This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GpY0kRhsm8A6c6k1S9MpTkkRcqc.roa File: GpY0kRhsm8A6c6k1S9MpTkkRcqc.roa (raw, json) Hash identifier: iYAAiNnVYqd5Hm/D7Cj/B2Kkw+Q5kpxkc5KTT8l3Ack= Subject key identifier: 1A:96:34:91:18:6C:9B:C0:3A:73:A9:35:4B:D3:29:4E:49:11:72:A7 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BB628FCACEEED93916F644085B5FF83C4 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GpY0kRhsm8A6c6k1S9MpTkkRcqc.roa Signing time: Tue 13 Jan 2026 07:01:37 +0000 ROA not before: Tue 13 Jan 2026 07:01:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 151.241.232.0/23 maxlen: 24 151.243.54.0/24 maxlen: 24 151.245.222.0/23 maxlen: 24 151.246.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:28:fc:ac:ee:ed:93:91:6f:64:40:85:b5:ff:83:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 13 07:01:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1a963491186c9bc03a73a9354bd3294e491172a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ba:a4:35:b6:97:df:9e:89:81:04:42:38:49: d2:03:fd:00:ae:86:2f:9b:29:82:63:45:89:83:27: c4:58:ef:32:a7:2a:94:57:7e:d7:02:ed:dd:7a:7a: c6:fe:be:e6:49:13:c6:4f:52:55:4e:91:b7:2e:2d: 5d:5c:6c:1f:f1:71:30:65:5e:a2:02:b2:ed:aa:b0: dd:99:5f:82:95:44:ba:eb:6b:9e:ac:82:63:38:9c: 13:87:2d:9c:d9:dd:c0:e8:21:fc:e2:f2:49:e0:2a: 4f:cc:ad:20:35:65:c5:41:67:75:f2:ee:c7:c2:30: 9b:fa:1c:34:8e:63:c5:52:59:a4:dc:42:33:0a:e9: 04:4f:88:58:64:75:23:25:b1:7c:f1:8e:9b:f5:4a: 30:60:14:8e:e0:8c:1a:3f:c0:81:bd:d1:6d:a3:a8: 77:34:18:fe:e4:a1:4d:51:e6:41:54:eb:2a:a7:b0: 13:bb:05:ee:68:95:d1:06:de:21:42:23:15:33:30: 0d:c5:7f:56:7d:ba:1c:2a:7b:67:73:60:84:8c:4e: d2:95:ab:ac:76:1d:45:9a:79:f8:b7:e9:35:13:f6: 11:16:15:de:8b:25:ed:07:7c:bf:a8:8d:25:30:c7: 7e:d9:7c:df:cb:a2:51:73:4b:b2:0e:cb:05:5b:d1: 8f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:96:34:91:18:6C:9B:C0:3A:73:A9:35:4B:D3:29:4E:49:11:72:A7 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GpY0kRhsm8A6c6k1S9MpTkkRcqc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.232.0/23 151.243.54.0/24 151.245.222.0/23 151.246.64.0/20 Signature Algorithm: sha256WithRSAEncryption 52:3d:b0:fb:19:cf:ae:58:5f:dc:4f:c4:e6:02:40:db:73:09: 3e:eb:46:73:8e:34:9b:56:ed:2b:33:2f:b9:20:af:99:3d:d6: b3:9a:4d:b9:d6:5f:93:8f:73:9c:ac:c0:a6:ed:1c:53:02:72: 48:8b:d9:47:eb:2e:3b:f9:e7:fc:05:1c:bd:d1:21:bb:ba:29: a0:ef:4a:d5:3c:b8:c7:40:f5:37:17:f7:6e:da:d5:7a:45:43: 82:7d:d9:32:e0:8e:9c:cf:32:12:a1:07:b6:e1:b9:a2:6e:8e: 39:f2:a5:8c:b6:42:49:4d:8f:04:9b:f7:60:f8:e0:a2:65:97: f0:6a:82:5e:da:bc:ac:4f:b5:40:09:ad:51:b6:09:86:4a:95: 99:16:43:32:11:77:16:94:7b:6f:9b:1b:f8:fb:99:f1:ec:3e: 87:5e:81:21:f0:10:a0:73:ad:e9:06:4f:e6:74:a3:97:1a:6f: 52:1b:14:a6:54:61:66:c7:16:57:77:e1:a4:2f:7f:b0:da:48: 59:e3:7e:cb:00:d7:59:7f:9c:57:57:bf:8a:a7:bf:55:27:b7: 0b:45:1e:77:4d:a1:d5:af:63:3c:e1:a0:bb:c8:2e:97:6e:db: b8:b8:11:3d:4b:cd:a7:e0:fb:81:fb:45:25:64:c5:9a:85:7b: 22:87:89:19 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZu2KPys7u2TkW9kQIW1/4PEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTEzMDcwMTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYTk2MzQ5MTE4NmM5YmMwM2E3M2E5MzU0YmQzMjk0ZTQ5MTE3MmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27qkNbaX356JgQRCOEnSA/0AroYv mymCY0WJgyfEWO8ypyqUV37XAu3denrG/r7mSRPGT1JVTpG3Li1dXGwf8XEwZV6i ArLtqrDdmV+ClUS662uerIJjOJwThy2c2d3A6CH84vJJ4CpPzK0gNWXFQWd18u7H wjCb+hw0jmPFUlmk3EIzCukET4hYZHUjJbF88Y6b9UowYBSO4IwaP8CBvdFto6h3 NBj+5KFNUeZBVOsqp7ATuwXuaJXRBt4hQiMVMzANxX9WfbocKntnc2CEjE7Slaus dh1Fmnn4t+k1E/YRFhXeiyXtB3y/qI0lMMd+2Xzfy6JRc0uyDssFW9GP/QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFBqWNJEYbJvAOnOpNUvTKU5JEXKnMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvR3BZMGtSaHNtOEE2YzZrMVM5TXBUa2tSY3FjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBl/HoAwQA l/M2AwQBl/XeAwQEl/ZAMA0GCSqGSIb3DQEBCwUAA4IBAQBSPbD7Gc+uWF/cT8Tm AkDbcwk+60ZzjjSbVu0rMy+5IK+ZPdazmk251l+Tj3OcrMCm7RxTAnJIi9lH6y47 +ef8BRy90SG7uimg70rVPLjHQPU3F/du2tV6RUOCfdky4I6czzISoQe24bmibo45 8qWMtkJJTY8Em/dg+OCiZZfwaoJe2rysT7VACa1RtgmGSpWZFkMyEXcWlHtvmxv4 +5nx7D6HXoEh8BCgc63pBk/mdKOXGm9SGxSmVGFmxxZXd+GkL3+w2khZ437LANdZ f5xXV7+Kp79VJ7cLRR53TaHVr2M84aC7yC6Xbtu4uBE9S82n4PuB+0UlZMWahXsi h4kZ -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:26 2026 by rpki-client