This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Prig9gZN_1r0IxDRVycZzo8ZzY4.roa File: Prig9gZN_1r0IxDRVycZzo8ZzY4.roa (raw, json) Hash identifier: t0VDUKw2eoFxUuieeEFSxgcy9g3u6stUpI/dKUdIk2c= Subject key identifier: 3E:B8:A0:F6:06:4D:FF:5A:F4:23:10:D1:57:27:19:CE:8F:19:CD:8E Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB52750995D4A9D1D322B39674CF0F Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Prig9gZN_1r0IxDRVycZzo8ZzY4.roa Signing time: Fri 02 Jan 2026 08:20:35 +0000 ROA not before: Fri 02 Jan 2026 08:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 139989 IP address blocks: 151.242.80.0/24 maxlen: 24 151.243.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:52:75:09:95:d4:a9:d1:d3:22:b3:96:74:cf:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3eb8a0f6064dff5af42310d1572719ce8f19cd8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:82:21:7a:e1:87:6b:62:d1:2b:98:3a:62:5d: 9a:5c:d6:d4:09:66:b6:72:66:cf:1c:ef:fa:34:62: c9:0d:75:03:51:2b:b9:6d:9f:5b:d4:82:a4:a8:bf: e5:ec:f2:af:6d:7b:0d:2b:b0:98:6f:cd:9c:e8:fe: 6a:43:71:25:95:81:38:4b:1b:0f:12:bc:6a:3c:c6: ec:fa:94:14:c1:ab:35:4b:fd:85:c9:8f:10:c3:5d: c2:49:e5:7f:c3:b9:de:53:25:9b:45:41:19:fb:61: be:54:c7:de:96:b6:f1:0d:09:62:a2:d4:4b:fa:7e: 00:2b:5d:db:c3:b5:82:3b:2e:77:ad:29:65:b7:c8: 37:11:5f:90:4b:26:a8:a6:67:5f:ae:f0:a2:cf:36: 66:7c:38:7f:b4:19:63:8f:aa:46:2d:3e:00:a4:b2: c4:75:e3:40:3f:ed:59:a1:2a:1c:6e:fd:33:0c:d8: 3b:41:fd:7b:0b:5b:62:fb:1c:ee:8e:ee:51:ae:4b: 2f:dc:a5:da:2b:ca:40:3d:96:22:09:e1:09:cc:2c: 22:af:92:09:20:5b:a2:0a:f3:17:15:67:ec:f7:ca: c0:1e:49:14:fc:7c:0d:e1:2a:93:0f:f1:92:51:9f: aa:92:c7:3b:18:dd:c7:30:bf:dd:60:90:b1:b6:58: a1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B8:A0:F6:06:4D:FF:5A:F4:23:10:D1:57:27:19:CE:8F:19:CD:8E X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Prig9gZN_1r0IxDRVycZzo8ZzY4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.80.0/24 151.243.41.0/24 Signature Algorithm: sha256WithRSAEncryption a1:a2:ce:f6:92:7a:f4:35:43:90:e4:df:6d:99:0a:7c:19:3e: 28:56:46:b0:b1:9f:12:6b:ab:53:cd:b2:62:84:1b:38:d6:a2: 5c:2b:53:f3:51:0f:b7:5a:33:cb:bb:ac:8f:44:7d:eb:ed:7d: c1:d3:93:b3:e9:b4:2d:6a:5e:35:b2:6e:94:0c:01:dd:f0:d6: 10:1d:84:52:97:3d:07:e2:43:35:f7:ce:71:ad:cd:19:e5:36: 1b:34:dc:26:3c:45:cd:7d:18:a4:13:dc:69:10:39:37:46:9f: c3:fd:0a:ea:64:27:bb:33:97:8b:59:27:d5:dd:3e:fd:2b:76: 6d:25:53:87:09:a2:a5:ff:3e:aa:35:ca:0d:91:02:c7:a8:71: f9:e2:92:20:7f:26:2b:e5:25:b6:2d:e5:89:59:49:27:6b:22: e4:c7:ca:4f:3f:61:44:db:2a:a2:e1:40:28:8e:7a:16:75:89: fe:7f:00:d3:f9:95:35:af:e5:ef:64:ae:db:31:27:11:1a:e1: d8:9f:d4:0e:ad:b7:4f:fb:6f:dc:73:61:73:f3:2b:cc:07:87: e5:4a:3d:b7:20:64:fa:c2:af:7b:72:1d:b4:f0:e0:de:39:84: f6:07:53:1a:aa:fc:c9:23:99:02:2d:0b:d4:f5:c4:a0:7f:de: f6:9d:1a:83 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y1J1CZXUqdHTIrOWdM8PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZWI4YTBmNjA2NGRmZjVhZjQyMzEwZDE1NzI3MTljZThmMTljZDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYIheuGHa2LRK5g6Yl2aXNbUCWa2 cmbPHO/6NGLJDXUDUSu5bZ9b1IKkqL/l7PKvbXsNK7CYb82c6P5qQ3EllYE4SxsP ErxqPMbs+pQUwas1S/2FyY8Qw13CSeV/w7neUyWbRUEZ+2G+VMfelrbxDQliotRL +n4AK13bw7WCOy53rSllt8g3EV+QSyaopmdfrvCizzZmfDh/tBljj6pGLT4ApLLE deNAP+1ZoSocbv0zDNg7Qf17C1ti+xzuju5Rrksv3KXaK8pAPZYiCeEJzCwir5IJ IFuiCvMXFWfs98rAHkkU/HwN4SqTD/GSUZ+qksc7GN3HML/dYJCxtlihhwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD64oPYGTf9a9CMQ0VcnGc6PGc2OMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvUHJpZzlnWk5fMXIwSXhEUlZ5Y1p6bzhaelk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/JQAwQA l/MpMA0GCSqGSIb3DQEBCwUAA4IBAQChos72knr0NUOQ5N9tmQp8GT4oVkawsZ8S a6tTzbJihBs41qJcK1PzUQ+3WjPLu6yPRH3r7X3B05Oz6bQtal41sm6UDAHd8NYQ HYRSlz0H4kM1985xrc0Z5TYbNNwmPEXNfRikE9xpEDk3Rp/D/QrqZCe7M5eLWSfV 3T79K3ZtJVOHCaKl/z6qNcoNkQLHqHH54pIgfyYr5SW2LeWJWUknayLkx8pPP2FE 2yqi4UAojnoWdYn+fwDT+ZU1r+XvZK7bMScRGuHYn9QOrbdP+2/cc2Fz8yvMB4fl Sj23IGT6wq97ch208ODeOYT2B1MaqvzJI5kCLQvU9cSgf972nRqD -----END CERTIFICATE-----Generated at Sun Jan 18 06:29:59 2026 by rpki-client