This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/J31G7e26XG8FuA-oS5HGEJUQ7Hg.roa
File: J31G7e26XG8FuA-oS5HGEJUQ7Hg.roa (raw, json)
Hash identifier: s5T/FISyz7osYzvfYYWAtX2AX8+YuNPvhtQj6gFl1Hk=
Subject key identifier: 27:7D:46:ED:ED:BA:5C:6F:05:B8:0F:A8:4B:91:C6:10:95:10:EC:78
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019BEC43E7DDCC557AF18C0DEF3CD0978E00
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/J31G7e26XG8FuA-oS5HGEJUQ7Hg.roa
Signing time: Fri 23 Jan 2026 19:10:31 +0000
ROA not before: Fri 23 Jan 2026 19:10:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401322
IP address blocks: 151.242.134.0/24 maxlen: 24
151.244.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 21:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ec:43:e7:dd:cc:55:7a:f1:8c:0d:ef:3c:d0:97:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 23 19:10:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=277d46ededba5c6f05b80fa84b91c6109510ec78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:0c:5c:fc:7e:5d:54:e6:7d:fe:a4:7a:3a:27:
3d:08:da:f1:14:bb:34:1f:ef:d7:33:d6:a4:b6:57:
a1:74:77:01:69:ff:41:48:ff:ce:9d:2f:c5:ff:52:
99:e4:e8:34:98:30:d5:bf:8b:6b:ce:73:45:5f:4e:
28:26:76:ba:c8:77:02:79:f3:bf:f7:19:8b:ef:84:
4d:de:b4:74:b1:42:df:73:5a:f3:81:25:8d:a9:cd:
9d:a9:ba:80:61:45:51:22:17:ba:56:b4:56:18:2c:
f2:74:5e:0c:8a:48:61:5f:22:22:a7:de:2c:7b:f0:
38:2c:b9:13:e8:29:18:84:2a:1b:36:d7:f2:5e:5a:
df:26:75:5b:fc:9a:be:37:8a:70:2f:2a:dc:09:54:
ce:29:37:19:bf:1b:aa:a2:76:04:06:03:62:02:21:
ff:29:13:a1:5d:27:74:7a:a8:3f:c5:9d:64:b2:72:
a5:50:b6:5c:44:10:b4:82:14:42:15:29:02:3c:0b:
56:73:14:6f:c0:ee:45:d0:4f:49:18:9b:16:02:07:
24:35:46:42:91:9c:02:82:dd:a7:26:6e:89:87:e2:
ed:ba:7c:85:a2:55:86:88:36:c1:b8:42:fc:6d:26:
00:48:ce:da:80:70:56:2e:17:4f:e7:7b:7c:c2:d7:
26:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:7D:46:ED:ED:BA:5C:6F:05:B8:0F:A8:4B:91:C6:10:95:10:EC:78
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/J31G7e26XG8FuA-oS5HGEJUQ7Hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.134.0/24
151.244.63.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:eb:74:df:af:69:c7:b1:45:39:d8:73:7d:3f:72:d2:c9:fb:
7b:a7:01:71:4e:f6:5b:49:9a:44:91:42:61:f4:c2:e8:56:83:
93:5b:5d:71:73:e3:ce:fc:9f:2e:fb:a9:82:c0:5a:82:79:f4:
cb:db:13:7f:7f:14:29:b7:56:e1:77:dc:4e:98:14:13:91:2b:
b4:6b:18:39:70:0e:13:8d:5e:19:19:af:92:cc:78:61:0e:33:
9d:74:c0:11:10:9c:15:fd:0b:06:3b:50:09:c9:eb:17:74:99:
ab:f6:f1:90:fe:9e:14:5c:ab:08:32:f4:cf:ab:51:f2:31:ce:
6a:27:74:5a:9c:22:b2:8f:9d:5b:f5:29:3e:87:48:0b:82:74:
f5:4e:2a:19:0c:59:9d:05:6e:94:ab:d6:60:ac:7e:fa:f7:63:
7c:ad:d8:1b:b4:cd:64:af:3e:d1:60:2a:dd:5a:69:77:d0:e1:
3e:2f:99:8b:eb:53:66:2f:86:1a:cf:f2:cc:bb:81:73:fc:c3:
6f:3a:9d:92:5a:00:60:56:22:87:bb:e0:10:12:3a:dd:e3:83:
ee:4b:d5:7f:05:16:61:6a:89:f2:fb:45:a9:69:14:ad:0a:7c:
ce:ff:de:0b:1f:ae:3c:53:0b:b4:42:b1:4f:95:30:c4:af:4b:
94:28:26:65
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZvsQ+fdzFV68YwN7zzQl44AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwMTIzMTkxMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzdkNDZlZGVkYmE1YzZmMDViODBmYTg0YjkxYzYxMDk1MTBlYzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Axc/H5dVOZ9/qR6Oic9CNrxFLs0
H+/XM9aktlehdHcBaf9BSP/OnS/F/1KZ5Og0mDDVv4trznNFX04oJna6yHcCefO/
9xmL74RN3rR0sULfc1rzgSWNqc2dqbqAYUVRIhe6VrRWGCzydF4MikhhXyIip94s
e/A4LLkT6CkYhCobNtfyXlrfJnVb/Jq+N4pwLyrcCVTOKTcZvxuqonYEBgNiAiH/
KROhXSd0eqg/xZ1ksnKlULZcRBC0ghRCFSkCPAtWcxRvwO5F0E9JGJsWAgckNUZC
kZwCgt2nJm6Jh+LtunyFolWGiDbBuEL8bSYASM7agHBWLhdP53t8wtcmJQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCd9Ru3tulxvBbgPqEuRxhCVEOx4MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvSjMxRzdlMjZYRzhGdUEtb1M1SEdFSlVRN0hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/KGAwQA
l/Q/MA0GCSqGSIb3DQEBCwUAA4IBAQCl63Tfr2nHsUU52HN9P3LSyft7pwFxTvZb
SZpEkUJh9MLoVoOTW11xc+PO/J8u+6mCwFqCefTL2xN/fxQpt1bhd9xOmBQTkSu0
axg5cA4TjV4ZGa+SzHhhDjOddMAREJwV/QsGO1AJyesXdJmr9vGQ/p4UXKsIMvTP
q1HyMc5qJ3RanCKyj51b9Sk+h0gLgnT1TioZDFmdBW6Uq9ZgrH7692N8rdgbtM1k
rz7RYCrdWml30OE+L5mL61NmL4Yaz/LMu4Fz/MNvOp2SWgBgViKHu+AQEjrd44Pu
S9V/BRZhaony+0WpaRStCnzO/94LH648Uwu0QrFPlTDEr0uUKCZl
-----END CERTIFICATE-----
Generated at Sun Jan 25 08:48:27 2026 by rpki-client