This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ju3lEdCgap_CKgNS0G5Wf4kBpZ8.roa File: ju3lEdCgap_CKgNS0G5Wf4kBpZ8.roa (raw, json) Hash identifier: 4lDabSIon2dImfFpkGItsxDFPhAkTtc12OqI9IisaHQ= Subject key identifier: 8E:ED:E5:11:D0:A0:6A:9F:C2:2A:03:52:D0:6E:56:7F:89:01:A5:9F Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB88CFFA29C66C260EA97DE4BE7EDB Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ju3lEdCgap_CKgNS0G5Wf4kBpZ8.roa Signing time: Fri 02 Jan 2026 08:20:49 +0000 ROA not before: Fri 02 Jan 2026 08:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 151.240.45.0/24 maxlen: 24 151.240.163.0/24 maxlen: 24 151.240.173.0/24 maxlen: 24 151.241.30.0/24 maxlen: 24 151.241.39.0/24 maxlen: 24 151.241.50.0/24 maxlen: 24 151.241.64.0/24 maxlen: 24 151.241.67.0/24 maxlen: 24 151.241.70.0/24 maxlen: 24 151.241.71.0/24 maxlen: 24 151.241.73.0/24 maxlen: 24 151.241.77.0/24 maxlen: 24 151.241.95.0/24 maxlen: 24 151.241.115.0/24 maxlen: 24 151.241.160.0/24 maxlen: 24 151.241.176.0/24 maxlen: 24 151.241.204.0/24 maxlen: 24 151.242.45.0/24 maxlen: 24 151.242.158.0/24 maxlen: 24 151.243.2.0/24 maxlen: 24 151.243.105.0/24 maxlen: 24 151.243.137.0/24 maxlen: 24 151.244.5.0/24 maxlen: 24 151.244.57.0/24 maxlen: 24 151.244.111.0/24 maxlen: 24 151.244.114.0/24 maxlen: 24 151.244.115.0/24 maxlen: 24 151.244.131.0/24 maxlen: 24 151.244.191.0/24 maxlen: 24 151.244.193.0/24 maxlen: 24 151.244.198.0/24 maxlen: 24 151.244.201.0/24 maxlen: 24 151.244.212.0/24 maxlen: 24 151.244.243.0/24 maxlen: 24 151.245.28.0/24 maxlen: 24 151.245.70.0/24 maxlen: 24 151.245.76.0/24 maxlen: 24 151.245.78.0/24 maxlen: 24 151.245.104.0/24 maxlen: 24 151.245.195.0/24 maxlen: 24 151.245.201.0/24 maxlen: 24 151.245.212.0/24 maxlen: 24 151.247.120.0/23 maxlen: 24 151.247.122.0/23 maxlen: 24 151.247.124.0/23 maxlen: 24 151.247.126.0/23 maxlen: 24 151.247.188.0/24 maxlen: 24 151.247.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:88:cf:fa:29:c6:6c:26:0e:a9:7d:e4:be:7e:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8eede511d0a06a9fc22a0352d06e567f8901a59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e9:10:7d:d5:78:cd:24:f1:cc:49:a4:44:4b: dd:3b:58:2b:ff:5c:5d:5e:73:02:eb:cc:79:14:22: d5:35:97:b7:16:47:87:e8:73:d7:73:1f:8d:94:34: 50:09:fc:1b:40:8d:ca:79:59:ce:a0:a5:77:71:d7: e0:a0:2d:24:f5:0e:1a:94:9c:d2:30:1a:87:39:6c: 6a:57:4c:ea:e6:32:50:49:82:88:11:04:a3:5f:56: 33:5b:06:ff:e0:0a:70:b0:30:62:71:5a:b3:11:43: 38:59:02:df:1a:9f:ca:b1:35:7b:50:aa:da:c2:66: e7:a8:26:54:fd:58:f5:f1:31:fe:5d:34:3f:f1:c7: 57:46:fd:47:86:29:a8:43:7f:86:28:59:52:e9:bd: 4b:72:c1:30:c6:b5:78:88:04:2a:38:8a:f1:9c:b2: 91:90:56:8b:7b:7e:0b:aa:e3:03:a5:74:c5:b2:c7: 65:62:99:2e:dc:91:8a:3d:01:8d:af:b1:56:a5:4d: 8f:12:7d:cc:04:d8:39:42:e7:9e:06:01:5f:f2:1f: 94:51:7a:aa:cc:98:3d:ec:eb:72:b3:91:6c:26:5f: 2b:2e:99:6d:d4:5f:b8:c7:a2:85:db:ab:38:12:93: b1:ed:d3:1e:c5:7e:46:b5:5d:c7:13:fc:a8:a9:3c: 49:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:ED:E5:11:D0:A0:6A:9F:C2:2A:03:52:D0:6E:56:7F:89:01:A5:9F X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ju3lEdCgap_CKgNS0G5Wf4kBpZ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.45.0/24 