This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/A1BjJGTIK7Ix6DjnqXV_P0kF0qM.roa File: A1BjJGTIK7Ix6DjnqXV_P0kF0qM.roa (raw, json) Hash identifier: nFL6OoY542VMWFZMlYEdjBU8tv27GG7tV/GLhYcthYs= Subject key identifier: 03:50:63:24:64:C8:2B:B2:31:E8:38:E7:A9:75:7F:3F:49:05:D2:A3 Certificate issuer: /CN=19acf07f1352222658b789e4fe40ea38a8aa71df Certificate serial: 019B7D5C5156C0D9500A2612541668D5D5E9 Authority key identifier: 19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/A1BjJGTIK7Ix6DjnqXV_P0kF0qM.roa Signing time: Fri 02 Jan 2026 06:19:20 +0000 ROA not before: Fri 02 Jan 2026 06:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205881 IP address blocks: 151.136.0.0/16 maxlen: 16 151.136.10.0/24 maxlen: 24 151.136.32.0/22 maxlen: 22 151.136.52.0/23 maxlen: 23 151.136.52.0/24 maxlen: 24 151.136.53.0/24 maxlen: 24 151.136.142.0/23 maxlen: 23 151.136.142.0/24 maxlen: 24 151.136.144.0/22 maxlen: 22 151.136.216.0/21 maxlen: 21 2a07:4ac0:f002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.mft rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:51:56:c0:d9:50:0a:26:12:54:16:68:d5:d5:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19acf07f1352222658b789e4fe40ea38a8aa71df Validity Not Before: Jan 2 06:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0350632464c82bb231e838e7a9757f3f4905d2a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:82:80:31:a5:e2:19:af:8c:b7:5e:14:58:b5: 56:e8:05:da:30:91:04:d7:55:50:08:3c:49:9c:f9: a8:bb:86:34:22:fd:4a:a0:40:56:35:45:60:62:6d: a5:d0:34:d7:aa:6f:32:af:5c:31:03:d8:dc:ba:4f: 76:2f:3c:c6:5d:cd:03:d2:6e:fa:c1:53:e8:3a:04: 61:22:16:d0:5e:2e:7a:ae:9c:7a:63:ff:b6:91:1d: 3b:a7:28:c3:e1:89:9e:3c:d5:75:27:94:0e:d2:a3: 4c:a7:e2:56:24:f7:01:02:1b:2b:6b:8e:d7:2f:1c: 0e:cb:29:01:76:a9:1a:1f:e7:b3:5b:ba:5b:ff:96: de:24:b0:a7:0d:d9:dd:a5:56:99:99:85:4c:48:3b: 56:fd:6b:3d:ed:6d:95:b6:7d:0d:d8:8d:41:54:8d: 16:8a:96:f5:53:64:b4:b5:4d:23:0d:bb:4b:71:ee: 26:d2:99:24:80:98:ad:fb:ce:55:76:8d:02:7f:e0: fe:3c:d7:c6:1b:e1:f3:e7:ef:ec:ea:a3:42:54:17: 3f:d4:01:41:8a:b2:ab:44:28:6c:87:75:71:59:6c: a8:6e:ed:64:44:11:e2:79:b5:83:b8:55:86:12:04: 4c:b6:e6:2e:e4:76:5e:28:06:55:81:ea:c4:80:8b: 63:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:50:63:24:64:C8:2B:B2:31:E8:38:E7:A9:75:7F:3F:49:05:D2:A3 X509v3 Authority Key Identifier: keyid:19:AC:F0:7F:13:52:22:26:58:B7:89:E4:FE:40:EA:38:A8:AA:71:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GazwfxNSIiZYt4nk_kDqOKiqcd8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/A1BjJGTIK7Ix6DjnqXV_P0kF0qM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/40503a-6be9-4e1b-8243-716c0347aa76/1/GazwfxNSIiZYt4nk_kDqOKiqcd8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.136.0.0/16 