This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lfpbBJc4nDsWviQvD_u6qK_2jVo.roa File: lfpbBJc4nDsWviQvD_u6qK_2jVo.roa (raw, json) Hash identifier: UzSlAvsw6cj0y351W/ala/Xi+EEW4z1IFlaoL5gRzYI= Subject key identifier: 95:FA:5B:04:97:38:9C:3B:16:BE:24:2F:0F:FB:BA:A8:AF:F6:8D:5A Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BB6108C903FE9F0342AD22CB5D79B8B99 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lfpbBJc4nDsWviQvD_u6qK_2jVo.roa Signing time: Tue 13 Jan 2026 06:34:56 +0000 ROA not before: Tue 13 Jan 2026 06:34:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211440 IP address blocks: 151.240.117.0/24 maxlen: 24 151.241.0.0/24 maxlen: 24 151.242.78.0/24 maxlen: 24 151.244.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:10:8c:90:3f:e9:f0:34:2a:d2:2c:b5:d7:9b:8b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 13 06:34:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=95fa5b0497389c3b16be242f0ffbbaa8aff68d5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f0:30:39:e3:41:b9:8e:85:48:ab:17:3a:b5: 4e:a8:c0:b0:e5:0b:c7:78:e2:52:1c:7f:e7:26:78: cd:b2:d3:0b:af:12:c1:ec:a3:c1:0d:75:23:88:0d: b0:99:86:b5:ad:f2:8d:84:4f:9b:f6:78:a2:c7:7b: 22:d5:77:42:cd:92:f5:76:c7:d9:43:e0:22:30:8f: 99:72:7b:dc:fd:4c:61:6a:dd:db:c7:90:67:74:0e: d3:5b:ba:d4:96:82:b7:f7:c5:89:7a:40:20:d8:9d: aa:6a:8b:7e:a2:cf:73:e4:d4:b8:79:d6:4b:27:eb: 88:c6:9c:32:ee:83:16:dd:eb:27:17:fe:4c:1d:e3: ca:a2:13:7b:0d:5e:2f:dc:26:02:b1:fe:b6:a8:8e: 63:b1:22:56:81:3b:64:48:e2:22:c5:0f:e1:84:3e: 8d:15:88:2a:37:7a:78:aa:fd:6e:de:e5:cb:b5:96: 12:d6:06:8e:fe:56:e8:de:88:06:9f:03:f8:ca:15: 49:3e:e2:05:b5:66:d3:c8:5f:ce:06:e7:5a:0f:fb: c8:1e:9a:68:f6:cb:ff:46:be:73:13:53:e4:13:7d: dd:c4:3a:dc:4e:03:07:7c:e6:29:bc:a6:3c:55:53: b9:c3:3c:cf:98:5f:3e:0b:2c:a3:cf:d7:7f:5a:3e: 86:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:FA:5B:04:97:38:9C:3B:16:BE:24:2F:0F:FB:BA:A8:AF:F6:8D:5A X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lfpbBJc4nDsWviQvD_u6qK_2jVo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.117.0/24 151.241.0.0/24 151.242.78.0/24 151.244.1.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:26:27:3b:b4:96:86:b5:cf:bd:ca:26:15:9a:c6:d6:11:99: a7:3d:b9:ad:70:46:db:e5:ce:1d:9f:73:2d:f3:be:13:e6:77: e5:07:67:51:ec:0e:8a:c8:95:af:10:1e:e3:d2:bf:dc:fa:61: c8:ad:80:cb:8e:15:b7:e2:22:9e:b0:53:5c:3d:cd:0e:86:fc: f5:dd:13:79:fc:04:fc:a5:9f:a4:6b:a0:cf:0c:6e:30:16:54: ed:ec:75:6b:fe:95:56:35:24:89:62:e0:68:40:fd:db:a9:e4: e8:ea:09:7a:6d:dc:1d:56:f9:a1:b6:02:ac:83:c5:1b:a8:21: 1d:8d:7d:e0:6d:04:55:85:0d:4e:c4:a1:75:64:2b:86:55:de: 5e:db:62:a8:37:a8:6d:7c:6d:a2:eb:01:1f:05:89:58:b5:ea: f4:b0:74:c0:68:57:93:49:6d:40:1e:07:30:d0:e8:ec:af:2e: fa:1a:d5:b6:fa:65:02:db:a3:cc:22:78:64:69:48:9c:4a:71: 31:ca:da:ce:46:fc:b3:cc:3a:0d:c5:34:09:c5:ea:d2:4c:38: 6c:13:5c:21:9e:60:8a:16:b7:07:65:af:35:a9:35:9c:99:7c: 31:cf:6d:04:4a:ad:d7:74:ab:12:cb:4f:55:3d:6e:9a:49:6d: 55:87:6b:49 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZu2EIyQP+nwNCrSLLXXm4uZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTEzMDYzNDU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NWZhNWIwNDk3Mzg5YzNiMTZiZTI0MmYwZmZiYmFhOGFmZjY4ZDVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufAwOeNBuY6FSKsXOrVOqMCw5QvH eOJSHH/nJnjNstMLrxLB7KPBDXUjiA2wmYa1rfKNhE+b9niix3si1XdCzZL1dsfZ Q+AiMI+Zcnvc/Uxhat3bx5BndA7TW7rUloK398WJekAg2J2qaot+os9z5NS4edZL J+uIxpwy7oMW3esnF/5MHePKohN7DV4v3CYCsf62qI5jsSJWgTtkSOIixQ/hhD6N FYgqN3p4qv1u3uXLtZYS1gaO/lbo3ogGnwP4yhVJPuIFtWbTyF/OBudaD/vIHppo 9sv/Rr5zE1PkE33dxDrcTgMHfOYpvKY8VVO5wzzPmF8+Cyyjz9d/Wj6G0QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJX6WwSXOJw7Fr4kLw/7uqiv9o1aMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvbGZwYkJKYzRuRHNXdmlRdkRfdTZxS18yalZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/B1AwQA l/EAAwQAl/JOAwQAl/QBMA0GCSqGSIb3DQEBCwUAA4IBAQBLJic7tJaGtc+9yiYV msbWEZmnPbmtcEbb5c4dn3Mt874T5nflB2dR7A6KyJWvEB7j0r/c+mHIrYDLjhW3 4iKesFNcPc0Ohvz13RN5/AT8pZ+ka6DPDG4wFlTt7HVr/pVWNSSJYuBoQP3bqeTo 6gl6bdwdVvmhtgKsg8UbqCEdjX3gbQRVhQ1OxKF1ZCuGVd5e22KoN6htfG2i6wEf BYlYter0sHTAaFeTSW1AHgcw0Ojsry76GtW2+mUC26PMInhkaUicSnExytrORvyz zDoNxTQJxerSTDhsE1whnmCKFrcHZa81qTWcmXwxz20ESq3XdKsSy09VPW6aSW1V h2tJ -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:51 2026 by rpki-client