This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-rHA0OZRX4-X3SzTKXL3qZLFdnM.roa File: 1-rHA0OZRX4-X3SzTKXL3qZLFdnM.roa (raw, json) Hash identifier: /9HdnQzUPnl5kLBPhC1xg0bnH56fshcl7jmnxpYezVs= Subject key identifier: FA:B1:C0:D0:E6:51:5F:8F:97:DD:2C:D3:29:72:F7:A9:92:C5:76:73 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BEA089D6C3398FB6ECC0CEB2314493F45 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-rHA0OZRX4-X3SzTKXL3qZLFdnM.roa Signing time: Fri 23 Jan 2026 08:46:31 +0000 ROA not before: Fri 23 Jan 2026 08:46:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5650 IP address blocks: 151.241.232.0/23 maxlen: 24 151.243.54.0/24 maxlen: 24 151.245.222.0/23 maxlen: 24 151.246.64.0/20 maxlen: 20 151.247.28.0/22 maxlen: 24 151.247.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ea:08:9d:6c:33:98:fb:6e:cc:0c:eb:23:14:49:3f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 23 08:46:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fab1c0d0e6515f8f97dd2cd32972f7a992c57673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4f:ac:ee:37:73:84:c7:be:b3:e3:22:41:11: 5e:11:86:a0:8b:f3:72:78:fd:c7:e3:9c:e2:97:6a: e9:9f:97:bb:16:08:1d:07:bb:8c:67:4e:80:16:ba: ec:cc:f0:e7:c6:35:fb:be:0e:2b:d1:17:a2:8e:a9: 2d:12:f4:9d:ea:fc:e6:7f:6e:f7:8f:73:79:9a:df: 44:5e:b6:97:47:fb:0d:eb:ad:56:5b:e3:84:b5:7c: 3c:ab:7d:ea:81:b9:45:e7:c2:62:d3:d9:17:80:28: 3e:88:59:89:e0:9b:63:03:04:c5:1e:5e:ba:ac:13: 37:31:af:d5:b4:2c:20:dc:ca:34:98:e2:d9:98:82: d5:1f:e1:88:c0:d6:7c:ac:14:78:73:c7:1e:88:54: 19:6c:9c:a5:1a:d1:d2:d0:e2:85:86:48:77:3f:70: 33:b2:95:c0:c2:c2:01:ce:9d:03:ef:e2:e6:5c:0b: ba:1b:33:b2:72:10:38:34:18:98:24:20:d9:77:79: bf:77:e9:d5:da:79:90:6b:77:3d:4e:68:af:ff:e7: ce:00:67:9f:7c:f5:fa:dd:3c:c7:fd:48:e2:83:de: 8c:32:59:e6:4f:45:1a:31:13:fd:94:d6:fc:7f:f3: 94:34:00:10:27:1b:f8:51:f2:b6:3b:f4:dc:32:27: 87:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B1:C0:D0:E6:51:5F:8F:97:DD:2C:D3:29:72:F7:A9:92:C5:76:73 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-rHA0OZRX4-X3SzTKXL3qZLFdnM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.232.0/23 151.243.54.0/24 151.245.222.0/23 151.246.64.0/20 151.247.28.0/22 151.247.156.0/22 Signature Algorithm: sha256WithRSAEncryption 63:1f:76:25:ba:89:f4:07:3f:dd:9e:f8:a4:51:7e:14:0e:93: db:6b:73:82:fc:59:0d:33:4a:cf:f5:3d:be:ec:27:a0:ef:9b: cf:15:7e:c6:c8:de:7d:20:83:d9:5e:ac:f3:02:29:2e:f7:27: 59:de:0f:ef:f2:e8:e8:d4:c7:d4:94:ab:81:71:8a:f0:8c:1f: d3:c0:0d:5b:20:0c:a8:e7:ef:82:3d:6b:f9:79:50:6f:bc:43: af:fb:e2:72:fd:95:fc:78:b7:21:96:16:19:e3:ce:53:e0:82: 26:6a:89:10:10:6f:e6:e4:fd:ac:a1:ab:0d:e3:e2:b8:1e:b5: bf:71:06:92:3b:eb:3d:f0:13:14:c1:4b:44:3e:cd:7f:f6:b5: 58:bd:5d:d8:3f:1a:2c:0c:7b:55:35:af:ab:72:96:25:4e:ec: 67:3f:a4:52:40:ee:4f:e9:e3:2e:42:1c:da:ce:97:26:c5:6b: 7b:ab:6b:0e:aa:17:1a:2d:12:15:29:25:84:e5:f2:64:8d:c1: 81:d8:e2:34:17:41:8d:f5:19:ba:75:a7:cb:06:b2:4f:d5:27: 3e:8b:85:36:6c:45:a3:85:3e:b9:ea:01:3d:c8:34:a1:14:71: fe:39:4a:e6:d6:7a:59:37:48:eb:66:43:81:30:a0:01:c3:68: 86:97:d2:74 -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZvqCJ1sM5j7bswM6yMUST9FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTIzMDg0NjMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWIxYzBkMGU2NTE1ZjhmOTdkZDJjZDMyOTcyZjdhOTkyYzU3NjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE+s7jdzhMe+s+MiQRFeEYagi/Ny eP3H45zil2rpn5e7FggdB7uMZ06AFrrszPDnxjX7vg4r0ReijqktEvSd6vzmf273 j3N5mt9EXraXR/sN661WW+OEtXw8q33qgblF58Ji09kXgCg+iFmJ4JtjAwTFHl66 rBM3Ma/VtCwg3Mo0mOLZmILVH+GIwNZ8rBR4c8ceiFQZbJylGtHS0OKFhkh3P3Az spXAwsIBzp0D7+LmXAu6GzOychA4NBiYJCDZd3m/d+nV2nmQa3c9Tmiv/+fOAGef fPX63TzH/Ujig96MMlnmT0UaMRP9lNb8f/OUNAAQJxv4UfK2O/TcMieHEwIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFPqxwNDmUV+Pl90s0yly96mSxXZzMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvMS1ySEEwT1pSWDQtWDNTelRLWEwzcVpMRmRuTS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGUvZjQzYjFkLTllNTAtNDU1MS1hZTZhLTE3YjlkZTE0MTI1 Mi8xL3htSm05R2I3SkppamxGbXpOUzJpVVZHbHBNQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA9BggrBgEFBQcBBwEB/wQuMCwwKgQCAAEwJAMEAZfx6AME AJfzNgMEAZf13gMEBJf2QAMEApf3HAMEApf3nDANBgkqhkiG9w0BAQsFAAOCAQEA Yx92JbqJ9Ac/3Z74pFF+FA6T22tzgvxZDTNKz/U9vuwnoO+bzxV+xsjefSCD2V6s 8wIpLvcnWd4P7/Lo6NTH1JSrgXGK8Iwf08ANWyAMqOfvgj1r+XlQb7xDr/vicv2V /Hi3IZYWGePOU+CCJmqJEBBv5uT9rKGrDePiuB61v3EGkjvrPfATFMFLRD7Nf/a1 WL1d2D8aLAx7VTWvq3KWJU7sZz+kUkDuT+njLkIc2s6XJsVre6trDqoXGi0SFSkl hOXyZI3BgdjiNBdBjfUZunWnywayT9UnPouFNmxFo4U+ueoBPcg0oRRx/jlK5tZ6 WTdI62ZDgTCgAcNohpfSdA== -----END CERTIFICATE-----Generated at Sun Jan 25 17:43:17 2026 by rpki-client