This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HuMQc_ZWTx2LJSkhCw-KhA_Cjzg.roa File: HuMQc_ZWTx2LJSkhCw-KhA_Cjzg.roa (raw, json) Hash identifier: 1Z0QIf7FfJXW+MbuZPncMIYTwjm00i/WHGJo9EZ7Bbk= Subject key identifier: 1E:E3:10:73:F6:56:4F:1D:8B:25:29:21:0B:0F:8A:84:0F:C2:8F:38 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB1FC299097E2B0FC4B862C0E1B736 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HuMQc_ZWTx2LJSkhCw-KhA_Cjzg.roa Signing time: Fri 02 Jan 2026 08:20:22 +0000 ROA not before: Fri 02 Jan 2026 08:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22160 IP address blocks: 151.243.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:1f:c2:99:09:7e:2b:0f:c4:b8:62:c0:e1:b7:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1ee31073f6564f1d8b2529210b0f8a840fc28f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d0:7b:37:2f:74:52:fd:55:fc:46:15:6c:21: 2c:4d:d0:d6:7a:01:ea:5d:a3:0a:77:54:f0:c2:89: 86:2e:5e:66:34:47:d4:12:e6:a8:ce:60:80:2d:95: 8f:3a:f7:00:f2:69:c5:39:36:80:9b:75:ea:3f:a6: 8c:da:35:5e:15:e6:dd:8c:a8:58:3b:16:6d:be:f1: 66:d6:ab:ac:c4:b9:42:b5:6d:b9:d3:f9:02:b5:6b: f4:77:46:15:93:51:74:74:7b:ec:29:05:51:d7:ff: 59:24:66:c6:c8:8f:4e:db:9f:83:38:77:36:3e:bb: 9c:41:28:36:4f:6b:e6:f9:40:0e:80:3d:30:27:6c: a8:2c:f5:f2:9c:d5:95:8a:93:24:5c:c7:04:7e:aa: 0c:90:34:ce:80:e8:55:20:1d:57:98:21:84:04:b7: 16:f9:89:cf:5e:fa:9e:f4:31:cb:3b:c5:c6:3a:6d: f2:29:44:18:a7:de:df:a2:70:80:ac:59:df:a4:e7: 1c:21:ba:4e:97:68:1c:8f:ea:6e:38:36:0c:f7:5f: fb:8b:12:95:e8:f7:3c:75:2a:b6:6a:26:e7:57:d7: 05:7a:cb:bd:a3:a7:f0:9a:86:21:c0:9d:75:1d:bc: 07:07:e9:61:45:1f:c0:53:f1:1d:df:1a:14:08:f1: 98:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E3:10:73:F6:56:4F:1D:8B:25:29:21:0B:0F:8A:84:0F:C2:8F:38 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HuMQc_ZWTx2LJSkhCw-KhA_Cjzg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.126.0/24 Signature Algorithm: sha256WithRSAEncryption a1:13:d1:91:5e:38:18:9f:70:7c:a6:30:b7:39:4b:38:91:a5: fc:12:19:7d:17:44:57:c1:b5:ec:36:1b:12:5c:e8:81:40:02: d3:ad:90:d8:fb:be:73:84:dd:94:96:7c:2b:91:03:ee:94:90: 53:20:5d:4d:b1:37:52:5b:09:6c:5a:f5:75:81:68:79:76:ff: b7:f0:dc:64:57:87:72:d7:90:93:9a:aa:1c:db:4f:5b:ee:ee: b2:8f:dc:d7:23:bb:2f:26:47:9d:48:d8:f5:ae:2f:03:4e:89: 00:f7:1a:8c:dc:52:ba:ea:f0:30:01:f0:16:1d:e6:0d:5f:95: f3:df:e6:10:27:77:2b:a8:93:2f:d2:d6:2a:39:4d:8d:47:56: 4d:49:c6:e6:26:4e:10:e4:cd:99:7c:b2:dc:42:41:5e:e3:82: 9f:18:f9:34:bd:99:06:c2:ae:31:67:4c:86:ea:04:5e:d0:3b: 09:30:68:4d:6e:73:39:cb:74:f1:b3:b3:33:47:af:d4:82:d6: 8f:f7:4b:b0:5c:fd:66:7a:39:f7:db:94:63:3d:d2:94:4d:bb: 52:b2:4c:63:dc:39:76:fa:a6:54:9c:db:b4:9e:8f:e9:e0:f2: 25:0b:fd:a1:9d:77:4a:c3:16:d5:20:2d:10:2b:34:55:45:bf: 6a:76:50:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yx/CmQl+Kw/EuGLA4bc2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWUzMTA3M2Y2NTY0ZjFkOGIyNTI5MjEwYjBmOGE4NDBmYzI4ZjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9B7Ny90Uv1V/EYVbCEsTdDWegHq XaMKd1TwwomGLl5mNEfUEuaozmCALZWPOvcA8mnFOTaAm3XqP6aM2jVeFebdjKhY OxZtvvFm1qusxLlCtW250/kCtWv0d0YVk1F0dHvsKQVR1/9ZJGbGyI9O25+DOHc2 PrucQSg2T2vm+UAOgD0wJ2yoLPXynNWVipMkXMcEfqoMkDTOgOhVIB1XmCGEBLcW +YnPXvqe9DHLO8XGOm3yKUQYp97fonCArFnfpOccIbpOl2gcj+puODYM91/7ixKV 6Pc8dSq2aibnV9cFesu9o6fwmoYhwJ11HbwHB+lhRR/AU/Ed3xoUCPGY+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB7jEHP2Vk8diyUpIQsPioQPwo84MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvSHVNUWNfWldUeDJMSlNraEN3LUtoQV9DanpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/N+MA0G CSqGSIb3DQEBCwUAA4IBAQChE9GRXjgYn3B8pjC3OUs4kaX8Ehl9F0RXwbXsNhsS XOiBQALTrZDY+75zhN2UlnwrkQPulJBTIF1NsTdSWwlsWvV1gWh5dv+38NxkV4dy 15CTmqoc209b7u6yj9zXI7svJkedSNj1ri8DTokA9xqM3FK66vAwAfAWHeYNX5Xz 3+YQJ3crqJMv0tYqOU2NR1ZNScbmJk4Q5M2ZfLLcQkFe44KfGPk0vZkGwq4xZ0yG 6gRe0DsJMGhNbnM5y3Txs7MzR6/UgtaP90uwXP1mejn325RjPdKUTbtSskxj3Dl2 +qZUnNu0no/p4PIlC/2hnXdKwxbVIC0QKzRVRb9qdlDU -----END CERTIFICATE-----Generated at Sun Jan 11 18:49:20 2026 by rpki-client