This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3YfOSnejghpGWh2Z9NOUoIqEPtk.roa File: 3YfOSnejghpGWh2Z9NOUoIqEPtk.roa (raw, json) Hash identifier: gLm+XxQNhqhYnOsr8sZxl6kEaAMtCbQB68qbpjORnss= Subject key identifier: DD:87:CE:4A:77:A3:82:1A:46:5A:1D:99:F4:D3:94:A0:8A:84:3E:D9 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BC0F7727AA9CF900F2EC3DD2B73F62641 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3YfOSnejghpGWh2Z9NOUoIqEPtk.roa Signing time: Thu 15 Jan 2026 09:23:20 +0000 ROA not before: Thu 15 Jan 2026 09:23:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63199 IP address blocks: 151.240.31.0/24 maxlen: 24 151.240.226.0/24 maxlen: 24 151.241.136.0/24 maxlen: 24 151.247.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c0:f7:72:7a:a9:cf:90:0f:2e:c3:dd:2b:73:f6:26:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 15 09:23:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dd87ce4a77a3821a465a1d99f4d394a08a843ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:36:f1:8d:3c:e1:9f:0f:b3:b7:65:51:e7:51: 7b:91:0e:08:fd:6d:67:23:ff:97:dd:34:0a:78:c7: 2a:23:28:99:72:ac:60:d7:38:99:89:f5:4a:dc:10: 4b:40:6c:b8:55:94:aa:3b:67:c4:bd:d7:f2:40:14: f7:94:a2:37:b8:b6:b8:bf:65:08:66:cb:28:db:2f: 68:2d:e0:9e:fd:ac:2b:1d:cb:da:54:68:9b:1b:69: 8f:30:c2:01:61:20:7d:5b:80:fe:9c:95:bb:f0:10: 04:50:52:a6:83:a6:e6:7a:54:bb:cb:6f:35:13:8a: 37:4f:09:22:86:25:13:60:75:05:ef:ed:01:72:f3: 3d:42:a4:40:97:12:9b:de:b4:eb:ab:5f:83:ba:ca: 6e:9b:12:8f:18:b8:21:fa:36:d4:a2:47:bb:07:8b: 2d:de:e8:e8:84:13:5f:69:a4:e4:67:f3:81:c4:5d: 6b:f9:62:85:e4:16:57:ab:e8:82:5c:ef:3c:f0:85: ae:f3:20:2d:7f:72:d0:e2:b2:ce:77:11:59:b4:56: e9:f8:db:4a:2c:2d:0f:12:d3:4b:f3:c1:39:72:b9: 50:fa:d8:a9:bb:fc:0c:85:31:4b:44:c4:5d:ba:a7: 13:84:02:af:87:f0:4a:de:7e:f6:ea:81:39:f4:62: a1:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:87:CE:4A:77:A3:82:1A:46:5A:1D:99:F4:D3:94:A0:8A:84:3E:D9 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3YfOSnejghpGWh2Z9NOUoIqEPtk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.31.0/24 151.240.226.0/24 151.241.136.0/24 151.247.139.0/24 Signature Algorithm: sha256WithRSAEncryption 69:7c:9c:fc:c3:80:4e:8c:fb:30:11:3c:c6:99:5f:45:43:af: f6:af:9d:05:c8:26:9d:3a:54:22:31:ba:40:02:6c:bb:a1:75: 2a:f9:a0:2b:e5:95:7d:26:f8:7a:a1:25:c2:06:3b:1e:39:fd: 44:12:6f:f9:9a:6d:a6:31:4c:cf:4a:73:1a:af:10:bb:a5:45: 06:6d:3f:b9:be:17:d5:c7:d9:8c:a9:f6:cc:1e:4d:3e:32:87: e4:50:16:4c:91:a4:c6:e7:35:3a:58:b3:58:65:05:70:83:a4: 4c:d5:ac:48:c6:1f:9b:7e:28:86:81:1b:cc:e7:85:7e:7c:a8: 0e:26:00:e6:6f:17:a6:40:f1:d5:4f:d9:31:4f:35:8b:0c:f7: e5:9a:a7:75:8c:b7:91:03:03:c1:ff:e4:1b:6f:1b:a0:f0:0a: f3:53:1b:57:6d:e9:ad:42:ee:b1:cf:cd:50:fe:5a:af:ba:2c: f2:b7:79:fc:f5:f9:90:30:92:07:5b:76:5c:63:69:d8:15:0c: 75:a4:21:9a:f9:10:2a:8f:5d:52:46:b2:1d:cf:55:ff:2e:39: 1a:58:78:a9:77:40:cb:df:bc:91:81:24:db:d0:f5:6e:0a:61: aa:98:0f:ba:14:88:10:f9:f4:71:88:55:4a:e3:50:4b:47:2a: c9:f9:4c:75 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZvA93J6qc+QDy7D3Stz9iZBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTE1MDkyMzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDg3Y2U0YTc3YTM4MjFhNDY1YTFkOTlmNGQzOTRhMDhhODQzZWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDbxjTzhnw+zt2VR51F7kQ4I/W1n I/+X3TQKeMcqIyiZcqxg1ziZifVK3BBLQGy4VZSqO2fEvdfyQBT3lKI3uLa4v2UI Zsso2y9oLeCe/awrHcvaVGibG2mPMMIBYSB9W4D+nJW78BAEUFKmg6bmelS7y281 E4o3TwkihiUTYHUF7+0BcvM9QqRAlxKb3rTrq1+DuspumxKPGLgh+jbUoke7B4st 3ujohBNfaaTkZ/OBxF1r+WKF5BZXq+iCXO888IWu8yAtf3LQ4rLOdxFZtFbp+NtK LC0PEtNL88E5crlQ+tipu/wMhTFLRMRduqcThAKvh/BK3n726oE59GKhvQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFN2Hzkp3o4IaRlodmfTTlKCKhD7ZMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvM1lmT1NuZWpnaHBHV2gyWjlOT1VvSXFFUHRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/AfAwQA l/DiAwQAl/GIAwQAl/eLMA0GCSqGSIb3DQEBCwUAA4IBAQBpfJz8w4BOjPswETzG mV9FQ6/2r50FyCadOlQiMbpAAmy7oXUq+aAr5ZV9Jvh6oSXCBjseOf1EEm/5mm2m MUzPSnMarxC7pUUGbT+5vhfVx9mMqfbMHk0+MofkUBZMkaTG5zU6WLNYZQVwg6RM 1axIxh+bfiiGgRvM54V+fKgOJgDmbxemQPHVT9kxTzWLDPflmqd1jLeRAwPB/+Qb bxug8ArzUxtXbemtQu6xz81Q/lqvuizyt3n89fmQMJIHW3ZcY2nYFQx1pCGa+RAq j11SRrIdz1X/LjkaWHipd0DL37yRgSTb0PVuCmGqmA+6FIgQ+fRxiFVK41BLRyrJ +Ux1 -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:19 2026 by rpki-client