This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GFfQAcMGPyyYEqjvot05LkeDIRM.roa File: GFfQAcMGPyyYEqjvot05LkeDIRM.roa (raw, json) Hash identifier: 9MQG0Uh/uXLxvSnTq7iTCLimV7lYXQown49TenV32sA= Subject key identifier: 18:57:D0:01:C3:06:3F:2C:98:12:A8:EF:A2:DD:39:2E:47:83:21:13 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB798AA9319262B4BDCAF8DC3D2454 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GFfQAcMGPyyYEqjvot05LkeDIRM.roa Signing time: Fri 02 Jan 2026 08:20:45 +0000 ROA not before: Fri 02 Jan 2026 08:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209242 IP address blocks: 151.243.128.0/22 maxlen: 22 151.243.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:79:8a:a9:31:92:62:b4:bd:ca:f8:dc:3d:24:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1857d001c3063f2c9812a8efa2dd392e47832113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:80:53:19:38:f3:37:87:f7:9a:a6:00:e3:bc: fc:3e:21:12:5d:07:3a:6a:11:d1:3a:d2:dd:1f:ec: 72:67:87:12:1f:3f:2c:7b:7d:6d:cf:a6:6e:3b:ee: 2d:6b:32:10:e3:59:77:df:3d:a9:cf:1d:f4:c2:82: 1c:f0:e8:45:74:66:5b:66:81:5e:2b:4c:cd:dd:5a: 93:ba:d4:33:97:09:52:e1:91:82:23:56:c6:36:41: 8f:d9:4a:65:21:62:c2:c5:e8:a9:99:bd:2c:f1:6e: f2:49:a0:c8:fd:78:56:6c:15:c6:70:25:01:c2:e6: 79:c4:b1:3b:b5:75:7b:8b:e5:ec:b7:10:9f:9e:71: 84:28:62:b3:f5:3b:dd:52:7f:e3:ca:26:74:a6:68: f0:3c:86:08:a6:82:16:56:95:39:f9:4a:41:c7:20: aa:f5:75:48:7a:29:b9:7e:43:df:28:15:c2:bc:ef: 68:e6:df:77:a7:6f:6b:fb:9b:7e:6a:62:1a:4d:ed: 25:01:aa:07:e2:28:2d:d9:3e:a7:2e:da:32:43:f7: 3e:71:f7:48:8c:e0:0c:bb:7c:1c:88:a6:76:d1:7d: 32:80:f7:b7:e8:f1:78:6b:d4:89:32:f3:aa:b7:e6: cf:11:17:f2:49:5d:1c:e9:1f:01:5f:bf:96:89:c0: 7f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:57:D0:01:C3:06:3F:2C:98:12:A8:EF:A2:DD:39:2E:47:83:21:13 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GFfQAcMGPyyYEqjvot05LkeDIRM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.128.0/22 151.243.133.0/24 Signature Algorithm: sha256WithRSAEncryption 83:93:4d:b1:17:51:43:65:2f:6b:47:22:13:b0:fa:a5:1c:2f: e3:da:5a:7a:4b:5d:0d:bb:ad:db:ac:46:b0:db:81:75:dc:e8: 47:c8:bc:d6:6e:ce:ea:e4:01:7f:30:8f:cb:a2:f3:f1:4d:b2: 2b:a4:9b:b4:b0:d8:2b:b4:54:de:4b:5a:ff:9f:9f:16:8f:f3: 9d:a2:09:eb:9b:cf:5b:39:53:fc:be:36:2d:3e:fa:7a:c3:b1: f4:b0:11:a8:17:9a:f8:cf:e1:1c:07:8e:4b:10:c6:7b:f0:4c: 1f:5f:0b:b0:16:ce:aa:0f:01:18:97:6c:3d:c8:22:55:4c:38: 4f:56:eb:35:91:38:b5:03:5f:76:fb:d7:03:32:24:95:04:2a: c8:ed:01:b6:0f:df:65:cb:ea:e9:c3:a6:4a:34:9f:8f:c6:17: 14:5c:bf:4e:7c:59:4a:d4:47:e6:3d:a5:e9:67:18:04:ca:6d: f8:dc:ac:a2:11:7d:b5:b9:91:e6:03:dd:5a:35:db:db:48:29: 5e:d9:f1:e5:f1:b2:80:a3:ff:d8:ea:8e:b2:32:11:66:2f:aa: f4:fa:cd:71:9c:03:80:7c:2a:5d:b7:78:c6:92:c2:71:f0:0a: 71:f3:ff:d3:df:4a:cf:72:a6:49:5b:7a:ad:c3:17:4c:ef:b6: 55:f7:d0:83 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y3mKqTGSYrS9yvjcPSRUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODU3ZDAwMWMzMDYzZjJjOTgxMmE4ZWZhMmRkMzkyZTQ3ODMyMTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYBTGTjzN4f3mqYA47z8PiESXQc6 ahHROtLdH+xyZ4cSHz8se31tz6ZuO+4tazIQ41l33z2pzx30woIc8OhFdGZbZoFe K0zN3VqTutQzlwlS4ZGCI1bGNkGP2UplIWLCxeipmb0s8W7ySaDI/XhWbBXGcCUB wuZ5xLE7tXV7i+XstxCfnnGEKGKz9TvdUn/jyiZ0pmjwPIYIpoIWVpU5+UpBxyCq 9XVIeim5fkPfKBXCvO9o5t93p29r+5t+amIaTe0lAaoH4igt2T6nLtoyQ/c+cfdI jOAMu3wciKZ20X0ygPe36PF4a9SJMvOqt+bPERfySV0c6R8BX7+WicB/uwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBhX0AHDBj8smBKo76LdOS5HgyETMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvR0ZmUUFjTUdQeXlZRXFqdm90MDVMa2VESVJNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCl/OAAwQA l/OFMA0GCSqGSIb3DQEBCwUAA4IBAQCDk02xF1FDZS9rRyITsPqlHC/j2lp6S10N u63brEaw24F13OhHyLzWbs7q5AF/MI/LovPxTbIrpJu0sNgrtFTeS1r/n58Wj/Od ognrm89bOVP8vjYtPvp6w7H0sBGoF5r4z+EcB45LEMZ78EwfXwuwFs6qDwEYl2w9 yCJVTDhPVus1kTi1A192+9cDMiSVBCrI7QG2D99ly+rpw6ZKNJ+PxhcUXL9OfFlK 1EfmPaXpZxgEym343KyiEX21uZHmA91aNdvbSCle2fHl8bKAo//Y6o6yMhFmL6r0 +s1xnAOAfCpdt3jGksJx8Apx8//T30rPcqZJW3qtwxdM77ZV99CD -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:42 2026 by rpki-client