This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VmhEjtQi4IKbzK8s5XqhV7GvU24.roa File: VmhEjtQi4IKbzK8s5XqhV7GvU24.roa (raw, json) Hash identifier: OT0Y68jJXyDjfFsd6x43ay9D+1+JoGzH6nlP1qMaq30= Subject key identifier: 56:68:44:8E:D4:22:E0:82:9B:CC:AF:2C:E5:7A:A1:57:B1:AF:53:6E Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB932762770382B3C8CC4A7C745449 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VmhEjtQi4IKbzK8s5XqhV7GvU24.roa Signing time: Fri 02 Jan 2026 08:20:51 +0000 ROA not before: Fri 02 Jan 2026 08:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214140 IP address blocks: 151.242.19.0/24 maxlen: 24 151.242.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:93:27:62:77:03:82:b3:c8:cc:4a:7c:74:54:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5668448ed422e0829bccaf2ce57aa157b1af536e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:20:26:0a:74:60:19:8f:01:b6:e8:64:c6:67: 8e:54:1d:b8:86:eb:b0:17:b3:9a:00:d9:a5:fb:87: 58:f0:86:b1:02:aa:e8:4a:7d:0b:d3:d9:36:2a:94: 04:3d:b5:49:ed:a0:78:81:9f:48:83:3b:12:d5:06: 49:9d:9d:21:10:3a:bc:a9:7d:d0:96:db:da:58:05: 80:df:6e:13:06:e5:0e:69:13:ca:fb:6f:72:ee:6b: 1d:a3:20:6f:dc:d7:a5:48:21:af:c4:1f:78:d9:9e: c8:da:bd:24:7a:eb:e6:88:bd:e3:d6:c5:e0:e9:6e: 28:b8:bc:9d:61:35:e0:91:9b:07:2f:a5:c4:80:ad: c8:56:72:f4:fc:f9:cd:48:fe:c7:85:66:f6:86:1a: 7c:ac:bc:45:6e:91:f7:c8:07:a1:4b:2d:87:9d:a6: 64:66:8a:ef:1e:27:2d:0a:1d:24:bf:da:5f:79:18: 17:55:20:cc:5b:17:ac:a1:0d:36:cb:be:5b:77:e3: 69:db:e2:ba:8c:e1:91:d2:d4:21:b9:87:f4:3d:fa: a9:6e:a8:3d:2c:b3:53:83:f6:49:1c:d7:a9:4c:f5: 25:15:cf:ee:2c:13:42:b6:8e:7b:9a:cf:06:4d:42: 2d:1e:fa:af:6f:fe:17:82:6c:90:8c:d6:f1:e2:f9: 4e:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:68:44:8E:D4:22:E0:82:9B:CC:AF:2C:E5:7A:A1:57:B1:AF:53:6E X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VmhEjtQi4IKbzK8s5XqhV7GvU24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.19.0/24 151.242.38.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:f9:21:6d:17:c1:b1:9f:3a:83:ff:01:95:25:38:f2:19:38: 87:b9:0a:5d:5a:07:64:6f:13:87:09:a4:0c:2a:59:69:3a:d8: 80:fc:83:1d:d6:2d:4d:7a:99:11:c2:d5:a9:ad:b6:0d:5e:9d: 85:99:39:5b:8c:02:ea:19:0a:84:0a:23:1d:01:76:a4:34:02: 72:50:a3:5b:c4:c5:49:dc:ad:21:ad:3b:3d:63:1d:2a:05:d0: b7:fc:ed:c1:f7:30:67:2c:e4:19:e1:20:57:a8:27:7c:e8:09: d0:25:50:0c:ea:39:29:42:5c:11:24:eb:8e:43:df:48:d0:da: bd:6c:cf:e6:36:f6:79:88:ca:87:20:30:fd:2b:1c:5b:4f:e7: 8b:1e:18:14:0d:8d:8c:f1:ea:12:be:bc:35:e7:51:3e:00:00: 4b:82:ed:99:02:de:10:a4:de:d3:ca:5c:22:b6:4f:c9:bd:1b: 3e:14:67:81:d2:e4:89:4a:bb:cd:95:a0:0b:50:ca:6b:dc:0c: 67:e6:19:ca:20:4c:83:52:fb:a5:96:ff:61:58:2e:e4:c7:81: 2c:58:0d:8b:88:fc:00:00:8a:9c:0a:d3:f4:d4:ee:6e:9e:32: 08:eb:77:1f:5b:79:76:2a:2d:9d:61:4d:a5:70:fd:5f:c8:3d: 3a:e4:ed:9c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y5MnYncDgrPIzEp8dFRJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjY4NDQ4ZWQ0MjJlMDgyOWJjY2FmMmNlNTdhYTE1N2IxYWY1MzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiAmCnRgGY8BtuhkxmeOVB24huuw F7OaANml+4dY8IaxAqroSn0L09k2KpQEPbVJ7aB4gZ9IgzsS1QZJnZ0hEDq8qX3Q ltvaWAWA324TBuUOaRPK+29y7msdoyBv3NelSCGvxB942Z7I2r0keuvmiL3j1sXg 6W4ouLydYTXgkZsHL6XEgK3IVnL0/PnNSP7HhWb2hhp8rLxFbpH3yAehSy2HnaZk ZorvHictCh0kv9pfeRgXVSDMWxesoQ02y75bd+Np2+K6jOGR0tQhuYf0Pfqpbqg9 LLNTg/ZJHNepTPUlFc/uLBNCto57ms8GTUItHvqvb/4XgmyQjNbx4vlOzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFZoRI7UIuCCm8yvLOV6oVexr1NuMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvVm1oRWp0UWk0SUtieks4czVYcWhWN0d2VTI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/ITAwQA l/ImMA0GCSqGSIb3DQEBCwUAA4IBAQAv+SFtF8GxnzqD/wGVJTjyGTiHuQpdWgdk bxOHCaQMKllpOtiA/IMd1i1NepkRwtWprbYNXp2FmTlbjALqGQqECiMdAXakNAJy UKNbxMVJ3K0hrTs9Yx0qBdC3/O3B9zBnLOQZ4SBXqCd86AnQJVAM6jkpQlwRJOuO Q99I0Nq9bM/mNvZ5iMqHIDD9KxxbT+eLHhgUDY2M8eoSvrw151E+AABLgu2ZAt4Q pN7Tylwitk/JvRs+FGeB0uSJSrvNlaALUMpr3Axn5hnKIEyDUvullv9hWC7kx4Es WA2LiPwAAIqcCtP01O5unjII63cfW3l2Ki2dYU2lcP1fyD065O2c -----END CERTIFICATE-----Generated at Sun Jan 18 06:32:04 2026 by rpki-client