This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sZxoD-4hkN3P4qaiuBRgzjb2H9g.roa File: sZxoD-4hkN3P4qaiuBRgzjb2H9g.roa (raw, json) Hash identifier: 8AkBCc0I1wptHh/9F2B5vWE+AMxJmEPIQoHiCKDZIgs= Subject key identifier: B1:9C:68:0F:EE:21:90:DD:CF:E2:A6:A2:B8:14:60:CE:36:F6:1F:D8 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCBB7EE8114EAACE02D0D493A15FBCF Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sZxoD-4hkN3P4qaiuBRgzjb2H9g.roa Signing time: Fri 02 Jan 2026 08:21:01 +0000 ROA not before: Fri 02 Jan 2026 08:21:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401243 IP address blocks: 151.242.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:b7:ee:81:14:ea:ac:e0:2d:0d:49:3a:15:fb:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:21:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b19c680fee2190ddcfe2a6a2b81460ce36f61fd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f5:c3:f4:ef:9a:fd:2f:97:8a:84:b9:17:18: 91:55:67:ee:d9:da:73:21:fa:65:a4:6d:f2:73:43: a2:51:f3:b5:69:47:7d:af:03:be:b7:5b:a6:2d:32: e5:fe:ea:6c:31:af:7f:78:ad:0f:2d:3e:a2:93:fc: a7:3a:ea:1d:f1:e8:38:f4:92:9b:3f:20:51:c6:96: 0a:0f:c7:9d:cb:6b:87:39:37:5a:5a:fe:04:a1:d4: 31:a7:83:0b:ae:de:ba:ce:d0:67:39:f7:c4:66:0a: 1c:30:f3:c7:35:e1:cf:3c:04:c9:2a:17:be:ac:4f: cf:5a:38:37:46:71:fd:02:10:0d:ee:33:05:4c:8e: 02:31:1e:e6:2e:6f:cf:f9:64:8c:e8:b7:49:7b:46: d2:dd:bb:24:c4:49:bb:77:31:a7:3b:e9:9a:49:e0: 84:78:02:2e:c2:e5:bb:21:9e:bb:cd:a7:8c:e1:a0: 60:b9:0d:41:a2:6a:bf:fd:3c:09:ed:d5:29:ad:54: a8:f0:2f:50:03:7f:bc:c5:17:da:16:ed:4c:a5:5b: c0:2f:7d:63:4a:3d:86:e3:50:a4:f3:aa:07:fc:91: 30:4a:ee:bd:44:d7:96:b6:f8:6a:b5:0a:2d:f1:11: 8c:10:0a:32:33:d9:e2:e5:01:57:26:d3:e3:61:84: a3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9C:68:0F:EE:21:90:DD:CF:E2:A6:A2:B8:14:60:CE:36:F6:1F:D8 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sZxoD-4hkN3P4qaiuBRgzjb2H9g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.36.0/24 Signature Algorithm: sha256WithRSAEncryption 14:5a:90:d0:f9:03:72:c0:56:77:a4:b9:17:c9:18:4b:c7:e5: 7c:55:fa:eb:00:5e:63:63:3d:91:a8:fe:7a:83:8a:98:45:5e: cb:15:33:90:c3:13:d5:d3:57:f6:f3:d3:94:aa:d7:ce:66:ff: cb:e8:13:71:f1:86:3a:f3:a5:ea:bc:76:43:08:c1:3c:f7:c3: 97:91:39:b3:5a:cd:1c:4c:fc:a4:a5:e3:77:35:11:47:23:7c: e9:8e:62:fb:3f:3c:49:50:26:4a:21:40:6b:e3:ef:67:3d:d6: a2:4b:bf:87:6d:42:cc:8a:b4:8b:d6:14:58:e3:6d:00:07:db: ea:24:5b:1d:ab:c8:f7:6e:c8:91:02:79:8e:99:c1:1d:06:ad: 69:cb:08:06:2b:de:de:3c:97:4a:36:81:99:c9:ff:83:40:6a: f7:ab:0a:df:3f:86:cf:f0:59:48:73:34:61:1e:ee:68:bd:41: 26:12:ba:df:08:16:36:60:18:30:81:5a:9a:bd:46:62:f6:a9: d3:5d:7d:40:84:52:9f:53:c2:d8:6a:25:d0:95:29:72:0c:93: 1b:88:cb:c5:c7:22:c6:c1:31:47:93:e6:05:e4:b2:a9:a1:02: 28:29:4f:38:be:a5:37:7a:5c:b2:35:5d:0a:d0:f1:af:c8:e0: 9c:ca:79:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y7fugRTqrOAtDUk6FfvPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTljNjgwZmVlMjE5MGRkY2ZlMmE2YTJiODE0NjBjZTM2ZjYxZmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvXD9O+a/S+XioS5FxiRVWfu2dpz IfplpG3yc0OiUfO1aUd9rwO+t1umLTLl/upsMa9/eK0PLT6ik/ynOuod8eg49JKb PyBRxpYKD8edy2uHOTdaWv4EodQxp4MLrt66ztBnOffEZgocMPPHNeHPPATJKhe+ rE/PWjg3RnH9AhAN7jMFTI4CMR7mLm/P+WSM6LdJe0bS3bskxEm7dzGnO+maSeCE eAIuwuW7IZ67zaeM4aBguQ1Bomq//TwJ7dUprVSo8C9QA3+8xRfaFu1MpVvAL31j Sj2G41Ck86oH/JEwSu69RNeWtvhqtQot8RGMEAoyM9ni5QFXJtPjYYSjBQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLGcaA/uIZDdz+KmorgUYM429h/YMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvc1p4b0QtNGhrTjNQNHFhaXVCUmd6amIySDlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/IkMA0G CSqGSIb3DQEBCwUAA4IBAQAUWpDQ+QNywFZ3pLkXyRhLx+V8VfrrAF5jYz2RqP56 g4qYRV7LFTOQwxPV01f289OUqtfOZv/L6BNx8YY686XqvHZDCME898OXkTmzWs0c TPykpeN3NRFHI3zpjmL7PzxJUCZKIUBr4+9nPdaiS7+HbULMirSL1hRY420AB9vq JFsdq8j3bsiRAnmOmcEdBq1pywgGK97ePJdKNoGZyf+DQGr3qwrfP4bP8FlIczRh Hu5ovUEmErrfCBY2YBgwgVqavUZi9qnTXX1AhFKfU8LYaiXQlSlyDJMbiMvFxyLG wTFHk+YF5LKpoQIoKU84vqU3elyyNV0K0PGvyOCcynmu -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:27 2026 by rpki-client