This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5AERly2WA_zgj1pvVq9U_XoS8Kk.roa File: 5AERly2WA_zgj1pvVq9U_XoS8Kk.roa (raw, json) Hash identifier: 8OkCthbu6kXvGerouHRzWxxRvPb9AWrkMGbVmyDaSGs= Subject key identifier: E4:01:11:97:2D:96:03:FC:E0:8F:5A:6F:56:AF:54:FD:7A:12:F0:A9 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB0D576EA44DA849FDF158ACB86A0D Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5AERly2WA_zgj1pvVq9U_XoS8Kk.roa Signing time: Fri 02 Jan 2026 08:20:17 +0000 ROA not before: Fri 02 Jan 2026 08:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9294 IP address blocks: 151.243.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:0d:57:6e:a4:4d:a8:49:fd:f1:58:ac:b8:6a:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e40111972d9603fce08f5a6f56af54fd7a12f0a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:24:70:43:0d:65:e4:a4:8c:e7:3c:41:7a:b0: c1:fe:fb:69:aa:18:8b:0b:5d:34:b7:0f:22:35:d5: 50:99:df:44:3c:b7:ea:60:8a:19:d2:7d:88:8e:69: 09:e2:ee:d5:a9:3a:db:aa:13:21:1a:c0:fc:b5:98: 76:a9:a7:42:9e:fe:50:5f:e1:23:b3:a6:d2:88:b3: cc:d2:01:29:ba:34:ad:30:54:c6:9e:62:d0:a8:c4: d1:38:e9:68:bf:35:70:20:13:dc:7d:1b:30:50:a1: 01:5a:69:8c:37:9e:4e:4b:79:b7:56:7c:f9:65:6d: 15:89:77:2a:5f:29:89:e5:b9:96:de:0b:c9:e6:61: 7e:67:d1:3a:59:ab:84:04:11:72:5c:7d:c4:02:ab: 58:a7:30:2c:87:3b:69:8c:a9:a8:f4:25:cc:0b:89: 91:7d:a4:43:c1:94:05:f2:18:03:47:37:91:16:84: 56:a9:7f:d6:fa:a7:a8:a5:2a:af:e8:b9:aa:a1:b7: f2:46:ae:7f:5b:7f:2e:1e:b8:c7:1c:98:c0:91:03: a6:d7:4d:d8:37:48:ec:1e:68:1d:01:55:be:ac:69: 1a:2c:60:65:4c:c3:be:61:a0:30:1e:2d:fb:1e:df: 50:dd:97:9a:a4:95:27:b2:ab:ad:65:18:bc:17:3a: 31:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:01:11:97:2D:96:03:FC:E0:8F:5A:6F:56:AF:54:FD:7A:12:F0:A9 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5AERly2WA_zgj1pvVq9U_XoS8Kk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.234.0/24 Signature Algorithm: sha256WithRSAEncryption 17:01:7d:5d:47:ad:c8:da:30:2d:46:62:1c:45:f6:8a:17:6c: 5f:7a:e8:27:94:8a:eb:fe:70:30:2d:3d:ca:99:d6:55:d4:a2: a0:41:d9:c5:e4:5a:b1:14:a5:3f:df:b3:5d:bc:bc:63:8f:0e: c2:f2:d7:29:18:78:af:c1:c3:f9:9b:2a:c8:2d:54:3a:a1:dd: 91:b4:d3:a5:b0:1e:9e:90:ec:ab:5c:bd:45:0c:8f:c4:af:44: d4:c5:f3:3b:76:f5:66:c6:d7:43:9c:00:a1:35:03:e3:65:cc: a2:f7:f7:b3:e1:5f:8e:ba:da:dd:cf:3d:ed:a8:96:44:e7:fe: 76:98:8c:ba:02:fd:5b:2c:f7:99:30:65:30:34:6e:3b:24:99: 36:0f:17:e3:cc:52:2e:2f:32:0c:3b:dc:15:ac:f3:8b:32:fd: 6d:e8:64:be:1b:3c:3a:0c:ce:69:07:30:9d:cc:03:2e:89:10: dc:c9:06:53:c4:4f:5c:c2:37:b1:55:ec:ec:32:6e:0a:ca:67: 81:3e:dc:bf:f8:d7:1d:d1:3b:43:a8:64:c2:08:e3:7d:c5:67: 6b:03:42:b2:19:e4:bb:55:a0:95:d3:69:cd:e3:04:14:b7:8c: e5:a0:38:5b:fc:da:c6:16:9e:8b:6c:23:0b:e1:50:2a:06:98: 19:af:3f:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yw1XbqRNqEn98VisuGoNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDAxMTE5NzJkOTYwM2ZjZTA4ZjVhNmY1NmFmNTRmZDdhMTJmMGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSRwQw1l5KSM5zxBerDB/vtpqhiL C100tw8iNdVQmd9EPLfqYIoZ0n2IjmkJ4u7VqTrbqhMhGsD8tZh2qadCnv5QX+Ej s6bSiLPM0gEpujStMFTGnmLQqMTROOlovzVwIBPcfRswUKEBWmmMN55OS3m3Vnz5 ZW0ViXcqXymJ5bmW3gvJ5mF+Z9E6WauEBBFyXH3EAqtYpzAshztpjKmo9CXMC4mR faRDwZQF8hgDRzeRFoRWqX/W+qeopSqv6LmqobfyRq5/W38uHrjHHJjAkQOm103Y N0jsHmgdAVW+rGkaLGBlTMO+YaAwHi37Ht9Q3ZeapJUnsqutZRi8FzoxAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOQBEZctlgP84I9ab1avVP16EvCpMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvNUFFUmx5MldBX3pnajFwdlZxOVVfWG9TOEtrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/PqMA0G CSqGSIb3DQEBCwUAA4IBAQAXAX1dR63I2jAtRmIcRfaKF2xfeugnlIrr/nAwLT3K mdZV1KKgQdnF5FqxFKU/37NdvLxjjw7C8tcpGHivwcP5myrILVQ6od2RtNOlsB6e kOyrXL1FDI/Er0TUxfM7dvVmxtdDnAChNQPjZcyi9/ez4V+Outrdzz3tqJZE5/52 mIy6Av1bLPeZMGUwNG47JJk2DxfjzFIuLzIMO9wVrPOLMv1t6GS+Gzw6DM5pBzCd zAMuiRDcyQZTxE9cwjexVezsMm4KymeBPty/+Ncd0TtDqGTCCON9xWdrA0KyGeS7 VaCV02nN4wQUt4zloDhb/NrGFp6LbCML4VAqBpgZrz9v -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:40 2026 by rpki-client