This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gSkJ8-Iq-mrr7KrVvu8emLF0Buc.roa File: gSkJ8-Iq-mrr7KrVvu8emLF0Buc.roa (raw, json) Hash identifier: q4DpJsnjRX8XqhaCqGdLzEFp/Ft1kBJoMs/7757lXR0= Subject key identifier: 81:29:09:F3:E2:2A:FA:6A:EB:EC:AA:D5:BE:EF:1E:98:B1:74:06:E7 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB9BDE85A81DC58B5433A2960ED5BB Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gSkJ8-Iq-mrr7KrVvu8emLF0Buc.roa Signing time: Fri 02 Jan 2026 08:20:54 +0000 ROA not before: Fri 02 Jan 2026 08:20:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215114 IP address blocks: 151.240.30.0/24 maxlen: 24 151.240.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:9b:de:85:a8:1d:c5:8b:54:33:a2:96:0e:d5:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=812909f3e22afa6aebecaad5beef1e98b17406e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b8:5b:bf:77:a9:af:43:f4:22:34:87:af:60: 51:0d:53:39:9c:df:57:18:da:c1:98:2a:fd:1b:b1: 41:8d:87:1f:b9:7d:35:15:8f:5b:c4:56:bc:9d:98: 1a:c3:27:62:3c:0b:74:32:8e:33:b3:b4:3d:18:63: 40:b6:ee:9c:14:a0:d5:ab:5e:91:4a:58:41:ca:71: 62:d3:7b:a8:12:26:13:27:68:0f:d1:32:23:44:2a: 92:b8:8d:e7:c6:28:23:6d:56:e1:2d:ea:59:ae:a8: b4:e4:a6:57:e4:b7:0f:57:8e:e2:bc:2f:1f:e0:f7: bd:d0:f3:59:f6:b5:5b:53:dc:4c:d8:8b:10:c2:94: 76:13:e8:65:bc:69:db:d0:30:79:ff:d0:78:59:17: 36:cd:0c:8a:6a:5c:cc:de:87:18:d3:7d:32:46:ee: 83:15:4c:93:c1:1d:f1:73:3f:f4:05:76:6a:64:b6: 0f:45:a0:29:8e:af:78:a1:d3:79:7b:92:81:a8:bc: 57:93:e0:f3:fd:8b:b0:37:b7:f9:48:e2:e2:04:9c: a7:f2:9d:5b:17:7a:5e:36:ec:25:b7:bc:bf:1a:77: 52:ed:ac:f1:b7:2b:08:2d:31:1f:31:92:ca:d7:78: f8:64:71:73:e6:d4:72:e3:02:bb:d9:cd:d3:2c:f5: 45:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:29:09:F3:E2:2A:FA:6A:EB:EC:AA:D5:BE:EF:1E:98:B1:74:06:E7 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gSkJ8-Iq-mrr7KrVvu8emLF0Buc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.30.0/24 151.240.100.0/24 Signature Algorithm: sha256WithRSAEncryption 81:f8:3c:14:1d:35:44:87:89:cb:ef:92:7b:03:0b:07:3c:d1: 51:46:1d:0f:c7:4b:6d:02:20:3f:93:78:e4:9f:0b:54:cc:02: b6:f5:f0:c8:53:e9:23:06:d6:51:8d:13:c7:3f:b8:22:42:43: 44:f8:14:90:3f:e4:c4:35:ca:a2:07:c9:77:74:c5:f4:87:04: a0:ac:43:a9:8a:df:4e:9a:8f:db:c0:95:30:82:54:21:78:33: d1:20:d5:d7:05:1d:ed:91:21:0c:c4:85:8d:01:97:dc:c4:ee: 0f:d7:86:7e:bf:c6:c0:0c:08:50:a8:4e:d9:c0:da:06:71:58: c4:ef:6c:cb:49:05:2b:da:4c:24:a9:39:cf:09:11:3c:0e:1e: 57:7d:f7:a9:59:59:76:b4:a8:40:ff:86:41:18:eb:bd:6b:e8: ec:c7:15:b0:01:e1:c5:f8:42:be:06:1b:d7:04:09:7c:8f:48: 4e:e2:50:1c:72:c5:0c:f1:dd:38:9f:db:d2:2c:ab:26:9d:09: ce:06:da:2d:00:bd:3c:4e:dc:05:a2:f7:e2:20:2a:c4:da:64: 1d:ed:a0:a3:fd:7d:4a:6c:2c:f2:dd:44:b3:21:ba:a5:36:66: fb:a6:90:0f:27:06:39:10:c6:60:20:65:90:bb:23:62:bd:e5: 0d:86:ff:ae -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y5vehagdxYtUM6KWDtW7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTI5MDlmM2UyMmFmYTZhZWJlY2FhZDViZWVmMWU5OGIxNzQwNmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bhbv3epr0P0IjSHr2BRDVM5nN9X GNrBmCr9G7FBjYcfuX01FY9bxFa8nZgawydiPAt0Mo4zs7Q9GGNAtu6cFKDVq16R SlhBynFi03uoEiYTJ2gP0TIjRCqSuI3nxigjbVbhLepZrqi05KZX5LcPV47ivC8f 4Pe90PNZ9rVbU9xM2IsQwpR2E+hlvGnb0DB5/9B4WRc2zQyKalzM3ocY030yRu6D FUyTwR3xcz/0BXZqZLYPRaApjq94odN5e5KBqLxXk+Dz/YuwN7f5SOLiBJyn8p1b F3peNuwlt7y/GndS7azxtysILTEfMZLK13j4ZHFz5tRy4wK72c3TLPVFzQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIEpCfPiKvpq6+yq1b7vHpixdAbnMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvZ1NrSjgtSXEtbXJyN0tyVnZ1OGVtTEYwQnVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/AeAwQA l/BkMA0GCSqGSIb3DQEBCwUAA4IBAQCB+DwUHTVEh4nL75J7AwsHPNFRRh0Px0tt AiA/k3jknwtUzAK29fDIU+kjBtZRjRPHP7giQkNE+BSQP+TENcqiB8l3dMX0hwSg rEOpit9Omo/bwJUwglQheDPRINXXBR3tkSEMxIWNAZfcxO4P14Z+v8bADAhQqE7Z wNoGcVjE72zLSQUr2kwkqTnPCRE8Dh5XffepWVl2tKhA/4ZBGOu9a+jsxxWwAeHF +EK+BhvXBAl8j0hO4lAccsUM8d04n9vSLKsmnQnOBtotAL08TtwFovfiICrE2mQd 7aCj/X1KbCzy3USzIbqlNmb7ppAPJwY5EMZgIGWQuyNiveUNhv+u -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:51 2026 by rpki-client