This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/G_melctmfqn4D6cF7H5_aNAqYM8.roa File: G_melctmfqn4D6cF7H5_aNAqYM8.roa (raw, json) Hash identifier: w8BQSZp7SWmjZtG/3PqLjelDi+w6YVhgNPt2cdEKrzY= Subject key identifier: 1B:F9:9E:95:CB:66:7E:A9:F8:0F:A7:05:EC:7E:7F:68:D0:2A:60:CF Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB0716D7EB2A32304C6337454763E6 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/G_melctmfqn4D6cF7H5_aNAqYM8.roa Signing time: Fri 02 Jan 2026 08:20:16 +0000 ROA not before: Fri 02 Jan 2026 08:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 151.243.117.0/24 maxlen: 24 151.243.119.0/24 maxlen: 24 151.243.121.0/24 maxlen: 24 151.243.122.0/24 maxlen: 24 151.243.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:07:16:d7:eb:2a:32:30:4c:63:37:45:47:63:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1bf99e95cb667ea9f80fa705ec7e7f68d02a60cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a9:9a:ef:28:46:ad:ea:20:db:3a:db:3b:22: 64:92:31:54:13:62:d4:08:7f:0d:f8:38:74:05:bd: 2a:ff:af:96:ab:0f:ff:cd:64:14:a5:70:de:c6:2d: 55:15:12:13:d8:3c:8a:f5:20:eb:67:fc:3f:ec:94: 24:d5:e8:b0:72:7a:09:0b:dc:c1:be:bc:5c:ba:cf: c2:2c:38:8b:36:0f:f7:39:2e:bf:6e:55:f6:65:d2: 78:82:cd:2b:b5:8d:7a:61:b6:0d:e3:bd:8f:60:d2: b8:21:34:e5:67:07:ad:66:19:82:67:8c:e7:71:68: 4b:59:9b:4c:c4:bb:ce:a3:a0:53:62:0f:42:12:35: 31:a9:e0:4e:72:63:d9:5c:19:e1:49:14:e9:61:1c: 54:2c:47:f6:b2:e7:2c:4d:2c:b6:2a:0b:e1:c5:2b: 9f:29:74:f4:1e:56:fc:b5:7f:4f:38:04:07:ae:25: 7a:31:a3:92:11:86:5e:cc:a0:3d:d0:5f:98:30:02: d7:64:0d:cd:51:44:e0:35:e5:f0:a3:1a:55:6b:97: 04:28:92:a5:02:41:22:41:73:47:f8:94:c7:3c:20: d9:81:9a:38:3f:6c:bc:72:68:f0:5e:6a:7a:ae:f4: dd:3c:f0:78:29:d6:e4:bc:c7:1d:0b:8f:25:10:b6: 1f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F9:9E:95:CB:66:7E:A9:F8:0F:A7:05:EC:7E:7F:68:D0:2A:60:CF X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/G_melctmfqn4D6cF7H5_aNAqYM8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.117.0/24 151.243.119.0/24 151.243.121.0-151.243.122.255 151.243.232.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:fd:86:74:67:9b:7a:55:b6:11:a3:b1:de:ef:42:c1:a5:32: 49:c1:37:48:e2:2a:0a:ae:b0:79:f3:d1:62:b3:50:88:25:8a: 1c:82:34:65:76:8d:ce:80:09:ae:8b:84:61:96:09:cc:0d:49: 74:65:60:cf:ac:f8:52:d8:48:1d:bb:23:eb:2d:90:50:11:1b: ce:4b:ae:22:51:55:fc:c4:5f:d4:cc:44:0e:be:1a:58:8b:6f: c3:5d:df:a3:5c:0a:b6:f2:be:67:b7:79:26:c8:b0:1d:74:89: 11:fd:45:67:9b:81:da:46:af:77:49:94:a9:c0:88:9c:84:d0: 72:b5:b5:e1:5a:6f:02:8f:d2:58:b7:ff:31:2b:e6:4e:ac:10: 30:73:8f:96:a4:05:92:47:fb:4a:0e:d5:ae:8b:7b:0b:f2:bb: 63:31:2d:78:ea:18:c9:ee:7f:cc:5e:79:b3:3d:69:48:68:66: 9c:9d:77:27:5b:24:24:ce:58:3c:62:01:de:13:8c:ba:b8:7b: bf:d1:63:45:19:07:6a:c2:2d:ef:44:61:06:bb:9b:6a:f6:cc: 87:eb:e5:2e:1b:72:cf:67:2f:1b:65:1f:d1:a4:de:ba:41:db: c2:65:86:4e:0f:91:77:5b:c2:ed:d3:53:b4:3c:98:b4:65:c3: 06:d9:4e:8e -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt9ywcW1+sqMjBMYzdFR2PmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmY5OWU5NWNiNjY3ZWE5ZjgwZmE3MDVlYzdlN2Y2OGQwMmE2MGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6ma7yhGreog2zrbOyJkkjFUE2LU CH8N+Dh0Bb0q/6+Wqw//zWQUpXDexi1VFRIT2DyK9SDrZ/w/7JQk1eiwcnoJC9zB vrxcus/CLDiLNg/3OS6/blX2ZdJ4gs0rtY16YbYN472PYNK4ITTlZwetZhmCZ4zn cWhLWZtMxLvOo6BTYg9CEjUxqeBOcmPZXBnhSRTpYRxULEf2sucsTSy2KgvhxSuf KXT0Hlb8tX9POAQHriV6MaOSEYZezKA90F+YMALXZA3NUUTgNeXwoxpVa5cEKJKl AkEiQXNH+JTHPCDZgZo4P2y8cmjwXmp6rvTdPPB4KdbkvMcdC48lELYfZQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFBv5npXLZn6p+A+nBex+f2jQKmDPMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvR19tZWxjdG1mcW40RDZjRjdINV9hTkFxWU04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAl/N1AwQA l/N3MAwDBACX83kDBACX83oDBACX8+gwDQYJKoZIhvcNAQELBQADggEBAJv9hnRn m3pVthGjsd7vQsGlMknBN0jiKgqusHnz0WKzUIglihyCNGV2jc6ACa6LhGGWCcwN SXRlYM+s+FLYSB27I+stkFARG85LriJRVfzEX9TMRA6+GliLb8Nd36NcCrbyvme3 eSbIsB10iRH9RWebgdpGr3dJlKnAiJyE0HK1teFabwKP0li3/zEr5k6sEDBzj5ak BZJH+0oO1a6Lewvyu2MxLXjqGMnuf8xeebM9aUhoZpyddydbJCTOWDxiAd4TjLq4 e7/RY0UZB2rCLe9EYQa7m2r2zIfr5S4bcs9nLxtlH9Gk3rpB28Jlhk4PkXdbwu3T U7Q8mLRlwwbZTo4= -----END CERTIFICATE-----Generated at Sun Jan 18 06:29:13 2026 by rpki-client