This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/G90GESeOzNaL4qCWWu3KZtQWLuE.roa File: G90GESeOzNaL4qCWWu3KZtQWLuE.roa (raw, json) Hash identifier: xDh6AD7H0tKT9/oid5UlGfjSgFs0rxSSxV7hnU9Ve6I= Subject key identifier: 1B:DD:06:11:27:8E:CC:D6:8B:E2:A0:96:5A:ED:CA:66:D4:16:2E:E1 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCBB98F0F427147080515EFA80910CA Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/G90GESeOzNaL4qCWWu3KZtQWLuE.roa Signing time: Fri 02 Jan 2026 08:21:01 +0000 ROA not before: Fri 02 Jan 2026 08:21:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401476 IP address blocks: 151.241.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:b9:8f:0f:42:71:47:08:05:15:ef:a8:09:10:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:21:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bdd0611278eccd68be2a0965aedca66d4162ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2b:de:91:bc:52:6c:1c:91:6b:3b:ca:00:ec: d7:18:bb:32:4a:7c:23:b3:08:fa:3f:a9:af:82:b2: 3f:ae:68:b6:74:b6:0b:5d:2b:9d:d9:4b:76:f6:d4: c6:af:00:25:a6:17:52:e5:d4:8d:b2:7c:eb:a9:ca: f0:7f:51:12:58:90:a3:87:e7:1c:65:f2:7b:eb:63: 49:cc:3b:54:4b:ab:71:68:7f:cd:da:55:0c:c8:ad: 6a:25:d6:e0:5a:f7:c7:59:06:1e:ba:4d:1d:31:98: e7:29:aa:16:f4:9a:be:d8:75:48:df:9f:50:26:c8: 79:f1:3c:ce:95:cd:f1:35:0d:07:00:5b:45:e9:e0: 9e:15:4c:b6:75:60:c3:fd:54:8e:9d:19:67:3c:0b: c8:b0:1f:4e:dc:01:ef:07:37:49:05:36:5a:10:80: 48:c6:ea:ce:8b:35:32:c4:f5:3e:34:62:23:bb:bf: 1a:5e:f5:c8:8a:1d:22:64:74:ce:85:0e:32:40:72: a7:b0:8f:8e:bf:88:37:52:b9:a5:a7:40:46:36:8f: d0:44:cb:a4:bc:64:b4:64:c9:fc:43:b7:1c:e9:21: fa:b0:e8:05:7b:ad:b9:9a:4f:ce:ab:ab:76:d7:5b: 86:68:9c:ee:16:ce:12:42:ea:18:aa:25:89:bf:18: 95:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:DD:06:11:27:8E:CC:D6:8B:E2:A0:96:5A:ED:CA:66:D4:16:2E:E1 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/G90GESeOzNaL4qCWWu3KZtQWLuE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.127.0/24 Signature Algorithm: sha256WithRSAEncryption 60:1a:59:14:33:60:fa:57:9b:51:56:bf:d0:02:40:dc:ee:90: c5:14:71:d0:e3:de:00:05:83:97:d9:e9:7a:af:57:17:38:5c: 67:d1:76:6a:e3:b1:86:78:17:51:6d:a7:d1:1b:5f:c3:fa:ba: 4e:6c:99:6c:9c:0d:eb:0d:a1:88:ab:35:9b:bb:11:da:87:7d: 50:66:51:25:b8:f7:92:1e:9f:84:6a:f9:7d:09:7f:01:17:67: 27:93:b1:db:97:31:94:34:32:8f:30:2d:5b:ed:e8:fc:9b:53: d2:05:e5:44:c4:e3:41:82:56:0e:ba:90:1a:fb:a3:28:6c:f8: 2a:4b:fd:22:8d:95:88:08:4a:55:21:a4:2d:0c:2a:5b:cd:cc: 09:48:af:cc:20:86:f8:51:fb:9d:a4:ee:7f:8a:f6:b3:b7:20: 9a:cc:13:c1:16:26:87:cb:9e:50:a1:48:39:9f:93:75:cb:bd: 31:8a:82:37:e2:23:f7:44:08:61:ed:fd:5c:6d:0a:b8:30:a6: 3b:03:a0:85:a6:1e:45:90:fe:a8:10:01:22:2c:a0:a9:a1:95: 5e:70:0b:e5:a0:5d:48:18:1c:b5:79:3d:bf:bf:c8:3e:f0:8f: 43:dd:2f:33:e3:5b:64:73:52:62:5e:8c:fa:48:1d:3e:31:0c: 69:54:40:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y7mPD0JxRwgFFe+oCRDKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmRkMDYxMTI3OGVjY2Q2OGJlMmEwOTY1YWVkY2E2NmQ0MTYyZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApivekbxSbByRazvKAOzXGLsySnwj swj6P6mvgrI/rmi2dLYLXSud2Ut29tTGrwAlphdS5dSNsnzrqcrwf1ESWJCjh+cc ZfJ762NJzDtUS6txaH/N2lUMyK1qJdbgWvfHWQYeuk0dMZjnKaoW9Jq+2HVI359Q Jsh58TzOlc3xNQ0HAFtF6eCeFUy2dWDD/VSOnRlnPAvIsB9O3AHvBzdJBTZaEIBI xurOizUyxPU+NGIju78aXvXIih0iZHTOhQ4yQHKnsI+Ov4g3Urmlp0BGNo/QRMuk vGS0ZMn8Q7cc6SH6sOgFe625mk/Oq6t211uGaJzuFs4SQuoYqiWJvxiVeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBvdBhEnjszWi+KgllrtymbUFi7hMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvRzkwR0VTZU96TmFMNHFDV1d1M0tadFFXTHVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/F/MA0G CSqGSIb3DQEBCwUAA4IBAQBgGlkUM2D6V5tRVr/QAkDc7pDFFHHQ494ABYOX2el6 r1cXOFxn0XZq47GGeBdRbafRG1/D+rpObJlsnA3rDaGIqzWbuxHah31QZlEluPeS Hp+Eavl9CX8BF2cnk7HblzGUNDKPMC1b7ej8m1PSBeVExONBglYOupAa+6MobPgq S/0ijZWICEpVIaQtDCpbzcwJSK/MIIb4UfudpO5/ivaztyCazBPBFiaHy55QoUg5 n5N1y70xioI34iP3RAhh7f1cbQq4MKY7A6CFph5FkP6oEAEiLKCpoZVecAvloF1I GBy1eT2/v8g+8I9D3S8z41tkc1JiXoz6SB0+MQxpVEB8 -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:06 2026 by rpki-client