This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gqB8Hw-P2Mg_zEdN8UzWIAuAAAI.roa
File: gqB8Hw-P2Mg_zEdN8UzWIAuAAAI.roa (raw, json)
Hash identifier: SwxyvCdAGb+zlEgWSLLkFBYAn0n1diKzI3KlDUj3gcI=
Subject key identifier: 82:A0:7C:1F:0F:8F:D8:C8:3F:CC:47:4D:F1:4C:D6:20:0B:80:00:02
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019B7DCB5A028E0C3D5DA0951AE6D854635B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gqB8Hw-P2Mg_zEdN8UzWIAuAAAI.roa
Signing time: Fri 02 Jan 2026 08:20:37 +0000
ROA not before: Fri 02 Jan 2026 08:20:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153523
IP address blocks: 151.241.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Jan 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:cb:5a:02:8e:0c:3d:5d:a0:95:1a:e6:d8:54:63:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 2 08:20:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82a07c1f0f8fd8c83fcc474df14cd6200b800002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:42:d1:c6:5c:1e:60:16:f6:d6:d4:99:3d:
c7:81:b6:4f:85:e3:f0:60:bb:a8:d9:22:cc:fc:91:
cb:3d:4a:20:86:e2:dd:f5:5b:92:d8:58:04:ce:69:
fb:ff:6a:e2:74:26:57:85:a7:7e:b6:c9:65:dc:bd:
cc:1d:97:2f:bd:65:16:e1:5f:b4:81:db:0d:03:0c:
da:f6:18:6a:43:5d:48:fd:3b:18:9b:a0:99:22:4d:
19:23:38:ed:cc:4f:80:a4:ce:31:dc:b1:0d:30:5e:
99:c1:e3:db:48:9e:04:77:b2:b6:cc:58:d0:a6:75:
c3:0c:cf:34:cb:82:9c:72:24:23:c7:bd:22:5e:21:
33:f6:57:b5:b8:81:20:1a:45:8a:eb:d4:93:ea:d0:
e3:3f:66:48:c3:9a:96:7d:36:f6:9a:79:a7:13:c0:
53:59:4d:56:7b:59:52:ed:ac:56:06:bd:ea:f4:e1:
b0:72:50:d9:67:2f:bd:50:02:35:ac:6f:be:66:5e:
58:ad:6e:87:19:7a:ef:25:75:d1:bb:25:81:8b:b4:
97:51:83:b0:8b:df:ee:c9:1a:c0:0b:5e:7e:ac:a0:
06:a5:ea:00:cc:74:84:b8:c4:60:43:f1:f8:b3:28:
c3:25:56:35:64:41:48:17:fc:85:1e:6b:6c:3f:49:
c1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:A0:7C:1F:0F:8F:D8:C8:3F:CC:47:4D:F1:4C:D6:20:0B:80:00:02
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gqB8Hw-P2Mg_zEdN8UzWIAuAAAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.142.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:86:ee:51:a9:5f:d3:42:af:04:68:27:6a:31:75:86:02:f8:
46:ed:71:6e:b8:fd:06:63:16:b3:03:dd:0c:39:81:cf:b7:84:
42:8c:9f:92:cc:48:09:d9:c2:44:3f:82:22:c6:07:d1:f5:24:
87:29:5a:56:2f:12:8e:79:24:e7:b9:72:3d:7a:5f:0e:67:cc:
72:ae:67:fb:4a:af:16:9d:0d:16:42:da:d5:de:d4:63:cc:06:
7b:76:06:e1:12:f4:52:31:3b:94:43:ff:9c:5b:1c:30:2a:06:
ce:f7:d9:d3:22:f8:8d:7a:b7:99:80:68:e3:ac:a1:75:3e:b6:
15:60:1c:77:c3:1d:ae:ed:c7:bc:1a:cd:40:3b:18:60:b8:63:
09:29:9e:ee:3b:3b:4e:75:12:63:80:c7:64:52:e3:6e:72:37:
8f:ca:6f:6f:dd:59:7c:06:c6:5e:4e:26:dd:18:75:bb:1a:2e:
6a:7e:67:ea:92:6c:88:26:aa:a1:40:97:ee:c9:46:fd:d8:71:
f3:15:00:78:12:c1:63:c3:ff:cd:c2:c9:86:54:ae:21:13:59:
ea:a6:c9:81:83:52:df:d7:b0:32:42:40:c6:ec:fd:c6:f5:5f:
e5:ea:75:6a:b1:f1:0d:92:eb:49:51:61:d6:3a:c6:26:f1:61:
94:27:26:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 06:28:46 2026 by rpki-client