This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1jAP99oKuPt4UUllM_l1lelW52A.roa File: 1jAP99oKuPt4UUllM_l1lelW52A.roa (raw, json) Hash identifier: RrcBUHHEML/UXQGRk5UVGgjJCqEUHLl08wqnhf/+Ti0= Subject key identifier: D6:30:0F:F7:DA:0A:B8:FB:78:51:49:65:33:F9:75:95:E9:56:E7:60 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB7C19BC99CEC461C1978279BB626C Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1jAP99oKuPt4UUllM_l1lelW52A.roa Signing time: Fri 02 Jan 2026 08:20:46 +0000 ROA not before: Fri 02 Jan 2026 08:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209554 IP address blocks: 151.240.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:7c:19:bc:99:ce:c4:61:c1:97:82:79:bb:62:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6300ff7da0ab8fb7851496533f97595e956e760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:03:81:af:e0:fd:02:ac:d8:34:17:12:f8:9e: 3f:d0:5a:8c:ac:88:d3:8d:a5:dd:9c:3b:6b:e8:ee: 39:f2:4d:a2:fd:b9:ec:20:d5:db:24:cf:cf:a3:3d: f1:d3:49:30:68:77:2a:f2:62:c3:05:fe:aa:9b:2b: da:85:b3:d3:c1:9a:9b:a6:b8:0a:c1:f4:42:e1:c3: dd:f5:ed:2b:5d:c6:89:f5:e9:c0:59:46:ad:17:3b: 8c:8d:6b:4f:c9:80:51:6f:03:e5:0a:b6:f9:4e:49: 0c:de:b0:ae:a9:24:13:cf:a8:08:4b:5f:3a:0b:5c: b6:e9:f5:3f:ef:85:97:f1:42:ca:1b:cf:20:7a:8f: 59:8c:0b:7b:b1:50:0f:57:a1:e6:83:43:f9:9a:21: d2:6a:99:81:93:a6:20:c6:cf:47:72:1f:60:f5:82: 16:4c:37:da:c7:12:0e:33:61:eb:68:64:e3:7e:2f: 9f:de:9b:57:ae:64:d2:15:20:e5:1b:c9:bb:15:98: 98:92:80:80:e4:5e:0d:47:f0:19:38:49:52:12:fe: 6d:0e:08:06:3e:d4:00:38:a6:8e:37:66:83:a4:e1: cd:52:62:6d:8c:f1:9b:4c:a0:6a:9d:34:56:7a:e7: 35:aa:70:9a:a7:d8:bd:87:f2:20:7a:38:25:05:97: 88:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:30:0F:F7:DA:0A:B8:FB:78:51:49:65:33:F9:75:95:E9:56:E7:60 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1jAP99oKuPt4UUllM_l1lelW52A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.12.0/23 Signature Algorithm: sha256WithRSAEncryption 57:7b:4f:e4:72:b8:52:ca:7d:da:69:35:f7:ff:ef:40:2c:81: 40:51:c5:9e:a3:16:d1:8a:9a:d5:f2:5b:11:f5:e5:89:aa:3f: fd:5d:b0:de:e4:a4:3a:cc:ee:eb:65:bd:4f:15:f8:e4:05:f3: 1a:0b:f0:ff:01:dc:57:2e:cf:81:c6:23:b8:ed:5e:ad:2f:97: 35:29:3e:f9:d9:64:9e:65:25:29:76:9e:5f:31:78:21:9d:0b: 2f:37:21:d8:21:51:04:34:bf:58:3a:5b:b6:81:e5:c9:ee:f0: 87:80:3b:57:08:44:35:71:a9:84:7f:81:20:63:d2:fa:8c:6e: ee:40:78:3b:f1:46:50:8d:8e:e2:66:47:1b:12:50:f8:7b:a2: 5e:2f:b0:49:04:55:8f:5f:01:a9:be:a8:e3:5b:67:f6:ea:b7: 7c:13:fd:22:b3:33:6e:84:5d:e0:72:32:fb:d9:b6:ea:7e:5a: 01:82:60:81:ee:4d:9c:0e:6b:fb:e1:ee:c7:e6:f6:d5:35:f6: 89:a7:7c:33:8d:5c:17:4d:90:64:4e:f1:7e:f5:4c:55:70:1f: 45:bf:04:d0:1a:06:18:7e:8e:33:a2:e1:04:07:26:fc:ac:a1: 2d:25:e8:09:10:93:9c:6e:a4:54:b3:ce:9b:ef:a1:e8:ad:bf: c9:9d:1a:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y3wZvJnOxGHBl4J5u2JsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjMwMGZmN2RhMGFiOGZiNzg1MTQ5NjUzM2Y5NzU5NWU5NTZlNzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAOBr+D9AqzYNBcS+J4/0FqMrIjT jaXdnDtr6O458k2i/bnsINXbJM/Poz3x00kwaHcq8mLDBf6qmyvahbPTwZqbprgK wfRC4cPd9e0rXcaJ9enAWUatFzuMjWtPyYBRbwPlCrb5TkkM3rCuqSQTz6gIS186 C1y26fU/74WX8ULKG88geo9ZjAt7sVAPV6Hmg0P5miHSapmBk6Ygxs9Hch9g9YIW TDfaxxIOM2HraGTjfi+f3ptXrmTSFSDlG8m7FZiYkoCA5F4NR/AZOElSEv5tDggG PtQAOKaON2aDpOHNUmJtjPGbTKBqnTRWeuc1qnCap9i9h/IgejglBZeIrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNYwD/faCrj7eFFJZTP5dZXpVudgMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvMWpBUDk5b0t1UHQ0VVVsbE1fbDFsZWxXNTJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl/AMMA0G CSqGSIb3DQEBCwUAA4IBAQBXe0/kcrhSyn3aaTX3/+9ALIFAUcWeoxbRiprV8lsR 9eWJqj/9XbDe5KQ6zO7rZb1PFfjkBfMaC/D/AdxXLs+BxiO47V6tL5c1KT752WSe ZSUpdp5fMXghnQsvNyHYIVEENL9YOlu2geXJ7vCHgDtXCEQ1camEf4EgY9L6jG7u QHg78UZQjY7iZkcbElD4e6JeL7BJBFWPXwGpvqjjW2f26rd8E/0iszNuhF3gcjL7 2bbqfloBgmCB7k2cDmv74e7H5vbVNfaJp3wzjVwXTZBkTvF+9UxVcB9FvwTQGgYY fo4zouEEByb8rKEtJegJEJOcbqRUs86b76Horb/JnRol -----END CERTIFICATE-----Generated at Sun Jan 18 06:28:51 2026 by rpki-client