This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GJCo14INqfBcriWFOXELVXmY06M.roa File: GJCo14INqfBcriWFOXELVXmY06M.roa (raw, json) Hash identifier: yFMVSr0Ln3s8GVwIMXZ+AZLUTKjKcjJHByr1f1OWpqA= Subject key identifier: 18:90:A8:D7:82:0D:A9:F0:5C:AE:25:85:39:71:0B:55:79:98:D3:A3 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB56234152F3E8E4C07112D5DC1872 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GJCo14INqfBcriWFOXELVXmY06M.roa Signing time: Fri 02 Jan 2026 08:20:36 +0000 ROA not before: Fri 02 Jan 2026 08:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 149573 IP address blocks: 151.242.51.0/24 maxlen: 24 151.243.12.0/24 maxlen: 24 151.243.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:56:23:41:52:f3:e8:e4:c0:71:12:d5:dc:18:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1890a8d7820da9f05cae258539710b557998d3a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:00:79:ff:0f:35:89:d9:f7:c3:3c:45:df:dd: bb:8e:e5:76:af:87:3c:8a:65:e8:0d:10:5b:fd:43: 67:d9:ac:0e:f2:44:45:0a:f7:af:26:ac:10:7d:cc: 06:48:d5:2c:40:0d:fb:b8:e6:56:4d:af:a7:c9:86: c8:1c:ba:3f:ad:0f:be:f2:2c:95:63:7f:b7:ef:29: 25:9c:40:1a:5a:51:67:b3:0e:c8:80:66:ef:fe:9c: f6:7d:c0:59:0c:e9:34:88:63:87:b7:ce:8d:2d:1d: 34:d7:cd:8a:d9:03:aa:ae:01:cb:51:47:18:3c:b3: 9b:b9:b0:43:f2:37:f7:19:24:d0:ad:33:4a:01:0a: 05:72:8a:5d:ae:a3:75:51:22:1a:40:63:24:17:59: 16:7d:e7:5a:f8:3f:1c:50:e3:06:1f:96:3a:00:ef: 6d:63:78:df:6f:63:8c:1a:fe:d9:b8:7b:ed:59:7c: e6:15:c7:0f:68:e2:0d:fa:50:d0:68:1e:3b:3e:84: f9:03:23:c8:10:e1:18:7c:d8:2a:18:23:7e:23:51: 04:46:20:bf:4c:1c:12:f6:92:5d:02:83:31:a2:6b: 10:ee:bc:e2:e5:05:40:02:fc:f4:9a:4d:7b:dd:7d: e0:f3:f9:35:05:ca:62:94:ae:8c:49:71:b3:17:6f: fe:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:90:A8:D7:82:0D:A9:F0:5C:AE:25:85:39:71:0B:55:79:98:D3:A3 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GJCo14INqfBcriWFOXELVXmY06M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.51.0/24 151.243.12.0/24 151.243.98.0/24 Signature Algorithm: sha256WithRSAEncryption 72:c4:b9:72:66:91:00:ec:1f:75:d6:a9:5a:41:58:bd:82:ca: c7:12:8f:c2:c4:32:de:9c:0a:24:56:a8:8e:5b:da:6f:6c:9f: e4:cd:da:bf:52:8b:2b:f7:ae:78:c6:bb:d0:48:86:14:0c:32: 7e:c1:9c:b2:2e:02:d0:b7:90:80:2d:47:82:7d:9d:84:3f:57: bc:4f:67:ce:de:c8:a3:45:56:96:3a:86:11:f5:01:15:33:ac: 69:0b:0a:5f:92:dc:b9:52:92:86:a7:75:b8:df:23:a3:a8:3f: df:53:14:08:54:e0:20:18:a7:f6:e9:f6:df:cd:f6:db:a7:a5: 2a:45:9f:d2:0e:5a:48:81:51:66:3a:f6:a5:20:5c:7c:fc:c2: e1:2a:be:ce:bd:51:4d:29:40:da:aa:b9:1b:fe:97:f1:68:e4: 80:6c:ea:b6:55:35:a1:22:83:33:af:cf:b3:2f:c9:1e:03:77: f8:e8:ad:1c:a1:96:e8:83:6f:f8:a9:f9:1c:08:a3:06:4a:35: 49:13:87:9d:b5:06:20:92:9a:36:98:f7:c8:e1:c9:ed:8f:c9: 7e:de:61:f7:72:da:7f:a2:3a:c4:4f:af:51:f0:d1:b3:82:fa: 0a:cf:de:10:e3:e0:25:e6:69:6d:2a:7e:6c:c4:d4:b8:1e:d8: e6:3a:6c:70 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9y1YjQVLz6OTAcRLV3BhyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODkwYThkNzgyMGRhOWYwNWNhZTI1ODUzOTcxMGI1NTc5OThkM2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQB5/w81idn3wzxF3927juV2r4c8 imXoDRBb/UNn2awO8kRFCvevJqwQfcwGSNUsQA37uOZWTa+nyYbIHLo/rQ++8iyV Y3+37yklnEAaWlFnsw7IgGbv/pz2fcBZDOk0iGOHt86NLR00182K2QOqrgHLUUcY PLObubBD8jf3GSTQrTNKAQoFcopdrqN1USIaQGMkF1kWfeda+D8cUOMGH5Y6AO9t Y3jfb2OMGv7ZuHvtWXzmFccPaOIN+lDQaB47PoT5AyPIEOEYfNgqGCN+I1EERiC/ TBwS9pJdAoMxomsQ7rzi5QVAAvz0mk173X3g8/k1BcpilK6MSXGzF2/+AwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBiQqNeCDanwXK4lhTlxC1V5mNOjMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvR0pDbzE0SU5xZkJjcmlXRk9YRUxWWG1ZMDZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/IzAwQA l/MMAwQAl/NiMA0GCSqGSIb3DQEBCwUAA4IBAQByxLlyZpEA7B911qlaQVi9gsrH Eo/CxDLenAokVqiOW9pvbJ/kzdq/Uosr9654xrvQSIYUDDJ+wZyyLgLQt5CALUeC fZ2EP1e8T2fO3sijRVaWOoYR9QEVM6xpCwpfkty5UpKGp3W43yOjqD/fUxQIVOAg GKf26fbfzfbbp6UqRZ/SDlpIgVFmOvalIFx8/MLhKr7OvVFNKUDaqrkb/pfxaOSA bOq2VTWhIoMzr8+zL8keA3f46K0coZbog2/4qfkcCKMGSjVJE4edtQYgkpo2mPfI 4cntj8l+3mH3ctp/ojrET69R8NGzgvoKz94Q4+Al5mltKn5sxNS4HtjmOmxw -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:10 2026 by rpki-client