IPv6: 2a07:4ac0:f002::/48 Signature Algorithm: sha256WithRSAEncryption 87:11:56:56:9d:53:1d:96:61:9b:73:9d:a9:b2:cc:57:88:11: ba:fe:a0:65:65:60:d9:07:41:9c:7b:59:bd:49:d7:a9:65:40: 1d:62:c1:67:23:ab:a8:a7:2e:06:bf:5d:61:24:be:59:fc:27: 27:4c:a1:41:d5:e3:70:a6:a5:ae:1b:68:4c:50:80:a9:48:25: 4e:06:da:4a:0a:c7:b4:3d:64:1c:c4:3c:e5:bf:4b:46:f0:9d: a6:da:21:0e:dd:06:e9:c9:59:cd:0b:ef:4c:21:d3:29:76:25: 00:11:6f:e1:18:06:c8:08:5e:98:c2:c2:c0:45:b6:3a:3f:26: 00:d7:0d:23:26:dc:b3:e7:40:a3:f6:61:d3:cc:d7:5f:54:fa: b0:8e:63:e0:3a:86:7b:f7:20:93:bc:80:25:d2:0d:ac:09:a4: 22:04:ea:03:20:e0:92:22:c9:3c:db:52:e6:ac:54:05:2f:1a: 15:69:e1:c2:f5:85:35:b0:27:fb:06:d9:2a:47:c2:ab:54:bd: d3:4b:12:a9:d3:d0:de:e0:2c:60:92:73:8b:5c:34:9b:ed:3a: c1:69:3a:dd:70:29:48:7e:88:e8:38:21:1e:81:5f:42:40:81: 96:db:f7:ea:99:00:92:8c:3b:24:1e:1f:87:a8:8b:6c:22:e9: 94:ea:87:85 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt9XFFWwNlQCiYSVBZo1dXpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5YWNmMDdmMTM1MjIyMjY1OGI3ODllNGZlNDBlYTM4YThh YTcxZGYwHhcNMjYwMTAyMDYxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzUwNjMyNDY0YzgyYmIyMzFlODM4ZTdhOTc1N2YzZjQ5MDVkMmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoKAMaXiGa+Mt14UWLVW6AXaMJEE 11VQCDxJnPmou4Y0Iv1KoEBWNUVgYm2l0DTXqm8yr1wxA9jcuk92LzzGXc0D0m76 wVPoOgRhIhbQXi56rpx6Y/+2kR07pyjD4YmePNV1J5QO0qNMp+JWJPcBAhsra47X LxwOyykBdqkaH+ezW7pb/5beJLCnDdndpVaZmYVMSDtW/Ws97W2Vtn0N2I1BVI0W ipb1U2S0tU0jDbtLce4m0pkkgJit+85Vdo0Cf+D+PNfGG+Hz5+/s6qNCVBc/1AFB irKrRChsh3VxWWyobu1kRBHiebWDuFWGEgRMtuYu5HZeKAZVgerEgItj0wIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFANQYyRkyCuyMeg456l1fz9JBdKjMB8GA1UdIwQY MBaAFBms8H8TUiImWLeJ5P5A6jioqnHfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80MDUwM2EtNmJlOS00ZTFiLTgyNDMt NzE2YzAzNDdhYTc2LzEvQTFCakpHVElLN0l4NkRqbnFYVl9QMGtGMHFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy80MDUwM2EtNmJlOS00ZTFiLTgyNDMtNzE2YzAzNDdhYTc2 LzEvR2F6d2Z4TlNJaVpZdDRua19rRHFPS2lxY2Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjALBAIAATAFAwMAl4gwDwQC AAIwCQMHACoHSsDwAjANBgkqhkiG9w0BAQsFAAOCAQEAhxFWVp1THZZhm3OdqbLM V4gRuv6gZWVg2QdBnHtZvUnXqWVAHWLBZyOrqKcuBr9dYSS+WfwnJ0yhQdXjcKal rhtoTFCAqUglTgbaSgrHtD1kHMQ85b9LRvCdptohDt0G6clZzQvvTCHTKXYlABFv 4RgGyAhemMLCwEW2Oj8mANcNIybcs+dAo/Zh08zXX1T6sI5j4DqGe/cgk7yAJdIN rAmkIgTqAyDgkiLJPNtS5qxUBS8aFWnhwvWFNbAn+wbZKkfCq1S900sSqdPQ3uAs YJJzi1w0m+06wWk63XApSH6I6DghHoFfQkCBltv36pkAkow7JB4fh6iLbCLplOqH hQ== -----END CERTIFICATE-----Generated at Tue Jan 13 16:24:51 2026 by rpki-client