This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/sQoQACAf02a3Uyz7FUKHyPEeAfA.roa File: sQoQACAf02a3Uyz7FUKHyPEeAfA.roa (raw, json) Hash identifier: XhP1EIMCcccz67L2gI2c+RwNj3wfvxnqDJpYQj6utD8= Subject key identifier: B1:0A:10:00:20:1F:D3:66:B7:53:2C:FB:15:42:87:C8:F1:1E:01:F0 Certificate issuer: /CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1 Certificate serial: 019AB601150C0578EFCFE9EAC538BAC55C01 Authority key identifier: 8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/sQoQACAf02a3Uyz7FUKHyPEeAfA.roa Signing time: Mon 24 Nov 2025 13:15:15 +0000 ROA not before: Mon 24 Nov 2025 13:15:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 157.167.134.0/24 maxlen: 24 157.167.135.0/24 maxlen: 24 157.167.136.0/21 maxlen: 21 157.167.144.0/21 maxlen: 21 157.167.152.0/24 maxlen: 24 157.167.153.0/24 maxlen: 24 157.167.155.0/24 maxlen: 24 157.167.156.0/24 maxlen: 24 157.167.225.0/24 maxlen: 24 157.167.226.0/24 maxlen: 24 157.167.227.0/24 maxlen: 24 157.167.228.0/24 maxlen: 24 157.167.229.0/24 maxlen: 24 157.167.230.0/24 maxlen: 24 157.167.231.0/24 maxlen: 24 157.167.232.0/24 maxlen: 24 157.167.233.0/24 maxlen: 24 157.167.234.0/24 maxlen: 24 157.167.235.0/24 maxlen: 24 157.167.236.0/24 maxlen: 24 157.167.237.0/24 maxlen: 24 157.167.238.0/24 maxlen: 24 157.167.239.0/24 maxlen: 24 157.167.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.mft rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b6:01:15:0c:05:78:ef:cf:e9:ea:c5:38:ba:c5:5c:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f51aad0e4148abe3f2a8b8d4318f34b456b65f1 Validity Not Before: Nov 24 13:15:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b10a1000201fd366b7532cfb154287c8f11e01f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:91:59:d6:f9:df:b7:00:7b:7c:d8:b5:ea:63: be:8a:90:c7:03:60:32:28:7a:86:43:8e:a6:d9:ba: e8:0e:9e:36:fe:00:ef:e5:86:4a:05:2e:e5:37:d6: 86:af:26:b3:d6:0f:f7:e1:0b:3e:d6:d3:27:1b:de: 5e:fe:93:32:10:8d:3f:5a:6f:18:c2:a5:94:94:ed: 29:7f:31:4c:2c:07:1c:4e:55:00:d5:3b:4c:db:32: 46:f8:a1:28:dc:ca:bc:b0:74:e8:24:fd:ef:50:01: d3:c9:14:cb:33:ce:71:39:a5:5c:50:db:6e:5b:bc: 4d:eb:b6:97:cc:c2:00:9a:f0:b1:64:1c:07:19:7a: 88:60:62:ca:5a:64:72:68:c2:e6:69:d2:a8:39:f1: b2:a0:46:d4:46:c8:19:f1:70:5f:b6:57:1e:f7:44: be:80:23:9b:20:8d:b8:88:f1:b8:e0:ba:80:47:1b: 71:f4:b3:d7:17:b8:02:2c:bf:10:16:4e:ee:ad:c9: 67:b4:f5:0a:28:6c:d9:6f:a4:10:ed:df:7b:0e:8e: 58:b1:b5:af:97:9a:4d:15:67:b7:26:3f:bd:7d:39: ca:c0:15:34:6b:c9:57:5a:b3:11:b0:4f:9d:f0:7f: 5c:f4:84:47:af:75:82:3a:05:1e:cd:3c:46:fa:ed: fd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0A:10:00:20:1F:D3:66:B7:53:2C:FB:15:42:87:C8:F1:1E:01:F0 X509v3 Authority Key Identifier: