This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/StKQFYr9b0TH123ov_7fehRlvYI.roa File: StKQFYr9b0TH123ov_7fehRlvYI.roa (raw, json) Hash identifier: jwpnWmTSQJkZoopuJl7YTkmrs4LZHKfc5nN6J3MT3/Y= Subject key identifier: 4A:D2:90:15:8A:FD:6F:44:C7:D7:6D:E8:BF:FE:DF:7A:14:65:BD:82 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019C100AD62E718ACD96EBCF0050FE37C16F Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/StKQFYr9b0TH123ov_7fehRlvYI.roa Signing time: Fri 30 Jan 2026 17:54:31 +0000 ROA not before: Fri 30 Jan 2026 17:54:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201907 IP address blocks: 151.247.41.0/24 maxlen: 24 151.247.44.0/24 maxlen: 24 151.247.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 12:58:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:10:0a:d6:2e:71:8a:cd:96:eb:cf:00:50:fe:37:c1:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 30 17:54:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4ad290158afd6f44c7d76de8bffedf7a1465bd82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:13:14:18:8a:a7:46:0a:07:4f:f2:17:77:15: 87:4e:2f:37:16:94:a3:6f:50:36:0e:33:f8:81:4e: 11:4d:cd:83:12:b4:84:62:dd:c8:51:a9:5a:b3:98: 8f:63:f3:a1:6c:d0:84:8d:30:b5:f5:8f:2d:01:eb: 23:36:b8:f3:70:13:fa:0a:8a:53:4d:ca:ce:8c:6b: d2:17:a6:60:07:f2:00:dd:79:b8:a1:48:f4:97:14: cf:36:b9:60:36:d3:b5:9d:5e:2f:65:0f:43:b0:e1: 95:f7:1e:79:b7:80:49:8c:9a:8b:e9:f0:f0:c8:bf: 36:7d:04:f8:d0:83:db:05:04:d0:61:ed:82:9d:4b: fd:03:54:61:4d:87:ff:51:6e:83:3b:56:62:a3:30: 83:88:84:d6:ff:f9:da:76:33:e6:4c:d0:a3:70:cc: 35:53:53:f0:90:3a:da:cf:4a:c1:40:f0:f2:85:51: 37:f4:1b:80:95:a4:58:7e:d2:4b:fd:99:fd:97:aa: 46:c8:18:15:6e:97:bb:49:32:b9:57:d1:06:8b:ab: fe:f4:17:ee:57:7b:15:c4:64:24:e2:16:e7:c0:6b: 0b:7d:e1:5f:3b:f7:c3:c6:00:97:4a:95:8d:52:4c: 1e:3f:5c:61:f0:d0:4b:ea:04:35:12:37:f9:12:53: ca:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:D2:90:15:8A:FD:6F:44:C7:D7:6D:E8:BF:FE:DF:7A:14:65:BD:82 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/StKQFYr9b0TH123ov_7fehRlvYI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.247.41.0/24 151.247.44.0/23 Signature Algorithm: sha256WithRSAEncryption b6:58:33:9f:f0:29:b1:3e:13:33:f0:2b:ff:41:b6:98:74:5a: 7b:51:a8:1a:14:60:82:68:6a:4a:fb:14:6f:7b:42:89:4c:1e: 42:3a:d9:13:29:dc:81:25:37:b5:3f:e3:57:8a:b3:9e:27:6e: 4b:ef:a3:a1:84:0f:2a:3b:30:ff:32:e6:5a:22:f6:35:83:0f: b5:89:0c:45:39:81:92:a2:42:e0:4f:42:a6:4c:4b:35:2b:9d: 68:f8:d2:66:24:03:3b:5f:1c:c5:12:e8:83:19:3b:a5:d0:7e: f5:43:2d:f4:50:3c:34:11:65:06:8b:0d:51:52:57:3b:9c:96: 9a:7e:46:fe:39:ba:8f:32:2b:0f:13:81:07:0f:4f:36:42:b9: 9a:a7:a4:09:72:8e:aa:bd:49:20:0d:2a:dd:3f:e7:a3:b6:d2: da:37:92:82:d8:fe:f8:8a:9b:29:79:e7:69:a1:23:82:5c:68: fa:e9:94:55:0e:d0:06:88:c9:34:72:58:b8:c1:2f:19:e1:fb: cb:db:db:6c:31:cb:28:a2:a4:14:fc:cc:a7:50:5e:c9:84:d8: 27:17:b0:f9:60:f4:5b:3f:85:b8:d2:92:18:b2:36:fe:66:9d: 6b:11:a6:df:08:c4:c4:8a:b0:38:5e:04:f3:f9:6d:5d:88:9a: 47:e4:48:d0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZwQCtYucYrNluvPAFD+N8FvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTMwMTc1NDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YWQyOTAxNThhZmQ2ZjQ0YzdkNzZkZThiZmZlZGY3YTE0NjViZDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxMUGIqnRgoHT/IXdxWHTi83FpSj b1A2DjP4gU4RTc2DErSEYt3IUalas5iPY/OhbNCEjTC19Y8tAesjNrjzcBP6CopT TcrOjGvSF6ZgB/IA3Xm4oUj0lxTPNrlgNtO1nV4vZQ9DsOGV9x55t4BJjJqL6fDw yL82fQT40IPbBQTQYe2CnUv9A1RhTYf/UW6DO1ZiozCDiITW//nadjPmTNCjcMw1 U1PwkDraz0rBQPDyhVE39BuAlaRYftJL/Zn9l6pGyBgVbpe7STK5V9EGi6v+9Bfu V3sVxGQk4hbnwGsLfeFfO/fDxgCXSpWNUkweP1xh8NBL6gQ1Ejf5ElPK0wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFErSkBWK/W9Ex9dt6L/+33oUZb2CMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvU3RLUUZZcjliMFRIMTIzb3ZfN2ZlaFJsdllJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/cpAwQB l/csMA0GCSqGSIb3DQEBCwUAA4IBAQC2WDOf8CmxPhMz8Cv/QbaYdFp7UagaFGCC aGpK+xRve0KJTB5COtkTKdyBJTe1P+NXirOeJ25L76OhhA8qOzD/MuZaIvY1gw+1 iQxFOYGSokLgT0KmTEs1K51o+NJmJAM7XxzFEuiDGTul0H71Qy30UDw0EWUGiw1R Ulc7nJaafkb+ObqPMisPE4EHD082Qrmap6QJco6qvUkgDSrdP+ejttLaN5KC2P74 ipspeedpoSOCXGj66ZRVDtAGiMk0cli4wS8Z4fvL29tsMcsooqQU/MynUF7JhNgn F7D5YPRbP4W40pIYsjb+Zp1rEabfCMTEirA4XgTz+W1diJpH5EjQ -----END CERTIFICATE-----Generated at Mon Feb 2 21:09:18 2026 by rpki-client