151.240.163.0/24 151.240.173.0/24 151.241.30.0/24 151.241.39.0/24 151.241.50.0/24 151.241.64.0/24 151.241.67.0/24 151.241.70.0/23 151.241.73.0/24 151.241.77.0/24 151.241.95.0/24 151.241.115.0/24 151.241.160.0/24 151.241.176.0/24 151.241.204.0/24 151.242.45.0/24 151.242.158.0/24 151.243.2.0/24 151.243.105.0/24 151.243.137.0/24 151.244.5.0/24 151.244.57.0/24 151.244.111.0/24 151.244.114.0/23 151.244.131.0/24 151.244.191.0/24 151.244.193.0/24 151.244.198.0/24 151.244.201.0/24 151.244.212.0/24 151.244.243.0/24 151.245.28.0/24 151.245.70.0/24 151.245.76.0/24 151.245.78.0/24 151.245.104.0/24 151.245.195.0/24 151.245.201.0/24 151.245.212.0/24 151.247.120.0/21 151.247.188.0/24 151.247.221.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:4a:69:43:7d:4e:93:2d:9b:9a:f6:57:03:ff:35:ed:c8:d2: ff:01:a3:67:c4:e4:e9:bb:29:6c:f6:97:3f:dd:fc:21:a5:d3: 43:22:27:41:46:1a:14:06:ee:27:f8:bc:3a:84:f8:a3:4f:02: 01:8e:c4:37:de:f6:24:ef:d2:32:22:53:34:23:b5:25:1c:83: cc:2a:02:d1:c9:c5:02:35:3f:8b:12:8a:a2:26:b1:94:27:12: 9d:fe:d5:f4:17:94:8f:53:7d:9b:e1:1a:f0:72:cc:c6:5e:4d: da:1b:ad:1b:d2:1f:74:6f:72:88:d5:3e:75:24:5a:92:1a:b2: 58:e6:e4:4e:32:e3:92:77:5a:63:2c:bc:7a:47:e7:7f:ef:83: 9e:50:6f:0b:e6:76:25:b9:94:0a:76:e6:24:5a:51:bb:f3:86: ee:42:5a:7f:10:62:90:fb:64:00:e9:78:77:52:31:66:7e:20: a6:b2:8d:af:3e:60:cf:2a:1b:ff:cc:db:9d:70:0d:cd:9b:49: c1:e0:fe:7b:a2:b4:8b:be:71:fc:2f:19:41:6c:4e:41:98:ca: a7:e6:06:8d:9e:6f:2e:ce:7d:df:c0:0f:4d:d4:0c:57:62:e2: fa:6e:45:7e:ac:1f:7e:30:6f:e1:59:94:8d:d6:30:c0:45:49: 19:2a:4a:37 -----BEGIN CERTIFICATE----- MIIGAzCCBOugAwIBAgISAZt9y4jP+inGbCYOqX3kvn7bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZWVkZTUxMWQwYTA2YTlmYzIyYTAzNTJkMDZlNTY3Zjg5MDFhNTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtekQfdV4zSTxzEmkREvdO1gr/1xd XnMC68x5FCLVNZe3FkeH6HPXcx+NlDRQCfwbQI3KeVnOoKV3cdfgoC0k9Q4alJzS MBqHOWxqV0zq5jJQSYKIEQSjX1YzWwb/4ApwsDBicVqzEUM4WQLfGp/KsTV7UKra wmbnqCZU/Vj18TH+XTQ/8cdXRv1HhimoQ3+GKFlS6b1LcsEwxrV4iAQqOIrxnLKR kFaLe34LquMDpXTFssdlYpku3JGKPQGNr7FWpU2PEn3MBNg5QueeBgFf8h+UUXqq zJg97Otys5FsJl8rLplt1F+4x6KF26s4EpOx7dMexX5GtV3HE/yoqTxJVwIDAQAB o4IDDzCCAwswHQYDVR0OBBYEFI7t5RHQoGqfwioDUtBuVn+JAaWfMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvanUzbEVkQ2dhcF9DS2dOUzBHNVdmNGtCcFo4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBIwYIKwYBBQUHAQcBAf8EggESMIIBDjCCAQoEAgABMIIB AgMEAJfwLQMEAJfwowMEAJfwrQMEAJfxHgMEAJfxJwMEAJfxMgMEAJfxQAMEAJfx QwMEAZfxRgMEAJfxSQMEAJfxTQMEAJfxXwMEAJfxcwMEAJfxoAMEAJfxsAMEAJfx zAMEAJfyLQMEAJfyngMEAJfzAgMEAJfzaQMEAJfziQMEAJf0BQMEAJf0OQMEAJf0 bwMEAZf0cgMEAJf0gwMEAJf0vwMEAJf0wQMEAJf0xgMEAJf0yQMEAJf01AMEAJf0 8wMEAJf1HAMEAJf1RgMEAJf1TAMEAJf1TgMEAJf1aAMEAJf1wwMEAJf1yQMEAJf1 1AMEA5f3eAMEAJf3vAMEAJf33TANBgkqhkiG9w0BAQsFAAOCAQEAfkppQ31Oky2b mvZXA/817cjS/wGjZ8Tk6bspbPaXP938IaXTQyInQUYaFAbuJ/i8OoT4o08CAY7E N972JO/SMiJTNCO1JRyDzCoC0cnFAjU/ixKKoiaxlCcSnf7V9BeUj1N9m+Ea8HLM xl5N2hutG9IfdG9yiNU+dSRakhqyWObkTjLjkndaYyy8ekfnf++DnlBvC+Z2JbmU CnbmJFpRu/OG7kJafxBikPtkAOl4d1IxZn4gprKNrz5gzyob/8zbnXANzZtJweD+ e6K0i75x/C8ZQWxOQZjKp+YGjZ5vLs5938APTdQMV2Li+m5FfqwffjBv4VmUjdYw wEVJGSpKNw== -----END CERTIFICATE-----Generated at Sun Jan 18 06:29:58 2026 by rpki-client