This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3_LxQP2g2pZg9W1iv6jiooi-ipg.roa File: 3_LxQP2g2pZg9W1iv6jiooi-ipg.roa (raw, json) Hash identifier: zXvg2/NsBsLTRmp5tF2XUBWEn9J/bcmn93W6hkO8KtA= Subject key identifier: DF:F2:F1:40:FD:A0:DA:96:60:F5:6D:62:BF:A8:E2:A2:88:BE:8A:98 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCBA929115EF33C965B388B77CC0DB1 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3_LxQP2g2pZg9W1iv6jiooi-ipg.roa Signing time: Fri 02 Jan 2026 08:20:57 +0000 ROA not before: Fri 02 Jan 2026 08:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 393406 IP address blocks: 151.241.19.0/24 maxlen: 24 151.241.110.0/24 maxlen: 24 151.241.231.0/24 maxlen: 24 151.245.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:a9:29:11:5e:f3:3c:96:5b:38:8b:77:cc:0d:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dff2f140fda0da9660f56d62bfa8e2a288be8a98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:83:86:dc:72:88:62:b4:1e:97:3a:f7:d8:0b: 2c:4f:dc:ac:0a:af:bb:96:c4:14:f6:90:0c:04:62: cf:9c:5e:a8:17:d9:c9:d3:52:5e:b8:66:99:a7:85: 1c:0f:0c:e3:3a:d8:40:2b:7b:6d:02:ed:73:a5:ff: ab:85:1a:dc:7b:53:b0:d0:88:e9:c6:b8:d8:5e:3a: 32:09:c7:01:6f:fd:70:84:66:34:3c:0c:6c:6d:eb: a5:e5:89:de:44:7f:91:8c:65:32:75:36:da:aa:35: a4:64:08:da:7d:db:5a:c7:41:56:8f:1c:11:a4:71: fd:2f:15:aa:2d:a6:f4:cf:ad:b4:a1:b6:f4:ea:4c: 97:33:94:65:d2:bd:b0:f7:fb:f2:f6:f0:63:85:3d: 55:7e:3b:fb:27:4c:81:36:e3:e3:3a:21:05:d5:30: a4:12:ce:fb:6d:2f:25:66:ea:f3:5c:00:3b:8b:65: eb:78:e6:5d:8b:db:17:59:34:ef:cf:16:a1:84:28: 49:ff:e0:a4:2d:f9:b1:01:ae:2e:46:68:51:90:c4: d9:ea:8e:44:c9:f4:c6:52:6a:c0:dc:81:25:0c:19: ac:45:ec:bb:29:3a:12:40:88:b4:f2:40:c8:b2:23: bd:54:7b:9a:ac:a7:a2:d9:1f:16:ad:94:19:2e:b8: 32:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F2:F1:40:FD:A0:DA:96:60:F5:6D:62:BF:A8:E2:A2:88:BE:8A:98 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3_LxQP2g2pZg9W1iv6jiooi-ipg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.19.0/24 151.241.110.0/24 151.241.231.0/24 151.245.198.0/24 Signature Algorithm: sha256WithRSAEncryption 12:23:92:5f:81:87:c1:35:18:a5:a5:24:86:1e:ca:89:a0:d1: 44:25:6b:2f:d3:e2:e9:8d:ef:66:ed:9a:a1:ee:e1:76:82:e6: f3:9e:eb:df:fb:5e:a9:48:8a:65:ae:83:c8:cc:c7:54:04:5c: 04:eb:b6:fb:1d:6b:fe:47:87:ca:8d:7a:57:6f:a3:ff:5b:ab: be:c5:2c:af:16:97:b1:86:ba:b1:1a:21:7e:b5:38:7c:22:95: 1f:77:1e:30:94:a0:82:b2:a5:6c:a8:1b:bc:d6:fe:d9:a9:cb: fe:00:2a:a7:10:57:ee:51:95:d6:87:ef:76:db:ab:bf:0c:6b: 8c:a9:33:44:86:1a:94:e0:be:d6:23:e7:94:08:76:11:36:04: 3d:36:0c:78:a9:c5:1b:d9:cb:52:0e:e4:7f:bc:e3:e3:25:ed: 80:d4:3e:ae:31:d5:b7:35:9f:5f:91:f2:30:4c:bb:82:30:46: 54:ff:72:bd:97:b0:c6:a8:7a:a7:00:f3:93:f1:72:1f:3e:85: 62:6b:91:12:d1:79:f7:7d:e8:9f:85:45:00:be:e4:c5:72:f5: bc:97:6b:6c:3e:51:05:8d:25:a3:36:f0:97:ca:e4:70:36:a3: a2:43:2d:1d:02:2e:0e:50:c6:0b:ac:d6:7c:c9:73:68:b2:bd: 1a:0c:59:b4 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9y6kpEV7zPJZbOIt3zA2xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmYyZjE0MGZkYTBkYTk2NjBmNTZkNjJiZmE4ZTJhMjg4YmU4YTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYOG3HKIYrQelzr32AssT9ysCq+7 lsQU9pAMBGLPnF6oF9nJ01JeuGaZp4UcDwzjOthAK3ttAu1zpf+rhRrce1Ow0Ijp xrjYXjoyCccBb/1whGY0PAxsbeul5YneRH+RjGUydTbaqjWkZAjafdtax0FWjxwR pHH9LxWqLab0z620obb06kyXM5Rl0r2w9/vy9vBjhT1Vfjv7J0yBNuPjOiEF1TCk Es77bS8lZurzXAA7i2XreOZdi9sXWTTvzxahhChJ/+CkLfmxAa4uRmhRkMTZ6o5E yfTGUmrA3IElDBmsRey7KToSQIi08kDIsiO9VHuarKei2R8WrZQZLrgybwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFN/y8UD9oNqWYPVtYr+o4qKIvoqYMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvM19MeFFQMmcycFpnOVcxaXY2amlvb2ktaXBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/ETAwQA l/FuAwQAl/HnAwQAl/XGMA0GCSqGSIb3DQEBCwUAA4IBAQASI5JfgYfBNRilpSSG HsqJoNFEJWsv0+Lpje9m7Zqh7uF2gubznuvf+16pSIplroPIzMdUBFwE67b7HWv+ R4fKjXpXb6P/W6u+xSyvFpexhrqxGiF+tTh8IpUfdx4wlKCCsqVsqBu81v7Zqcv+ ACqnEFfuUZXWh+9226u/DGuMqTNEhhqU4L7WI+eUCHYRNgQ9Ngx4qcUb2ctSDuR/ vOPjJe2A1D6uMdW3NZ9fkfIwTLuCMEZU/3K9l7DGqHqnAPOT8XIfPoVia5ES0Xn3 feifhUUAvuTFcvW8l2tsPlEFjSWjNvCXyuRwNqOiQy0dAi4OUMYLrNZ8yXNosr0a DFm0 -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:32 2026 by rpki-client