This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/45i-zrIpRFOFMWrAOYZ5fU9RD40.roa File: 45i-zrIpRFOFMWrAOYZ5fU9RD40.roa (raw, json) Hash identifier: rzQn9m0iCNE3xEebnte9SZF0cHoUcciH3kY3pO7xmA0= Subject key identifier: E3:98:BE:CE:B2:29:44:53:85:31:6A:C0:39:86:79:7D:4F:51:0F:8D Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB4E471C79AF719CAA9ED794726169 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/45i-zrIpRFOFMWrAOYZ5fU9RD40.roa Signing time: Fri 02 Jan 2026 08:20:34 +0000 ROA not before: Fri 02 Jan 2026 08:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137235 IP address blocks: 151.243.15.0/24 maxlen: 24 151.243.255.0/24 maxlen: 24 151.244.243.0/24 maxlen: 24 151.244.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:4e:47:1c:79:af:71:9c:aa:9e:d7:94:72:61:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e398beceb229445385316ac03986797d4f510f8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9f:84:4a:af:9a:b6:99:85:e9:3c:6e:1d:09: 0c:de:17:86:ec:2f:cd:f3:d3:8d:32:08:2c:ee:90: 81:31:71:31:b7:64:98:c3:3b:bf:d4:cd:c7:87:16: 8a:81:22:72:49:2e:ba:7e:f5:eb:2b:df:50:03:fc: e4:3d:cc:89:f9:68:f9:21:80:fa:bc:c0:a9:ad:54: a8:49:0e:90:ac:18:d1:a8:94:b0:3f:c9:70:d5:b5: 02:f9:72:91:94:d6:fc:17:12:a9:b4:c6:15:b1:c9: 51:d8:3f:8d:89:e0:f2:1d:3f:94:76:58:6a:20:1b: a7:0b:60:07:4c:ca:2b:b2:47:5a:e4:9a:08:f6:f0: 9b:26:09:2b:29:86:7e:54:21:96:6a:58:4e:83:e0: 4b:b1:e9:b6:25:e4:e5:e8:1f:8c:0f:2c:88:1d:d3: 65:c9:4a:07:5b:7c:7e:99:b7:25:42:fe:dd:d5:c7: 1c:d5:ce:8a:57:d4:23:f5:50:c9:d0:0e:e8:b5:f5: 3b:8a:e5:f9:bc:ba:50:52:fc:5f:15:6b:71:63:cf: d7:97:cb:e9:86:46:91:da:93:71:18:0d:0a:23:55: bc:19:c2:42:e6:0b:32:96:6c:9a:47:7d:5b:f1:e8: be:83:82:9a:fa:ba:15:69:5f:ef:56:73:00:b6:6b: 86:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:98:BE:CE:B2:29:44:53:85:31:6A:C0:39:86:79:7D:4F:51:0F:8D X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/45i-zrIpRFOFMWrAOYZ5fU9RD40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.15.0/24 151.243.255.0/24 151.244.243.0/24 151.244.247.0/24 Signature Algorithm: sha256WithRSAEncryption 63:fc:52:d2:27:64:b5:6d:b6:d7:b8:a2:f9:94:6d:21:56:0c: 5a:e3:11:80:3e:70:ed:40:23:70:8a:e6:54:cb:e9:03:3e:3c: bc:db:0f:6c:fa:d4:69:31:e4:fd:02:9b:c4:e9:b9:84:47:de: 65:22:55:4a:b2:b1:76:54:dd:85:9c:3e:62:8c:91:7c:7e:b4: 69:c5:6f:0a:68:f6:20:d5:5f:14:38:89:46:53:0b:9f:c6:2d: 03:1c:90:10:e4:81:cd:e2:13:d7:dc:d1:bb:63:65:c9:bd:fb: 4b:07:46:2c:1f:64:3f:26:d6:bf:db:64:7e:ac:b1:90:a5:09: 4e:3d:01:ec:f8:91:e6:29:5b:b2:62:7e:02:e2:af:85:5c:52: e2:1c:13:0b:8c:96:89:1e:20:b6:08:0d:02:8a:d7:99:55:40: d8:d8:df:39:64:b4:43:a5:9b:20:9f:62:02:80:6c:23:25:ad: dd:b6:c2:86:60:1d:1e:f3:56:fe:95:45:9c:ac:76:85:70:c7: d1:18:4c:1e:85:84:50:7d:8c:54:50:5f:67:71:24:38:67:75: 3d:08:f9:eb:02:a6:8f:46:03:7c:53:b0:c7:5e:4e:ac:ac:c7: 0f:70:43:21:19:7d:b6:29:e3:d0:6f:8a:98:5a:7b:f2:fc:e8: 36:f6:f7:f6 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9y05HHHmvcZyqnteUcmFpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzk4YmVjZWIyMjk0NDUzODUzMTZhYzAzOTg2Nzk3ZDRmNTEwZjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ+ESq+atpmF6TxuHQkM3heG7C/N 89ONMggs7pCBMXExt2SYwzu/1M3HhxaKgSJySS66fvXrK99QA/zkPcyJ+Wj5IYD6 vMCprVSoSQ6QrBjRqJSwP8lw1bUC+XKRlNb8FxKptMYVsclR2D+NieDyHT+Udlhq IBunC2AHTMorskda5JoI9vCbJgkrKYZ+VCGWalhOg+BLsem2JeTl6B+MDyyIHdNl yUoHW3x+mbclQv7d1ccc1c6KV9Qj9VDJ0A7otfU7iuX5vLpQUvxfFWtxY8/Xl8vp hkaR2pNxGA0KI1W8GcJC5gsylmyaR31b8ei+g4Ka+roVaV/vVnMAtmuG+wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOOYvs6yKURThTFqwDmGeX1PUQ+NMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvNDVpLXpySXBSRk9GTVdyQU9ZWjVmVTlSRDQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/MPAwQA l/P/AwQAl/TzAwQAl/T3MA0GCSqGSIb3DQEBCwUAA4IBAQBj/FLSJ2S1bbbXuKL5 lG0hVgxa4xGAPnDtQCNwiuZUy+kDPjy82w9s+tRpMeT9ApvE6bmER95lIlVKsrF2 VN2FnD5ijJF8frRpxW8KaPYg1V8UOIlGUwufxi0DHJAQ5IHN4hPX3NG7Y2XJvftL B0YsH2Q/Jta/22R+rLGQpQlOPQHs+JHmKVuyYn4C4q+FXFLiHBMLjJaJHiC2CA0C iteZVUDY2N85ZLRDpZsgn2ICgGwjJa3dtsKGYB0e81b+lUWcrHaFcMfRGEwehYRQ fYxUUF9ncSQ4Z3U9CPnrAqaPRgN8U7DHXk6srMcPcEMhGX22KePQb4qYWnvy/Og2 9vf2 -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:11 2026 by rpki-client