This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/iFfeVfiD_THJd-D3lSV9A9_mPxk.roa File: iFfeVfiD_THJd-D3lSV9A9_mPxk.roa (raw, json) Hash identifier: y+YKulSaALeKfN4ceLYshYWLLKV66u8GLUGI+nDEv4M= Subject key identifier: 88:57:DE:55:F8:83:FD:31:C9:77:E0:F7:95:25:7D:03:DF:E6:3F:19 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB516CE47BEA106B3F1313FE40E8CB Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/iFfeVfiD_THJd-D3lSV9A9_mPxk.roa Signing time: Fri 02 Jan 2026 08:20:35 +0000 ROA not before: Fri 02 Jan 2026 08:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138997 IP address blocks: 151.243.37.0/24 maxlen: 24 151.243.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:51:6c:e4:7b:ea:10:6b:3f:13:13:fe:40:e8:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8857de55f883fd31c977e0f795257d03dfe63f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:69:02:c6:f7:a2:c2:50:8e:70:47:f9:81:cc: c1:9d:b4:69:b9:39:79:68:47:5b:d1:84:b5:cd:c8: 64:ec:27:0f:74:2d:a7:76:c7:8f:0c:2e:85:75:b8: 23:92:bf:c7:42:37:d5:45:e7:fd:2b:0e:12:6e:f9: 26:84:f2:b3:81:47:cc:35:bb:cf:85:5a:22:73:25: a3:57:72:d9:43:9e:ed:c9:41:da:ba:05:1b:23:08: 85:4b:a7:5a:4b:a4:d1:19:51:47:d3:9c:ef:39:44: cb:ff:3b:60:e8:14:e2:5d:59:17:86:90:c4:cb:59: 36:9e:64:52:39:36:97:bd:df:14:b2:78:76:f8:04: 7f:01:cf:34:e0:05:e6:42:14:0b:8e:54:9b:5b:fc: 3f:44:2b:93:00:1c:62:49:1e:87:24:00:dd:9e:9f: 1a:32:d5:01:3c:5d:9a:0d:ca:4d:69:23:24:a3:12: a1:65:78:1a:cc:f4:f6:df:13:f2:c6:b6:7c:9e:2b: f2:85:9a:c9:ca:c4:81:e5:bb:b9:70:30:81:a5:6a: aa:fc:4d:67:5f:52:62:03:24:3d:86:b9:0c:93:b2: 1b:4f:22:84:d5:a7:6f:89:e8:0e:e8:2d:d5:67:8e: 1d:4b:52:dc:91:4d:de:da:70:0a:72:5b:c6:3d:76: 89:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:57:DE:55:F8:83:FD:31:C9:77:E0:F7:95:25:7D:03:DF:E6:3F:19 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/iFfeVfiD_THJd-D3lSV9A9_mPxk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.37.0/24 151.243.158.0/24 Signature Algorithm: sha256WithRSAEncryption 64:f8:bd:af:b2:c4:17:9b:d2:2a:97:00:28:51:b3:e0:2e:52: 66:21:19:61:b9:0f:83:a9:24:85:92:4f:74:22:c1:4c:52:c6: 8a:fa:50:38:fa:d6:4c:ef:49:82:0e:4d:52:38:b9:86:54:ba: a5:8f:ef:6c:a4:81:72:bf:15:3f:00:a3:4b:cd:48:79:5d:b2: 46:79:0b:ce:9f:2a:0a:c8:14:40:6b:ea:8b:5a:b9:df:8b:12: f4:5b:ec:b6:2c:52:d7:b6:aa:8d:23:cb:18:2c:c6:58:99:1d: 0e:53:09:fd:c2:ef:a9:43:ee:16:64:79:3b:08:0d:b0:ba:18: 58:57:fe:95:9b:27:42:cb:89:e1:aa:49:13:86:16:d2:59:61: 16:32:d8:c7:18:61:37:eb:72:e1:20:7a:40:f8:60:99:e2:59: 50:c9:b0:6a:5c:36:61:71:c8:27:6c:97:19:06:5f:b9:52:3c: 06:e2:af:4f:74:0f:48:52:ff:56:07:38:d5:97:af:96:42:d6: 5f:31:bc:45:8a:b8:bb:74:54:7c:c9:e4:0a:05:f2:3f:b3:43: 51:99:19:21:24:d4:49:5b:09:77:20:17:c6:97:39:30:8d:51: e8:cc:65:d0:a2:50:1a:2c:18:d6:10:8d:e1:d4:1d:3d:7c:0a: 2f:52:71:7b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y1Fs5HvqEGs/ExP+QOjLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODU3ZGU1NWY4ODNmZDMxYzk3N2UwZjc5NTI1N2QwM2RmZTYzZjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmkCxveiwlCOcEf5gczBnbRpuTl5 aEdb0YS1zchk7CcPdC2ndsePDC6Fdbgjkr/HQjfVRef9Kw4SbvkmhPKzgUfMNbvP hVoicyWjV3LZQ57tyUHaugUbIwiFS6daS6TRGVFH05zvOUTL/ztg6BTiXVkXhpDE y1k2nmRSOTaXvd8Usnh2+AR/Ac804AXmQhQLjlSbW/w/RCuTABxiSR6HJADdnp8a MtUBPF2aDcpNaSMkoxKhZXgazPT23xPyxrZ8nivyhZrJysSB5bu5cDCBpWqq/E1n X1JiAyQ9hrkMk7IbTyKE1adviegO6C3VZ44dS1LckU3e2nAKclvGPXaJswIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIhX3lX4g/0xyXfg95UlfQPf5j8ZMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvaUZmZVZmaURfVEhKZC1EM2xTVjlBOV9tUHhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/MlAwQA l/OeMA0GCSqGSIb3DQEBCwUAA4IBAQBk+L2vssQXm9IqlwAoUbPgLlJmIRlhuQ+D qSSFkk90IsFMUsaK+lA4+tZM70mCDk1SOLmGVLqlj+9spIFyvxU/AKNLzUh5XbJG eQvOnyoKyBRAa+qLWrnfixL0W+y2LFLXtqqNI8sYLMZYmR0OUwn9wu+pQ+4WZHk7 CA2wuhhYV/6VmydCy4nhqkkThhbSWWEWMtjHGGE363LhIHpA+GCZ4llQybBqXDZh ccgnbJcZBl+5UjwG4q9PdA9IUv9WBzjVl6+WQtZfMbxFiri7dFR8yeQKBfI/s0NR mRkhJNRJWwl3IBfGlzkwjVHozGXQolAaLBjWEI3h1B09fAovUnF7 -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:29 2026 by rpki-client