This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SjhzaHUrfLUSzy5J0dA-JSvQkl8.roa File: SjhzaHUrfLUSzy5J0dA-JSvQkl8.roa (raw, json) Hash identifier: /C+UAlfXX/utWf7IFr9ctsZCUsrJNOqwG94E1E+wTeY= Subject key identifier: 4A:38:73:68:75:2B:7C:B5:12:CF:2E:49:D1:D0:3E:25:2B:D0:92:5F Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB2136FD3F6BDEFE170C99B6702E7B Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SjhzaHUrfLUSzy5J0dA-JSvQkl8.roa Signing time: Fri 02 Jan 2026 08:20:22 +0000 ROA not before: Fri 02 Jan 2026 08:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 22516 IP address blocks: 151.240.155.0/24 maxlen: 24 151.247.202.0/24 maxlen: 24 151.247.203.0/24 maxlen: 24 151.247.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:21:36:fd:3f:6b:de:fe:17:0c:99:b6:70:2e:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a387368752b7cb512cf2e49d1d03e252bd0925f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e6:fc:42:93:82:6b:d5:eb:ed:f7:23:1f:6c: 18:3d:ed:68:65:7e:7b:c7:ee:fd:b8:cd:75:3b:69: 09:b8:cb:21:b5:e9:03:e3:6f:0c:b9:37:11:67:73: 08:48:e8:cd:4f:47:6e:ae:4c:fc:b0:88:15:0a:61: 3d:04:8d:32:23:f7:0f:33:3c:e6:85:21:54:92:ef: 51:bf:9e:66:48:ad:db:65:4f:04:b3:9a:63:9c:9c: 5a:3d:f2:7c:ba:b0:5c:74:1a:eb:1c:75:b9:16:aa: 5a:3c:c4:62:5b:ff:31:6d:e2:a6:72:6d:ed:1d:a6: e3:82:eb:22:c5:d3:e7:0a:fd:9d:6b:b9:ce:de:e0: 51:64:3d:50:c5:25:32:8a:90:94:bf:51:5e:e9:63: a7:3f:eb:18:d0:20:ab:08:29:88:02:83:dd:b9:de: 4f:82:5d:0c:90:8d:8d:66:79:cf:26:9f:2f:db:53: cf:ca:b7:1a:79:7c:60:4c:92:a1:cd:02:29:65:a5: 66:c3:49:ee:b5:a2:27:cf:01:8e:80:dc:06:ca:bb: 1b:44:b0:28:6e:07:30:d4:b7:c6:f9:33:48:ec:66: ad:78:4a:0a:87:5e:8f:10:3f:70:e9:07:e4:67:bf: 31:7d:dc:ec:12:13:f5:14:90:be:11:a8:64:f2:40: 27:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:38:73:68:75:2B:7C:B5:12:CF:2E:49:D1:D0:3E:25:2B:D0:92:5F X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SjhzaHUrfLUSzy5J0dA-JSvQkl8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.155.0/24 151.247.202.0-151.247.204.255 Signature Algorithm: sha256WithRSAEncryption 9a:6f:93:4e:19:73:1f:13:9e:96:6e:73:16:95:7f:f6:06:51: e5:b0:9b:17:de:10:a6:f4:11:4c:3a:93:f6:91:3e:f8:e5:7a: a3:63:5f:e4:dd:b3:84:a7:00:97:ac:2d:fd:ba:c8:83:dd:75: 41:3a:dc:77:2c:0c:2f:7c:b2:22:62:35:4a:bb:b3:1a:da:c9: 06:e2:51:b9:65:a8:43:0d:c5:02:a0:5c:92:c2:89:64:6d:8c: 41:63:f8:66:63:4d:2d:bd:78:1e:de:e5:f9:43:0f:17:6c:cf: b7:2c:01:4a:68:e7:cb:8a:f4:15:91:5d:4d:ac:49:de:0e:27: ac:5b:9b:0b:88:72:a4:f8:e4:ce:d8:e8:11:98:1f:34:ec:c7: e3:ad:74:b4:94:91:be:52:f5:2e:c8:81:49:89:e9:c6:73:55: bd:8b:56:f1:45:e5:a9:d4:75:34:3b:c6:2b:cf:9e:79:a2:30: a6:a2:d0:29:dc:31:7c:52:43:2f:d1:73:14:e6:48:6c:e1:7d: 86:14:0f:54:62:46:35:8f:d5:0b:9a:fd:25:0e:fb:f3:82:86: c2:72:7a:bc:90:80:32:4b:2a:95:19:36:5f:41:bc:01:d6:de: 46:64:d6:6e:02:6c:68:50:e9:81:8d:b8:f8:e5:1d:2f:a4:13: 38:c1:e5:84 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt9yyE2/T9r3v4XDJm2cC57MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTM4NzM2ODc1MmI3Y2I1MTJjZjJlNDlkMWQwM2UyNTJiZDA5MjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeb8QpOCa9Xr7fcjH2wYPe1oZX57 x+79uM11O2kJuMshtekD428MuTcRZ3MISOjNT0durkz8sIgVCmE9BI0yI/cPMzzm hSFUku9Rv55mSK3bZU8Es5pjnJxaPfJ8urBcdBrrHHW5FqpaPMRiW/8xbeKmcm3t HabjgusixdPnCv2da7nO3uBRZD1QxSUyipCUv1Fe6WOnP+sY0CCrCCmIAoPdud5P gl0MkI2NZnnPJp8v21PPyrcaeXxgTJKhzQIpZaVmw0nutaInzwGOgNwGyrsbRLAo bgcw1LfG+TNI7GateEoKh16PED9w6QfkZ78xfdzsEhP1FJC+Eahk8kAnNwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFEo4c2h1K3y1Es8uSdHQPiUr0JJfMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvU2poemFIVXJmTFVTenk1SjBkQS1KU3ZRa2w4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAl/CbMAwD BAGX98oDBACX98wwDQYJKoZIhvcNAQELBQADggEBAJpvk04Zcx8TnpZucxaVf/YG UeWwmxfeEKb0EUw6k/aRPvjleqNjX+Tds4SnAJesLf26yIPddUE63HcsDC98siJi NUq7sxrayQbiUbllqEMNxQKgXJLCiWRtjEFj+GZjTS29eB7e5flDDxdsz7csAUpo 58uK9BWRXU2sSd4OJ6xbmwuIcqT45M7Y6BGYHzTsx+OtdLSUkb5S9S7IgUmJ6cZz Vb2LVvFF5anUdTQ7xivPnnmiMKai0CncMXxSQy/RcxTmSGzhfYYUD1RiRjWP1Qua /SUO+/OChsJyeryQgDJLKpUZNl9BvAHW3kZk1m4CbGhQ6YGNuPjlHS+kEzjB5YQ= -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:37 2026 by rpki-client