This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JKkkYrRLbKUQ_O-DFQP2mQZ37Rk.roa File: JKkkYrRLbKUQ_O-DFQP2mQZ37Rk.roa (raw, json) Hash identifier: /5Uds156nXgF9ZyR7UFivI9TwvUwrCQHIGG63twLbYk= Subject key identifier: 24:A9:24:62:B4:4B:6C:A5:10:FC:EF:83:15:03:F6:99:06:77:ED:19 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB47C47C36BF48BF96B088361BD715 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JKkkYrRLbKUQ_O-DFQP2mQZ37Rk.roa Signing time: Fri 02 Jan 2026 08:20:32 +0000 ROA not before: Fri 02 Jan 2026 08:20:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64457 IP address blocks: 151.242.111.0/24 maxlen: 24 151.242.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:47:c4:7c:36:bf:48:bf:96:b0:88:36:1b:d7:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24a92462b44b6ca510fcef831503f6990677ed19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:67:e8:4f:ea:8f:7d:cc:23:d0:f8:c8:c4:30: e5:3d:13:7a:74:2a:b2:fe:3d:a4:38:e6:4a:29:fe: 74:b9:d9:d9:9f:89:d8:cd:79:ee:d4:f9:82:30:94: 5b:53:a0:b9:8a:42:17:f6:af:6b:22:2d:89:cb:48: af:89:c7:25:b4:65:23:77:35:4c:4e:bb:61:00:e2: 5c:a5:2e:a3:32:7f:c6:3f:ff:40:6b:1a:c6:44:ef: 68:b8:3c:15:0f:2c:25:a4:64:b4:5e:78:13:f3:05: d8:1d:08:46:c3:84:1d:aa:ba:35:e2:42:0d:0d:ee: 41:cb:51:69:a0:f0:fd:9e:ab:cb:cd:31:47:f2:7f: 15:bd:7f:9a:9b:33:6a:26:48:45:27:c9:d1:87:26: a5:8e:f0:0e:6e:02:83:a4:e1:d2:19:de:18:a4:2b: 92:86:41:5d:09:aa:43:5a:2d:71:c7:9f:90:d0:b3: 7e:b5:8c:6b:19:8e:14:5a:e3:64:bb:4d:ef:78:5c: 9a:b8:43:5f:fb:7e:be:84:37:e7:70:fc:1e:90:2e: 7d:f3:e9:b0:2d:73:07:fb:6e:85:32:37:d8:3e:87: 9d:19:cb:a3:e9:41:b9:37:44:5f:dc:45:e3:f8:59: d3:5d:5a:14:45:1e:1a:2a:0f:73:22:72:d7:95:db: b6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A9:24:62:B4:4B:6C:A5:10:FC:EF:83:15:03:F6:99:06:77:ED:19 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JKkkYrRLbKUQ_O-DFQP2mQZ37Rk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.111.0/24 151.242.144.0/24 Signature Algorithm: sha256WithRSAEncryption b2:fa:11:3b:d9:67:8a:4d:1d:22:73:d7:a4:81:4e:69:97:5a: 14:36:f8:a2:c5:86:f3:47:e7:c1:46:b7:3e:6d:d2:00:97:ef: 37:a1:b8:b5:a1:f4:39:91:a4:13:06:92:9c:e0:d0:67:38:20: e0:8f:11:7b:a3:26:fe:6a:14:4f:86:40:5c:d4:46:16:fd:76: bd:5e:dd:ce:ca:4c:5d:7c:ef:ac:f0:c5:0e:12:b8:26:27:f9: b4:4e:89:09:b4:58:05:72:4e:1e:72:42:bd:7d:66:97:41:bf: f9:c7:da:9a:75:1d:0d:33:f2:46:c7:1c:fa:b7:8e:87:93:23: 56:d4:16:8a:cc:61:8f:9d:87:21:66:11:5a:11:29:4c:18:d7: 9f:12:84:8a:30:c1:43:8e:84:75:17:10:d6:2e:3f:73:86:50: 1b:f2:cd:3c:3f:4d:8f:d4:a5:70:b0:5e:08:9e:18:da:ab:34: dc:35:e2:1c:3c:9f:f4:d2:e1:d8:67:0d:7f:d9:b6:83:ff:c0: 8e:3b:4e:67:7d:3c:d7:bc:07:83:8e:0c:c6:9b:77:92:5a:78: d6:f1:ae:b4:8a:b1:54:5a:f8:5b:f7:51:ff:d7:2a:ad:c5:3c: e9:33:4a:d7:6e:02:a0:d0:83:aa:f0:54:84:ac:96:94:5d:d3: 30:b2:6e:57 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y0fEfDa/SL+WsIg2G9cVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGE5MjQ2MmI0NGI2Y2E1MTBmY2VmODMxNTAzZjY5OTA2NzdlZDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmfoT+qPfcwj0PjIxDDlPRN6dCqy /j2kOOZKKf50udnZn4nYzXnu1PmCMJRbU6C5ikIX9q9rIi2Jy0iviccltGUjdzVM TrthAOJcpS6jMn/GP/9AaxrGRO9ouDwVDywlpGS0XngT8wXYHQhGw4Qdqro14kIN De5By1FpoPD9nqvLzTFH8n8VvX+amzNqJkhFJ8nRhyaljvAObgKDpOHSGd4YpCuS hkFdCapDWi1xx5+Q0LN+tYxrGY4UWuNku03veFyauENf+36+hDfncPwekC598+mw LXMH+26FMjfYPoedGcuj6UG5N0Rf3EXj+FnTXVoURR4aKg9zInLXldu2MQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCSpJGK0S2ylEPzvgxUD9pkGd+0ZMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvSktra1lyUkxiS1VRX08tREZRUDJtUVozN1JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/JvAwQA l/KQMA0GCSqGSIb3DQEBCwUAA4IBAQCy+hE72WeKTR0ic9ekgU5pl1oUNviixYbz R+fBRrc+bdIAl+83obi1ofQ5kaQTBpKc4NBnOCDgjxF7oyb+ahRPhkBc1EYW/Xa9 Xt3OykxdfO+s8MUOErgmJ/m0TokJtFgFck4eckK9fWaXQb/5x9qadR0NM/JGxxz6 t46HkyNW1BaKzGGPnYchZhFaESlMGNefEoSKMMFDjoR1FxDWLj9zhlAb8s08P02P 1KVwsF4InhjaqzTcNeIcPJ/00uHYZw1/2baD/8COO05nfTzXvAeDjgzGm3eSWnjW 8a60irFUWvhb91H/1yqtxTzpM0rXbgKg0IOq8FSErJaUXdMwsm5X -----END CERTIFICATE-----Generated at Sun Jan 18 06:29:13 2026 by rpki-client