This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kE3h9Timb8JUJcjKUl2F7OEeM1c.roa File: kE3h9Timb8JUJcjKUl2F7OEeM1c.roa (raw, json) Hash identifier: iDbH+HmMR0ijC2vgJfVfeltoyIk6GeMxvCkqTPcc7IA= Subject key identifier: 90:4D:E1:F5:38:A6:6F:C2:54:25:C8:CA:52:5D:85:EC:E1:1E:33:57 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BC123627E0F41D130BA09F1FCB090C382 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kE3h9Timb8JUJcjKUl2F7OEeM1c.roa Signing time: Thu 15 Jan 2026 10:11:20 +0000 ROA not before: Thu 15 Jan 2026 10:11:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205886 IP address blocks: 151.240.152.0/24 maxlen: 24 151.240.226.0/24 maxlen: 24 151.241.25.0/24 maxlen: 24 151.243.189.0/24 maxlen: 24 151.245.0.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c1:23:62:7e:0f:41:d1:30:ba:09:f1:fc:b0:90:c3:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 15 10:11:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=904de1f538a66fc25425c8ca525d85ece11e3357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7e:51:8b:a1:2d:ea:1e:35:0c:9c:65:5e:d1: ac:ea:a3:53:ad:b7:af:53:be:d4:10:13:eb:f2:29: 0a:5d:cd:c2:32:fe:d3:26:15:ef:0d:ea:35:50:5f: 08:16:3f:78:e5:69:8b:e3:89:46:2b:88:d4:eb:bc: d1:06:66:02:92:a4:0b:b8:c3:68:60:51:21:2c:57: 50:ad:82:e9:cd:ed:d4:4a:90:9a:7c:bf:65:48:8c: aa:26:cc:9b:a0:86:ab:c0:8e:d5:1e:32:44:dd:f6: b5:5d:d1:f3:bc:2f:25:e3:50:95:27:2e:21:07:38: 9c:e1:1d:d5:3b:5a:df:63:b1:51:06:25:b7:80:ff: 2f:fa:0e:6b:4d:54:36:91:a7:85:75:c1:40:d6:9f: e2:47:08:8e:e5:4e:6d:c1:ad:4f:87:0a:bc:e7:d7: ec:7a:97:dc:d9:99:b4:68:3f:37:3a:2c:ae:15:a0: 09:8b:72:31:51:00:c1:10:6c:d6:ea:8b:51:50:6b: b8:dc:f8:0b:04:de:2e:68:1e:e7:a7:3d:2d:d5:f0: 57:6c:2d:f0:57:4c:85:a8:4e:9d:f9:0e:5b:6f:55: 1a:77:b2:dd:de:ea:71:d5:f4:e5:68:5e:c3:b4:ea: 53:b4:06:c8:07:32:56:09:f1:c2:68:6f:42:cc:14: a3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:4D:E1:F5:38:A6:6F:C2:54:25:C8:CA:52:5D:85:EC:E1:1E:33:57 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kE3h9Timb8JUJcjKUl2F7OEeM1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.152.0/24 151.240.226.0/24 151.241.25.0/24 151.243.189.0/24 151.245.0.0/17 Signature Algorithm: sha256WithRSAEncryption 5d:50:5e:2d:7a:e9:6c:11:9a:ae:da:3a:c7:0a:7f:5a:e0:39: 8d:d4:07:9d:69:a0:f5:11:73:57:8b:e5:c0:d9:dc:b8:3b:aa: 34:5c:97:7a:1c:7b:ca:55:a9:4c:b8:b2:e1:92:a7:45:b2:d9: 81:83:11:a6:ef:68:4b:99:f8:e7:d2:35:11:ed:fc:f5:bf:cf: 21:50:7f:c2:34:00:55:e5:50:be:7e:c7:13:ce:45:69:5e:33: 6d:7b:f5:a6:45:90:d5:e2:a8:ca:cf:b8:ec:90:6c:c0:71:cd: f6:fc:31:d7:3f:a2:b8:88:83:6c:2d:e6:cd:ff:66:a4:33:ce: d8:ba:5f:bf:81:0b:f0:1a:30:bb:cf:b9:d8:62:8c:87:8d:bd: 6c:c8:8a:a4:c3:b4:20:53:37:25:cb:f0:2d:ef:f5:d2:7b:60: fb:6d:db:0b:70:da:8c:63:87:18:25:ae:1a:d8:98:af:e4:4b: e8:74:35:1f:fd:72:d4:bc:97:b5:78:72:96:99:a8:74:dd:09: 1e:e4:4f:1c:60:af:90:ab:e1:fd:4b:ce:8d:89:95:88:21:09: d3:18:b2:08:8a:d9:8d:86:71:a9:9e:a1:06:0b:05:5e:8d:17: 75:f2:a8:82:6b:08:d4:67:27:bc:97:38:a5:6b:dc:25:21:63: 3d:30:46:ad -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZvBI2J+D0HRMLoJ8fywkMOCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTE1MTAxMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDRkZTFmNTM4YTY2ZmMyNTQyNWM4Y2E1MjVkODVlY2UxMWUzMzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1n5Ri6Et6h41DJxlXtGs6qNTrbev U77UEBPr8ikKXc3CMv7TJhXvDeo1UF8IFj945WmL44lGK4jU67zRBmYCkqQLuMNo YFEhLFdQrYLpze3USpCafL9lSIyqJsyboIarwI7VHjJE3fa1XdHzvC8l41CVJy4h Bzic4R3VO1rfY7FRBiW3gP8v+g5rTVQ2kaeFdcFA1p/iRwiO5U5twa1Phwq859fs epfc2Zm0aD83OiyuFaAJi3IxUQDBEGzW6otRUGu43PgLBN4uaB7npz0t1fBXbC3w V0yFqE6d+Q5bb1Uad7Ld3upx1fTlaF7DtOpTtAbIBzJWCfHCaG9CzBSjswIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFJBN4fU4pm/CVCXIylJdhezhHjNXMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEva0UzaDlUaW1iOEpVSmNqS1VsMkY3T0VlTTFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAl/CYAwQA l/DiAwQAl/EZAwQAl/O9AwQHl/UAMA0GCSqGSIb3DQEBCwUAA4IBAQBdUF4teuls EZqu2jrHCn9a4DmN1AedaaD1EXNXi+XA2dy4O6o0XJd6HHvKValMuLLhkqdFstmB gxGm72hLmfjn0jUR7fz1v88hUH/CNABV5VC+fscTzkVpXjNte/WmRZDV4qjKz7js kGzAcc32/DHXP6K4iINsLebN/2akM87Yul+/gQvwGjC7z7nYYoyHjb1syIqkw7Qg Uzcly/At7/XSe2D7bdsLcNqMY4cYJa4a2Jiv5EvodDUf/XLUvJe1eHKWmah03Qke 5E8cYK+Qq+H9S86NiZWIIQnTGLIIitmNhnGpnqEGCwVejRd18qiCawjUZye8lzil a9wlIWM9MEat -----END CERTIFICATE-----Generated at Sun Jan 18 06:29:11 2026 by rpki-client