This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JPUuEGQCJ_ypARAkIS-hzQ6xfA0.roa File: JPUuEGQCJ_ypARAkIS-hzQ6xfA0.roa (raw, json) Hash identifier: eT1K0muRAOhVMdgjcJcptyDKM7Q3rL4IRSWDY+IixuI= Subject key identifier: 24:F5:2E:10:64:02:27:FC:A9:01:10:24:21:2F:A1:CD:0E:B1:7C:0D Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB8190C2CFABB2BE15031A79A91EE6 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JPUuEGQCJ_ypARAkIS-hzQ6xfA0.roa Signing time: Fri 02 Jan 2026 08:20:47 +0000 ROA not before: Fri 02 Jan 2026 08:20:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210667 IP address blocks: 151.241.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:81:90:c2:cf:ab:b2:be:15:03:1a:79:a9:1e:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=24f52e10640227fca9011024212fa1cd0eb17c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:75:2e:67:af:6e:62:0f:12:fe:9b:56:c9:b7: 73:bc:a2:ab:d4:66:65:11:38:6a:95:30:57:b9:fb: 42:20:9d:74:bf:72:e6:77:4b:90:ba:ac:d3:1d:f3: 83:16:f5:75:30:6e:1b:ec:c6:25:82:2a:5b:ec:fc: 72:20:46:e5:4b:f8:ff:25:e6:b7:7e:1d:4e:55:96: 11:c7:11:f6:cb:d8:ea:06:1a:a7:df:7d:6f:bf:f2: cf:37:07:a1:c3:2f:c6:4f:95:65:33:5b:58:59:4e: ac:84:2e:12:12:69:e6:88:ee:be:57:b1:bb:a7:2b: 36:f4:a4:36:b6:ea:9a:ce:4b:d5:c8:fb:5a:95:47: fc:fc:10:5a:00:e4:4a:86:51:56:39:6b:c3:0b:d1: f9:b5:f0:da:b4:f3:ef:6b:56:d6:7e:18:8e:a6:45: 14:a8:d1:0a:ac:cc:5d:a7:74:00:a8:ec:94:6c:2b: d1:8b:25:c2:ec:f0:34:04:a1:d7:cc:6f:95:c2:38: 1c:ec:96:91:d6:16:4a:12:2e:94:18:f2:fc:73:dc: 9b:de:af:ab:68:65:3f:fb:e1:07:4a:d0:4e:c0:2c: 44:b3:89:dd:4b:6a:da:24:d0:de:aa:19:74:11:6a: c1:a6:7f:e9:2a:a1:82:0e:c3:75:5c:ba:14:58:4d: 8e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F5:2E:10:64:02:27:FC:A9:01:10:24:21:2F:A1:CD:0E:B1:7C:0D X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JPUuEGQCJ_ypARAkIS-hzQ6xfA0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.74.0/24 Signature Algorithm: sha256WithRSAEncryption 09:f9:b8:69:85:4d:ae:b6:51:52:d6:d6:c8:7b:3c:87:57:d4: b4:c6:b2:05:00:ea:da:f5:2f:da:4f:22:d0:68:92:d4:94:30: 9f:68:44:66:e2:d0:5c:5f:8c:c5:95:4d:ee:ec:79:17:4f:eb: a8:83:0f:ea:9f:d8:c8:f5:06:a1:df:b9:5c:03:fb:d8:59:6a: 08:fc:02:3c:d1:9f:c5:44:69:f1:bb:de:93:c1:13:d3:17:01: 13:77:87:ca:b4:29:9e:6e:0d:43:ff:ee:95:89:d5:f6:be:b9: 2d:16:c3:d6:57:32:7b:1f:c1:cc:b3:9b:1d:2c:a7:62:a6:cd: c9:8c:df:35:11:ff:9a:fc:43:73:9b:5f:a5:6e:c1:65:75:5b: 7d:57:57:4c:0e:9e:86:62:79:f7:09:25:86:c7:c1:a5:2d:3b: c4:69:68:e5:20:92:de:10:23:70:99:2f:58:b3:5c:ca:81:a7: 8d:a6:ae:6c:f4:bf:f1:1b:b5:95:86:05:4f:c5:2f:c2:95:5b: 5f:97:a9:13:6c:5b:b1:64:fd:a8:58:f6:ee:02:2c:c8:55:18: 96:6a:d2:48:c6:b0:57:46:1c:12:9d:16:82:b9:74:eb:09:67: 95:9a:dc:07:20:1a:18:ec:c3:6d:51:4e:a8:60:42:7a:2b:c0: 6b:5f:78:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y4GQws+rsr4VAxp5qR7mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGY1MmUxMDY0MDIyN2ZjYTkwMTEwMjQyMTJmYTFjZDBlYjE3YzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nUuZ69uYg8S/ptWybdzvKKr1GZl EThqlTBXuftCIJ10v3Lmd0uQuqzTHfODFvV1MG4b7MYlgipb7PxyIEblS/j/Jea3 fh1OVZYRxxH2y9jqBhqn331vv/LPNwehwy/GT5VlM1tYWU6shC4SEmnmiO6+V7G7 pys29KQ2tuqazkvVyPtalUf8/BBaAORKhlFWOWvDC9H5tfDatPPva1bWfhiOpkUU qNEKrMxdp3QAqOyUbCvRiyXC7PA0BKHXzG+Vwjgc7JaR1hZKEi6UGPL8c9yb3q+r aGU/++EHStBOwCxEs4ndS2raJNDeqhl0EWrBpn/pKqGCDsN1XLoUWE2OJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCT1LhBkAif8qQEQJCEvoc0OsXwNMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvSlBVdUVHUUNKX3lwQVJBa0lTLWh6UTZ4ZkEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/FKMA0G CSqGSIb3DQEBCwUAA4IBAQAJ+bhphU2utlFS1tbIezyHV9S0xrIFAOra9S/aTyLQ aJLUlDCfaERm4tBcX4zFlU3u7HkXT+uogw/qn9jI9Qah37lcA/vYWWoI/AI80Z/F RGnxu96TwRPTFwETd4fKtCmebg1D/+6VidX2vrktFsPWVzJ7H8HMs5sdLKdips3J jN81Ef+a/ENzm1+lbsFldVt9V1dMDp6GYnn3CSWGx8GlLTvEaWjlIJLeECNwmS9Y s1zKgaeNpq5s9L/xG7WVhgVPxS/ClVtfl6kTbFuxZP2oWPbuAizIVRiWatJIxrBX RhwSnRaCuXTrCWeVmtwHIBoY7MNtUU6oYEJ6K8BrX3j/ -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:40 2026 by rpki-client