This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7D-fneSW15mASMprg5_etpexS1w.roa File: 7D-fneSW15mASMprg5_etpexS1w.roa (raw, json) Hash identifier: m80ORJ1eqh/vdzJBieH4pMefixnF12Bo9yk+iHROGVk= Subject key identifier: EC:3F:9F:9D:E4:96:D7:99:80:48:CA:6B:83:9F:DE:B6:97:B1:4B:5C Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B8145E5B7C5C4C30068C55F784B7E8686 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7D-fneSW15mASMprg5_etpexS1w.roa Signing time: Sat 03 Jan 2026 00:33:20 +0000 ROA not before: Sat 03 Jan 2026 00:33:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215304 IP address blocks: 151.241.128.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:81:45:e5:b7:c5:c4:c3:00:68:c5:5f:78:4b:7e:86:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 3 00:33:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ec3f9f9de496d7998048ca6b839fdeb697b14b5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a3:30:90:83:f3:0a:52:b4:dc:ce:49:b4:e0: 6e:7a:bd:2b:ea:4c:ac:7e:0b:1b:e5:57:8f:50:2e: a1:22:ed:c8:53:d0:d6:e3:b1:fc:f3:d3:2c:ae:52: 37:13:66:9e:c8:f4:27:cf:58:4f:f1:eb:e4:25:ad: 6e:6b:16:a2:8e:33:e9:af:60:5f:28:24:e6:c4:8b: 5b:12:15:34:9c:13:91:a6:96:17:ba:3b:c6:5a:bc: a0:b7:ba:3e:f5:77:3b:07:e5:8e:29:70:80:ba:78: 18:f3:22:62:07:99:1d:f8:17:9d:95:a1:cf:42:6b: 47:e6:a3:cb:80:b1:6c:b0:a0:65:6f:f7:9f:5d:68: ff:26:a1:4c:c5:ac:6b:cf:1b:32:ff:7a:90:87:5a: 4d:4e:4d:13:68:06:44:25:d4:27:46:c7:28:3c:b6: d1:ea:83:2f:65:4a:48:ee:3b:4e:2f:83:6b:e1:0c: ee:41:aa:28:ae:f7:98:d4:44:f9:75:6e:3d:47:ba: bb:df:80:90:d0:c8:15:b2:34:19:e6:22:7d:02:c9: eb:01:6e:c4:88:43:6f:cf:2b:57:7a:a5:1c:a0:6d: dc:81:ac:24:d0:ae:0c:be:2c:7d:d8:4e:aa:6f:63: 17:26:4e:44:f8:ef:97:fb:36:bb:5d:11:7e:03:15: 00:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:3F:9F:9D:E4:96:D7:99:80:48:CA:6B:83:9F:DE:B6:97:B1:4B:5C X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7D-fneSW15mASMprg5_etpexS1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.128.0/22 Signature Algorithm: sha256WithRSAEncryption 78:36:f4:29:0c:72:a8:4f:82:52:20:34:13:fd:50:99:9b:a0: bc:67:08:49:6f:af:48:d7:fc:19:32:1e:49:2e:fa:76:64:6c: fa:a8:40:76:0a:71:fc:b0:66:61:c3:21:42:dc:95:82:b7:40: c9:c2:cd:6b:f3:d3:36:aa:3f:46:c7:3a:fc:4d:d5:fa:bb:6a: 03:30:70:f0:1b:61:f5:50:41:f5:99:98:43:5c:e6:4a:07:55: 5b:a5:f5:67:7e:7f:ea:78:21:7a:df:02:e9:d2:78:f6:b5:4f: 26:6e:d9:4d:52:c4:f0:0d:20:63:0b:e6:63:f5:2d:c0:78:f4: a7:bd:a3:2a:f2:4f:f1:79:7f:fb:7a:b5:29:13:92:b7:8c:91: 8c:78:48:a2:ba:15:9a:a0:4b:95:c9:cb:fe:9b:97:de:ce:e7: 9b:29:2e:40:f1:e4:9e:0e:6e:18:c2:eb:48:19:c7:4d:3d:e4: 30:94:20:3f:ec:61:aa:68:a6:b7:10:49:9a:4a:f5:75:3f:0f: 24:3e:00:17:7d:77:d6:10:a7:04:c7:49:97:5d:cd:46:45:cf: 7f:03:d7:fe:65:b1:5b:d5:16:97:b1:50:ef:1c:42:6a:57:b9: 8f:a9:39:5e:7a:34:c1:68:7b:95:81:24:fc:45:b6:05:9d:2c: b7:52:f2:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuBReW3xcTDAGjFX3hLfoaGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAzMDAzMzIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYzNmOWY5ZGU0OTZkNzk5ODA0OGNhNmI4MzlmZGViNjk3YjE0YjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqMwkIPzClK03M5JtOBuer0r6kys fgsb5VePUC6hIu3IU9DW47H889MsrlI3E2aeyPQnz1hP8evkJa1uaxaijjPpr2Bf KCTmxItbEhU0nBORppYXujvGWrygt7o+9Xc7B+WOKXCAungY8yJiB5kd+BedlaHP QmtH5qPLgLFssKBlb/efXWj/JqFMxaxrzxsy/3qQh1pNTk0TaAZEJdQnRscoPLbR 6oMvZUpI7jtOL4Nr4QzuQaoorveY1ET5dW49R7q734CQ0MgVsjQZ5iJ9AsnrAW7E iENvzytXeqUcoG3cgawk0K4Mvix92E6qb2MXJk5E+O+X+za7XRF+AxUAtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOw/n53klteZgEjKa4Of3raXsUtcMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvN0QtZm5lU1cxNW1BU01wcmc1X2V0cGV4UzF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl/GAMA0G CSqGSIb3DQEBCwUAA4IBAQB4NvQpDHKoT4JSIDQT/VCZm6C8ZwhJb69I1/wZMh5J Lvp2ZGz6qEB2CnH8sGZhwyFC3JWCt0DJws1r89M2qj9Gxzr8TdX6u2oDMHDwG2H1 UEH1mZhDXOZKB1VbpfVnfn/qeCF63wLp0nj2tU8mbtlNUsTwDSBjC+Zj9S3AePSn vaMq8k/xeX/7erUpE5K3jJGMeEiiuhWaoEuVycv+m5fezuebKS5A8eSeDm4YwutI GcdNPeQwlCA/7GGqaKa3EEmaSvV1Pw8kPgAXfXfWEKcEx0mXXc1GRc9/A9f+ZbFb 1RaXsVDvHEJqV7mPqTleejTBaHuVgST8RbYFnSy3UvK9 -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:43 2026 by rpki-client