This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gPjQ0NAt5vfKKMVR5XmfhLtAJnY.roa File: gPjQ0NAt5vfKKMVR5XmfhLtAJnY.roa (raw, json) Hash identifier: jhx8GM6AydO/GjxhjbgE1on4IH9C/cK4igvjJyXq2vo= Subject key identifier: 80:F8:D0:D0:D0:2D:E6:F7:CA:28:C5:51:E5:79:9F:84:BB:40:26:76 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB965C3E40AF1B1BA78BB6DDA0A53F Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gPjQ0NAt5vfKKMVR5XmfhLtAJnY.roa Signing time: Fri 02 Jan 2026 08:20:52 +0000 ROA not before: Fri 02 Jan 2026 08:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214404 IP address blocks: 151.242.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:96:5c:3e:40:af:1b:1b:a7:8b:b6:dd:a0:a5:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=80f8d0d0d02de6f7ca28c551e5799f84bb402676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a8:44:56:0c:00:73:ff:84:b8:99:82:90:c8: 83:55:92:ad:66:25:31:86:f3:d1:66:59:5c:45:58: b9:bc:4c:dc:6c:be:0c:a0:c6:4c:3c:68:6b:f8:a8: fe:80:f0:ae:93:0f:41:96:a5:dc:dc:bc:ee:ba:f5: 79:86:63:71:de:4f:78:74:cf:67:80:4d:76:5d:a0: ad:d1:b4:80:18:c4:92:1b:b5:ef:79:56:29:6d:5e: 6b:d1:cc:04:db:10:8c:db:49:a6:18:10:59:e7:09: 61:b1:30:92:cc:95:05:2f:dd:b8:36:b9:80:5c:93: 9c:e3:0a:a4:c8:bf:97:71:46:48:b1:7f:b5:54:b6: 25:c3:ad:ba:98:15:99:ce:43:9c:01:69:a0:7c:fa: 90:00:0a:42:90:c1:e9:6c:7d:5b:8d:e1:71:97:68: d9:21:22:bb:e8:4e:f5:7a:6c:31:cb:ec:2e:b4:9c: 66:d0:90:c3:5e:65:26:57:f3:97:d4:94:4e:08:21: 38:e6:46:09:32:bc:e5:e3:9f:24:64:f9:de:3c:57: 66:b2:b1:6d:68:df:21:ce:9f:f5:cb:9f:d5:ea:d8: b1:2a:e7:d1:35:a4:dc:e5:0f:89:b2:63:f7:97:58: f8:62:61:66:1f:a1:95:b1:3f:38:61:3a:c0:1d:bb: 2c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F8:D0:D0:D0:2D:E6:F7:CA:28:C5:51:E5:79:9F:84:BB:40:26:76 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gPjQ0NAt5vfKKMVR5XmfhLtAJnY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.68.0/24 Signature Algorithm: sha256WithRSAEncryption ad:22:39:f1:18:74:79:db:80:cd:82:33:9f:b8:ba:77:39:9d: 7a:a9:a1:f1:3d:d5:e4:c0:37:b1:58:ea:6c:87:00:a7:f0:c6: ea:bc:b3:30:0b:fd:00:86:b3:f8:84:7c:d7:0c:e0:57:2e:fe: cf:99:d4:87:6f:54:a0:18:ce:4a:e3:9e:16:dc:ee:be:29:9f: de:dc:69:aa:30:d8:b8:27:0d:51:ef:d6:2b:61:82:dc:db:d9: 69:57:29:89:57:45:38:59:3f:09:68:f5:64:a8:e9:88:a4:a7: 54:b7:72:ee:bf:31:b6:5d:9d:48:2f:ea:ae:99:0f:1b:48:d4: 05:6c:d4:4a:33:87:d4:17:75:33:88:d2:4a:42:4f:ef:c6:51: 1b:1c:51:18:d0:31:f5:e3:73:2c:32:b5:be:35:44:d9:df:3c: 79:64:41:a9:5c:aa:24:bf:23:fb:6a:2f:44:c5:5b:49:02:c1: 7a:8a:d1:80:d5:55:21:d5:a7:b9:ec:8a:37:9b:5b:3c:6f:bb: 29:39:95:7a:77:2d:b0:43:3b:4d:fc:b6:b4:a4:66:d2:b6:f6: 21:e7:8d:63:b9:7a:4d:4f:bd:5e:87:87:50:ed:bd:61:18:f4: a5:6f:f5:d5:05:0e:35:98:3d:14:59:a7:b6:4d:bb:ea:87:05: b6:50:86:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y5ZcPkCvGxuni7bdoKU/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MGY4ZDBkMGQwMmRlNmY3Y2EyOGM1NTFlNTc5OWY4NGJiNDAyNjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKhEVgwAc/+EuJmCkMiDVZKtZiUx hvPRZllcRVi5vEzcbL4MoMZMPGhr+Kj+gPCukw9BlqXc3LzuuvV5hmNx3k94dM9n gE12XaCt0bSAGMSSG7XveVYpbV5r0cwE2xCM20mmGBBZ5wlhsTCSzJUFL924NrmA XJOc4wqkyL+XcUZIsX+1VLYlw626mBWZzkOcAWmgfPqQAApCkMHpbH1bjeFxl2jZ ISK76E71emwxy+wutJxm0JDDXmUmV/OX1JROCCE45kYJMrzl458kZPnePFdmsrFt aN8hzp/1y5/V6tixKufRNaTc5Q+JsmP3l1j4YmFmH6GVsT84YTrAHbssgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFID40NDQLeb3yijFUeV5n4S7QCZ2MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvZ1BqUTBOQXQ1dmZLS01WUjVYbWZoTHRBSm5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/JEMA0G CSqGSIb3DQEBCwUAA4IBAQCtIjnxGHR524DNgjOfuLp3OZ16qaHxPdXkwDexWOps hwCn8MbqvLMwC/0AhrP4hHzXDOBXLv7PmdSHb1SgGM5K454W3O6+KZ/e3GmqMNi4 Jw1R79YrYYLc29lpVymJV0U4WT8JaPVkqOmIpKdUt3LuvzG2XZ1IL+qumQ8bSNQF bNRKM4fUF3UziNJKQk/vxlEbHFEY0DH143MsMrW+NUTZ3zx5ZEGpXKokvyP7ai9E xVtJAsF6itGA1VUh1ae57Io3m1s8b7spOZV6dy2wQztN/La0pGbStvYh541juXpN T71eh4dQ7b1hGPSlb/XVBQ41mD0UWae2TbvqhwW2UIbj -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:02 2026 by rpki-client