This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0y340hZUBEtSz9d8LUqoW1joLhg.roa File: 0y340hZUBEtSz9d8LUqoW1joLhg.roa (raw, json) Hash identifier: GBdjF6+heMWbD8qPiAr90WpKGTdH7d3tYwaS9TRAvng= Subject key identifier: D3:2D:F8:D2:16:54:04:4B:52:CF:D7:7C:2D:4A:A8:5B:58:E8:2E:18 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B25A0C04FAE6EC75FD09A7492D4B5A957 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0y340hZUBEtSz9d8LUqoW1joLhg.roa Signing time: Tue 16 Dec 2025 05:27:30 +0000 ROA not before: Tue 16 Dec 2025 05:27:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 174 IP address blocks: 151.240.82.0/24 maxlen: 24 151.240.205.0/24 maxlen: 24 151.241.119.0/24 maxlen: 24 151.241.122.0/24 maxlen: 24 151.241.123.0/24 maxlen: 24 151.241.125.0/24 maxlen: 24 151.243.227.0/24 maxlen: 24 151.243.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:a0:c0:4f:ae:6e:c7:5f:d0:9a:74:92:d4:b5:a9:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 16 05:27:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d32df8d21654044b52cfd77c2d4aa85b58e82e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c5:b2:6e:a2:38:cc:70:7f:e5:3a:2e:4a:78: 79:e5:48:5a:9d:5b:79:53:6e:f2:1a:4b:a6:9a:fa: ef:d5:14:45:f1:eb:50:61:6a:ca:95:15:b6:26:8e: 91:30:dd:63:1c:e4:22:55:08:5f:52:e9:d6:a1:65: 45:08:28:4c:8c:19:7c:9e:61:6e:f9:c7:3a:f4:b3: 3a:ce:d6:80:de:39:74:cb:0e:a7:bf:49:d0:4f:5e: b8:b0:65:ca:13:87:24:ee:6f:47:8b:17:28:20:57: 1e:04:84:44:7a:45:da:2a:c9:87:f6:db:fa:0b:aa: 92:9d:41:13:23:bf:8e:51:d7:4e:9a:df:d2:c1:c4: 7e:69:42:b7:8e:d7:3a:de:1e:17:94:28:83:15:15: 4b:8f:b6:5f:ae:a7:02:eb:a0:2a:1f:40:88:d2:9c: 31:ac:7c:01:c4:71:b4:46:07:77:4f:b1:fd:4d:b5: d0:de:b5:cf:98:30:d8:69:f5:62:e8:a0:fb:fb:e5: 35:63:c4:48:4b:33:85:97:52:de:e3:43:4c:da:21: 6e:3a:db:3c:d6:08:3a:0d:69:d4:d5:9b:6a:13:1b: 6e:a5:2f:77:64:90:6d:e9:28:b9:f2:83:42:45:6b: d7:6c:59:8e:2b:18:eb:46:34:3c:5e:92:b1:ad:3f: 72:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:2D:F8:D2:16:54:04:4B:52:CF:D7:7C:2D:4A:A8:5B:58:E8:2E:18 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0y340hZUBEtSz9d8LUqoW1joLhg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.82.0/24 151.240.205.0/24 151.241.119.0/24 151.241.122.0/23 151.241.125.0/24 151.243.227.0/24 151.243.235.0/24 Signature Algorithm: sha256WithRSAEncryption 68:6b:4d:0d:43:aa:1a:3c:64:b3:0b:19:b8:74:8c:76:08:a7: 60:ae:ad:5f:81:a5:e7:f5:55:da:c0:65:41:92:61:20:c7:1f: 99:88:78:d5:3c:c1:f8:44:25:c9:ba:08:49:2f:da:f8:1f:d0: 5c:d6:39:2f:a7:1a:a7:9d:87:ee:43:ee:76:39:43:41:7f:a5: ba:ac:70:a6:e0:df:0e:c6:47:e0:6a:29:d2:a1:89:28:38:47: 6d:e7:57:c9:bb:3b:16:c8:6f:29:35:ed:eb:48:7d:2f:8f:43: 39:0d:09:4c:f5:cc:a4:af:a7:4a:9c:42:e3:eb:de:9d:38:3a: 1c:89:68:39:63:8a:7d:06:23:dd:d0:5e:57:ec:e8:2a:3d:4e: 29:0c:75:01:52:62:14:20:a4:52:c7:1d:f9:71:bf:69:2c:fc: 0a:77:61:f1:90:8a:f7:56:9d:5a:29:ba:00:17:69:8b:b1:f7: 46:92:6b:c4:21:db:61:a4:da:16:22:0b:2d:c8:4c:bd:a2:be: 0b:78:0f:8f:06:62:1a:f4:d0:76:f1:85:fb:dc:4f:e9:9a:e3: ff:0d:e5:1e:28:eb:6d:90:a4:c6:42:d2:40:f8:d5:c1:c9:fc: 87:c0:7e:51:f2:62:48:3a:27:fc:35:75:05:95:b4:2f:26:d5: ae:16:d5:67 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZsloMBPrm7HX9CadJLUtalXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjE2MDUyNzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMzJkZjhkMjE2NTQwNDRiNTJjZmQ3N2MyZDRhYTg1YjU4ZTgyZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsWybqI4zHB/5TouSnh55UhanVt5 U27yGkummvrv1RRF8etQYWrKlRW2Jo6RMN1jHOQiVQhfUunWoWVFCChMjBl8nmFu +cc69LM6ztaA3jl0yw6nv0nQT164sGXKE4ck7m9HixcoIFceBIREekXaKsmH9tv6 C6qSnUETI7+OUddOmt/SwcR+aUK3jtc63h4XlCiDFRVLj7ZfrqcC66AqH0CI0pwx rHwBxHG0Rgd3T7H9TbXQ3rXPmDDYafVi6KD7++U1Y8RISzOFl1Le40NM2iFuOts8 1gg6DWnU1ZtqExtupS93ZJBt6Si58oNCRWvXbFmOKxjrRjQ8XpKxrT9yPQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFNMt+NIWVARLUs/XfC1KqFtY6C4YMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvMHkzNDBoWlVCRXRTejlkOExVcW9XMWpvTGhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAl/BSAwQA l/DNAwQAl/F3AwQBl/F6AwQAl/F9AwQAl/PjAwQAl/PrMA0GCSqGSIb3DQEBCwUA A4IBAQBoa00NQ6oaPGSzCxm4dIx2CKdgrq1fgaXn9VXawGVBkmEgxx+ZiHjVPMH4 RCXJughJL9r4H9Bc1jkvpxqnnYfuQ+52OUNBf6W6rHCm4N8OxkfgainSoYkoOEdt 51fJuzsWyG8pNe3rSH0vj0M5DQlM9cykr6dKnELj696dODociWg5Y4p9BiPd0F5X 7OgqPU4pDHUBUmIUIKRSxx35cb9pLPwKd2HxkIr3Vp1aKboAF2mLsfdGkmvEIdth pNoWIgstyEy9or4LeA+PBmIa9NB28YX73E/pmuP/DeUeKOttkKTGQtJA+NXByfyH wH5R8mJIOif8NXUFlbQvJtWuFtVn -----END CERTIFICATE-----Generated at Sat Dec 20 11:10:24 2025 by rpki-client