This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Ji3k61ZackOo4hvFiYbiPN6x8d8.roa File: Ji3k61ZackOo4hvFiYbiPN6x8d8.roa (raw, json) Hash identifier: HKlBlZncQu6gWbwpXaSAp5vAdZcfE3xg+FqPDL7hK9A= Subject key identifier: 26:2D:E4:EB:56:5A:72:43:A8:E2:1B:C5:89:86:E2:3C:DE:B1:F1:DF Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BE1E04AD10FAE23B4FCEBA4ECE60334B9 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Ji3k61ZackOo4hvFiYbiPN6x8d8.roa Signing time: Wed 21 Jan 2026 18:45:31 +0000 ROA not before: Wed 21 Jan 2026 18:45:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134465 IP address blocks: 151.247.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:e0:4a:d1:0f:ae:23:b4:fc:eb:a4:ec:e6:03:34:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 21 18:45:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=262de4eb565a7243a8e21bc58986e23cdeb1f1df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:31:1f:2e:d4:ec:12:d6:24:12:64:ee:9c:15: ca:db:d2:61:00:1e:21:eb:43:01:3a:1b:9e:ab:c0: 33:e7:02:75:9e:d5:8e:bd:b9:18:eb:a1:ab:93:7c: a8:42:84:62:c3:c3:99:68:9a:0c:74:17:77:77:e2: 8e:04:f3:82:05:b0:94:76:b8:00:dd:c2:49:67:87: 65:7b:ac:83:11:f9:9c:6d:76:cf:06:7f:cf:a2:13: 97:13:c7:af:02:81:07:c0:4a:a8:76:d1:01:60:37: 8b:ac:ae:41:d2:b6:a8:57:4f:84:3e:56:fc:63:93: c5:e0:d7:47:d7:1f:b7:47:2f:87:be:c9:e6:33:c2: 82:91:61:e5:ff:ca:1e:7f:44:02:04:a6:11:2b:24: cf:76:b1:46:4d:95:69:2e:b2:0d:4a:02:91:b9:e4: 16:6d:5c:9d:8f:23:96:c2:d0:2d:e3:bc:ec:95:3a: c7:af:9c:ea:b9:00:85:1d:af:2d:05:aa:72:3e:c7: b5:ba:58:18:9d:dc:ed:11:19:6d:71:f4:09:bc:b2: fd:d9:c4:73:fe:64:37:f7:77:7b:d6:de:c2:f1:a0: cb:dd:50:83:03:16:82:22:09:63:4a:b9:b2:af:c3: e3:b1:42:23:f4:a2:57:14:dc:fe:7d:1b:f9:d2:4a: b5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:2D:E4:EB:56:5A:72:43:A8:E2:1B:C5:89:86:E2:3C:DE:B1:F1:DF X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Ji3k61ZackOo4hvFiYbiPN6x8d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.247.23.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:74:19:79:92:95:2c:1f:f2:79:19:7e:13:be:09:23:e8:34: 5f:65:ef:08:07:f2:24:89:b9:59:53:2b:d9:d0:22:21:7d:5d: bc:71:aa:e9:f5:ee:a2:29:7d:ea:b4:dc:de:88:d6:61:9e:f2: 45:3e:60:b9:8f:b5:74:f9:df:37:01:d1:d4:93:92:f3:82:30: ff:fb:68:f3:db:f7:3f:81:88:c5:b8:2f:6c:a9:b7:16:e7:91: c0:c6:df:b1:e4:0f:98:10:f9:91:43:0d:dc:1e:a8:12:07:7d: 74:29:c3:41:ab:e0:04:f2:0e:36:99:c0:ab:3d:36:29:a0:8e: d1:a5:06:af:0a:6d:92:e5:9b:2b:e4:37:d3:63:ba:81:a9:e4: 72:6d:25:70:9f:ea:18:9f:ab:83:49:e7:c6:7d:5f:9c:19:06: ad:cb:b5:a9:b3:b2:3c:e7:8b:76:85:73:db:71:48:5b:d7:ab: e0:0b:9d:1c:2e:f1:68:2e:7f:ba:70:df:14:29:15:0f:f2:34: 0a:25:4c:93:a1:dd:39:67:33:3f:c9:b8:6d:a5:2f:d7:36:87: b6:88:04:2f:f9:e6:77:1c:4d:16:dc:85:dc:b8:40:e2:c5:4b: 52:8d:b5:dc:e0:de:c0:6f:b5:02:e7:9a:05:62:e5:61:c8:78: 6d:3c:a1:34 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvh4ErRD64jtPzrpOzmAzS5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTIxMTg0NTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjJkZTRlYjU2NWE3MjQzYThlMjFiYzU4OTg2ZTIzY2RlYjFmMWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjEfLtTsEtYkEmTunBXK29JhAB4h 60MBOhueq8Az5wJ1ntWOvbkY66Grk3yoQoRiw8OZaJoMdBd3d+KOBPOCBbCUdrgA 3cJJZ4dle6yDEfmcbXbPBn/PohOXE8evAoEHwEqodtEBYDeLrK5B0raoV0+EPlb8 Y5PF4NdH1x+3Ry+HvsnmM8KCkWHl/8oef0QCBKYRKyTPdrFGTZVpLrINSgKRueQW bVydjyOWwtAt47zslTrHr5zquQCFHa8tBapyPse1ulgYndztERltcfQJvLL92cRz /mQ393d71t7C8aDL3VCDAxaCIgljSrmyr8PjsUIj9KJXFNz+fRv50kq1pwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCYt5OtWWnJDqOIbxYmG4jzesfHfMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvSmkzazYxWmFja09vNGh2RmlZYmlQTjZ4OGQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/cXMA0G CSqGSIb3DQEBCwUAA4IBAQAtdBl5kpUsH/J5GX4Tvgkj6DRfZe8IB/IkiblZUyvZ 0CIhfV28carp9e6iKX3qtNzeiNZhnvJFPmC5j7V0+d83AdHUk5LzgjD/+2jz2/c/ gYjFuC9sqbcW55HAxt+x5A+YEPmRQw3cHqgSB310KcNBq+AE8g42mcCrPTYpoI7R pQavCm2S5Zsr5DfTY7qBqeRybSVwn+oYn6uDSefGfV+cGQaty7Wps7I854t2hXPb cUhb16vgC50cLvFoLn+6cN8UKRUP8jQKJUyTod05ZzM/ybhtpS/XNoe2iAQv+eZ3 HE0W3IXcuEDixUtSjbXc4N7Ab7UC55oFYuVhyHhtPKE0 -----END CERTIFICATE-----Generated at Fri Jan 23 19:17:01 2026 by rpki-client