This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ApJDkhfRA1_jclAJNbVEMOH7OII.roa File: ApJDkhfRA1_jclAJNbVEMOH7OII.roa (raw, json) Hash identifier: DTgos7nUtn3rMYpj5+66jO6dFvlAxHHli7wBqOqPcjM= Subject key identifier: 02:92:43:92:17:D1:03:5F:E3:72:50:09:35:B5:44:30:E1:FB:38:82 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB2AD8F2B95E90E693CBE205E50A3F Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ApJDkhfRA1_jclAJNbVEMOH7OII.roa Signing time: Fri 02 Jan 2026 08:20:25 +0000 ROA not before: Fri 02 Jan 2026 08:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34927 IP address blocks: 151.244.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:2a:d8:f2:b9:5e:90:e6:93:cb:e2:05:e5:0a:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0292439217d1035fe372500935b54430e1fb3882 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:0e:fb:11:80:bb:3e:b8:4a:e1:99:fa:e1:bd: 63:4c:76:84:e6:ef:e0:d6:b9:f0:70:06:7e:fe:05: e9:d3:0c:42:eb:c2:6d:a6:78:e7:9c:76:ba:18:79: b8:26:e9:cf:85:dd:1a:e9:93:3a:d0:98:c9:67:64: 7f:70:3a:12:08:24:1f:e6:a6:c7:00:69:82:0a:c9: 9c:71:10:1d:b5:b3:32:4a:a0:74:87:3e:d3:3d:cd: e7:55:72:57:58:15:64:99:4d:45:84:9d:70:a6:27: df:ac:39:83:41:ef:30:2a:94:14:66:5b:de:5d:ab: 20:85:f3:fb:33:74:9c:55:47:98:a9:ee:bf:26:54: 2e:6e:3b:81:12:15:88:75:2b:ec:70:fa:44:f6:84: 99:0b:25:e3:49:60:c5:7d:b4:b2:7e:0a:e4:93:81: 5b:bb:65:d4:ec:74:c7:4e:ef:65:5a:e0:21:56:9f: d6:10:8f:ba:13:5c:67:2d:a5:72:38:bd:f6:9b:8e: 00:fc:fa:2a:89:63:8d:37:21:72:30:82:c9:83:84: 87:e9:54:0d:72:cd:d4:8e:4d:5f:8d:8d:f8:d8:43: 84:a9:dd:a4:35:59:3d:44:c6:ba:eb:57:2a:f3:8b: 5b:39:50:33:95:9e:f5:12:05:ff:5d:dc:4b:65:ae: 50:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:92:43:92:17:D1:03:5F:E3:72:50:09:35:B5:44:30:E1:FB:38:82 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ApJDkhfRA1_jclAJNbVEMOH7OII.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.126.0/24 Signature Algorithm: sha256WithRSAEncryption 45:ec:cd:d3:d4:90:51:42:d1:b1:4e:44:fd:2a:27:49:41:a1: 2e:1d:00:24:cc:ba:64:c3:5c:80:e7:8e:dc:50:af:72:94:92: 84:76:10:d6:48:67:00:51:f2:2d:ca:ae:e7:fd:24:70:b3:6e: cc:d0:cc:61:25:62:76:74:bb:55:00:f7:95:fb:3b:54:1f:00: ac:8e:81:67:bf:c2:fa:f0:2e:da:81:a8:9f:f5:d2:6a:a2:b3: f6:8c:8c:e3:0a:09:b9:13:a9:8d:3b:36:7a:bf:28:b1:68:6f: 68:93:8d:fe:7c:f3:d4:1d:10:a1:5e:06:8a:bd:e9:ac:ad:52: 85:ad:06:fc:fb:eb:95:13:d5:20:19:b1:80:5d:11:54:bc:fb: 72:e5:69:13:b7:a8:92:10:68:d3:7f:39:65:d1:e6:45:90:36: 41:44:f3:f6:8d:b9:d7:68:de:8d:1c:93:d4:ff:7e:0c:d8:18: 40:3b:d2:c6:d4:90:9d:f8:62:2f:b6:b4:76:ef:6c:ab:00:ce: 95:06:bf:cd:f7:21:69:ba:24:06:2f:95:0c:cd:b6:c2:86:e7: df:1b:b7:40:e0:d6:0d:83:6c:39:5b:f4:e3:04:89:9f:a2:64: f6:28:8b:8c:52:7e:17:a2:69:15:ac:d3:e3:99:ae:93:1d:c8: d2:65:2c:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yyrY8rlekOaTy+IF5Qo/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMjkyNDM5MjE3ZDEwMzVmZTM3MjUwMDkzNWI1NDQzMGUxZmIzODgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA77EYC7PrhK4Zn64b1jTHaE5u/g 1rnwcAZ+/gXp0wxC68JtpnjnnHa6GHm4JunPhd0a6ZM60JjJZ2R/cDoSCCQf5qbH AGmCCsmccRAdtbMySqB0hz7TPc3nVXJXWBVkmU1FhJ1wpiffrDmDQe8wKpQUZlve XasghfP7M3ScVUeYqe6/JlQubjuBEhWIdSvscPpE9oSZCyXjSWDFfbSyfgrkk4Fb u2XU7HTHTu9lWuAhVp/WEI+6E1xnLaVyOL32m44A/PoqiWONNyFyMILJg4SH6VQN cs3Ujk1fjY342EOEqd2kNVk9RMa661cq84tbOVAzlZ71EgX/XdxLZa5Q/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAKSQ5IX0QNf43JQCTW1RDDh+ziCMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvQXBKRGtoZlJBMV9qY2xBSk5iVkVNT0g3T0lJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/R+MA0G CSqGSIb3DQEBCwUAA4IBAQBF7M3T1JBRQtGxTkT9KidJQaEuHQAkzLpkw1yA547c UK9ylJKEdhDWSGcAUfItyq7n/SRws27M0MxhJWJ2dLtVAPeV+ztUHwCsjoFnv8L6 8C7agaif9dJqorP2jIzjCgm5E6mNOzZ6vyixaG9ok43+fPPUHRChXgaKvemsrVKF rQb8++uVE9UgGbGAXRFUvPty5WkTt6iSEGjTfzll0eZFkDZBRPP2jbnXaN6NHJPU /34M2BhAO9LG1JCd+GIvtrR272yrAM6VBr/N9yFpuiQGL5UMzbbChuffG7dA4NYN g2w5W/TjBImfomT2KIuMUn4XomkVrNPjma6THcjSZSxD -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:22 2026 by rpki-client