This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gf91u0hNQ_Fx3HtXr6QVupjpxwc.roa File: gf91u0hNQ_Fx3HtXr6QVupjpxwc.roa (raw, json) Hash identifier: eyUI2C2r8N8u9EcBXAJZiotXXSqJONE9T7cqomwfsZ4= Subject key identifier: 81:FF:75:BB:48:4D:43:F1:71:DC:7B:57:AF:A4:15:BA:98:E9:C7:07 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB052A40C0BCC49B90EA1F7F1155BC Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gf91u0hNQ_Fx3HtXr6QVupjpxwc.roa Signing time: Fri 02 Jan 2026 08:20:15 +0000 ROA not before: Fri 02 Jan 2026 08:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 973 IP address blocks: 151.242.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:05:2a:40:c0:bc:c4:9b:90:ea:1f:7f:11:55:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81ff75bb484d43f171dc7b57afa415ba98e9c707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b4:45:31:1e:d5:ce:ff:6d:da:a7:21:d2:d4: 9f:61:72:12:c8:be:87:13:76:4e:35:36:d1:0f:41: 5e:6e:d2:86:6b:26:ea:db:40:71:59:39:74:ad:b0: 79:c8:6a:b5:dc:0d:39:64:ba:74:38:89:6b:72:00: 00:18:59:7a:2a:ad:ff:9f:05:db:32:e7:f9:53:b2: 5b:4e:6d:ef:a0:da:7a:c8:ca:bd:68:24:d4:e0:08: bd:30:dd:10:f2:ff:b5:df:f5:98:7d:10:64:a6:ea: 28:45:38:0d:6e:49:8c:32:dd:86:53:e4:f0:fb:4e: 73:1d:9c:46:6b:35:ac:13:21:2d:39:40:b4:af:c6: 15:97:bb:b4:2a:3e:e0:ad:88:74:f1:be:c2:4a:a5: 8f:c2:9f:b8:ef:92:f9:fa:f6:f7:54:d3:e6:0e:b3: b0:b0:5a:86:ef:33:2d:35:a2:b9:5e:62:a9:61:fb: a1:26:dd:64:37:37:f9:57:32:c8:eb:f5:da:8e:b5: e4:fc:3f:00:e9:53:3b:f5:7c:d4:4c:43:ad:9b:50: c6:7c:ca:38:f6:32:ac:cb:40:3c:a1:ad:3f:5c:13: 57:d6:fd:e8:37:d6:3d:e9:51:82:b6:d5:ac:11:20: 84:49:5e:a1:66:42:de:55:e6:81:7b:04:41:8b:ad: 94:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:FF:75:BB:48:4D:43:F1:71:DC:7B:57:AF:A4:15:BA:98:E9:C7:07 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gf91u0hNQ_Fx3HtXr6QVupjpxwc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.110.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:9d:79:b3:8b:05:f8:73:d3:54:44:29:38:aa:9e:4e:b9:60: 4a:b8:b6:de:2b:25:2c:89:43:d9:e9:c7:d7:2c:47:03:21:47: 9c:57:18:99:a1:31:c2:74:7d:02:96:b5:68:8f:ba:a7:e1:93: 31:16:cd:fd:e5:eb:d9:59:7a:d2:71:98:6f:86:de:14:7b:58: 77:46:d9:86:88:97:38:71:25:91:4e:f4:66:05:f8:87:90:e5: c2:08:6d:51:06:08:b3:8a:39:91:7b:c8:36:cf:01:77:5f:0e: e1:55:17:4f:41:6f:87:c5:f3:48:4f:5a:5e:30:85:84:61:8b: ee:0d:22:73:fe:d5:74:81:8a:34:b4:08:fe:40:6b:f0:a9:7b: 74:27:c2:d1:50:aa:f2:59:2c:17:02:d8:18:72:da:09:0f:2f: 97:84:3c:b3:fb:b9:3c:39:13:08:7e:de:83:21:a5:6e:41:e9: 37:d4:16:bd:ba:23:1e:5e:57:30:79:f2:48:db:60:dd:8f:8c: 7d:c4:79:af:98:2a:ad:d3:f3:75:15:85:46:eb:60:87:a7:8c: 79:de:c7:32:b7:60:25:e3:f0:d3:f0:62:f8:a9:30:3e:98:c6: d7:3d:94:a4:a9:c2:48:93:43:88:3b:41:22:b2:58:f1:32:81: 5c:92:c7:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ywUqQMC8xJuQ6h9/EVW8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWZmNzViYjQ4NGQ0M2YxNzFkYzdiNTdhZmE0MTViYTk4ZTljNzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubRFMR7Vzv9t2qch0tSfYXISyL6H E3ZONTbRD0FebtKGaybq20BxWTl0rbB5yGq13A05ZLp0OIlrcgAAGFl6Kq3/nwXb Muf5U7JbTm3voNp6yMq9aCTU4Ai9MN0Q8v+13/WYfRBkpuooRTgNbkmMMt2GU+Tw +05zHZxGazWsEyEtOUC0r8YVl7u0Kj7grYh08b7CSqWPwp+475L5+vb3VNPmDrOw sFqG7zMtNaK5XmKpYfuhJt1kNzf5VzLI6/XajrXk/D8A6VM79XzUTEOtm1DGfMo4 9jKsy0A8oa0/XBNX1v3oN9Y96VGCttWsESCESV6hZkLeVeaBewRBi62U2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIH/dbtITUPxcdx7V6+kFbqY6ccHMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvZ2Y5MXUwaE5RX0Z4M0h0WHI2UVZ1cGpweHdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/JuMA0G CSqGSIb3DQEBCwUAA4IBAQALnXmziwX4c9NURCk4qp5OuWBKuLbeKyUsiUPZ6cfX LEcDIUecVxiZoTHCdH0ClrVoj7qn4ZMxFs395evZWXrScZhvht4Ue1h3RtmGiJc4 cSWRTvRmBfiHkOXCCG1RBgizijmRe8g2zwF3Xw7hVRdPQW+HxfNIT1peMIWEYYvu DSJz/tV0gYo0tAj+QGvwqXt0J8LRUKryWSwXAtgYctoJDy+XhDyz+7k8ORMIft6D IaVuQek31Ba9uiMeXlcwefJI22Ddj4x9xHmvmCqt0/N1FYVG62CHp4x53scyt2Al 4/DT8GL4qTA+mMbXPZSkqcJIk0OIO0EisljxMoFcksfh -----END CERTIFICATE-----Generated at Sun Jan 18 06:32:04 2026 by rpki-client