This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cjf3j54hn-jraG4MiiGdMAYQUeY.roa File: cjf3j54hn-jraG4MiiGdMAYQUeY.roa (raw, json) Hash identifier: Y1lRqjP871DVJhjUmKf8jt788mihwJJEDoavgHcNR6c= Subject key identifier: 72:37:F7:8F:9E:21:9F:E8:EB:68:6E:0C:8A:21:9D:30:06:10:51:E6 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB3ADA1DC8F299C492A30646819173 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cjf3j54hn-jraG4MiiGdMAYQUeY.roa Signing time: Fri 02 Jan 2026 08:20:29 +0000 ROA not before: Fri 02 Jan 2026 08:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53850 IP address blocks: 151.243.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:3a:da:1d:c8:f2:99:c4:92:a3:06:46:81:91:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7237f78f9e219fe8eb686e0c8a219d30061051e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:88:7e:fd:e6:a6:fc:e1:29:25:d8:5d:97:4b: 97:48:e7:9e:e0:35:99:f8:ca:7b:6b:68:97:8e:4e: 5e:0d:c6:29:cc:04:25:cf:55:cc:f7:b7:82:13:10: b9:8a:95:6c:10:9c:a8:ad:cb:13:28:a7:16:ef:fc: 94:b9:1a:cf:f1:e5:f6:e5:5f:f2:5d:b9:18:a9:aa: 7b:be:b1:de:ab:3d:46:ce:e6:27:56:f9:b7:a4:a2: 3c:9c:9d:75:df:20:22:da:c1:28:ae:79:1a:62:fe: 5e:ee:c9:ff:9e:16:27:93:70:83:75:82:76:7a:28: 35:68:8c:ca:41:94:b3:0a:60:23:2c:f0:dd:0e:96: 7c:77:9c:0c:85:ba:7e:0b:7b:f5:f5:38:2d:23:97: 7d:11:59:b6:29:ea:12:15:c7:96:41:5f:35:59:72: 17:61:ad:6c:c7:5c:f7:8f:a1:67:80:c3:ca:23:68: 7b:f6:b5:00:77:16:71:49:f4:66:38:f1:75:3b:ba: ee:33:69:50:f4:a2:98:24:88:20:01:a7:07:f1:70: 10:68:8b:2c:5d:5a:c3:bd:86:0d:c2:14:0e:e0:6d: 37:6f:92:b8:af:cb:c3:97:d0:b7:80:a1:80:44:97: cf:e1:2f:aa:a1:ee:c1:31:be:2a:48:8c:b4:89:a0: 6d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:37:F7:8F:9E:21:9F:E8:EB:68:6E:0C:8A:21:9D:30:06:10:51:E6 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cjf3j54hn-jraG4MiiGdMAYQUeY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.250.0/24 Signature Algorithm: sha256WithRSAEncryption 41:ca:47:e5:93:a8:a1:00:70:7e:f1:ba:59:d2:32:18:6a:c1: 17:a2:a9:c2:04:23:ba:6f:8d:f4:f6:fe:08:31:26:97:93:46: 89:ab:62:ec:e2:54:49:9a:67:07:84:cc:04:62:6a:97:af:8d: 92:4e:a0:b7:20:8b:f7:5c:67:ba:87:91:5c:ea:a2:b8:94:ab: 7f:29:53:76:8e:1e:e1:c4:04:ed:50:64:bf:e7:75:0e:3f:35: a8:46:b1:5f:90:00:59:63:f4:2f:00:07:82:a3:29:51:54:be: e9:3f:ef:2a:1e:d3:49:8d:6d:37:a4:0c:35:d8:b7:df:f5:72: 85:34:31:3d:cc:2b:d2:7d:c1:50:22:0a:0b:bc:de:91:11:0e: 49:aa:c9:c4:61:41:45:67:d8:e7:c3:e1:76:bb:e3:71:d8:1b: b9:16:89:bd:3f:b7:07:ce:3c:7d:5e:c5:47:52:53:c6:55:46: ef:af:18:0f:be:4e:3c:d9:2f:39:6e:0f:65:24:81:65:67:98: f5:88:e6:90:5a:47:c6:74:b1:05:0e:47:33:8b:83:96:1f:c8: 38:4e:a2:cf:0f:1d:a1:0f:fd:95:7f:47:08:78:5c:5e:c6:d1: db:e6:1e:f1:70:e1:a6:cb:41:64:c9:fb:21:71:4b:f8:11:bc: 55:49:cb:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yzraHcjymcSSowZGgZFzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjM3Zjc4ZjllMjE5ZmU4ZWI2ODZlMGM4YTIxOWQzMDA2MTA1MWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIh+/eam/OEpJdhdl0uXSOee4DWZ +Mp7a2iXjk5eDcYpzAQlz1XM97eCExC5ipVsEJyorcsTKKcW7/yUuRrP8eX25V/y XbkYqap7vrHeqz1GzuYnVvm3pKI8nJ113yAi2sEornkaYv5e7sn/nhYnk3CDdYJ2 eig1aIzKQZSzCmAjLPDdDpZ8d5wMhbp+C3v19TgtI5d9EVm2KeoSFceWQV81WXIX Ya1sx1z3j6FngMPKI2h79rUAdxZxSfRmOPF1O7ruM2lQ9KKYJIggAacH8XAQaIss XVrDvYYNwhQO4G03b5K4r8vDl9C3gKGARJfP4S+qoe7BMb4qSIy0iaBtuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHI394+eIZ/o62huDIohnTAGEFHmMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvY2pmM2o1NGhuLWpyYUc0TWlpR2RNQVlRVWVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/P6MA0G CSqGSIb3DQEBCwUAA4IBAQBBykflk6ihAHB+8bpZ0jIYasEXoqnCBCO6b4309v4I MSaXk0aJq2Ls4lRJmmcHhMwEYmqXr42STqC3IIv3XGe6h5Fc6qK4lKt/KVN2jh7h xATtUGS/53UOPzWoRrFfkABZY/QvAAeCoylRVL7pP+8qHtNJjW03pAw12Lff9XKF NDE9zCvSfcFQIgoLvN6REQ5JqsnEYUFFZ9jnw+F2u+Nx2Bu5Fom9P7cHzjx9XsVH UlPGVUbvrxgPvk482S85bg9lJIFlZ5j1iOaQWkfGdLEFDkczi4OWH8g4TqLPDx2h D/2Vf0cIeFxextHb5h7xcOGmy0FkyfshcUv4EbxVSctX -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:50 2026 by rpki-client