This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/U-1GpMS9Hi9fXqUWWI67c8lXQQc.roa File: U-1GpMS9Hi9fXqUWWI67c8lXQQc.roa (raw, json) Hash identifier: klkOGrpocW251D7nY3pN15TxKVVx7TyDBPwKl5Tm4w8= Subject key identifier: 53:ED:46:A4:C4:BD:1E:2F:5F:5E:A5:16:58:8E:BB:73:C9:57:41:07 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019BE1CC286CDB41216E864CD29F33432894 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/U-1GpMS9Hi9fXqUWWI67c8lXQQc.roa Signing time: Wed 21 Jan 2026 18:23:31 +0000 ROA not before: Wed 21 Jan 2026 18:23:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 151.240.251.0/24 maxlen: 24 151.240.252.0/24 maxlen: 24 151.240.253.0/24 maxlen: 24 151.243.182.0/24 maxlen: 24 151.243.190.0/24 maxlen: 24 151.243.224.0/24 maxlen: 24 151.243.247.0/24 maxlen: 24 151.244.194.0/24 maxlen: 24 151.244.195.0/24 maxlen: 24 151.245.68.0/24 maxlen: 24 151.245.88.0/24 maxlen: 24 151.245.89.0/24 maxlen: 24 151.245.91.0/24 maxlen: 24 151.245.98.0/24 maxlen: 24 151.247.112.0/24 maxlen: 24 151.247.113.0/24 maxlen: 24 151.247.114.0/24 maxlen: 24 151.247.116.0/24 maxlen: 24 151.247.117.0/24 maxlen: 24 151.247.118.0/24 maxlen: 24 151.247.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:cc:28:6c:db:41:21:6e:86:4c:d2:9f:33:43:28:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 21 18:23:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=53ed46a4c4bd1e2f5f5ea516588ebb73c9574107 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:51:0c:8a:14:b3:5e:be:0f:76:f1:f8:1f:81: 16:e7:a5:78:a8:f2:c7:ce:cc:52:8a:8b:0d:4d:dd: 6d:4c:c4:6c:61:67:c0:d4:9c:3a:45:55:b1:bb:66: 72:9c:18:e8:5c:78:22:05:40:72:6a:5a:b9:ff:43: 2a:ac:37:42:f1:a2:5c:cd:e1:26:b3:dd:f4:b0:28: e0:bf:7c:ed:f3:78:8c:92:c8:08:94:07:15:c1:fc: c9:2c:cd:df:32:c8:dc:73:ea:59:9c:59:1f:47:4e: 7d:6c:35:0b:09:ba:69:18:04:d1:93:18:60:ad:41: 27:d1:2f:88:12:e8:54:9f:27:f6:bc:cf:74:c7:19: 41:62:8e:d6:68:b2:90:63:41:8b:10:78:75:a2:18: 8c:eb:0b:b2:61:82:8f:ac:c8:e8:ee:60:dc:82:2e: 95:9e:f2:7d:47:d7:db:ba:8f:9c:95:95:5d:ec:70: 88:82:ee:c1:d3:8b:59:41:0f:44:cd:d4:20:9c:84: 18:54:16:a5:68:cf:d6:ec:b7:c8:b8:37:dd:ce:56: f4:0a:dd:a9:a6:2a:d6:74:97:c0:60:59:12:d7:c6: c4:5b:aa:a3:37:09:24:ec:d5:b7:1e:79:5d:16:22: 78:de:20:9e:c3:e8:ef:b0:88:a1:5a:35:10:ec:80: 05:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:ED:46:A4:C4:BD:1E:2F:5F:5E:A5:16:58:8E:BB:73:C9:57:41:07 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/U-1GpMS9Hi9fXqUWWI67c8lXQQc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.251.0-151.240.253.255 