This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QtJ_r1UwU9gfpMDEkOLKeG7CIQQ.roa File: QtJ_r1UwU9gfpMDEkOLKeG7CIQQ.roa (raw, json) Hash identifier: riKq3utl0uPqsz4SysWvRdVaC9oH51UOXtuTttMWX/Q= Subject key identifier: 42:D2:7F:AF:55:30:53:D8:1F:A4:C0:C4:90:E2:CA:78:6E:C2:21:04 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BB619B10E17D9CE03DA3378678CAABA10 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QtJ_r1UwU9gfpMDEkOLKeG7CIQQ.roa Signing time: Tue 13 Jan 2026 06:44:55 +0000 ROA not before: Tue 13 Jan 2026 06:44:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198584 IP address blocks: 151.243.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:19:b1:0e:17:d9:ce:03:da:33:78:67:8c:aa:ba:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 13 06:44:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=42d27faf553053d81fa4c0c490e2ca786ec22104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f9:d1:e7:f9:4f:6e:b9:15:f1:e2:ee:1c:c0: e6:21:0d:29:65:02:6a:64:14:47:fd:8c:3a:f9:9c: 47:b5:ac:68:22:d0:95:e9:61:f7:23:b8:a6:80:54: 7d:c3:3e:8a:9b:10:c3:2c:fe:ad:af:c5:8f:05:2e: 60:6d:0c:a0:aa:dd:99:ab:70:f6:d8:9e:43:14:5e: ec:f4:2f:8b:27:2c:15:aa:f4:da:1d:4b:2a:31:83: 34:ce:5e:62:c5:39:d6:1f:a3:63:c0:1f:61:ec:67: 98:b2:5d:5a:32:17:36:b5:73:a6:5e:25:b0:f7:5f: bc:4c:bb:4b:6b:bc:a0:2a:95:5e:59:2b:07:8f:cf: fc:dc:32:0a:aa:32:21:b0:68:75:f1:e8:d8:74:e9: f0:91:ff:39:fb:c2:2c:c5:cd:db:25:8c:5e:9a:f4: d2:79:63:ce:b6:6e:37:a7:52:b9:59:3a:38:e7:5b: 08:0e:02:7f:00:91:fe:8d:84:24:75:09:85:6c:7b: 38:e6:9e:4d:d0:be:2d:74:3c:31:59:8f:50:9a:80: 9c:7c:40:13:85:5e:2b:19:c0:4e:ff:39:a5:46:de: 6e:6a:bc:79:f9:f8:27:be:31:0a:b1:35:f2:65:72: 28:c2:23:74:11:15:21:8a:b3:92:59:44:ed:88:1b: 5b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D2:7F:AF:55:30:53:D8:1F:A4:C0:C4:90:E2:CA:78:6E:C2:21:04 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QtJ_r1UwU9gfpMDEkOLKeG7CIQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.212.0/24 Signature Algorithm: sha256WithRSAEncryption b0:52:4b:6c:89:5f:b9:2b:19:09:04:c6:de:6f:40:3e:01:b7: 35:32:bb:9c:4c:7e:68:15:e6:f7:7b:d2:6e:b3:9b:f5:a1:d0: 46:24:ff:1a:69:a4:1e:5e:d4:65:e7:f0:99:b2:cb:54:86:ff: 4c:c9:11:a4:10:01:f5:b7:ac:fa:b8:5d:14:b7:81:d6:30:f5: 28:7b:f7:bf:5c:8f:a7:c3:e9:46:d3:3f:a2:a1:11:24:92:97: d0:da:d7:54:4e:81:53:98:55:88:43:57:70:e1:c6:be:19:c0: b1:73:66:02:69:b8:dc:71:ef:9f:fb:68:ba:48:3b:ab:ed:24: 37:85:fb:09:78:3b:21:4b:82:82:81:51:83:99:05:b5:40:19: 3a:63:63:09:e6:10:67:57:c7:d3:47:eb:59:1e:30:e0:9a:fe: ab:9b:2a:07:cb:99:1a:ce:c4:a5:d5:54:88:d9:7f:f2:f8:3a: c7:69:b8:74:31:1a:50:d2:05:c6:d0:5d:68:35:c6:7b:23:ec: f2:d0:ca:52:e6:58:fb:a5:9d:cd:7f:94:39:7b:15:b3:9a:04: 50:14:d0:cd:5f:9e:fc:86:b0:4e:64:22:b6:a0:67:18:eb:2b: 15:28:79:33:c0:8d:b5:78:d7:67:0f:8d:0c:06:7f:02:d5:ca: 27:a7:e1:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu2GbEOF9nOA9ozeGeMqroQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTEzMDY0NDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MmQyN2ZhZjU1MzA1M2Q4MWZhNGMwYzQ5MGUyY2E3ODZlYzIyMTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/nR5/lPbrkV8eLuHMDmIQ0pZQJq ZBRH/Yw6+ZxHtaxoItCV6WH3I7imgFR9wz6KmxDDLP6tr8WPBS5gbQygqt2Zq3D2 2J5DFF7s9C+LJywVqvTaHUsqMYM0zl5ixTnWH6NjwB9h7GeYsl1aMhc2tXOmXiWw 91+8TLtLa7ygKpVeWSsHj8/83DIKqjIhsGh18ejYdOnwkf85+8Isxc3bJYxemvTS eWPOtm43p1K5WTo451sIDgJ/AJH+jYQkdQmFbHs45p5N0L4tdDwxWY9QmoCcfEAT hV4rGcBO/zmlRt5uarx5+fgnvjEKsTXyZXIowiN0ERUhirOSWUTtiBtbdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFELSf69VMFPYH6TAxJDiynhuwiEEMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvUXRKX3IxVXdVOWdmcE1ERWtPTEtlRzdDSVFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/PUMA0G CSqGSIb3DQEBCwUAA4IBAQCwUktsiV+5KxkJBMbeb0A+Abc1MrucTH5oFeb3e9Ju s5v1odBGJP8aaaQeXtRl5/CZsstUhv9MyRGkEAH1t6z6uF0Ut4HWMPUoe/e/XI+n w+lG0z+ioREkkpfQ2tdUToFTmFWIQ1dw4ca+GcCxc2YCabjcce+f+2i6SDur7SQ3 hfsJeDshS4KCgVGDmQW1QBk6Y2MJ5hBnV8fTR+tZHjDgmv6rmyoHy5kazsSl1VSI 2X/y+DrHabh0MRpQ0gXG0F1oNcZ7I+zy0MpS5lj7pZ3Nf5Q5exWzmgRQFNDNX578 hrBOZCK2oGcY6ysVKHkzwI21eNdnD40MBn8C1conp+H0 -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:06 2026 by rpki-client