This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fUQTurQcIsXZmcG7R86B9q8hHcI.roa File: fUQTurQcIsXZmcG7R86B9q8hHcI.roa (raw, json) Hash identifier: SvCYqSkbfUIkaDzshhFO3ebnToODkhdzlC+9nbkE3N4= Subject key identifier: 7D:44:13:BA:B4:1C:22:C5:D9:99:C1:BB:47:CE:81:F6:AF:21:1D:C2 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB2545A8A61D453E807D3AC3D71D38 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fUQTurQcIsXZmcG7R86B9q8hHcI.roa Signing time: Fri 02 Jan 2026 08:20:23 +0000 ROA not before: Fri 02 Jan 2026 08:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25862 IP address blocks: 151.244.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:25:45:a8:a6:1d:45:3e:80:7d:3a:c3:d7:1d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d4413bab41c22c5d999c1bb47ce81f6af211dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:47:88:b6:cb:66:48:2f:ef:8d:11:7f:06:2f: ef:85:5a:01:46:96:b9:f9:6e:22:23:e6:dc:62:67: 83:04:8f:66:ca:78:4c:56:c6:39:b7:89:fb:da:74: a3:f3:e5:a6:fb:a7:8a:2c:1a:da:f9:a6:9b:96:0a: 0d:ed:89:33:c5:58:1d:6a:13:b0:2d:30:46:c3:5e: a8:10:2a:4a:73:93:d3:60:01:e2:40:20:cb:81:7b: c1:9e:41:b7:f9:27:5a:2b:70:74:87:18:9d:9a:99: e0:0a:0a:53:9f:1b:9b:d0:7b:9f:1f:9a:45:a2:ef: 50:64:df:c7:e5:89:05:3e:bd:09:6a:4f:a6:08:be: 36:92:d6:d2:7b:c2:60:27:25:58:9d:84:bc:3a:20: 71:8e:cb:b1:04:84:5b:14:05:6a:2a:68:b2:b2:e6: f8:81:26:3c:0a:dd:47:7f:1f:a1:d5:73:3a:bc:f9: a5:8f:28:84:9b:75:5c:a9:c3:6d:96:41:3f:0a:5a: a6:1b:87:f3:d7:fd:23:c3:b9:0f:f1:a0:ce:e9:dd: 2a:e5:48:d1:a0:e2:6c:97:24:72:87:1d:01:85:86: d0:b1:4f:c3:7a:5c:53:00:24:14:c0:34:73:69:28: 48:10:a5:d4:89:50:55:87:c4:85:91:fa:07:00:32: 8e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:44:13:BA:B4:1C:22:C5:D9:99:C1:BB:47:CE:81:F6:AF:21:1D:C2 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fUQTurQcIsXZmcG7R86B9q8hHcI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.123.0/24 Signature Algorithm: sha256WithRSAEncryption 17:17:c1:14:bd:10:68:09:d6:92:a3:f9:ab:7c:dd:4b:47:03: 92:a0:6a:1f:8b:b0:22:b5:47:fe:eb:a3:3b:ee:ba:13:4b:43: 44:e9:35:71:fa:ad:cc:c8:a6:6c:3c:6a:a5:81:e2:bc:9e:f7: 47:7e:55:da:8f:58:ed:b0:d0:e1:c1:0d:f8:8f:69:9f:3b:0c: 37:4e:69:41:49:20:bc:a0:67:09:a0:84:f7:1e:27:89:68:44: cb:e9:4a:6b:2b:b2:aa:aa:21:b1:8f:e4:45:db:ff:ec:ef:c0: 78:7a:54:5f:28:f5:8a:54:42:97:1d:2d:d9:72:32:45:40:17: cb:d9:10:b5:c8:ee:e7:31:1d:ff:8d:12:3c:d5:69:b4:f9:90: 29:7d:0a:b0:1d:7d:a1:d6:1f:22:ad:75:b9:d4:9b:b0:b2:b3: d2:5a:9e:9f:33:98:d4:a8:cb:af:08:56:76:51:bd:94:4b:9c: f4:15:45:58:7d:9d:c7:4f:19:71:84:b6:23:9e:c0:26:f2:8a: 40:86:f9:ee:04:69:0f:8c:8a:40:07:15:1f:b0:51:6e:ca:11: 9d:6a:17:89:9d:3f:f2:dd:b1:ec:ef:c5:a0:c6:97:17:8b:5a: cd:dc:5c:ce:69:2f:12:d5:6e:be:4f:1e:ef:4b:2a:45:1c:5e: b4:22:69:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yyVFqKYdRT6AfTrD1x04MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDQ0MTNiYWI0MWMyMmM1ZDk5OWMxYmI0N2NlODFmNmFmMjExZGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUeItstmSC/vjRF/Bi/vhVoBRpa5 +W4iI+bcYmeDBI9mynhMVsY5t4n72nSj8+Wm+6eKLBra+aablgoN7YkzxVgdahOw LTBGw16oECpKc5PTYAHiQCDLgXvBnkG3+SdaK3B0hxidmpngCgpTnxub0HufH5pF ou9QZN/H5YkFPr0Jak+mCL42ktbSe8JgJyVYnYS8OiBxjsuxBIRbFAVqKmiysub4 gSY8Ct1Hfx+h1XM6vPmljyiEm3VcqcNtlkE/ClqmG4fz1/0jw7kP8aDO6d0q5UjR oOJslyRyhx0BhYbQsU/DelxTACQUwDRzaShIEKXUiVBVh8SFkfoHADKOqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH1EE7q0HCLF2ZnBu0fOgfavIR3CMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvZlVRVHVyUWNJc1habWNHN1I4NkI5cThoSGNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/R7MA0G CSqGSIb3DQEBCwUAA4IBAQAXF8EUvRBoCdaSo/mrfN1LRwOSoGofi7AitUf+66M7 7roTS0NE6TVx+q3MyKZsPGqlgeK8nvdHflXaj1jtsNDhwQ34j2mfOww3TmlBSSC8 oGcJoIT3HieJaETL6UprK7KqqiGxj+RF2//s78B4elRfKPWKVEKXHS3ZcjJFQBfL 2RC1yO7nMR3/jRI81Wm0+ZApfQqwHX2h1h8irXW51JuwsrPSWp6fM5jUqMuvCFZ2 Ub2US5z0FUVYfZ3HTxlxhLYjnsAm8opAhvnuBGkPjIpABxUfsFFuyhGdaheJnT/y 3bHs78WgxpcXi1rN3FzOaS8S1W6+Tx7vSypFHF60ImkA -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:42 2026 by rpki-client