This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9p9AvmkjuWV7oAO2rRVv1ZLwmXo.roa File: 9p9AvmkjuWV7oAO2rRVv1ZLwmXo.roa (raw, json) Hash identifier: XrjJJfQhOka4MSYHrF/l33bOvqNJ+1RB+rlhMkXdXzo= Subject key identifier: F6:9F:40:BE:69:23:B9:65:7B:A0:03:B6:AD:15:6F:D5:92:F0:99:7A Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B35BD3B3C6B6CF4FCB96EE9F576714D78 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9p9AvmkjuWV7oAO2rRVv1ZLwmXo.roa Signing time: Fri 19 Dec 2025 08:32:32 +0000 ROA not before: Fri 19 Dec 2025 08:32:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49608 IP address blocks: 151.244.254.0/24 maxlen: 24 151.245.20.0/24 maxlen: 24 151.245.25.0/24 maxlen: 24 151.245.30.0/24 maxlen: 24 151.247.128.0/24 maxlen: 24 151.247.136.0/24 maxlen: 24 151.247.144.0/24 maxlen: 24 151.247.206.0/24 maxlen: 24 151.247.214.0/24 maxlen: 24 151.247.222.0/24 maxlen: 24 151.247.240.0/24 maxlen: 24 151.247.247.0/24 maxlen: 24 151.247.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:bd:3b:3c:6b:6c:f4:fc:b9:6e:e9:f5:76:71:4d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 19 08:32:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f69f40be6923b9657ba003b6ad156fd592f0997a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b8:a6:d8:bf:8f:65:64:4c:61:ad:0d:11:02: b8:a6:6f:76:7e:de:b2:a2:f3:ff:e1:09:58:ae:6f: c3:16:16:ce:98:2e:19:68:87:24:bd:f3:80:e8:01: 96:df:6c:60:43:f9:58:48:db:d5:69:41:c1:a8:e4: ad:91:32:46:ae:a8:47:ee:78:15:b8:34:6b:a4:fa: 1c:c5:95:55:c2:5d:17:ff:92:80:a4:24:c0:87:58: 2f:3f:ea:55:c2:91:c1:d5:a2:dc:a4:ea:49:6d:db: 60:f3:7c:b4:11:bd:72:65:26:49:b3:f8:33:d6:2d: 43:a8:be:30:d4:2b:19:e5:7b:17:e9:6c:69:5c:f3: ae:c4:a8:7d:3f:20:69:86:77:bf:04:66:c3:2a:d2: b4:98:59:da:e8:f5:f7:70:8e:7c:8c:8d:57:28:85: ba:39:b0:89:77:cb:df:69:1f:8e:6f:7d:2a:4f:c4: 3c:4b:d6:88:2c:d5:af:93:ee:71:16:24:11:0f:15: 58:f3:e6:dc:17:f2:32:e3:f2:31:24:d5:1e:17:c4: 34:ff:80:2e:42:07:cb:70:7d:25:ea:37:9b:c5:e8: 75:2f:6e:51:3a:87:88:03:0c:c1:0e:d8:3b:69:5e: 1a:a7:ff:3a:56:da:ea:fa:80:e4:0e:b2:4c:63:08: 51:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9F:40:BE:69:23:B9:65:7B:A0:03:B6:AD:15:6F:D5:92:F0:99:7A X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9p9AvmkjuWV7oAO2rRVv1ZLwmXo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.254.0/24 151.245.20.0/24 151.245.25.0/24 151.245.30.0/24 151.247.128.0/24 151.247.136.0/24 151.247.144.0/24 151.247.206.0/24 151.247.214.0/24 151.247.222.0/24 151.247.240.0/24 151.247.247.0/24 151.247.255.