This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SQXXQpj3r_vnDrwpHihD6egaPC0.roa File: SQXXQpj3r_vnDrwpHihD6egaPC0.roa (raw, json) Hash identifier: choLV0kTRfSu7oCvzE3Db3WNQaDG7X9bLxKa5TtJ8Hc= Subject key identifier: 49:05:D7:42:98:F7:AF:FB:E7:0E:BC:29:1E:28:43:E9:E8:1A:3C:2D Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB70C9EEBA689C347308A27DA5B790 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SQXXQpj3r_vnDrwpHihD6egaPC0.roa Signing time: Fri 02 Jan 2026 08:20:43 +0000 ROA not before: Fri 02 Jan 2026 08:20:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206921 IP address blocks: 151.240.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:70:c9:ee:ba:68:9c:34:73:08:a2:7d:a5:b7:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4905d74298f7affbe70ebc291e2843e9e81a3c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0c:71:37:ca:19:ed:70:7e:83:3f:ae:d7:22: 80:49:f2:1c:e6:3f:f2:30:23:b5:e6:8a:1c:2f:19: 26:af:1d:9a:42:6f:62:af:30:0c:a0:f3:8d:cf:e6: 40:10:15:c5:7c:c0:bd:df:08:86:e0:71:5a:c0:39: 9b:0f:90:e6:e0:08:07:63:e0:d1:fa:d7:d9:95:ff: e2:b3:3b:32:61:b4:a8:50:a8:91:9e:07:82:58:5b: ce:8d:0c:9a:02:b8:37:de:b1:18:32:38:25:ae:ea: 99:5d:e6:52:6f:a7:e3:a7:c3:c2:3d:19:3e:44:a9: bf:7f:9a:67:7d:0b:6f:74:5f:81:81:df:71:05:ed: 1a:1c:b8:ad:8d:7f:a7:d6:38:92:b9:d0:da:33:00: 0e:3d:68:df:0d:eb:3c:82:15:b3:43:20:46:03:4c: a6:a4:8e:71:5e:8e:7e:c6:ec:a0:10:08:59:e9:93: 48:22:d0:e5:b8:c0:31:ca:25:a3:35:7f:25:c8:79: c1:32:a2:ac:fd:c1:e8:c7:11:74:71:4b:6a:1f:cf: 58:85:dc:a3:c4:43:5b:cc:dc:99:82:02:78:a8:af: 77:8d:aa:d9:c7:5d:a8:d9:bf:7d:1c:d8:ee:03:8b: d2:95:0c:69:9c:a5:10:0a:98:b2:a6:f9:38:0b:e1: f2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:05:D7:42:98:F7:AF:FB:E7:0E:BC:29:1E:28:43:E9:E8:1A:3C:2D X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SQXXQpj3r_vnDrwpHihD6egaPC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.10.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:4f:65:6a:e0:5a:b5:0b:f2:0f:0a:5b:44:e4:4e:b9:38:d2: 03:49:b1:92:a7:5a:13:2d:4b:ae:48:00:be:e7:6f:bb:fd:6a: eb:25:ad:ff:65:d3:d6:37:28:16:f8:00:81:a5:d4:57:6b:8f: e5:56:5b:f8:61:a7:e6:f6:a1:b6:63:b7:a9:d0:2d:ec:49:1e: 66:e6:09:3c:8b:38:6d:a5:ee:8a:50:ce:e2:fc:ac:ca:2b:a5: 2d:7f:1c:c2:b2:96:8a:8f:51:40:75:73:85:c3:ba:b8:5b:d4: c6:78:f9:b2:f5:48:31:0f:32:c0:97:88:be:5e:0d:9e:d7:d0: 5d:10:ba:d4:fb:f2:d3:a8:1b:d0:4d:47:af:f9:b7:eb:ba:b4: 5b:dc:9a:64:6c:5b:ab:7d:b1:27:57:b2:95:90:d8:69:8a:9c: 1b:69:78:05:87:e2:4d:0e:7b:f5:c9:14:3f:4c:8e:9c:01:20: 86:6d:5a:1d:1b:fc:16:93:11:d7:36:ee:e3:f1:5a:63:23:e8: 9a:26:8b:80:26:af:01:1a:69:38:79:f4:8b:06:92:40:3d:5a: ee:53:7e:5a:9e:ef:ff:05:2e:ec:7c:bf:3d:97:a6:12:8f:48: 72:17:96:64:37:cd:56:98:a8:e0:6d:8f:c3:74:3f:12:51:84: fb:ac:58:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y3DJ7rponDRzCKJ9pbeQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTA1ZDc0Mjk4ZjdhZmZiZTcwZWJjMjkxZTI4NDNlOWU4MWEzYzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAxxN8oZ7XB+gz+u1yKASfIc5j/y MCO15oocLxkmrx2aQm9irzAMoPONz+ZAEBXFfMC93wiG4HFawDmbD5Dm4AgHY+DR +tfZlf/iszsyYbSoUKiRngeCWFvOjQyaArg33rEYMjglruqZXeZSb6fjp8PCPRk+ RKm/f5pnfQtvdF+Bgd9xBe0aHLitjX+n1jiSudDaMwAOPWjfDes8ghWzQyBGA0ym pI5xXo5+xuygEAhZ6ZNIItDluMAxyiWjNX8lyHnBMqKs/cHoxxF0cUtqH89Yhdyj xENbzNyZggJ4qK93jarZx12o2b99HNjuA4vSlQxpnKUQCpiypvk4C+HyYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEkF10KY96/75w68KR4oQ+noGjwtMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvU1FYWFFwajNyX3ZuRHJ3cEhpaEQ2ZWdhUEMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/AKMA0G CSqGSIb3DQEBCwUAA4IBAQBsT2Vq4Fq1C/IPCltE5E65ONIDSbGSp1oTLUuuSAC+ 52+7/WrrJa3/ZdPWNygW+ACBpdRXa4/lVlv4Yafm9qG2Y7ep0C3sSR5m5gk8izht pe6KUM7i/KzKK6UtfxzCspaKj1FAdXOFw7q4W9TGePmy9UgxDzLAl4i+Xg2e19Bd ELrU+/LTqBvQTUev+bfrurRb3JpkbFurfbEnV7KVkNhpipwbaXgFh+JNDnv1yRQ/ TI6cASCGbVodG/wWkxHXNu7j8VpjI+iaJouAJq8BGmk4efSLBpJAPVruU35anu// BS7sfL89l6YSj0hyF5ZkN81WmKjgbY/DdD8SUYT7rFjr -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:02 2026 by rpki-client