This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nLTTDhj5_0fY43PiMNILt2CcE7M.roa File: nLTTDhj5_0fY43PiMNILt2CcE7M.roa (raw, json) Hash identifier: xf4s01MxPwYe4b3hJcpk1kPJlDOveb8dd70sSq+WLCw= Subject key identifier: 9C:B4:D3:0E:18:F9:FF:47:D8:E3:73:E2:30:D2:0B:B7:60:9C:13:B3 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB7EDD00DCB6847F52F6E04C72F555 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nLTTDhj5_0fY43PiMNILt2CcE7M.roa Signing time: Fri 02 Jan 2026 08:20:46 +0000 ROA not before: Fri 02 Jan 2026 08:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209642 IP address blocks: 151.241.7.0/24 maxlen: 24 151.245.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:7e:dd:00:dc:b6:84:7f:52:f6:e0:4c:72:f5:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cb4d30e18f9ff47d8e373e230d20bb7609c13b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:97:87:03:6a:55:d3:05:fa:75:3c:35:3e:ac: 94:de:89:a3:c2:9a:a9:62:14:87:c7:40:28:62:1b: 10:93:b1:a6:e1:c8:f2:3a:b7:c5:db:5e:64:a4:8a: 32:8d:5c:1e:9e:fd:ff:11:fa:a5:87:31:52:1c:8b: cc:d9:44:5c:fa:82:99:0d:72:a1:a6:90:82:ea:3b: f5:14:4c:b8:6d:c1:68:8d:03:4d:54:da:e7:77:0d: 09:01:cb:3a:52:83:00:78:f1:e1:98:8b:23:32:6d: 2e:94:1f:89:7a:09:6b:81:52:a2:da:3a:dc:d5:13: 35:2a:31:9f:44:e4:14:db:69:7c:97:78:14:b4:bb: 21:20:b3:c6:df:07:c6:23:ed:92:ed:44:84:0f:aa: 70:8d:ac:df:61:e8:92:c7:87:ad:d2:f4:40:b2:c4: 7a:ec:07:94:17:c8:1f:c4:20:b0:f5:11:70:27:1e: 2d:9e:73:28:30:ed:09:14:90:63:e9:cc:19:67:d2: 86:b1:d8:a4:4d:fb:8b:ca:2d:6e:30:29:bd:5d:e6: 70:77:20:9c:d9:65:e9:e9:7f:29:21:5d:f5:49:92: 51:26:65:df:69:fb:8b:7b:9d:e0:58:64:71:fa:87: 82:00:25:8c:56:70:89:bb:6a:6a:c0:e7:0b:5a:46: ed:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B4:D3:0E:18:F9:FF:47:D8:E3:73:E2:30:D2:0B:B7:60:9C:13:B3 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nLTTDhj5_0fY43PiMNILt2CcE7M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.7.0/24 151.245.184.0/24 Signature Algorithm: sha256WithRSAEncryption 86:7c:e6:b8:f4:69:55:8c:54:d3:a8:fa:f3:e7:a6:fc:e6:a6: 3d:99:8d:0a:bf:dc:f7:ff:da:59:8e:5a:fe:7f:c6:4b:39:81: 1a:39:2c:fb:89:85:44:f5:df:35:23:49:10:6d:e0:36:03:60: 25:31:cd:5a:9c:75:67:ea:8a:67:81:b3:4a:9d:ff:a6:d6:7e: 9e:99:03:c1:30:2d:17:24:f7:ed:2d:24:1f:76:c5:b6:37:5e: 04:f0:c8:11:45:87:10:88:84:3a:00:de:37:a4:63:aa:c2:04: e5:d5:6a:49:1a:0b:83:d6:85:a6:b8:ed:25:39:48:39:31:7d: 61:06:13:c2:fb:f4:49:63:1f:82:ff:a0:78:21:f4:bb:59:a2: 7e:f5:56:fa:41:36:bc:07:de:d1:3d:cb:28:b8:0d:7d:b5:62: df:7b:1b:79:be:c3:5a:8a:2b:88:e8:14:94:05:2d:63:ee:a5: ea:f9:63:72:1b:ef:37:ed:83:fc:f0:c3:4e:f0:da:1a:7a:73: 0a:c1:1e:61:8f:49:12:85:65:64:a2:3e:42:1e:0e:db:51:48: 4f:88:d4:ce:a0:da:bf:f7:03:c9:30:f3:f7:fd:c4:4a:c1:16: b4:72:da:cb:f6:88:21:a8:94:66:3c:d0:2e:ef:6e:87:bd:0b: 6d:6e:34:93 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9y37dANy2hH9S9uBMcvVVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2I0ZDMwZTE4ZjlmZjQ3ZDhlMzczZTIzMGQyMGJiNzYwOWMxM2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpeHA2pV0wX6dTw1PqyU3omjwpqp YhSHx0AoYhsQk7Gm4cjyOrfF215kpIoyjVwenv3/EfqlhzFSHIvM2URc+oKZDXKh ppCC6jv1FEy4bcFojQNNVNrndw0JAcs6UoMAePHhmIsjMm0ulB+JeglrgVKi2jrc 1RM1KjGfROQU22l8l3gUtLshILPG3wfGI+2S7USED6pwjazfYeiSx4et0vRAssR6 7AeUF8gfxCCw9RFwJx4tnnMoMO0JFJBj6cwZZ9KGsdikTfuLyi1uMCm9XeZwdyCc 2WXp6X8pIV31SZJRJmXfafuLe53gWGRx+oeCACWMVnCJu2pqwOcLWkbtKwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJy00w4Y+f9H2ONz4jDSC7dgnBOzMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvbkxUVERoajVfMGZZNDNQaU1OSUx0MkNjRTdNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/EHAwQA l/W4MA0GCSqGSIb3DQEBCwUAA4IBAQCGfOa49GlVjFTTqPrz56b85qY9mY0Kv9z3 /9pZjlr+f8ZLOYEaOSz7iYVE9d81I0kQbeA2A2AlMc1anHVn6opngbNKnf+m1n6e mQPBMC0XJPftLSQfdsW2N14E8MgRRYcQiIQ6AN43pGOqwgTl1WpJGguD1oWmuO0l OUg5MX1hBhPC+/RJYx+C/6B4IfS7WaJ+9Vb6QTa8B97RPcsouA19tWLfext5vsNa iiuI6BSUBS1j7qXq+WNyG+837YP88MNO8NoaenMKwR5hj0kShWVkoj5CHg7bUUhP iNTOoNq/9wPJMPP3/cRKwRa0ctrL9oghqJRmPNAu726HvQttbjST -----END CERTIFICATE-----Generated at Sun Jan 18 06:27:44 2026 by rpki-client