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:d4:3d:02:1e:98:5d:04:cf:5c:19:b0:70:be:50:c0:0c:53: a3:e3:60:2e:c6:02:ae:b1:eb:53:2c:aa:e3:00:94:d4:a9:3a: 71:61:16:15:64:bc:2e:88:8b:6c:f1:c2:c4:4a:b2:00:4b:0a: 07:b0:c1:0d:61:2f:86:cd:08:eb:12:f7:fd:d6:ed:f7:45:d3: c7:37:a8:33:cc:0b:ef:60:88:2b:32:71:19:b1:94:46:1d:92: 50:29:4c:52:36:79:2b:7c:ed:e5:07:16:34:d9:36:ea:70:00: ec:73:89:78:36:22:e3:48:3d:29:be:5e:a8:31:02:a1:db:fc: 86:8e:0b:9e:14:2e:30:ae:ad:14:71:6b:67:73:7e:0b:ba:aa: a5:3b:f1:48:8f:f0:3e:cf:44:50:cd:ab:e1:5c:71:ef:4f:9b: 5d:89:4f:5f:27:a9:c6:18:11:f8:b8:27:99:8b:b3:d7:89:8d: e3:b2:1b:47:50:5a:7e:a8:b2:a0:2c:ea:2c:b0:40:23:a1:80: 34:81:14:6b:3d:e3:14:91:26:1b:e3:93:e1:9c:f0:ba:70:38: ed:39:fe:4d:28:f5:eb:28:54:a0:ab:e5:a2:1a:d0:bb:07:6d: e3:b4:79:5e:c7:f7:d0:bb:6d:f1:e8:07:f6:9f:27:80:b7:e4: 0b:ae:a3:d4 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZs1vTs8a2z0/Llu6fV2cU14MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjE5MDgzMjMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjlmNDBiZTY5MjNiOTY1N2JhMDAzYjZhZDE1NmZkNTkyZjA5OTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrim2L+PZWRMYa0NEQK4pm92ft6y ovP/4QlYrm/DFhbOmC4ZaIckvfOA6AGW32xgQ/lYSNvVaUHBqOStkTJGrqhH7ngV uDRrpPocxZVVwl0X/5KApCTAh1gvP+pVwpHB1aLcpOpJbdtg83y0Eb1yZSZJs/gz 1i1DqL4w1CsZ5XsX6WxpXPOuxKh9PyBphne/BGbDKtK0mFna6PX3cI58jI1XKIW6 ObCJd8vfaR+Ob30qT8Q8S9aILNWvk+5xFiQRDxVY8+bcF/Iy4/IxJNUeF8Q0/4Au QgfLcH0l6jebxeh1L25ROoeIAwzBDtg7aV4ap/86Vtrq+oDkDrJMYwhRWwIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFPafQL5pI7lle6ADtq0Vb9WS8Jl6MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvOXA5QXZta2p1V1Y3b0FPMnJSVnYxWkx3bVhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQAl/T+AwQA l/UUAwQAl/UZAwQAl/UeAwQAl/eAAwQAl/eIAwQAl/eQAwQAl/fOAwQAl/fWAwQA l/feAwQAl/fwAwQAl/f3AwQAl/f/MA0GCSqGSIb3DQEBCwUAA4IBAQAL1D0CHphd BM9cGbBwvlDADFOj42AuxgKusetTLKrjAJTUqTpxYRYVZLwuiIts8cLESrIASwoH sMENYS+GzQjrEvf91u33RdPHN6gzzAvvYIgrMnEZsZRGHZJQKUxSNnkrfO3lBxY0 2TbqcADsc4l4NiLjSD0pvl6oMQKh2/yGjgueFC4wrq0UcWtnc34LuqqlO/FIj/A+ z0RQzavhXHHvT5tdiU9fJ6nGGBH4uCeZi7PXiY3jshtHUFp+qLKgLOossEAjoYA0 gRRrPeMUkSYb45PhnPC6cDjtOf5NKPXrKFSgq+WiGtC7B23jtHlex/fQu23x6Af2 nyeAt+QLrqPU -----END CERTIFICATE-----Generated at Sat Dec 20 19:07:49 2025 by rpki-client