This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/S1FQx_SP3lMiR1Br62kr_Semr34.roa File: S1FQx_SP3lMiR1Br62kr_Semr34.roa (raw, json) Hash identifier: KfztJzQcXcacglLBtA6ZsQ/WvJDVZJp9X6B4dzhgEvU= Subject key identifier: 4B:51:50:C7:F4:8F:DE:53:22:47:50:6B:EB:69:2B:FD:27:A6:AF:7E Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019C100559B745765B381A121D60B40F63DF Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/S1FQx_SP3lMiR1Br62kr_Semr34.roa Signing time: Fri 30 Jan 2026 17:48:31 +0000 ROA not before: Fri 30 Jan 2026 17:48:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205886 IP address blocks: 151.240.226.0/24 maxlen: 24 151.241.25.0/24 maxlen: 24 151.245.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Feb 2026 08:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:10:05:59:b7:45:76:5b:38:1a:12:1d:60:b4:0f:63:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 30 17:48:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b5150c7f48fde532247506beb692bfd27a6af7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:17:98:2a:dd:c0:05:c6:67:02:8e:df:cb:4c: 58:1e:5b:4f:0e:a4:e6:c5:71:cc:4d:f4:8a:a0:42: f3:d2:64:d3:33:71:2e:ba:20:61:93:22:46:df:25: c8:4d:2c:e2:76:5a:25:0d:cf:ed:94:cf:4c:b2:1b: 2a:b3:4a:a2:76:d1:f7:1d:26:32:03:d9:15:2d:5f: ef:51:20:32:fe:30:4e:42:1e:85:2f:43:ca:8a:8c: c3:8d:57:88:d8:a2:e0:a1:c6:7b:a0:90:33:bf:83: d2:19:8e:5f:8e:b2:5e:4b:b3:b6:d9:87:3c:14:22: 22:72:1b:05:33:e8:06:3a:56:c9:18:be:50:b1:af: 8e:5f:58:4b:08:92:8d:5d:f3:51:0b:58:67:7e:bc: 61:74:5c:d9:e4:ff:62:46:0a:b5:97:0a:12:e7:0f: 62:95:bb:0c:5b:5c:a4:37:9c:a1:53:86:55:be:69: c8:60:1d:8c:27:87:9e:21:99:64:7b:e2:b0:fe:5e: b6:b9:93:fc:43:ca:50:5d:e6:43:00:7d:09:7e:5a: be:1e:4b:c3:18:a2:7f:11:41:ae:c8:d8:49:e6:f4: 0e:af:31:0c:3e:f9:e0:66:78:27:da:d9:8c:f4:11: 8b:8c:fb:cf:e9:c1:1d:34:5f:d3:3f:af:d3:96:fc: c8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:51:50:C7:F4:8F:DE:53:22:47:50:6B:EB:69:2B:FD:27:A6:AF:7E X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/S1FQx_SP3lMiR1Br62kr_Semr34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.226.0/24 151.241.25.0/24 151.245.0.0/17 Signature Algorithm: sha256WithRSAEncryption 10:4b:23:28:83:4e:a9:cc:77:80:e1:d5:89:a7:5d:f6:78:41: 32:54:e3:10:26:2c:b8:5e:76:35:6d:41:d8:bf:57:cb:a7:0b: 04:b1:16:f1:92:6e:45:fe:0e:eb:62:c4:2c:41:65:7c:30:13: 47:86:9c:7e:50:ed:a6:c3:a8:8e:10:42:64:c2:00:34:7f:f9: bf:0f:ea:12:8f:3b:c1:89:cc:ae:04:79:0e:08:fb:b5:50:83: 5e:2d:27:d5:74:91:ea:69:11:c9:26:60:9b:c0:51:3f:28:47: f8:3a:89:61:3b:22:1d:98:f6:5b:7f:12:96:d7:e6:12:49:ac: aa:3f:2c:88:fe:90:50:36:d5:9d:41:16:17:d8:fa:74:e9:d9: 36:2e:fd:4f:0b:72:07:0d:ec:88:01:59:ed:17:08:da:1b:d1: 98:39:dc:40:c3:f8:ec:db:2f:79:ff:a6:71:4d:d9:95:88:89: ee:08:64:c9:c6:66:2c:45:00:e0:86:ed:19:39:7d:46:9e:35: fb:79:9e:ba:35:4c:0d:77:dd:e9:7a:9d:9e:24:76:be:be:f9: ca:3b:90:e6:a1:3f:b7:8a:8f:31:c8:f9:30:68:2e:74:19:39: 7e:14:4d:36:c9:66:af:e7:35:d7:3a:7a:19:75:9d:60:61:58: b8:5e:19:4c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZwQBVm3RXZbOBoSHWC0D2PfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTMwMTc0ODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjUxNTBjN2Y0OGZkZTUzMjI0NzUwNmJlYjY5MmJmZDI3YTZhZjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqheYKt3ABcZnAo7fy0xYHltPDqTm xXHMTfSKoELz0mTTM3EuuiBhkyJG3yXITSzidlolDc/tlM9Mshsqs0qidtH3HSYy A9kVLV/vUSAy/jBOQh6FL0PKiozDjVeI2KLgocZ7oJAzv4PSGY5fjrJeS7O22Yc8 FCIichsFM+gGOlbJGL5Qsa+OX1hLCJKNXfNRC1hnfrxhdFzZ5P9iRgq1lwoS5w9i lbsMW1ykN5yhU4ZVvmnIYB2MJ4eeIZlke+Kw/l62uZP8Q8pQXeZDAH0Jflq+HkvD GKJ/EUGuyNhJ5vQOrzEMPvngZngn2tmM9BGLjPvP6cEdNF/TP6/TlvzIewIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEtRUMf0j95TIkdQa+tpK/0npq9+MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvUzFGUXhfU1AzbE1pUjFCcjYya3JfU2VtcjM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/DiAwQA l/EZAwQHl/UAMA0GCSqGSIb3DQEBCwUAA4IBAQAQSyMog06pzHeA4dWJp132eEEy VOMQJiy4XnY1bUHYv1fLpwsEsRbxkm5F/g7rYsQsQWV8MBNHhpx+UO2mw6iOEEJk wgA0f/m/D+oSjzvBicyuBHkOCPu1UINeLSfVdJHqaRHJJmCbwFE/KEf4OolhOyId mPZbfxKW1+YSSayqPyyI/pBQNtWdQRYX2Pp06dk2Lv1PC3IHDeyIAVntFwjaG9GY OdxAw/js2y95/6ZxTdmViInuCGTJxmYsRQDghu0ZOX1GnjX7eZ66NUwNd93pep2e JHa+vvnKO5DmoT+3io8xyPkwaC50GTl+FE02yWav5zXXOnoZdZ1gYVi4XhlM -----END CERTIFICATE-----Generated at Sat Jan 31 15:23:33 2026 by rpki-client