This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/InLHw449zg7VA20jGC2qSs-cwfk.roa File: InLHw449zg7VA20jGC2qSs-cwfk.roa (raw, json) Hash identifier: vuNeKA4Ehlmnk/5QCB573t2m7plXQx//2oZU2sb5Vk8= Subject key identifier: 22:72:C7:C3:8E:3D:CE:0E:D5:03:6D:23:18:2D:AA:4A:CF:9C:C1:F9 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB3CC2433D9F580F29C2FA2E2616A3 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/InLHw449zg7VA20jGC2qSs-cwfk.roa Signing time: Fri 02 Jan 2026 08:20:29 +0000 ROA not before: Fri 02 Jan 2026 08:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56655 IP address blocks: 151.242.104.0/24 maxlen: 24 151.242.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:3c:c2:43:3d:9f:58:0f:29:c2:fa:2e:26:16:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2272c7c38e3dce0ed5036d23182daa4acf9cc1f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:84:7a:c1:07:80:fc:5f:0f:0c:8a:65:f7:9c: a5:0b:57:c6:2a:94:21:97:d8:71:0e:39:cc:8a:fa: 1b:95:54:d1:f1:99:36:9b:be:4c:f9:0c:50:9e:1c: be:d9:80:c5:ef:bb:e7:b4:ec:7e:4e:2b:63:2d:95: c7:d9:99:b1:19:2d:a5:43:7a:db:97:5c:68:78:8f: 9f:c4:d7:39:ee:f8:93:72:a7:6d:d4:c7:90:f8:5c: 91:fb:61:57:6a:0c:f6:20:cb:b5:d6:ba:83:4f:3b: dd:90:c8:52:f5:0c:17:e9:2a:24:50:67:e0:46:ca: a0:54:c0:50:0c:d7:7f:9c:6d:71:23:cb:ec:1d:78: 3c:b5:22:6c:20:f5:36:13:49:bb:cc:12:2e:91:bd: bd:6c:33:4a:00:d9:f5:28:26:60:10:fd:db:f0:f5: dc:c5:0d:05:dc:01:0b:7d:71:7b:d2:e4:58:f9:d4: db:5b:1e:e2:b2:c7:3e:ed:a6:bb:6a:24:13:ce:15: b8:76:f3:84:d1:78:58:41:2c:30:37:12:ca:ca:8c: 04:d2:b1:47:1d:e6:ec:71:c1:82:27:45:ed:58:d5: 90:bc:c0:3d:bc:f6:01:2b:70:69:54:7d:ff:dd:ac: be:ad:71:16:7b:ca:08:c8:ab:ed:b8:14:e7:76:df: 42:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:72:C7:C3:8E:3D:CE:0E:D5:03:6D:23:18:2D:AA:4A:CF:9C:C1:F9 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/InLHw449zg7VA20jGC2qSs-cwfk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.104.0/24 151.242.168.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:ad:d0:3c:72:bd:51:ac:1e:a6:03:06:f9:bf:c8:2b:2d:c2: 37:be:68:d4:e2:d2:51:de:32:47:ba:78:17:98:c2:5d:e8:fe: 14:79:bd:20:98:d8:9d:5e:98:1c:80:86:3a:b8:95:eb:cd:b6: ea:34:7b:45:ec:fa:3b:65:99:8c:df:91:00:34:4c:21:3d:be: e5:ab:19:ae:c3:7b:64:09:22:ce:0e:96:af:e5:68:9b:56:d8: 7e:ee:9d:57:fd:45:f7:c9:16:e5:88:55:a5:28:04:df:cb:aa: d4:d1:b9:e2:45:88:0c:79:b2:92:86:e3:5d:a7:1d:17:ad:14: a1:bc:ba:dc:0d:62:dd:51:e3:80:12:b5:d0:52:1f:30:2b:6c: c3:38:a0:e4:21:a3:7b:1b:71:c5:fb:61:b1:d0:27:71:5a:10: 9e:43:4d:13:96:4f:9b:b4:7f:a5:1e:c5:3f:05:63:52:90:98: 40:ab:34:63:68:7e:13:b9:5f:2b:52:1b:14:bc:d3:2c:0a:2d: 36:de:9e:52:d8:31:c6:d5:04:c8:f1:7a:65:4a:1b:55:2b:58: 90:f4:2f:96:60:c4:58:0b:e0:5a:9d:f8:74:be:56:b1:a9:99: 0a:6e:da:d1:77:6c:d4:25:02:4a:c3:3c:c7:c0:29:97:5e:34: 7d:a4:9d:10 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yzzCQz2fWA8pwvouJhajMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjcyYzdjMzhlM2RjZTBlZDUwMzZkMjMxODJkYWE0YWNmOWNjMWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4R6wQeA/F8PDIpl95ylC1fGKpQh l9hxDjnMivoblVTR8Zk2m75M+QxQnhy+2YDF77vntOx+TitjLZXH2ZmxGS2lQ3rb l1xoeI+fxNc57viTcqdt1MeQ+FyR+2FXagz2IMu11rqDTzvdkMhS9QwX6SokUGfg RsqgVMBQDNd/nG1xI8vsHXg8tSJsIPU2E0m7zBIukb29bDNKANn1KCZgEP3b8PXc xQ0F3AELfXF70uRY+dTbWx7issc+7aa7aiQTzhW4dvOE0XhYQSwwNxLKyowE0rFH HebsccGCJ0XtWNWQvMA9vPYBK3BpVH3/3ay+rXEWe8oIyKvtuBTndt9CzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCJyx8OOPc4O1QNtIxgtqkrPnMH5MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvSW5MSHc0NDl6ZzdWQTIwakdDMnFTcy1jd2ZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/JoAwQB l/KoMA0GCSqGSIb3DQEBCwUAA4IBAQBfrdA8cr1RrB6mAwb5v8grLcI3vmjU4tJR 3jJHungXmMJd6P4Ueb0gmNidXpgcgIY6uJXrzbbqNHtF7Po7ZZmM35EANEwhPb7l qxmuw3tkCSLODpav5WibVth+7p1X/UX3yRbliFWlKATfy6rU0bniRYgMebKShuNd px0XrRShvLrcDWLdUeOAErXQUh8wK2zDOKDkIaN7G3HF+2Gx0CdxWhCeQ00Tlk+b tH+lHsU/BWNSkJhAqzRjaH4TuV8rUhsUvNMsCi023p5S2DHG1QTI8XplShtVK1iQ 9C+WYMRYC+Banfh0vlaxqZkKbtrRd2zUJQJKwzzHwCmXXjR9pJ0Q -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:02 2026 by rpki-client