This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1Sl5ATegEP14MA_j-1S1gWTRuXg.roa File: 1Sl5ATegEP14MA_j-1S1gWTRuXg.roa (raw, json) Hash identifier: K3k/mAwrhZUCpa1Q3tA++ZzrShrrUwNyyOgmmMmnOoo= Subject key identifier: D5:29:79:01:37:A0:10:FD:78:30:0F:E3:FB:54:B5:81:64:D1:B9:78 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB147D2FF9E992D82ACBB8E58AFA83 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1Sl5ATegEP14MA_j-1S1gWTRuXg.roa Signing time: Fri 02 Jan 2026 08:20:19 +0000 ROA not before: Fri 02 Jan 2026 08:20:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14061 IP address blocks: 151.240.160.0/24 maxlen: 24 151.241.19.0/24 maxlen: 24 151.241.45.0/24 maxlen: 24 151.241.93.0/24 maxlen: 24 151.241.224.0/24 maxlen: 24 151.241.230.0/24 maxlen: 24 151.241.231.0/24 maxlen: 24 151.244.89.0/24 maxlen: 24 151.245.74.0/24 maxlen: 24 151.245.87.0/24 maxlen: 24 151.245.198.0/24 maxlen: 24 151.245.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:14:7d:2f:f9:e9:92:d8:2a:cb:b8:e5:8a:fa:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d529790137a010fd78300fe3fb54b58164d1b978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c7:9c:d1:8e:87:70:10:35:0b:0c:68:2f:98: 5e:dc:7d:07:59:95:82:d4:5e:f0:e6:cf:76:70:72: 62:a4:20:4a:87:40:a3:1f:35:96:41:d2:6d:00:c5: 14:b8:62:81:48:af:07:c5:cb:02:33:60:04:f9:31: 9a:67:2f:06:2c:45:97:2a:87:9d:f3:0c:5d:6c:72: c3:73:dc:07:a5:ba:4a:a2:42:12:7a:f5:a6:4b:06: 75:d0:d1:25:84:61:0a:28:24:04:04:62:cc:7b:90: f7:78:4f:8b:96:ae:8f:1d:7a:c1:1e:32:cc:c8:f4: 36:e3:d1:ae:a5:54:d2:7c:02:60:d6:ef:e9:b7:14: fe:01:f4:65:8c:99:0e:fc:1d:a2:92:1c:69:d0:0d: 8c:40:2c:7a:1d:d9:f1:9f:e3:2c:4a:67:db:5a:19: b1:c9:f0:ee:ad:e0:d0:81:9e:49:0d:04:c6:41:8f: e3:82:f7:5b:f8:dd:f1:b2:45:e8:dd:98:57:2f:0c: 11:1e:a2:56:85:da:e6:72:96:b4:ab:9b:d3:1c:71: e2:e8:ab:23:b3:01:45:98:83:d3:bd:e8:ff:84:5e: 5a:ba:b4:82:27:ac:55:52:a3:88:c1:ec:a5:e8:39: ff:1d:50:2a:73:13:29:ff:15:6e:4f:81:33:7d:19: 49:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:29:79:01:37:A0:10:FD:78:30:0F:E3:FB:54:B5:81:64:D1:B9:78 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1Sl5ATegEP14MA_j-1S1gWTRuXg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.160.0/24 151.241.19.0/24 151.241.45.0/24 151.241.93.0/24 151.241.224.0/24 151.241.230.0/23 151.244.89.0/24 151.245.74.0/24 151.245.87.0/24 151.245.198.0/24 151.245.213.0/24 Signature Algorithm: sha256WithRSAEncryption 72:de:db:50:d7:e3:2d:6f:af:58:80:14:a3:41:9f:e4:65:dc: b2:d6:52:9c:d5:2d:f6:3c:ac:b0:14:88:e6:fc:f7:96:45:42: 11:4e:5a:4f:9e:cc:b6:9c:97:fa:3e:ca:63:75:37:b5:35:05: 2f:82:6c:d0:66:90:7d:11:c5:bd:b7:f6:f9:86:7b:75:51:03: e6:a7:c3:80:dd:24:b6:3e:0a:9f:35:4f:84:f3:00:a7:d7:4b: 09:35:d5:22:e5:58:97:05:5e:ef:be:74:c1:08:48:e9:6f:84: 0a:4b:a5:d1:8b:69:cc:aa:ae:51:57:0a:15:83:e6:01:01:e0: e5:82:73:35:81:1c:09:31:b2:cb:b3:80:0f:cd:19:9f:d7:a8: 46:cf:67:a0:55:9d:fe:5d:6e:8d:7a:49:b1:20:4e:cc:90:f7: 47:38:ce:01:4f:35:b7:88:4d:ef:a5:37:51:f4:98:bf:8a:d8: 85:43:45:41:bf:80:1d:02:81:d2:dd:fb:96:e5:c9:f6:48:46: b3:36:f5:ad:6c:70:6d:2c:68:90:96:8a:31:7c:ba:d5:98:4f: d5:7f:79:d7:34:64:49:d2:1f:6c:3f:ec:29:8c:4b:97:d4:bb: b3:ec:5c:a0:dd:4f:26:be:b9:56:a1:78:93:b4:58:40:a3:14: 8b:b4:66:84 -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt9yxR9L/npktgqy7jlivqDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTI5NzkwMTM3YTAxMGZkNzgzMDBmZTNmYjU0YjU4MTY0ZDFiOTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8ec0Y6HcBA1CwxoL5he3H0HWZWC 1F7w5s92cHJipCBKh0CjHzWWQdJtAMUUuGKBSK8HxcsCM2AE+TGaZy8GLEWXKoed 8wxdbHLDc9wHpbpKokISevWmSwZ10NElhGEKKCQEBGLMe5D3eE+Llq6PHXrBHjLM yPQ249GupVTSfAJg1u/ptxT+AfRljJkO/B2ikhxp0A2MQCx6Hdnxn+MsSmfbWhmx yfDureDQgZ5JDQTGQY/jgvdb+N3xskXo3ZhXLwwRHqJWhdrmcpa0q5vTHHHi6Ksj swFFmIPTvej/hF5aurSCJ6xVUqOIweyl6Dn/HVAqcxMp/xVuT4EzfRlJjwIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFNUpeQE3oBD9eDAP4/tUtYFk0bl4MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvMVNsNUFUZWdFUDE0TUFfai0xUzFnV1RSdVhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAl/CgAwQA l/ETAwQAl/EtAwQAl/FdAwQAl/HgAwQBl/HmAwQAl/RZAwQAl/VKAwQAl/VXAwQA l/XGAwQAl/XVMA0GCSqGSIb3DQEBCwUAA4IBAQBy3ttQ1+Mtb69YgBSjQZ/kZdyy 1lKc1S32PKywFIjm/PeWRUIRTlpPnsy2nJf6PspjdTe1NQUvgmzQZpB9EcW9t/b5 hnt1UQPmp8OA3SS2PgqfNU+E8wCn10sJNdUi5ViXBV7vvnTBCEjpb4QKS6XRi2nM qq5RVwoVg+YBAeDlgnM1gRwJMbLLs4APzRmf16hGz2egVZ3+XW6NekmxIE7MkPdH OM4BTzW3iE3vpTdR9Ji/itiFQ0VBv4AdAoHS3fuW5cn2SEazNvWtbHBtLGiQloox fLrVmE/Vf3nXNGRJ0h9sP+wpjEuX1Luz7Fyg3U8mvrlWoXiTtFhAoxSLtGaE -----END CERTIFICATE-----Generated at Sun Jan 18 06:28:46 2026 by rpki-client