This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aAsqmczeDGEl8cKKYCNegam-f3Q.roa File: aAsqmczeDGEl8cKKYCNegam-f3Q.roa (raw, json) Hash identifier: dsFjwhS+YUjaz+6lBmmHwlR8W1uRWfTZSKGkycOiMRo= Subject key identifier: 68:0B:2A:99:CC:DE:0C:61:25:F1:C2:8A:60:23:5E:81:A9:BE:7F:74 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BBB557D2EE3693BDE46447AB532F42BBD Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aAsqmczeDGEl8cKKYCNegam-f3Q.roa Signing time: Wed 14 Jan 2026 07:08:20 +0000 ROA not before: Wed 14 Jan 2026 07:08:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 274249 IP address blocks: 151.245.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bb:55:7d:2e:e3:69:3b:de:46:44:7a:b5:32:f4:2b:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 14 07:08:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=680b2a99ccde0c6125f1c28a60235e81a9be7f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:8f:71:b4:ed:9d:6a:6e:76:29:e8:65:b3:42: ca:1e:c1:dc:35:ba:14:a4:a0:47:94:08:fd:be:0e: 23:41:60:26:97:49:41:4f:82:43:02:b1:bf:d8:9d: 61:c3:d8:7b:10:b3:68:fc:c0:32:fe:96:d2:c5:2d: 1a:b5:a6:3b:63:f3:99:d5:41:d4:79:3e:f3:f9:57: 94:aa:fa:1b:d0:c0:54:db:52:a6:5a:35:6a:81:29: 9c:f8:c4:e8:00:73:61:15:27:9c:c8:fd:c7:75:f5: 9a:a8:17:f9:e8:cb:64:3a:c8:cd:5c:b0:6e:89:4a: 65:cd:52:ee:d3:e9:21:e7:16:c4:f8:f3:ff:b1:3b: 17:ee:ca:72:f5:66:f3:fa:08:75:44:55:d2:07:18: 7a:f7:5b:44:ed:89:7a:3d:be:f2:25:17:39:e7:c5: f0:3a:bb:1b:f6:31:41:18:de:5c:23:96:a0:6b:86: 2b:44:9e:88:65:83:53:6a:54:6b:03:1a:4b:6e:11: 75:9b:35:3d:39:6e:f8:30:b2:4e:e3:19:00:4b:d2: ca:1a:3a:09:39:81:84:31:53:ca:cc:a6:a3:ef:6e: 9b:fd:fa:1c:c7:0e:f2:da:9b:b6:5c:8f:16:e2:ab: b3:78:fd:80:0a:24:40:6b:d5:cc:4d:c3:23:37:6f: f3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0B:2A:99:CC:DE:0C:61:25:F1:C2:8A:60:23:5E:81:A9:BE:7F:74 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aAsqmczeDGEl8cKKYCNegam-f3Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.245.100.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:3a:33:81:fe:74:ab:43:05:d6:74:11:a0:c0:4b:70:d0:10: 2f:94:12:43:61:f6:90:62:26:a8:fe:35:a9:ba:00:da:90:18: aa:b8:37:5c:b6:81:07:70:30:4e:f8:02:83:23:d3:e1:f7:fc: 8c:18:f8:c7:f5:04:de:24:55:80:f2:05:a0:ac:32:6e:b2:e5: d3:bf:b8:fa:86:6f:3e:20:75:2f:ab:bb:5f:f9:2f:a5:7a:31: 02:22:03:42:a9:d0:e1:3d:e4:82:1c:ba:00:aa:38:3c:08:fe: 78:fe:3f:3e:4c:33:bc:f4:3d:ad:46:b5:36:fc:11:d9:93:fb: 00:48:96:4a:2a:a7:4b:cf:be:43:55:ff:64:e1:ff:a7:a9:dc: 0d:ef:52:21:d9:74:84:90:be:b0:5e:9e:5a:45:81:a5:c7:a0: 37:fb:94:cd:51:c9:2d:12:10:67:67:9d:a7:e0:7c:ee:e2:6b: 7e:f2:c2:37:d5:c6:76:4f:e0:84:66:23:14:81:1d:f8:03:be: 30:67:b5:e1:43:df:d8:23:0d:7a:07:34:82:3b:56:22:cf:3a: d1:02:fc:71:37:9e:00:ab:24:95:81:0b:48:07:51:c4:17:d2: ba:b5:62:c4:65:44:e5:13:b5:71:ea:e3:ec:e6:a7:51:40:44: 28:4d:0e:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZu7VX0u42k73kZEerUy9Cu9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTE0MDcwODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODBiMmE5OWNjZGUwYzYxMjVmMWMyOGE2MDIzNWU4MWE5YmU3Zjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY9xtO2dam52Kehls0LKHsHcNboU pKBHlAj9vg4jQWAml0lBT4JDArG/2J1hw9h7ELNo/MAy/pbSxS0ataY7Y/OZ1UHU eT7z+VeUqvob0MBU21KmWjVqgSmc+MToAHNhFSecyP3HdfWaqBf56MtkOsjNXLBu iUplzVLu0+kh5xbE+PP/sTsX7spy9Wbz+gh1RFXSBxh691tE7Yl6Pb7yJRc558Xw Orsb9jFBGN5cI5aga4YrRJ6IZYNTalRrAxpLbhF1mzU9OW74MLJO4xkAS9LKGjoJ OYGEMVPKzKaj726b/focxw7y2pu2XI8W4quzeP2ACiRAa9XMTcMjN2/zXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGgLKpnM3gxhJfHCimAjXoGpvn90MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvYUFzcW1jemVER0VsOGNLS1lDTmVnYW0tZjNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/VkMA0G CSqGSIb3DQEBCwUAA4IBAQCLOjOB/nSrQwXWdBGgwEtw0BAvlBJDYfaQYiao/jWp ugDakBiquDdctoEHcDBO+AKDI9Ph9/yMGPjH9QTeJFWA8gWgrDJusuXTv7j6hm8+ IHUvq7tf+S+lejECIgNCqdDhPeSCHLoAqjg8CP54/j8+TDO89D2tRrU2/BHZk/sA SJZKKqdLz75DVf9k4f+nqdwN71Ih2XSEkL6wXp5aRYGlx6A3+5TNUcktEhBnZ52n 4Hzu4mt+8sI31cZ2T+CEZiMUgR34A74wZ7XhQ9/YIw16BzSCO1YizzrRAvxxN54A qySVgQtIB1HEF9K6tWLEZUTlE7Vx6uPs5qdRQEQoTQ4J -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:06 2026 by rpki-client