This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1n_eqhXGOWbKaUZ-pBk8K5GlZxU.roa File: 1n_eqhXGOWbKaUZ-pBk8K5GlZxU.roa (raw, json) Hash identifier: 9PcRrDHs4ztJeFJ6MJDRxrddIBncgFHAfEjMfROgn2Y= Subject key identifier: D6:7F:DE:AA:15:C6:39:66:CA:69:46:7E:A4:19:3C:2B:91:A5:67:15 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B161FF1E3BCA110A28DF74D96CDB29773 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1n_eqhXGOWbKaUZ-pBk8K5GlZxU.roa Signing time: Sat 13 Dec 2025 05:12:30 +0000 ROA not before: Sat 13 Dec 2025 05:12:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216138 IP address blocks: 151.244.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:1f:f1:e3:bc:a1:10:a2:8d:f7:4d:96:cd:b2:97:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 13 05:12:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d67fdeaa15c63966ca69467ea4193c2b91a56715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a8:ee:bb:70:f5:de:e3:5f:65:ac:2c:23:20: 7c:3c:6f:bf:57:b9:d3:5c:64:a1:f9:02:d0:1b:bb: 4f:21:fe:6e:fe:65:ea:b6:d9:f7:79:9a:e7:a5:23: 18:31:e9:a4:1c:20:f3:90:a7:e4:5f:c4:2e:cd:58: ff:36:c8:29:39:77:cc:e3:48:74:e2:fd:04:3a:c0: de:fd:5a:9c:b2:89:d8:0d:10:3e:88:3a:9d:62:40: bd:c8:90:3b:d9:28:bd:cf:5c:e6:29:cd:73:37:38: a9:02:1f:2e:73:39:c3:93:c2:c1:2a:1c:76:29:ba: 8e:f8:92:08:54:13:31:db:79:f9:3f:23:84:0a:f4: 06:cf:bf:8b:5e:8d:ab:02:57:06:c2:c8:75:9d:66: 60:63:1d:ea:a4:c6:48:cd:18:7b:d1:8c:b3:e5:7e: cd:f1:1e:bb:6f:ec:21:f0:28:e7:ff:cc:7a:44:da: 4c:07:26:ec:07:2c:d3:8d:29:9d:b6:c1:e5:43:e9: 5a:89:b2:58:07:43:e4:20:de:8c:c2:e4:bc:ce:1e: 07:fb:c8:d4:aa:b7:28:da:fb:ca:dd:96:70:d5:f7: ce:0a:ca:03:b9:9e:49:3c:ce:09:2f:1a:a5:d6:17: 48:92:ac:36:87:54:08:65:c8:9d:a7:bc:03:db:fe: 73:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7F:DE:AA:15:C6:39:66:CA:69:46:7E:A4:19:3C:2B:91:A5:67:15 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1n_eqhXGOWbKaUZ-pBk8K5GlZxU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.3.0/24 Signature Algorithm: sha256WithRSAEncryption 15:ba:e0:24:fe:14:8e:3e:86:26:2c:82:df:20:49:8c:8b:77: 86:1f:a6:e0:dc:5b:46:fe:3b:92:6c:63:ab:17:3c:4c:99:73: 90:34:d0:06:87:9e:f9:2b:6b:51:24:83:57:d3:55:47:2f:c7: f1:0d:6b:c5:5d:47:36:74:4a:a9:46:f9:d1:08:e0:65:52:b0: a8:85:f7:27:65:a9:89:47:5e:a0:44:c2:a9:19:7c:ac:a0:e2: 71:5d:60:a7:e2:1d:20:42:d6:56:4d:1a:a7:da:ec:9c:14:12: 26:be:90:ec:3f:38:cc:5e:b2:c6:92:e8:a6:e2:14:fa:3d:c1: ce:38:d5:3f:92:68:50:15:c8:2b:fa:28:d5:fa:22:db:1f:c4: 6c:3f:12:03:5d:ff:80:59:1c:3e:f4:53:47:d9:ea:53:ed:c9: 6b:9b:37:21:2d:08:3b:e8:97:96:06:c4:b7:d1:cf:30:a5:d0: 08:dc:45:9c:9c:7b:93:e9:72:ea:a3:37:a9:d8:3c:e6:c8:d3: 5d:74:76:a9:5c:ba:d6:9a:df:f2:fa:c7:28:26:55:54:20:f6: 9c:5f:f1:62:8e:48:1e:fe:24:95:a2:3e:65:05:e3:8a:b6:eb: c0:16:92:51:ee:85:f1:35:a6:56:4c:1b:c2:80:b6:50:92:a1: dc:5b:91:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsWH/HjvKEQoo33TZbNspdzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjEzMDUxMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjdmZGVhYTE1YzYzOTY2Y2E2OTQ2N2VhNDE5M2MyYjkxYTU2NzE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6juu3D13uNfZawsIyB8PG+/V7nT XGSh+QLQG7tPIf5u/mXqttn3eZrnpSMYMemkHCDzkKfkX8QuzVj/NsgpOXfM40h0 4v0EOsDe/VqcsonYDRA+iDqdYkC9yJA72Si9z1zmKc1zNzipAh8ucznDk8LBKhx2 KbqO+JIIVBMx23n5PyOECvQGz7+LXo2rAlcGwsh1nWZgYx3qpMZIzRh70Yyz5X7N 8R67b+wh8Cjn/8x6RNpMBybsByzTjSmdtsHlQ+laibJYB0PkIN6MwuS8zh4H+8jU qrco2vvK3ZZw1ffOCsoDuZ5JPM4JLxql1hdIkqw2h1QIZcidp7wD2/5zhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNZ/3qoVxjlmymlGfqQZPCuRpWcVMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvMW5fZXFoWEdPV2JLYVVaLXBCazhLNUdsWnhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/QDMA0G CSqGSIb3DQEBCwUAA4IBAQAVuuAk/hSOPoYmLILfIEmMi3eGH6bg3FtG/juSbGOr FzxMmXOQNNAGh575K2tRJINX01VHL8fxDWvFXUc2dEqpRvnRCOBlUrCohfcnZamJ R16gRMKpGXysoOJxXWCn4h0gQtZWTRqn2uycFBImvpDsPzjMXrLGkuim4hT6PcHO ONU/kmhQFcgr+ijV+iLbH8RsPxIDXf+AWRw+9FNH2epT7clrmzchLQg76JeWBsS3 0c8wpdAI3EWcnHuT6XLqozep2DzmyNNddHapXLrWmt/y+scoJlVUIPacX/Fijkge /iSVoj5lBeOKtuvAFpJR7oXxNaZWTBvCgLZQkqHcW5E7 -----END CERTIFICATE-----Generated at Fri Dec 19 23:21:56 2025 by rpki-client