This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fi4gCaqCuO_hanTSPL8w258Rkj0.roa File: fi4gCaqCuO_hanTSPL8w258Rkj0.roa (raw, json) Hash identifier: ARbSLXCbYzrOp/bOQEAR+/ht54LTa0a42KN8i9MOLBM= Subject key identifier: 7E:2E:20:09:AA:82:B8:EF:E1:6A:74:D2:3C:BF:30:DB:9F:11:92:3D Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BFF1651ECEB633B592A831CA7C3A0E9C8 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fi4gCaqCuO_hanTSPL8w258Rkj0.roa Signing time: Tue 27 Jan 2026 10:53:31 +0000 ROA not before: Tue 27 Jan 2026 10:53:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50338 IP address blocks: 151.243.10.0/24 maxlen: 24 151.247.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:16:51:ec:eb:63:3b:59:2a:83:1c:a7:c3:a0:e9:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 27 10:53:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e2e2009aa82b8efe16a74d23cbf30db9f11923d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:3c:c7:67:5e:be:61:10:89:7c:5a:fc:3d:26: 9a:32:c1:f9:04:bb:37:a4:ed:2f:5b:79:4a:1c:7c: 62:e0:63:03:72:cd:9d:ea:f5:87:cc:83:85:19:d5: e1:c3:9d:9b:22:b1:32:69:c7:3d:39:00:74:67:ef: 2d:8e:6c:86:07:c6:b8:ba:85:9c:c3:72:f5:11:8a: 32:71:83:8b:38:fc:25:93:b9:18:e7:d7:e9:17:42: 7f:b4:40:5e:58:db:49:2d:88:62:9d:4e:6f:5b:0b: a8:bd:63:fc:59:4e:11:1d:64:18:79:95:5e:55:fd: 52:39:a6:7f:9f:5a:77:fe:22:ce:a1:eb:1f:27:11: 8a:de:2d:29:e1:d1:93:61:2e:27:7a:ca:54:1c:4d: 66:8f:6f:71:8a:19:93:5f:b8:eb:ae:19:d8:8e:ad: e4:07:81:b8:6d:1b:8f:de:06:35:e3:ed:19:b5:85: f5:3d:5a:39:6b:4e:ae:1a:8e:7d:48:34:ab:e6:a7: 8f:e3:26:38:72:24:8b:2e:f2:54:c9:ba:3e:98:a9: e0:17:61:c8:a5:fc:b4:82:b9:c3:28:76:4c:bf:cd: 2b:6a:c4:27:ca:a0:c7:0b:5c:66:8e:49:e6:86:18: 50:ed:27:1a:7a:05:9c:f3:08:f4:0d:26:5a:59:fd: ed:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:2E:20:09:AA:82:B8:EF:E1:6A:74:D2:3C:BF:30:DB:9F:11:92:3D X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fi4gCaqCuO_hanTSPL8w258Rkj0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.10.0/24 151.247.36.0/24 Signature Algorithm: sha256WithRSAEncryption b1:ec:0e:e6:91:2c:82:c7:45:41:ef:b1:86:02:79:11:2b:90: 55:08:dc:63:b1:ac:ad:c4:0b:df:35:5b:b2:f8:d3:3d:f8:fa: 56:1b:68:d8:ae:eb:56:a9:e9:d8:63:be:02:77:ae:81:6e:8d: 19:c3:b1:9e:f3:b7:40:68:2d:07:dd:c8:d5:33:c9:3d:b9:dd: fb:b8:df:69:23:3a:0c:07:cc:6f:b9:c4:0d:0a:3a:3a:b7:1d: 66:43:e7:53:1f:d6:54:bd:d4:82:23:51:50:92:49:3e:4d:56: 1f:e7:83:4b:2e:2a:3a:09:91:d1:71:b9:33:8a:41:c4:53:f3: e9:50:f0:31:5a:71:27:b6:52:d0:57:13:98:f0:7e:13:ac:79: c0:09:a4:34:bd:c4:b3:ca:fd:35:75:13:91:9e:e8:db:13:62: 2e:ee:d4:68:d3:dc:75:44:b3:92:a4:d2:8d:4c:47:9b:a1:60: f6:41:69:83:b8:e5:f5:bb:2b:1a:45:2e:9e:93:90:c8:2e:16: 0d:f9:96:c9:ce:c8:cc:b7:df:e7:84:db:27:60:0a:1c:83:80: 48:a7:50:3e:c7:96:01:0d:a6:81:82:48:93:bd:d2:e7:c6:d9: d8:88:aa:01:0f:ca:73:20:14:51:05:58:f2:53:97:b4:7f:7c: 97:76:26:45 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZv/FlHs62M7WSqDHKfDoOnIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTI3MTA1MzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTJlMjAwOWFhODJiOGVmZTE2YTc0ZDIzY2JmMzBkYjlmMTE5MjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TzHZ16+YRCJfFr8PSaaMsH5BLs3 pO0vW3lKHHxi4GMDcs2d6vWHzIOFGdXhw52bIrEyacc9OQB0Z+8tjmyGB8a4uoWc w3L1EYoycYOLOPwlk7kY59fpF0J/tEBeWNtJLYhinU5vWwuovWP8WU4RHWQYeZVe Vf1SOaZ/n1p3/iLOoesfJxGK3i0p4dGTYS4nespUHE1mj29xihmTX7jrrhnYjq3k B4G4bRuP3gY14+0ZtYX1PVo5a06uGo59SDSr5qeP4yY4ciSLLvJUybo+mKngF2HI pfy0grnDKHZMv80rasQnyqDHC1xmjknmhhhQ7ScaegWc8wj0DSZaWf3ttwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFH4uIAmqgrjv4Wp00jy/MNufEZI9MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvZmk0Z0NhcUN1T19oYW5UU1BMOHcyNThSa2owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/MKAwQA l/ckMA0GCSqGSIb3DQEBCwUAA4IBAQCx7A7mkSyCx0VB77GGAnkRK5BVCNxjsayt xAvfNVuy+NM9+PpWG2jYrutWqenYY74Cd66Bbo0Zw7Ge87dAaC0H3cjVM8k9ud37 uN9pIzoMB8xvucQNCjo6tx1mQ+dTH9ZUvdSCI1FQkkk+TVYf54NLLio6CZHRcbkz ikHEU/PpUPAxWnEntlLQVxOY8H4TrHnACaQ0vcSzyv01dRORnujbE2Iu7tRo09x1 RLOSpNKNTEeboWD2QWmDuOX1uysaRS6ek5DILhYN+ZbJzsjMt9/nhNsnYAocg4BI p1A+x5YBDaaBgkiTvdLnxtnYiKoBD8pzIBRRBVjyU5e0f3yXdiZF -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:44 2026 by rpki-client