:73:f5:32:19:93:cf:62:02:e9:6b:31:76:f7:d1:48:6b: 5b:4f:32:04:a5:53:7f:35:5b:88:93:75:6f:77:a4:69:95:fa: c5:d9:e4:a7:50:9c:0c:c6:d1:5b:ae:3d:8d:ec:76:6f:e6:d3: a1:95:5b:fb:42:92:a1:a8:59:a2:fd:c2:d2:76:b5:89:ed:bd: b8:53:46:27:77:65:74:fe:30:f7:81:78:66:d8:b6:e1:ef:58: eb:30:9c:72:02:bd:42:37:fc:e4:6b:16:11:25:a2:9a:84:85: 6f:42:b9:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y1nDSTVxkv4w4kP2xdQyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDZjMDk3ZTM0NGQ4OTNkZTI2YzRiYTAzODk2MjQwNTNjYjIyYjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnqcT/bzNQgeuwYrib8kZSEwOM57 VtG5r8dYFl7ksKkMGTzlGg9Yc95pHbryCqSXmmjBC2BsFVCgNM4xd9l+HbscF8OJ gS56py0q06ft7lx/csPJ+j2wgvydej62rTnZWSI/uTqdLUtT1M4Nn0Sa4GyG57GY bUytGQ4Svcprk44qeBJsyyDR67WEusRclnWttFdJG0HEAdy+VXxnyI5wsGxk+973 +qHKNiGm5y0Sw2uUMx1GC6NjeFwsTWC8nxruck660EaR6J2hNPUAoDztcbWSbH+k BbNIV3ScNAr7yTcmuEGzuTVjzvM31p0V/z/JXDp8M+fAydSl2BaWSa5TGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNRsCX40TYk94mxLoDiWJAU8siuHMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvMUd3SmZqUk5pVDNpYkV1Z09KWWtCVHl5SzRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl/M8MA0G CSqGSIb3DQEBCwUAA4IBAQA/iqCUpjfwVQI3Fy0uCNXSKxCoGKZMp4KbB/DhUURT JYALl1oaQxMFFFW3vGE55PGimYzIhzHzg1bc4O1FvNXvHFqSYcx/bzgz9M1XORr8 4skMbLo+n/FGZ17twRmVyU3o51bl4TFZE5dxDr1OOGOpjei7WZBEoBbtWPXfEIIG MWk/6FQB59LDdm8AufRi51lWvXP1MhmTz2IC6WsxdvfRSGtbTzIEpVN/NVuIk3Vv d6RplfrF2eSnUJwMxtFbrj2N7HZv5tOhlVv7QpKhqFmi/cLSdrWJ7b24U0Ynd2V0 /jD3gXhm2Lbh71jrMJxyAr1CN/zkaxYRJaKahIVvQrlr -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:27 2026 by rpki-client