This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fgss1GrDvEZaVWW-EcVUS_ekx_I.roa File: fgss1GrDvEZaVWW-EcVUS_ekx_I.roa (raw, json) Hash identifier: 0sl76mN50clshkcDxXQgxpYUWbNq0GSlG+MKjKYmm48= Subject key identifier: 7E:0B:2C:D4:6A:C3:BC:46:5A:55:65:BE:11:C5:54:4B:F7:A4:C7:F2 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB24C01F3F7FB3C810534DD3705D5F Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fgss1GrDvEZaVWW-EcVUS_ekx_I.roa Signing time: Fri 02 Jan 2026 08:20:23 +0000 ROA not before: Fri 02 Jan 2026 08:20:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25369 IP address blocks: 151.240.4.0/22 maxlen: 22 151.240.20.0/22 maxlen: 22 151.240.68.0/22 maxlen: 22 151.240.84.0/22 maxlen: 22 151.244.79.0/24 maxlen: 24 151.245.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:24:c0:1f:3f:7f:b3:c8:10:53:4d:d3:70:5d:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e0b2cd46ac3bc465a5565be11c5544bf7a4c7f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:84:2e:01:c1:57:85:04:0e:94:d6:fd:a3:5d: fe:70:0d:39:29:11:97:47:06:d3:02:43:76:3e:59: 4e:80:ca:af:e0:84:c3:26:f4:7d:4c:5a:c8:fa:f9: ff:ff:75:83:dc:bf:5e:0a:aa:da:33:a9:3c:cd:23: d1:2b:73:ca:cf:32:3e:17:49:3f:b0:17:c9:1c:6e: 72:18:9f:83:4a:25:91:1b:3f:2e:66:db:63:b9:88: 4d:11:f0:0a:a6:b6:09:12:0f:85:6b:df:f9:10:dd: 57:f6:7d:f8:49:47:bf:73:35:c3:c8:9e:4e:dd:24: f7:c5:cf:f6:32:f1:93:65:3b:84:39:6d:5a:1d:09: a3:19:85:b9:2c:b0:e7:32:d7:13:dc:23:91:22:4b: 3c:b5:55:4f:1a:94:21:46:69:eb:f0:f4:3e:0d:be: e4:3d:94:c1:ae:3b:90:44:5f:4e:d2:ad:1d:01:1d: 6d:27:b0:38:12:a3:21:4c:45:51:84:be:7e:35:a5: 6d:e0:22:7f:30:72:61:64:e2:b8:b1:ab:de:69:ff: 0c:d3:df:05:cc:d8:5a:e9:c3:aa:fd:6e:fb:b7:c9: 45:86:5a:8b:8e:99:23:c6:41:d2:3b:78:35:74:2a: 53:96:7f:af:a3:27:f0:38:8a:50:e7:50:5e:fa:98: ce:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:0B:2C:D4:6A:C3:BC:46:5A:55:65:BE:11:C5:54:4B:F7:A4:C7:F2 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fgss1GrDvEZaVWW-EcVUS_ekx_I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.4.0/22 151.240.20.0/22 151.240.68.0/22 151.240.84.0/22 151.244.79.0/24 151.245.77.0/24 Signature Algorithm: sha256WithRSAEncryption 19:7f:ad:56:c7:35:86:d5:31:a7:00:0e:77:51:a9:18:59:8c: 7e:bd:da:68:ac:72:2c:71:7c:41:3f:fc:ae:79:f8:1a:a6:3b: 7d:ca:9d:a0:16:ca:35:f7:4f:a9:3a:89:20:51:ce:a7:bd:66: b0:1e:2d:ae:68:aa:2e:dd:4b:1c:5e:e6:bf:e8:ee:4c:df:df: 5a:84:45:91:46:d3:35:a8:da:fc:d7:9d:a4:0d:f4:e1:b3:43: 52:c0:28:ab:d0:28:45:5e:c9:ed:b2:9c:9e:61:75:9a:a1:c4: 49:92:40:8f:41:7e:95:d8:48:d1:a9:bc:6d:b2:e0:8d:a4:59: 13:b3:da:1f:95:5a:22:50:58:d5:c8:61:86:fe:c9:76:1d:fc: 5b:1f:a2:75:7f:91:90:6f:17:98:03:b3:01:2c:46:f3:42:b1: 2c:aa:c6:e1:c4:05:6a:8e:0f:94:e7:1e:f3:5c:0d:ae:88:48: ae:e2:51:f9:00:54:24:13:9d:cd:86:3b:a4:5e:cf:34:da:aa: a7:53:d0:f3:82:15:dd:3d:b5:71:ab:11:2a:4a:0a:83:db:c4: 12:80:88:03:2d:a9:f7:b9:b4:2c:05:4e:99:9b:d9:e0:a3:c6: 9a:00:d7:5d:fd:9f:b1:c6:dc:8e:bb:ee:51:8a:fd:e1:02:81: 46:00:91:32 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt9yyTAHz9/s8gQU03TcF1fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTBiMmNkNDZhYzNiYzQ2NWE1NTY1YmUxMWM1NTQ0YmY3YTRjN2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYQuAcFXhQQOlNb9o13+cA05KRGX RwbTAkN2PllOgMqv4ITDJvR9TFrI+vn//3WD3L9eCqraM6k8zSPRK3PKzzI+F0k/ sBfJHG5yGJ+DSiWRGz8uZttjuYhNEfAKprYJEg+Fa9/5EN1X9n34SUe/czXDyJ5O 3ST3xc/2MvGTZTuEOW1aHQmjGYW5LLDnMtcT3CORIks8tVVPGpQhRmnr8PQ+Db7k PZTBrjuQRF9O0q0dAR1tJ7A4EqMhTEVRhL5+NaVt4CJ/MHJhZOK4saveaf8M098F zNha6cOq/W77t8lFhlqLjpkjxkHSO3g1dCpTln+voyfwOIpQ51Be+pjOiQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFH4LLNRqw7xGWlVlvhHFVEv3pMfyMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvZmdzczFHckR2RVphVldXLUVjVlVTX2VreF9JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCl/AEAwQC l/AUAwQCl/BEAwQCl/BUAwQAl/RPAwQAl/VNMA0GCSqGSIb3DQEBCwUAA4IBAQAZ f61WxzWG1TGnAA53UakYWYx+vdporHIscXxBP/yuefgapjt9yp2gFso190+pOokg Uc6nvWawHi2uaKou3UscXua/6O5M399ahEWRRtM1qNr8152kDfThs0NSwCir0ChF XsntspyeYXWaocRJkkCPQX6V2EjRqbxtsuCNpFkTs9oflVoiUFjVyGGG/sl2Hfxb H6J1f5GQbxeYA7MBLEbzQrEsqsbhxAVqjg+U5x7zXA2uiEiu4lH5AFQkE53Nhjuk Xs802qqnU9DzghXdPbVxqxEqSgqD28QSgIgDLan3ubQsBU6Zm9ngo8aaANdd/Z+x xtyOu+5Riv3hAoFGAJEy -----END CERTIFICATE-----Generated at Sun Jan 18 06:29:58 2026 by rpki-client