This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4qrSi9gpFAlnoH8a023OD6d1U10.roa File: 4qrSi9gpFAlnoH8a023OD6d1U10.roa (raw, json) Hash identifier: 6vReGDourjg9xGpZbGBx6YIF07BmBzRDmnGqV/4Zitw= Subject key identifier: E2:AA:D2:8B:D8:29:14:09:67:A0:7F:1A:D3:6D:CE:0F:A7:75:53:5D Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB9E6ACE0B9106EA7127A816D0984F Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4qrSi9gpFAlnoH8a023OD6d1U10.roa Signing time: Fri 02 Jan 2026 08:20:54 +0000 ROA not before: Fri 02 Jan 2026 08:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215528 IP address blocks: 151.240.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:9e:6a:ce:0b:91:06:ea:71:27:a8:16:d0:98:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2aad28bd829140967a07f1ad36dce0fa775535d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:34:e9:ef:e9:68:28:f7:65:29:fe:84:cd:4b: f2:f9:60:e8:db:19:f7:a5:44:fb:e9:4d:a8:fe:f8: 9e:db:a2:81:67:68:10:68:ff:7f:4d:f6:4c:dd:05: 44:0b:31:73:4f:9b:03:f4:c1:76:bc:1c:ac:36:6f: c5:92:67:bf:4e:1c:7b:af:ad:71:19:c8:ee:a2:99: 4b:c6:17:7c:b7:37:5d:86:2f:4b:bc:9d:90:15:d7: de:d8:de:f9:fa:ec:a3:08:fb:f8:5b:1b:fd:18:b3: df:50:6f:aa:b3:ea:bf:9a:61:7e:95:03:fa:a5:bc: 5a:65:d8:d3:b4:22:c2:10:24:8c:54:a2:27:6f:0c: 46:bf:13:63:c6:83:df:38:8b:d0:3a:5b:b9:18:c4: 5a:cd:aa:3d:ca:02:82:34:c1:62:43:01:91:6a:9c: b6:97:bb:9d:0a:fe:04:4c:69:99:ea:d5:96:83:11: 73:7a:9e:74:6a:e3:6b:9a:62:28:f8:38:a7:dc:3a: b0:1c:b1:f9:2a:00:39:7f:d9:09:23:f1:b2:30:5b: 93:ae:78:82:3f:de:45:16:d7:37:73:8e:0c:f2:f3: 22:5f:68:6c:bb:4c:e4:8c:f3:4e:b1:0e:35:8b:98: b2:5c:b7:7a:6b:24:92:4c:18:61:72:7f:7e:cf:26: b5:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:AA:D2:8B:D8:29:14:09:67:A0:7F:1A:D3:6D:CE:0F:A7:75:53:5D X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4qrSi9gpFAlnoH8a023OD6d1U10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.99.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:87:ec:c8:d2:a4:87:1c:f5:d9:80:74:7b:51:73:12:92:da: bf:65:23:e2:a4:1d:9e:bd:47:c8:13:7f:70:5e:59:a1:a2:61: 90:61:01:7b:35:f8:f4:ca:66:c4:ee:b5:7b:a1:e9:6c:69:37: 2b:60:55:58:70:f0:d2:0a:dd:96:7f:30:ee:96:24:1f:d5:34: e3:f3:86:22:52:65:c2:39:bf:89:7e:45:fe:44:3d:83:50:23: 1c:53:78:f6:7f:75:35:81:21:a3:27:78:4a:8f:30:20:f0:29: 24:b4:5e:32:c3:6e:d9:d7:8c:44:e5:da:eb:29:b7:12:14:32: dc:0a:69:d5:e6:0a:6f:e5:c3:d8:20:55:c5:b3:f5:fa:dd:0d: 43:d7:39:c7:62:a2:9b:67:90:3e:65:19:1b:46:14:36:c7:f4: 8d:cc:80:2d:ea:62:30:c7:f0:f3:21:1a:33:4a:08:e1:52:7f: ea:e3:ee:35:ea:fe:6d:47:cc:b0:43:cb:b6:fc:5a:64:e4:d6: 0d:6b:1c:2b:c0:dd:ea:e3:4e:19:8d:3d:1b:64:69:92:fb:33: f2:26:9e:fa:c6:f4:84:9d:66:80:2f:e5:b8:74:1d:34:37:de: 62:e8:40:4d:55:5e:50:60:ef:ce:3c:93:81:3b:14:16:1a:c3: 56:86:df:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y55qzguRBupxJ6gW0JhPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmFhZDI4YmQ4MjkxNDA5NjdhMDdmMWFkMzZkY2UwZmE3NzU1MzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTTp7+loKPdlKf6EzUvy+WDo2xn3 pUT76U2o/vie26KBZ2gQaP9/TfZM3QVECzFzT5sD9MF2vBysNm/Fkme/Thx7r61x GcjuoplLxhd8tzddhi9LvJ2QFdfe2N75+uyjCPv4Wxv9GLPfUG+qs+q/mmF+lQP6 pbxaZdjTtCLCECSMVKInbwxGvxNjxoPfOIvQOlu5GMRazao9ygKCNMFiQwGRapy2 l7udCv4ETGmZ6tWWgxFzep50auNrmmIo+Din3DqwHLH5KgA5f9kJI/GyMFuTrniC P95FFtc3c44M8vMiX2hsu0zkjPNOsQ41i5iyXLd6aySSTBhhcn9+zya1yQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOKq0ovYKRQJZ6B/GtNtzg+ndVNdMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvNHFyU2k5Z3BGQWxub0g4YTAyM09ENmQxVTEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/BjMA0G CSqGSIb3DQEBCwUAA4IBAQBNh+zI0qSHHPXZgHR7UXMSktq/ZSPipB2evUfIE39w XlmhomGQYQF7Nfj0ymbE7rV7oelsaTcrYFVYcPDSCt2WfzDuliQf1TTj84YiUmXC Ob+JfkX+RD2DUCMcU3j2f3U1gSGjJ3hKjzAg8CkktF4yw27Z14xE5drrKbcSFDLc CmnV5gpv5cPYIFXFs/X63Q1D1znHYqKbZ5A+ZRkbRhQ2x/SNzIAt6mIwx/DzIRoz SgjhUn/q4+416v5tR8ywQ8u2/Fpk5NYNaxwrwN3q404ZjT0bZGmS+zPyJp76xvSE nWaAL+W4dB00N95i6EBNVV5QYO/OPJOBOxQWGsNWht9j -----END CERTIFICATE-----Generated at Sun Jan 18 06:28:53 2026 by rpki-client