This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FeTI5Sz8BpTCV7scHXZXM9Kp64s.roa File: FeTI5Sz8BpTCV7scHXZXM9Kp64s.roa (raw, json) Hash identifier: RaP3VRU/LKGVoen3Sb4fpHkLMO0kovK5RnlBTyte+ng= Subject key identifier: 15:E4:C8:E5:2C:FC:06:94:C2:57:BB:1C:1D:76:57:33:D2:A9:EB:8B Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BEC44D41FBF4E79FF639265686577B7F3 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FeTI5Sz8BpTCV7scHXZXM9Kp64s.roa Signing time: Fri 23 Jan 2026 19:11:32 +0000 ROA not before: Fri 23 Jan 2026 19:11:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63199 IP address blocks: 151.240.31.0/24 maxlen: 24 151.240.226.0/24 maxlen: 24 151.244.61.0/24 maxlen: 24 151.244.62.0/24 maxlen: 24 151.244.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ec:44:d4:1f:bf:4e:79:ff:63:92:65:68:65:77:b7:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 23 19:11:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15e4c8e52cfc0694c257bb1c1d765733d2a9eb8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7c:38:32:ad:69:79:98:92:27:e6:fa:5a:3b: 24:57:b7:8b:66:3d:dc:a4:8d:9d:57:75:44:ce:4e: 0e:98:54:11:1a:3a:0f:23:97:72:da:af:c6:68:3f: 69:09:04:ea:fd:90:89:ee:80:6d:a9:e0:85:46:6d: d6:91:78:78:0c:4c:e3:9a:83:ba:5d:80:7c:df:8e: 73:fd:93:1d:bf:36:85:75:ce:88:2c:43:00:2d:c9: d2:cb:04:39:99:61:61:4f:81:7b:6c:44:e5:2a:1d: d7:cb:ba:dc:05:00:55:26:59:da:1a:c5:f3:35:fe: cb:03:d0:ca:8a:a4:4f:61:c7:aa:ba:90:eb:b9:17: e0:24:70:74:91:74:11:7d:ae:e9:f5:07:34:ee:71: e6:f8:05:1b:69:78:8a:c9:6a:4c:cf:4d:53:49:7d: 5d:17:02:b3:e9:1d:84:c0:54:da:5e:e8:14:78:a9: b4:90:96:47:2f:16:e1:2b:c5:57:13:69:08:c7:dd: df:96:87:65:08:a6:e5:4e:fb:d2:41:d0:ee:4c:ec: 2c:c6:34:09:d0:80:ef:09:3a:59:d0:52:2a:23:17: 80:c7:7b:16:d1:2d:50:eb:f1:10:a2:3d:f6:9b:0c: 91:99:18:44:55:01:81:4b:d3:44:48:42:98:ff:f1: 44:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E4:C8:E5:2C:FC:06:94:C2:57:BB:1C:1D:76:57:33:D2:A9:EB:8B X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FeTI5Sz8BpTCV7scHXZXM9Kp64s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.31.0/24 151.240.226.0/24 151.244.61.0-151.244.62.255 151.244.102.0/24 Signature Algorithm: sha256WithRSAEncryption 50:6e:3c:42:72:da:22:b1:a2:ce:df:31:24:9f:44:f6:98:9f: 13:af:f1:1f:93:9f:cd:1b:5a:bd:47:b6:d2:97:cd:75:26:5f: cd:8a:8a:c1:19:7f:a4:35:be:83:18:4c:1b:47:9d:0d:ce:65: b3:91:8c:47:e4:77:36:31:0e:e9:a8:e0:2c:01:3a:69:40:58: a9:fe:86:d7:6f:5d:76:81:64:1e:a0:87:7f:0c:1a:40:17:c9: 70:fd:cc:55:65:60:a8:ca:44:42:34:d7:ee:cc:e5:38:bf:28: 46:ed:50:24:bc:53:5c:20:22:17:36:d9:03:43:43:c5:3f:6a: a0:68:df:31:b7:58:3f:1d:4c:bd:f6:77:50:c4:fa:68:84:87: c6:d1:68:78:9c:a6:0a:35:11:a8:ae:64:69:37:bf:b4:ce:0a: 7c:69:3c:71:87:53:d0:68:57:84:6b:6a:93:99:10:ce:88:8d: d7:03:5d:34:e5:14:a7:48:1d:73:00:24:4c:a2:3c:af:b3:25: 13:d7:43:9a:4a:ed:97:60:48:99:51:68:b7:d3:1b:68:4d:f0: 6f:19:df:2d:33:94:0f:42:92:87:e5:3c:29:10:27:b0:e6:37: a1:76:37:e8:72:22:dc:f1:03:64:b0:d4:2c:2b:f7:c8:39:c2: a9:d2:bc:98 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZvsRNQfv055/2OSZWhld7fzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTIzMTkxMTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWU0YzhlNTJjZmMwNjk0YzI1N2JiMWMxZDc2NTczM2QyYTllYjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXw4Mq1peZiSJ+b6WjskV7eLZj3c pI2dV3VEzk4OmFQRGjoPI5dy2q/GaD9pCQTq/ZCJ7oBtqeCFRm3WkXh4DEzjmoO6 XYB8345z/ZMdvzaFdc6ILEMALcnSywQ5mWFhT4F7bETlKh3Xy7rcBQBVJlnaGsXz Nf7LA9DKiqRPYcequpDruRfgJHB0kXQRfa7p9Qc07nHm+AUbaXiKyWpMz01TSX1d FwKz6R2EwFTaXugUeKm0kJZHLxbhK8VXE2kIx93flodlCKblTvvSQdDuTOwsxjQJ 0IDvCTpZ0FIqIxeAx3sW0S1Q6/EQoj32mwyRmRhEVQGBS9NESEKY//FEXQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFBXkyOUs/AaUwle7HB12VzPSqeuLMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvRmVUSTVTejhCcFRDVjdzY0hYWlhNOUtwNjRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAl/AfAwQA l/DiMAwDBACX9D0DBACX9D4DBACX9GYwDQYJKoZIhvcNAQELBQADggEBAFBuPEJy 2iKxos7fMSSfRPaYnxOv8R+Tn80bWr1HttKXzXUmX82KisEZf6Q1voMYTBtHnQ3O ZbORjEfkdzYxDumo4CwBOmlAWKn+htdvXXaBZB6gh38MGkAXyXD9zFVlYKjKREI0 1+7M5Ti/KEbtUCS8U1wgIhc22QNDQ8U/aqBo3zG3WD8dTL32d1DE+miEh8bRaHic pgo1EaiuZGk3v7TOCnxpPHGHU9BoV4RrapOZEM6IjdcDXTTlFKdIHXMAJEyiPK+z JRPXQ5pK7ZdgSJlRaLfTG2hN8G8Z3y0zlA9CkoflPCkQJ7DmN6F2N+hyItzxA2Sw 1Cwr98g5wqnSvJg= -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:32 2026 by rpki-client