This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JLh_-Pa3uxhDlSp5y3piPpE5ve8.roa File: JLh_-Pa3uxhDlSp5y3piPpE5ve8.roa (raw, json) Hash identifier: 0MpThNqVE25ftmt7PyyYbQL09jDHuvSppnSzSvs3cTs= Subject key identifier: 24:B8:7F:F8:F6:B7:BB:18:43:95:2A:79:CB:7A:62:3E:91:39:BD:EF Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB85B83BEDFB09020995BD3A47E30F Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JLh_-Pa3uxhDlSp5y3piPpE5ve8.roa Signing time: Fri 02 Jan 2026 08:20:48 +0000 ROA not before: Fri 02 Jan 2026 08:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211484 IP address blocks: 151.240.144.0/24 maxlen: 24 151.246.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:85:b8:3b:ed:fb:09:02:09:95:bd:3a:47:e3:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24b87ff8f6b7bb1843952a79cb7a623e9139bdef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:85:4d:54:05:e0:44:65:51:49:e8:17:47:22: 8f:98:d8:b0:eb:25:a1:3a:cb:78:e8:ac:d8:4c:11: a2:48:c5:fb:ac:dc:78:75:57:d1:4b:06:b9:1c:6f: d4:6b:09:18:f0:90:7f:6a:2c:1c:96:e6:2d:b5:2f: 1c:61:10:14:f3:f2:65:6d:d1:87:78:d5:55:e6:c7: 96:64:bd:6f:27:8a:e1:7e:a3:ed:9c:3c:62:97:f0: 09:36:37:e2:a9:fa:88:4e:51:04:aa:50:e5:a8:3f: e1:39:5b:78:d5:7e:57:4f:43:67:1b:39:f1:9c:8b: 09:e6:1b:f1:2c:79:60:e1:55:d4:52:13:1e:b0:22: 9a:02:a9:8f:0a:44:a0:8d:9b:31:cc:ed:d4:ba:e8: 70:be:6d:88:b6:fe:b8:c0:2c:de:c0:9d:34:f7:20: 3c:c4:b8:a0:da:81:1e:bf:67:d7:58:3e:f4:fe:e8: c2:83:1a:db:64:41:1d:50:99:c2:64:55:bd:54:7e: 3f:86:05:eb:7d:10:7a:fb:f2:ff:9f:57:4f:a3:35: c2:bd:a9:19:ce:8c:01:c1:13:b5:2b:78:62:a5:e3: 2b:f8:17:4a:85:90:57:ed:41:17:c5:8c:ae:e7:80: b3:94:40:54:ce:a7:92:df:00:18:42:57:ce:91:ab: af:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B8:7F:F8:F6:B7:BB:18:43:95:2A:79:CB:7A:62:3E:91:39:BD:EF X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JLh_-Pa3uxhDlSp5y3piPpE5ve8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.144.0/24 151.246.128.0/17 Signature Algorithm: sha256WithRSAEncryption b5:0d:13:27:63:ae:5d:75:e8:e1:1e:53:25:95:58:af:af:f5: 3b:07:52:d5:47:9e:af:f5:99:f9:03:70:a4:0a:2d:17:82:a6: fb:7f:b8:c1:11:35:1f:cd:97:68:d8:4c:f2:44:a0:15:63:27: 84:b1:ee:cb:31:e0:36:cd:64:b2:ff:2c:9e:64:99:92:e2:22: 1d:e8:6a:d7:38:55:d2:67:5f:11:04:0c:cb:99:e5:93:ed:30: 56:83:2e:da:76:c6:11:5b:ee:01:c0:bd:fa:84:8c:a0:72:be: c4:27:8e:aa:ad:ac:41:ec:d4:70:2f:24:81:df:f8:38:b9:09: 1c:4c:f7:0e:e4:3e:a6:24:77:da:26:0d:64:86:4b:98:c0:8f: 59:d4:07:16:6e:28:b8:5f:06:e4:9c:92:5c:f0:e0:69:78:43: cd:2d:0a:bc:bc:12:93:87:fe:75:9f:5e:db:28:4d:2a:cb:16: a5:43:a7:19:72:7b:c7:0f:df:05:e4:d5:b8:e5:8e:34:3a:d4: c8:d2:5b:80:9f:fc:1d:2f:14:8f:e0:3f:f0:fb:02:1c:bf:5a: a0:59:9f:f9:7d:e2:f9:d7:ba:b6:fc:f9:03:12:a7:3e:9b:3d: bd:ee:b8:d0:f4:1e:7a:0d:da:44:2a:c3:b8:64:04:09:b2:84: 4a:48:37:86 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y4W4O+37CQIJlb06R+MPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGI4N2ZmOGY2YjdiYjE4NDM5NTJhNzljYjdhNjIzZTkxMzliZGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYVNVAXgRGVRSegXRyKPmNiw6yWh Ost46KzYTBGiSMX7rNx4dVfRSwa5HG/UawkY8JB/aiwcluYttS8cYRAU8/JlbdGH eNVV5seWZL1vJ4rhfqPtnDxil/AJNjfiqfqITlEEqlDlqD/hOVt41X5XT0NnGznx nIsJ5hvxLHlg4VXUUhMesCKaAqmPCkSgjZsxzO3Uuuhwvm2Itv64wCzewJ009yA8 xLig2oEev2fXWD70/ujCgxrbZEEdUJnCZFW9VH4/hgXrfRB6+/L/n1dPozXCvakZ zowBwRO1K3hipeMr+BdKhZBX7UEXxYyu54CzlEBUzqeS3wAYQlfOkauvXQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCS4f/j2t7sYQ5Uqect6Yj6ROb3vMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvSkxoXy1QYTN1eGhEbFNwNXkzcGlQcEU1dmU4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/CQAwQH l/aAMA0GCSqGSIb3DQEBCwUAA4IBAQC1DRMnY65ddejhHlMllVivr/U7B1LVR56v 9Zn5A3CkCi0Xgqb7f7jBETUfzZdo2EzyRKAVYyeEse7LMeA2zWSy/yyeZJmS4iId 6GrXOFXSZ18RBAzLmeWT7TBWgy7adsYRW+4BwL36hIygcr7EJ46qraxB7NRwLySB 3/g4uQkcTPcO5D6mJHfaJg1khkuYwI9Z1AcWbii4XwbknJJc8OBpeEPNLQq8vBKT h/51n17bKE0qyxalQ6cZcnvHD98F5NW45Y40OtTI0luAn/wdLxSP4D/w+wIcv1qg WZ/5feL517q2/PkDEqc+mz297rjQ9B56DdpEKsO4ZAQJsoRKSDeG -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:52 2026 by rpki-client