This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JMGDCLuRj7GOp4Ve7dyEUF1jWHA.roa File: JMGDCLuRj7GOp4Ve7dyEUF1jWHA.roa (raw, json) Hash identifier: fCnJmIru56NhjCImfxmFYyaBKRFZpd8h+N1Fyg3kj9A= Subject key identifier: 24:C1:83:08:BB:91:8F:B1:8E:A7:85:5E:ED:DC:84:50:5D:63:58:70 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB2728B40C087B90991471E55D658F Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JMGDCLuRj7GOp4Ve7dyEUF1jWHA.roa Signing time: Fri 02 Jan 2026 08:20:24 +0000 ROA not before: Fri 02 Jan 2026 08:20:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30058 IP address blocks: 151.241.145.0/24 maxlen: 24 151.241.147.0/24 maxlen: 24 151.244.0.0/24 maxlen: 24 151.247.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:27:28:b4:0c:08:7b:90:99:14:71:e5:5d:65:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24c18308bb918fb18ea7855eeddc84505d635870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:af:a4:06:f7:41:7a:be:3c:49:19:01:be:b8: 74:77:bc:af:c0:10:bc:aa:17:e9:94:ea:9d:e7:0a: 9d:44:f1:cf:83:42:bf:b6:d9:05:2d:c9:85:6c:0a: cb:1d:87:8c:2f:fd:3f:bb:61:e4:81:cb:1f:0f:a8: 48:4f:f9:ac:6a:78:8b:19:79:e4:b2:a2:a6:8f:c6: 75:f3:6e:1b:02:f8:f3:e3:7c:bb:0f:cf:8c:5f:ce: a7:60:90:2b:ca:1b:80:0a:14:69:01:42:d5:61:4e: ac:58:4f:51:df:d2:af:7f:ff:6f:90:34:90:fb:22: ce:31:98:7f:08:44:55:bc:5e:c3:d8:b0:f9:7c:d8: 3e:ff:f6:3b:87:9d:cf:6c:46:77:ca:1e:28:06:72: 4d:f0:81:ad:d9:eb:cd:4c:04:b4:a8:e6:9c:a9:4c: 34:a7:51:91:c8:07:00:63:52:9a:8e:c1:65:67:82: 05:fa:89:97:3f:8a:b0:fb:1e:c1:69:45:f0:f0:d5: 7e:40:04:11:02:4f:fd:14:fc:8c:02:55:80:9c:c9: df:3d:9e:ee:d6:3c:2e:08:03:9b:20:40:e9:20:9a: 46:ba:f7:f5:25:90:03:d9:a7:93:f1:f5:fd:37:b6: ad:15:9c:b7:69:63:1b:62:f9:61:48:43:1c:ca:a7: 3a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C1:83:08:BB:91:8F:B1:8E:A7:85:5E:ED:DC:84:50:5D:63:58:70 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JMGDCLuRj7GOp4Ve7dyEUF1jWHA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.145.0/24 151.241.147.0/24 151.244.0.0/24 151.247.129.0/24 Signature Algorithm: sha256WithRSAEncryption 96:c1:3c:b8:02:74:de:a7:78:33:45:16:19:d0:6a:a5:5a:29: cb:ed:de:75:18:50:88:1f:96:41:94:48:7f:45:92:69:fa:b5: ea:0b:e2:45:c9:56:95:47:41:37:d5:30:c4:a5:47:aa:03:7f: 9f:04:79:75:d0:3d:2a:69:4b:29:3e:b8:19:66:0a:c5:f5:32: 14:2f:e0:ea:4d:4a:6d:6d:41:0b:55:ef:a5:7f:4b:99:87:88: ef:e0:c4:89:a0:65:4f:09:a2:ee:2e:3b:a1:13:f3:5f:de:67: e2:ef:a9:93:bd:e4:59:91:14:9b:00:fb:15:41:16:23:0c:30: 57:1c:df:5e:0f:6d:ad:bd:39:d6:9d:ae:ca:d0:f0:b5:97:f6: 8f:29:18:59:de:57:a5:0a:ce:8c:e3:c9:8f:6f:b2:ab:5a:95: 34:46:56:9e:9f:a9:e0:c2:84:b9:64:7d:71:05:83:18:4e:8b: 37:54:83:54:7f:cb:ce:70:57:b3:b6:a4:fc:9d:cb:a8:e9:50: a6:54:2b:01:4a:4b:da:5c:ab:68:cc:fc:a2:c4:09:dc:24:33: ef:59:01:0e:01:a3:78:f2:b8:4e:5a:40:0a:f0:36:d4:13:ec: 03:e1:5c:29:54:c8:ec:c4:7d:01:8d:3a:05:3b:22:ae:a5:da: f4:41:90:96 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9yycotAwIe5CZFHHlXWWPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGMxODMwOGJiOTE4ZmIxOGVhNzg1NWVlZGRjODQ1MDVkNjM1ODcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq+kBvdBer48SRkBvrh0d7yvwBC8 qhfplOqd5wqdRPHPg0K/ttkFLcmFbArLHYeML/0/u2HkgcsfD6hIT/msaniLGXnk sqKmj8Z1824bAvjz43y7D8+MX86nYJAryhuAChRpAULVYU6sWE9R39Kvf/9vkDSQ +yLOMZh/CERVvF7D2LD5fNg+//Y7h53PbEZ3yh4oBnJN8IGt2evNTAS0qOacqUw0 p1GRyAcAY1KajsFlZ4IF+omXP4qw+x7BaUXw8NV+QAQRAk/9FPyMAlWAnMnfPZ7u 1jwuCAObIEDpIJpGuvf1JZAD2aeT8fX9N7atFZy3aWMbYvlhSEMcyqc6PwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCTBgwi7kY+xjqeFXu3chFBdY1hwMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvSk1HRENMdVJqN0dPcDRWZTdkeUVVRjFqV0hBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/GRAwQA l/GTAwQAl/QAAwQAl/eBMA0GCSqGSIb3DQEBCwUAA4IBAQCWwTy4AnTep3gzRRYZ 0GqlWinL7d51GFCIH5ZBlEh/RZJp+rXqC+JFyVaVR0E31TDEpUeqA3+fBHl10D0q aUspPrgZZgrF9TIUL+DqTUptbUELVe+lf0uZh4jv4MSJoGVPCaLuLjuhE/Nf3mfi 76mTveRZkRSbAPsVQRYjDDBXHN9eD22tvTnWna7K0PC1l/aPKRhZ3lelCs6M48mP b7KrWpU0Rlaen6ngwoS5ZH1xBYMYTos3VINUf8vOcFeztqT8ncuo6VCmVCsBSkva XKtozPyixAncJDPvWQEOAaN48rhOWkAK8DbUE+wD4VwpVMjsxH0BjToFOyKupdr0 QZCW -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:05 2026 by rpki-client