This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/L4HZ7mskN3pjoA0c9qPxCILO5Y0.roa File: L4HZ7mskN3pjoA0c9qPxCILO5Y0.roa (raw, json) Hash identifier: Ugc+KCAu0R1az9jiVIzwnIqY6oCYtzCuG1cm2jlsdI4= Subject key identifier: 2F:81:D9:EE:6B:24:37:7A:63:A0:0D:1C:F6:A3:F1:08:82:CE:E5:8D Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BDFB952590C1724265B32EEC7B1902D7D Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/L4HZ7mskN3pjoA0c9qPxCILO5Y0.roa Signing time: Wed 21 Jan 2026 08:43:42 +0000 ROA not before: Wed 21 Jan 2026 08:43:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19318 IP address blocks: 151.241.108.0/24 maxlen: 24 151.242.41.0/24 maxlen: 24 151.242.58.0/24 maxlen: 24 151.242.122.0/24 maxlen: 24 151.243.254.0/24 maxlen: 24 151.244.136.0/22 maxlen: 22 151.244.160.0/22 maxlen: 22 151.244.170.0/24 maxlen: 24 151.244.172.0/22 maxlen: 22 151.244.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:df:b9:52:59:0c:17:24:26:5b:32:ee:c7:b1:90:2d:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 21 08:43:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f81d9ee6b24377a63a00d1cf6a3f10882cee58d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cc:bc:02:92:c3:7d:8f:6a:a2:96:b8:b9:a1: 84:bc:59:31:59:4c:a9:54:a7:ff:72:4c:83:98:74: b7:89:d1:fa:7d:cd:67:c6:ec:63:fa:5f:8e:98:cb: ce:c4:04:12:45:01:5c:a0:1b:de:6d:93:2c:0b:4d: 1e:47:99:2d:a5:ad:1e:e4:48:9f:9f:f3:cb:12:5e: 3a:49:39:1c:73:19:0d:6e:6c:6d:c2:7b:07:a9:e7: fc:51:16:ae:02:9a:8c:12:76:ff:dc:ca:3c:18:da: 1f:88:8f:db:93:1b:f2:7d:5f:78:54:9d:6d:e3:8b: 8f:bb:56:96:f8:8a:ca:e7:e2:6a:09:9e:fd:b8:6e: 76:6a:d0:ed:8c:7f:45:65:39:6e:5d:61:f4:83:4a: 24:e8:8c:ce:f3:30:53:f3:d6:df:6c:5d:46:74:e9: b0:e5:05:ad:2d:3a:ab:f2:ac:d8:dc:ac:6e:7d:44: d5:6f:f3:98:be:d9:1f:d5:f9:03:9c:65:83:b5:5c: b2:6f:db:3d:e6:b2:f3:a2:f1:57:71:0c:a7:aa:f7: 1d:82:ad:94:d3:0a:df:60:70:f3:91:a3:a5:76:8e: 9b:e4:15:8d:44:f9:13:c7:cf:b8:e7:1c:40:96:88: 8a:f7:39:ac:f7:bf:9d:06:ab:40:14:c8:32:de:26: d5:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:81:D9:EE:6B:24:37:7A:63:A0:0D:1C:F6:A3:F1:08:82:CE:E5:8D X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/L4HZ7mskN3pjoA0c9qPxCILO5Y0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.108.0/24 151.242.41.0/24 151.242.58.0/24 151.242.122.0/24 151.243.254.0/24 151.244.136.0/22 151.244.160.0/22 151.244.170.0/24 151.244.172.0-151.244.179.255 Signature Algorithm: sha256WithRSAEncryption a5:df:be:02:b1:ca:e5:b7:27:38:ca:76:ef:a7:6b:25:45:12: 3b:0f:b3:a0:c0:90:a8:52:a9:15:ac:c0:48:56:54:34:5c:76: 10:77:3e:69:10:94:60:f8:1b:f0:3e:13:3a:85:2c:dd:6d:5a: 2e:f4:2a:2a:c4:66:ba:43:a5:ed:49:8a:54:c7:cc:76:3a:25: 57:dd:74:1a:f6:67:f1:01:87:8f:b9:1a:0f:77:cf:3f:76:4a: 68:78:63:24:d9:97:24:15:08:e2:ee:3e:61:14:49:e4:c6:89: c1:eb:30:7c:ea:3c:93:a5:93:a9:33:61:5b:db:09:1f:5b:29: fc:2d:f8:a5:b5:f6:67:1f:a6:b0:2b:27:47:c5:5e:23:d5:26: 84:04:74:43:ce:87:5b:8d:0b:17:32:ca:1d:ab:b2:48:bd:17: ed:9a:2b:62:fb:44:13:55:57:ef:49:6a:9b:5e:74:fc:13:aa: 62:69:17:f2:2e:6c:82:83:8f:00:d7:60:28:45:05:e4:64:ad: ae:7e:a1:f8:07:a0:f1:35:ac:e7:29:9b:ed:6e:df:64:a0:f3: 66:2a:7b:b8:0d:b1:6a:6e:2a:13:07:d1:f4:bf:50:b1:0f:45: 3e:3a:be:55:3b:81:54:fb:d4:b0:f6:ce:4d:8c:87:84:bf:8a: b3:cc:6e:11 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZvfuVJZDBckJlsy7sexkC19MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTIxMDg0MzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjgxZDllZTZiMjQzNzdhNjNhMDBkMWNmNmEzZjEwODgyY2VlNThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8y8ApLDfY9qopa4uaGEvFkxWUyp VKf/ckyDmHS3idH6fc1nxuxj+l+OmMvOxAQSRQFcoBvebZMsC00eR5ktpa0e5Eif n/PLEl46STkccxkNbmxtwnsHqef8URauApqMEnb/3Mo8GNofiI/bkxvyfV94VJ1t 44uPu1aW+IrK5+JqCZ79uG52atDtjH9FZTluXWH0g0ok6IzO8zBT89bfbF1GdOmw 5QWtLTqr8qzY3KxufUTVb/OYvtkf1fkDnGWDtVyyb9s95rLzovFXcQynqvcdgq2U 0wrfYHDzkaOldo6b5BWNRPkTx8+45xxAloiK9zms97+dBqtAFMgy3ibVhQIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFC+B2e5rJDd6Y6ANHPaj8QiCzuWNMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvTDRIWjdtc2tOM3Bqb0EwYzlxUHhDSUxPNVkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjBEBAIAATA+AwQAl/FsAwQA l/IpAwQAl/I6AwQAl/J6AwQAl/P+AwQCl/SIAwQCl/SgAwQAl/SqMAwDBAKX9KwD BAKX9LAwDQYJKoZIhvcNAQELBQADggEBAKXfvgKxyuW3JzjKdu+nayVFEjsPs6DA kKhSqRWswEhWVDRcdhB3PmkQlGD4G/A+EzqFLN1tWi70KirEZrpDpe1JilTHzHY6 JVfddBr2Z/EBh4+5Gg93zz92Smh4YyTZlyQVCOLuPmEUSeTGicHrMHzqPJOlk6kz YVvbCR9bKfwt+KW19mcfprArJ0fFXiPVJoQEdEPOh1uNCxcyyh2rski9F+2aK2L7 RBNVV+9JaptedPwTqmJpF/IubIKDjwDXYChFBeRkra5+ofgHoPE1rOcpm+1u32Sg 82Yqe7gNsWpuKhMH0fS/ULEPRT46vlU7gVT71LD2zk2Mh4S/irPMbhE= -----END CERTIFICATE-----Generated at Sun Jan 25 14:37:17 2026 by rpki-client