This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IfqAeEcxemoMNnMXeFyxBSrJrDo.roa File: IfqAeEcxemoMNnMXeFyxBSrJrDo.roa (raw, json) Hash identifier: t3SwoKa/r7odl567AxNaFCAha+2f27tOrUwjVRKPA+A= Subject key identifier: 21:FA:80:78:47:31:7A:6A:0C:36:73:17:78:5C:B1:05:2A:C9:AC:3A Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB509AFBE64C1CF617974561E20398 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IfqAeEcxemoMNnMXeFyxBSrJrDo.roa Signing time: Fri 02 Jan 2026 08:20:34 +0000 ROA not before: Fri 02 Jan 2026 08:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138195 IP address blocks: 151.245.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:50:9a:fb:e6:4c:1c:f6:17:97:45:61:e2:03:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=21fa807847317a6a0c367317785cb1052ac9ac3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f3:85:bb:a5:28:ca:4d:3b:2e:9b:82:76:e0: 41:d9:90:a5:38:2a:2f:e3:c1:e7:ac:4b:b6:13:bf: 73:4e:a7:5d:eb:c0:6d:7b:6a:a8:53:5a:ca:7c:46: 1f:69:41:10:fe:a8:c0:a6:2a:cb:c2:e9:4c:7e:84: 26:5f:b3:58:92:84:5c:4b:b4:9b:2f:00:1b:0d:25: 1e:00:01:4d:2d:18:b7:9c:99:f5:a9:69:1e:25:4b: 73:d1:9a:c2:4a:99:37:7c:18:94:51:ff:9b:4e:53: 50:e2:57:01:b3:31:68:a1:24:e0:e8:2d:17:36:c5: 79:7b:af:ad:21:3e:bd:5e:08:91:0b:f5:3f:09:51: c0:da:ca:53:95:78:75:40:9a:af:5e:d3:fd:d5:90: 45:fe:b4:a1:5b:03:1e:9c:b8:78:ee:14:ea:87:f2: 3e:35:2f:7d:04:be:d0:d5:13:9f:42:98:a5:67:67: 35:54:f6:1a:18:6a:8d:27:ae:35:85:17:b5:58:d3: d9:d1:b9:92:cd:96:41:72:17:ea:26:df:f9:f0:ff: 02:8d:57:b2:86:25:a8:05:eb:da:12:cc:6d:1f:07: 83:0c:a1:59:39:cf:46:1c:dd:d1:cb:2c:9d:46:61: 47:1a:0a:b1:e4:3a:71:fe:ce:4a:b7:d9:a8:a7:40: eb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:FA:80:78:47:31:7A:6A:0C:36:73:17:78:5C:B1:05:2A:C9:AC:3A X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IfqAeEcxemoMNnMXeFyxBSrJrDo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.245.152.0/21 Signature Algorithm: sha256WithRSAEncryption 4a:7d:28:70:e3:1d:d0:29:b7:55:fd:bd:df:8f:7d:04:66:b8: 9b:9c:a3:ee:8e:f9:82:79:06:cd:81:6b:53:1f:75:ca:e6:2c: 22:3d:5b:3b:dc:f7:c6:c6:f8:12:4c:10:e0:a2:0c:66:ad:74: 2b:80:1f:ab:d9:f1:59:d8:10:71:f7:e2:ca:30:8c:93:3c:87: 93:84:60:0c:8a:a2:26:88:a7:05:82:fc:e9:ab:00:de:73:ab: 0c:82:70:f8:2e:49:26:fc:89:62:ac:7e:b7:07:4e:cb:bc:c4: 1b:2b:6f:b4:89:dc:e6:62:26:6b:c6:ce:0c:95:0e:2e:be:78: 6c:6d:98:ac:3e:d5:97:94:c8:78:70:53:7b:4d:97:66:59:13: 5b:3e:64:07:0c:65:2d:32:ec:d2:20:c7:9e:21:1a:f5:d4:49: a2:a2:d3:8b:63:71:52:95:5b:cf:d9:93:65:73:af:a2:6a:67: 87:97:b0:39:6f:c3:0b:5c:7b:b5:e0:cb:f8:93:1b:a7:24:75: 98:9b:28:3a:8f:24:6b:87:ce:74:a3:98:06:2c:6f:71:8e:73: c3:23:ce:b5:a4:dd:57:9f:a4:a6:5b:76:b0:29:33:38:93:4c: 72:21:79:01:04:8c:67:f1:94:a5:11:07:c7:59:c3:fa:b5:82: e3:5c:31:4c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y1Ca++ZMHPYXl0Vh4gOYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMWZhODA3ODQ3MzE3YTZhMGMzNjczMTc3ODVjYjEwNTJhYzlhYzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvOFu6Uoyk07LpuCduBB2ZClOCov 48HnrEu2E79zTqdd68Bte2qoU1rKfEYfaUEQ/qjApirLwulMfoQmX7NYkoRcS7Sb LwAbDSUeAAFNLRi3nJn1qWkeJUtz0ZrCSpk3fBiUUf+bTlNQ4lcBszFooSTg6C0X NsV5e6+tIT69XgiRC/U/CVHA2spTlXh1QJqvXtP91ZBF/rShWwMenLh47hTqh/I+ NS99BL7Q1ROfQpilZ2c1VPYaGGqNJ641hRe1WNPZ0bmSzZZBchfqJt/58P8CjVey hiWoBevaEsxtHweDDKFZOc9GHN3RyyydRmFHGgqx5Dpx/s5Kt9mop0DrdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCH6gHhHMXpqDDZzF3hcsQUqyaw6MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvSWZxQWVFY3hlbW9NTm5NWGVGeXhCU3JKckRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl/WYMA0G CSqGSIb3DQEBCwUAA4IBAQBKfShw4x3QKbdV/b3fj30EZribnKPujvmCeQbNgWtT H3XK5iwiPVs73PfGxvgSTBDgogxmrXQrgB+r2fFZ2BBx9+LKMIyTPIeThGAMiqIm iKcFgvzpqwDec6sMgnD4Lkkm/IlirH63B07LvMQbK2+0idzmYiZrxs4MlQ4uvnhs bZisPtWXlMh4cFN7TZdmWRNbPmQHDGUtMuzSIMeeIRr11EmiotOLY3FSlVvP2ZNl c6+iameHl7A5b8MLXHu14Mv4kxunJHWYmyg6jyRrh850o5gGLG9xjnPDI861pN1X n6SmW3awKTM4k0xyIXkBBIxn8ZSlEQfHWcP6tYLjXDFM -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:27 2026 by rpki-client