This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5Ft5kbN3xj7nZdyxyEp7Thexqws.roa File: 5Ft5kbN3xj7nZdyxyEp7Thexqws.roa (raw, json) Hash identifier: 4l5iZ88TDWbB9xBu89GYIBcZ7PUpMqO9dTnKsRyOpgw= Subject key identifier: E4:5B:79:91:B3:77:C6:3E:E7:65:DC:B1:C8:4A:7B:4E:17:B1:AB:0B Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB7FF646F33E81A63409BD564BB617 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5Ft5kbN3xj7nZdyxyEp7Thexqws.roa Signing time: Fri 02 Jan 2026 08:20:47 +0000 ROA not before: Fri 02 Jan 2026 08:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209675 IP address blocks: 151.243.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:7f:f6:46:f3:3e:81:a6:34:09:bd:56:4b:b6:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e45b7991b377c63ee765dcb1c84a7b4e17b1ab0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3d:2a:38:17:66:5c:39:1d:81:1d:ff:10:34: 4c:92:5f:2a:8b:bc:97:1e:52:1c:af:ad:53:97:e0: b0:01:00:ad:94:04:12:6f:eb:d4:cd:2a:b3:af:34: 53:16:86:20:04:13:42:6c:fe:23:e4:56:5a:02:23: 18:e9:db:8e:d3:18:6f:de:1b:46:2a:89:64:5a:65: c2:13:9c:d3:19:c8:21:a4:d6:64:5d:a0:62:e0:33: 83:d1:02:4a:cf:0c:ff:e1:a1:9a:56:cf:57:4f:71: 0f:36:47:ce:f5:51:7e:5d:28:9c:19:ec:bc:18:5f: 9e:33:23:4e:0e:b0:84:99:54:a4:a3:af:a5:30:d7: df:bc:82:2e:88:67:08:56:6b:06:d2:ce:88:2a:69: 42:3d:13:bb:bf:fb:61:3c:df:7f:69:dd:fd:fd:12: e3:2c:a3:5f:88:19:39:e7:e8:17:34:4a:35:21:d6: 86:8c:81:74:da:d9:6f:9f:bb:83:0f:f3:b6:05:20: ae:cd:b3:2e:09:7f:5f:75:fb:90:87:04:27:3b:18: 67:3f:a6:20:6a:e6:29:a3:83:6a:dd:28:e4:87:05: 66:2d:f8:db:97:96:ef:0e:6c:a9:bb:a5:fe:11:00: 80:f8:64:d9:06:c5:b2:9d:d6:d1:0d:fc:3e:f1:5a: 97:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5B:79:91:B3:77:C6:3E:E7:65:DC:B1:C8:4A:7B:4E:17:B1:AB:0B X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5Ft5kbN3xj7nZdyxyEp7Thexqws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.241.0/24 Signature Algorithm: sha256WithRSAEncryption 08:e6:91:d7:e1:dc:54:a0:28:4e:15:9f:c6:79:bb:d0:d2:0d: 49:3f:97:22:5f:6b:db:a1:82:c9:28:17:f6:6d:07:30:6b:a0: 63:20:17:6d:04:da:3e:90:91:8e:d3:61:8a:b1:8a:d0:7d:54: 99:90:33:a7:2d:83:06:5f:34:f4:46:d5:e2:49:f3:6c:99:91: 92:e7:83:0a:e0:68:03:8a:14:f0:92:99:8e:1b:eb:e4:c2:1f: af:5c:af:1a:b0:5e:b7:46:a7:0c:df:94:df:fc:8d:de:be:b4: fc:53:68:6c:14:bf:d2:85:38:6b:3f:f3:39:64:9b:f0:71:a5: c4:eb:ed:77:49:21:10:5d:db:db:3c:b8:f4:79:b6:3a:a5:9c: bf:14:e0:35:67:b0:cc:43:de:04:44:3b:76:11:79:8b:41:96: 2f:45:95:f9:fb:61:12:84:ce:f3:7c:9e:5f:a8:ce:15:5f:0b: 5d:01:3c:9b:11:c9:6e:ad:e3:6f:70:7c:9e:44:af:18:b1:ab: e3:ff:66:9c:37:12:71:d7:c0:35:cc:57:00:0d:47:52:c9:90: 84:49:9a:be:b7:48:80:26:4e:18:0a:29:ec:46:62:89:f2:78: 06:4f:f9:69:d2:13:72:36:61:67:9a:df:9e:7d:03:f3:68:3f: 8b:f0:ad:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y3/2RvM+gaY0Cb1WS7YXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNDViNzk5MWIzNzdjNjNlZTc2NWRjYjFjODRhN2I0ZTE3YjFhYjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz0qOBdmXDkdgR3/EDRMkl8qi7yX HlIcr61Tl+CwAQCtlAQSb+vUzSqzrzRTFoYgBBNCbP4j5FZaAiMY6duO0xhv3htG KolkWmXCE5zTGcghpNZkXaBi4DOD0QJKzwz/4aGaVs9XT3EPNkfO9VF+XSicGey8 GF+eMyNODrCEmVSko6+lMNffvIIuiGcIVmsG0s6IKmlCPRO7v/thPN9/ad39/RLj LKNfiBk55+gXNEo1IdaGjIF02tlvn7uDD/O2BSCuzbMuCX9fdfuQhwQnOxhnP6Yg auYpo4Nq3SjkhwVmLfjbl5bvDmypu6X+EQCA+GTZBsWyndbRDfw+8VqXQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFORbeZGzd8Y+52XcschKe04XsasLMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvNUZ0NWtiTjN4ajduWmR5eHlFcDdUaGV4cXdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/PxMA0G CSqGSIb3DQEBCwUAA4IBAQAI5pHX4dxUoChOFZ/GebvQ0g1JP5ciX2vboYLJKBf2 bQcwa6BjIBdtBNo+kJGO02GKsYrQfVSZkDOnLYMGXzT0RtXiSfNsmZGS54MK4GgD ihTwkpmOG+vkwh+vXK8asF63RqcM35Tf/I3evrT8U2hsFL/ShThrP/M5ZJvwcaXE 6+13SSEQXdvbPLj0ebY6pZy/FOA1Z7DMQ94ERDt2EXmLQZYvRZX5+2EShM7zfJ5f qM4VXwtdATybEclureNvcHyeRK8Ysavj/2acNxJx18A1zFcADUdSyZCESZq+t0iA Jk4YCinsRmKJ8ngGT/lp0hNyNmFnmt+efQPzaD+L8K03 -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:28 2026 by rpki-client