This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1JKXVh_JK_vFMc-mPQX8rWfWmCU.roa File: 1JKXVh_JK_vFMc-mPQX8rWfWmCU.roa (raw, json) Hash identifier: vIc4PZw51csu77dSjrzzHmAld6qNzpTqQJl9OAEr1o0= Subject key identifier: D4:92:97:56:1F:C9:2B:FB:C5:31:CF:A6:3D:05:FC:AD:67:D6:98:25 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCBABBF311E079C2AA8AC269C86C50E Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1JKXVh_JK_vFMc-mPQX8rWfWmCU.roa Signing time: Fri 02 Jan 2026 08:20:58 +0000 ROA not before: Fri 02 Jan 2026 08:20:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395517 IP address blocks: 151.243.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:ab:bf:31:1e:07:9c:2a:a8:ac:26:9c:86:c5:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d49297561fc92bfbc531cfa63d05fcad67d69825 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:28:9e:41:85:0c:b2:50:15:e9:de:c6:50:0c: 8a:57:61:40:27:ff:bd:f4:78:96:54:e5:58:56:c0: ec:34:5e:e4:a9:79:32:4d:e4:85:99:80:21:18:00: ee:15:47:2b:26:10:db:9d:17:da:d9:ca:63:d8:cd: 58:02:fd:8f:58:c3:cb:2f:ef:ac:47:23:8a:44:26: 31:69:63:4e:78:65:28:c9:e1:57:97:d1:8f:52:38: 65:a6:31:ca:a8:60:a8:a6:68:1e:a4:61:8b:aa:ba: d7:af:cd:28:4e:c9:53:24:1f:10:d8:01:a5:6a:0f: 09:5f:fc:81:98:af:24:f9:cd:eb:6b:df:03:98:57: 88:91:d4:ca:ba:8f:fd:c9:3a:7c:f9:65:35:69:68: 6b:bd:4e:f7:01:b4:68:d6:db:2c:ab:3c:3c:83:b0: 98:a0:e0:0d:0c:80:cc:9a:05:f2:be:b0:49:c7:ac: ac:ac:60:53:c6:da:60:78:90:21:64:8b:d2:7b:f6: a7:4c:d0:cd:35:61:03:92:b8:83:26:92:d4:df:5f: 46:a7:f3:a8:ba:90:5e:82:8b:af:eb:d9:68:05:e1: f3:48:09:f7:57:9d:fd:ff:05:76:5f:0a:56:06:98: 68:4f:51:03:76:fb:b8:ad:1f:34:b8:63:16:73:b4: c5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:92:97:56:1F:C9:2B:FB:C5:31:CF:A6:3D:05:FC:AD:67:D6:98:25 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1JKXVh_JK_vFMc-mPQX8rWfWmCU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.14.0/24 Signature Algorithm: sha256WithRSAEncryption 45:de:3e:31:27:f7:67:7e:4e:52:8e:f4:b1:5d:dc:17:c3:ec: 1c:b9:87:35:b3:60:20:15:e4:82:c7:25:ee:25:45:67:88:c9: c1:4c:c3:e0:02:0f:f5:81:85:3d:68:db:d7:c5:be:55:47:bb: f2:b9:f6:a6:87:99:c7:64:c6:33:08:cc:8a:92:34:0e:5d:24: 8d:61:35:db:fb:08:b1:db:04:00:7a:d0:13:43:9a:63:7a:bf: 1a:10:72:f9:52:fb:36:bb:29:1f:36:c8:ce:3c:f3:4f:a1:73: f6:61:43:83:4f:6e:a9:ed:9f:fd:38:ac:61:a2:aa:2b:79:e2: 3f:02:65:e6:e2:a5:bd:8c:0c:ec:6f:5c:1b:3c:61:e8:38:ab: 63:98:5f:6e:c4:ab:78:55:c7:ef:9e:e8:b0:2a:b2:67:e4:73: fb:7b:96:f2:65:58:7b:fa:32:e8:c8:4b:b5:50:6a:12:4d:83: 30:d9:c8:c9:e1:c5:bc:61:37:7e:b5:fc:4f:3b:76:b1:b2:86: 34:92:b8:f0:aa:c8:72:77:b8:4c:2c:4e:07:ed:5f:f9:82:16: f7:b3:17:c7:80:17:28:de:dd:9c:31:2a:91:33:eb:ef:5c:7b: 33:fe:e8:fb:d4:ee:2d:46:b2:c0:83:5c:bf:0d:18:da:1f:2b: 16:74:07:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y6u/MR4HnCqorCachsUOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDkyOTc1NjFmYzkyYmZiYzUzMWNmYTYzZDA1ZmNhZDY3ZDY5ODI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2SieQYUMslAV6d7GUAyKV2FAJ/+9 9HiWVOVYVsDsNF7kqXkyTeSFmYAhGADuFUcrJhDbnRfa2cpj2M1YAv2PWMPLL++s RyOKRCYxaWNOeGUoyeFXl9GPUjhlpjHKqGCopmgepGGLqrrXr80oTslTJB8Q2AGl ag8JX/yBmK8k+c3ra98DmFeIkdTKuo/9yTp8+WU1aWhrvU73AbRo1tssqzw8g7CY oOANDIDMmgXyvrBJx6ysrGBTxtpgeJAhZIvSe/anTNDNNWEDkriDJpLU319Gp/Oo upBegouv69loBeHzSAn3V539/wV2XwpWBphoT1EDdvu4rR80uGMWc7TFPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNSSl1YfySv7xTHPpj0F/K1n1pglMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvMUpLWFZoX0pLX3ZGTWMtbVBRWDhyV2ZXbUNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/MOMA0G CSqGSIb3DQEBCwUAA4IBAQBF3j4xJ/dnfk5SjvSxXdwXw+wcuYc1s2AgFeSCxyXu JUVniMnBTMPgAg/1gYU9aNvXxb5VR7vyufamh5nHZMYzCMyKkjQOXSSNYTXb+wix 2wQAetATQ5pjer8aEHL5Uvs2uykfNsjOPPNPoXP2YUODT26p7Z/9OKxhoqoreeI/ AmXm4qW9jAzsb1wbPGHoOKtjmF9uxKt4VcfvnuiwKrJn5HP7e5byZVh7+jLoyEu1 UGoSTYMw2cjJ4cW8YTd+tfxPO3axsoY0krjwqshyd7hMLE4H7V/5ghb3sxfHgBco 3t2cMSqRM+vvXHsz/uj71O4tRrLAg1y/DRjaHysWdAdj -----END CERTIFICATE-----Generated at Sun Jan 18 06:29:58 2026 by rpki-client