This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ox34OaTe1xhAvgNI2zSnTsEeko8.roa File: ox34OaTe1xhAvgNI2zSnTsEeko8.roa (raw, json) Hash identifier: 8UYdhgs7WVCAXcSISrgDe9VN8KAxM/P80IbgpsFHB6g= Subject key identifier: A3:1D:F8:39:A4:DE:D7:18:40:BE:03:48:DB:34:A7:4E:C1:1E:92:8F Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB7522AA9753C688D5088D99222219 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ox34OaTe1xhAvgNI2zSnTsEeko8.roa Signing time: Fri 02 Jan 2026 08:20:44 +0000 ROA not before: Fri 02 Jan 2026 08:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207992 IP address blocks: 151.240.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:75:22:aa:97:53:c6:88:d5:08:8d:99:22:22:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a31df839a4ded71840be0348db34a74ec11e928f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d3:bf:7c:b3:33:22:2c:cb:96:d2:5d:05:82: 41:3d:46:6f:3b:e2:9f:14:85:64:ec:cc:ab:ae:e0: c4:20:3a:e8:5c:f1:0f:4f:26:f5:32:da:6d:c8:e1: 26:27:62:f6:c8:78:c7:38:44:53:c1:41:18:98:bc: ce:a2:0b:68:90:bd:48:39:ec:56:08:4d:5f:7c:ab: 99:d2:01:ab:ed:09:43:6b:51:6b:07:c3:e8:b5:72: f8:96:33:35:3b:c2:d9:2b:e9:1c:48:fe:d8:39:03: 9e:0a:09:e4:03:79:be:ee:a9:74:ee:8c:42:9b:14: 7c:46:f8:25:d2:0f:22:74:d5:fd:73:a6:c8:65:6b: dd:ef:b8:d9:ac:e1:a6:f1:e4:66:c3:c1:6a:16:e8: aa:f4:db:33:59:64:04:22:7c:9b:70:25:91:71:85: 5f:79:22:34:59:91:ac:7e:ae:12:dd:3e:c1:50:09: ee:f6:ec:8d:f4:d8:34:c6:cc:d1:04:61:ff:2d:6d: 46:b4:c1:b3:da:ba:0f:d6:6c:81:33:71:48:26:76: 6c:86:55:f0:01:e9:ca:49:46:c6:92:4f:49:d6:4a: 6c:fa:10:89:9c:0d:1b:c3:f0:a2:de:7f:7e:c2:e2: 07:e4:7b:69:46:e5:91:39:59:9e:49:7c:22:cf:8f: 21:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1D:F8:39:A4:DE:D7:18:40:BE:03:48:DB:34:A7:4E:C1:1E:92:8F X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ox34OaTe1xhAvgNI2zSnTsEeko8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.19.0/24 Signature Algorithm: sha256WithRSAEncryption 43:e7:6f:c9:55:2e:3b:c5:41:8f:07:9f:f7:75:3c:3a:8d:ce: 9c:15:b6:eb:0b:13:f4:05:f4:ec:c0:58:2d:b4:19:8b:ea:a3: 2b:28:55:2f:44:23:02:4c:11:9a:b4:db:11:1f:28:ec:0c:90: 85:24:ad:a7:55:99:54:ce:43:b0:62:14:8c:79:4f:42:b9:27: ad:52:82:0d:05:58:08:53:56:69:6b:d6:90:34:7a:10:9d:59: cc:3f:06:8a:2d:9b:a6:64:74:83:c3:08:87:b9:12:a2:54:95: f5:de:af:bf:04:fc:14:9e:83:94:77:73:57:7a:fd:e5:f7:c8: b3:55:34:9d:bd:5d:a3:7b:c3:ee:17:f6:bf:3f:82:7c:39:b3: 4b:68:71:d4:89:99:53:9c:67:47:73:04:4e:a6:f8:ec:19:90: 38:f7:b6:44:09:3b:fe:fb:02:eb:48:74:a1:b4:8a:f5:e1:14: 5f:f1:ce:3d:83:0a:2e:5a:0e:45:24:ac:0f:97:d6:37:e4:35: 5d:0f:5c:1a:0a:6e:3b:b4:c4:63:06:9c:e6:1c:2e:ae:1f:94: f0:db:55:d2:52:43:89:7c:66:62:12:e4:b4:f2:bc:98:ee:7b: 64:3d:d8:8d:5e:30:f5:a5:63:99:c7:2f:7d:01:46:53:92:1a: 53:c9:ea:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y3UiqpdTxojVCI2ZIiIZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzFkZjgzOWE0ZGVkNzE4NDBiZTAzNDhkYjM0YTc0ZWMxMWU5MjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdO/fLMzIizLltJdBYJBPUZvO+Kf FIVk7MyrruDEIDroXPEPTyb1MtptyOEmJ2L2yHjHOERTwUEYmLzOogtokL1IOexW CE1ffKuZ0gGr7QlDa1FrB8PotXL4ljM1O8LZK+kcSP7YOQOeCgnkA3m+7ql07oxC mxR8Rvgl0g8idNX9c6bIZWvd77jZrOGm8eRmw8FqFuiq9NszWWQEInybcCWRcYVf eSI0WZGsfq4S3T7BUAnu9uyN9Ng0xszRBGH/LW1GtMGz2roP1myBM3FIJnZshlXw AenKSUbGkk9J1kps+hCJnA0bw/Ci3n9+wuIH5HtpRuWROVmeSXwiz48hDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKMd+Dmk3tcYQL4DSNs0p07BHpKPMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvb3gzNE9hVGUxeGhBdmdOSTJ6U25Uc0Vla284LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/ATMA0G CSqGSIb3DQEBCwUAA4IBAQBD52/JVS47xUGPB5/3dTw6jc6cFbbrCxP0BfTswFgt tBmL6qMrKFUvRCMCTBGatNsRHyjsDJCFJK2nVZlUzkOwYhSMeU9CuSetUoINBVgI U1Zpa9aQNHoQnVnMPwaKLZumZHSDwwiHuRKiVJX13q+/BPwUnoOUd3NXev3l98iz VTSdvV2je8PuF/a/P4J8ObNLaHHUiZlTnGdHcwROpvjsGZA497ZECTv++wLrSHSh tIr14RRf8c49gwouWg5FJKwPl9Y35DVdD1waCm47tMRjBpzmHC6uH5Tw21XSUkOJ fGZiEuS08ryY7ntkPdiNXjD1pWOZxy99AUZTkhpTyeow -----END CERTIFICATE-----Generated at Sun Jan 18 06:29:13 2026 by rpki-client