151.243.182.0/24 151.243.190.0/24 151.243.224.0/24 151.243.247.0/24 151.244.194.0/23 151.245.68.0/24 151.245.88.0/23 151.245.91.0/24 151.245.98.0/24 151.247.112.0-151.247.114.255 151.247.116.0/22 Signature Algorithm: sha256WithRSAEncryption a7:02:55:e5:3d:fd:b3:4b:e4:66:aa:db:f2:08:de:75:ef:e8: d9:c9:38:e5:4f:a0:ad:76:9e:4c:76:f3:94:be:79:e9:d5:6d: b6:27:8d:0b:96:a2:92:44:36:20:5c:f9:3c:a9:ae:99:a5:21: de:d6:64:7b:2f:7b:b2:21:01:42:5e:9b:1b:c7:96:14:77:0c: 5e:02:03:16:4b:99:91:bb:e4:19:af:fb:a1:94:8c:3f:6f:0c: e5:d1:c8:6b:24:24:7b:d3:7f:f2:1f:e1:eb:0a:8d:69:f6:93: b9:89:3e:7e:23:9f:43:84:28:7f:8a:bf:d3:6e:b0:42:52:02: 62:88:2c:0d:25:7f:ea:f0:ec:27:95:66:d8:7a:c2:8d:b4:92: 69:34:88:70:9e:79:dc:4a:b1:2f:34:52:45:82:9e:d3:04:20: 70:7d:6d:6d:6e:1d:61:f7:fd:a1:57:18:92:69:a2:a9:03:b4: 1d:06:80:b5:a4:dd:b2:82:4b:8c:1b:23:0f:51:84:f8:26:f0: 1a:96:46:a9:c4:e7:ab:b9:ac:e4:35:0a:60:93:0b:e7:2a:b6: af:60:75:80:d9:d8:9b:d8:46:04:84:eb:29:81:81:77:83:ae: 3a:cc:fb:40:21:77:17:49:21:99:f1:27:1f:96:40:12:9a:e0: a8:17:36:43 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgISAZvhzChs20EhboZM0p8zQyiUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTIxMTgyMzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2VkNDZhNGM0YmQxZTJmNWY1ZWE1MTY1ODhlYmI3M2M5NTc0MTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FEMihSzXr4PdvH4H4EW56V4qPLH zsxSiosNTd1tTMRsYWfA1Jw6RVWxu2ZynBjoXHgiBUByalq5/0MqrDdC8aJczeEm s930sCjgv3zt83iMksgIlAcVwfzJLM3fMsjcc+pZnFkfR059bDULCbppGATRkxhg rUEn0S+IEuhUnyf2vM90xxlBYo7WaLKQY0GLEHh1ohiM6wuyYYKPrMjo7mDcgi6V nvJ9R9fbuo+clZVd7HCIgu7B04tZQQ9EzdQgnIQYVBalaM/W7LfIuDfdzlb0Ct2p pirWdJfAYFkS18bEW6qjNwkk7NW3HnldFiJ43iCew+jvsIihWjUQ7IAFkwIDAQAB o4ICWzCCAlcwHQYDVR0OBBYEFFPtRqTEvR4vX16lFliOu3PJV0EHMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvVS0xR3BNUzlIaTlmWHFVV1dJNjdjOGxYUVFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBeBAIAATBYMAwDBACX8PsD BAGX8PwDBACX87YDBACX874DBACX8+ADBACX8/cDBAGX9MIDBACX9UQDBAGX9VgD BACX9VsDBACX9WIwDAMEBJf3cAMEAJf3cgMEApf3dDANBgkqhkiG9w0BAQsFAAOC AQEApwJV5T39s0vkZqrb8gjede/o2ck45U+grXaeTHbzlL556dVttieNC5aikkQ2 IFz5PKmumaUh3tZkey97siEBQl6bG8eWFHcMXgIDFkuZkbvkGa/7oZSMP28M5dHI ayQke9N/8h/h6wqNafaTuYk+fiOfQ4Qof4q/026wQlICYogsDSV/6vDsJ5Vm2HrC jbSSaTSIcJ553EqxLzRSRYKe0wQgcH1tbW4dYff9oVcYkmmiqQO0HQaAtaTdsoJL jBsjD1GE+CbwGpZGqcTnq7ms5DUKYJML5yq2r2B1gNnYm9hGBITrKYGBd4OuOsz7 QCF3F0khmfEnH5ZAEprgqBc2Qw== -----END CERTIFICATE-----Generated at Sun Jan 25 03:58:22 2026 by rpki-client