keyid:8F:51:AA:D0:E4:14:8A:BE:3F:2A:8B:8D:43:18:F3:4B:45:6B:65:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1Gq0OQUir4_KouNQxjzS0VrZfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/sQoQACAf02a3Uyz7FUKHyPEeAfA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/3e61d0-f6ce-4aad-9764-762d27277591/1/j1Gq0OQUir4_KouNQxjzS0VrZfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.167.134.0-157.167.153.255 157.167.155.0-157.167.156.255 157.167.225.0-157.167.240.255 Signature Algorithm: sha256WithRSAEncryption 5f:86:ad:96:51:7f:32:ae:15:4d:46:44:2e:3d:2c:ae:8e:50: 98:f8:ab:83:6d:db:24:42:66:2d:1d:f4:98:ae:64:e5:0f:30: cf:31:19:a2:c1:69:ee:07:5a:a2:39:28:63:ab:b9:df:68:42: 32:f1:3f:32:aa:97:07:7d:21:e0:35:6d:6b:07:b9:8b:98:e3: c3:79:b3:d4:40:1a:44:8e:3b:70:21:70:71:a9:8c:5e:47:03: 07:6f:0c:c0:eb:76:a6:c1:ee:8b:e0:c6:ef:30:55:7d:64:d6: 82:42:4b:d2:fa:b1:26:ff:00:1b:f8:83:bb:2d:45:cf:00:68: 4b:78:cd:90:c5:f2:57:27:63:9d:cc:82:9c:dc:2d:72:52:43: 3d:c4:45:d3:2e:c0:c0:bd:4b:4b:62:7e:f4:17:a4:cd:f3:29: 4d:d4:1c:4d:7c:d7:3a:89:90:d5:f4:95:c1:a2:1c:e1:02:ed: 32:19:c0:40:72:7a:fe:c0:ba:b6:0e:f5:1e:d6:57:a9:52:d1: d4:52:c8:7b:b5:71:4c:57:17:a5:17:f0:81:ba:25:cf:40:67: cf:70:91:aa:02:ff:e9:9b:e7:8a:0c:10:63:9d:4e:0a:55:2b: b0:54:33:51:bf:80:aa:ac:ca:3b:39:a3:ea:5b:08:54:e5:70: 5a:0e:6e:61 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZq2ARUMBXjvz+nqxTi6xVwBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNTFhYWQwZTQxNDhhYmUzZjJhOGI4ZDQzMThmMzRiNDU2 YjY1ZjEwHhcNMjUxMTI0MTMxNTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMTBhMTAwMDIwMWZkMzY2Yjc1MzJjZmIxNTQyODdjOGYxMWUwMWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5FZ1vnftwB7fNi16mO+ipDHA2Ay KHqGQ46m2broDp42/gDv5YZKBS7lN9aGryaz1g/34Qs+1tMnG95e/pMyEI0/Wm8Y wqWUlO0pfzFMLAccTlUA1TtM2zJG+KEo3Mq8sHToJP3vUAHTyRTLM85xOaVcUNtu W7xN67aXzMIAmvCxZBwHGXqIYGLKWmRyaMLmadKoOfGyoEbURsgZ8XBftlce90S+ gCObII24iPG44LqARxtx9LPXF7gCLL8QFk7urclntPUKKGzZb6QQ7d97Do5YsbWv l5pNFWe3Jj+9fTnKwBU0a8lXWrMRsE+d8H9c9IRHr3WCOgUezTxG+u39lQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFLEKEAAgH9Nmt1Ms+xVCh8jxHgHwMB8GA1UdIwQY MBaAFI9RqtDkFIq+PyqLjUMY80tFa2XxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajFHcTBPUVVpcjRfS291TlF4anpTMFZyWmZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8zZTYxZDAtZjZjZS00YWFkLTk3NjQt NzYyZDI3Mjc3NTkxLzEvc1FvUUFDQWYwMmEzVXl6N0ZVS0h5UEVlQWZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8zZTYxZDAtZjZjZS00YWFkLTk3NjQtNzYyZDI3Mjc3NTkx LzEvajFHcTBPUVVpcjRfS291TlF4anpTMFZyWmZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqMAwDBAGdp4YD BAGdp5gwDAMEAJ2nmwMEAJ2nnDAMAwQAnafhAwQAnafwMA0GCSqGSIb3DQEBCwUA A4IBAQBfhq2WUX8yrhVNRkQuPSyujlCY+KuDbdskQmYtHfSYrmTlDzDPMRmiwWnu B1qiOShjq7nfaEIy8T8yqpcHfSHgNW1rB7mLmOPDebPUQBpEjjtwIXBxqYxeRwMH bwzA63amwe6L4MbvMFV9ZNaCQkvS+rEm/wAb+IO7LUXPAGhLeM2QxfJXJ2OdzIKc 3C1yUkM9xEXTLsDAvUtLYn70F6TN8ylN1BxNfNc6iZDV9JXBohzhAu0yGcBAcnr+ wLq2DvUe1lepUtHUUsh7tXFMVxelF/CBuiXPQGfPcJGqAv/pm+eKDBBjnU4KVSuw VDNRv4CqrMo7OaPqWwhU5XBaDm5h -----END CERTIFICATE-----Generated at Fri Dec 19 23:21:08 2025 by rpki-client