This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/E1GlIlp7I4FBjgY1TUSyJtmzDLc.roa File: E1GlIlp7I4FBjgY1TUSyJtmzDLc.roa (raw, json) Hash identifier: ORn/X7mY2uP/0JdTT35kDK7bQnYmkLnX+VPTjfKwcdM= Subject key identifier: 13:51:A5:22:5A:7B:23:81:41:8E:06:35:4D:44:B2:26:D9:B3:0C:B7 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B35AF7BB12056430AA9A5C8442C4FC811 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/E1GlIlp7I4FBjgY1TUSyJtmzDLc.roa Signing time: Fri 19 Dec 2025 08:17:31 +0000 ROA not before: Fri 19 Dec 2025 08:17:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207043 IP address blocks: 151.240.151.0/24 maxlen: 24 151.243.18.0/24 maxlen: 24 151.243.28.0/24 maxlen: 24 151.243.113.0/24 maxlen: 24 151.243.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:af:7b:b1:20:56:43:0a:a9:a5:c8:44:2c:4f:c8:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 19 08:17:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1351a5225a7b2381418e06354d44b226d9b30cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c7:36:ce:10:11:e2:4a:84:87:b8:e3:53:4a: 30:a3:b3:7e:f8:61:ce:06:36:c6:5d:a6:fe:80:67: 9e:ba:be:35:1e:cd:3c:b0:3f:e0:f4:f4:1c:7c:2a: fe:f7:79:f5:90:de:0e:af:2c:49:9a:31:53:17:39: fa:cc:c0:d7:86:5b:99:6f:17:14:d0:f6:95:f8:97: 36:3c:56:87:8f:6b:76:af:85:d9:7e:84:24:fc:a1: 55:b2:b3:da:34:e9:d0:f7:f2:1e:a4:a0:a8:a5:ff: 51:70:23:69:f1:c7:d6:0f:68:4d:fe:61:99:db:b1: c8:17:18:cf:1e:1a:a8:74:23:59:ae:e8:46:62:a3: 58:35:f9:18:54:84:0c:89:0f:3f:69:a4:8c:85:a7: 86:b3:5b:b6:33:37:30:73:90:b7:8d:f3:9d:d3:c0: a1:ae:b8:7d:3f:64:3b:29:11:6c:d2:c3:f1:5f:35: 3c:a6:c5:04:28:9e:06:94:48:fb:0e:13:7f:a9:71: 7f:05:83:81:7a:ce:ec:74:a3:c2:14:ba:d3:c2:0d: f6:37:f7:65:57:b5:d0:f4:47:77:4f:cc:ea:d7:fb: 57:b5:84:c5:f2:eb:9b:e0:07:c9:a4:a4:67:e8:5d: ff:1a:42:a0:5d:b1:f6:2f:94:0e:26:dc:42:79:69: ba:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:51:A5:22:5A:7B:23:81:41:8E:06:35:4D:44:B2:26:D9:B3:0C:B7 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/E1GlIlp7I4FBjgY1TUSyJtmzDLc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.151.0/24 151.243.18.0/24 151.243.28.0/24 151.243.113.0/24 151.243.150.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:df:71:b8:4f:4f:2f:2a:ac:b4:64:7d:4e:74:1a:6e:09:73: 6c:90:22:42:5e:43:a8:6f:36:c3:63:9b:94:74:20:27:d3:a1: 6b:47:bb:bf:e5:de:e8:c4:6a:c3:f5:d0:61:87:48:d2:7c:d3: 06:e4:bd:36:13:27:8d:31:2e:54:ed:47:bf:7e:91:07:54:44: 73:59:9b:b9:74:95:de:b8:9b:ff:5e:b3:17:38:c9:1c:94:25: 0e:e0:d8:fb:a8:b2:ff:74:eb:cf:6c:af:29:1f:78:b2:49:7d: 78:00:57:b4:1a:d3:68:65:2c:aa:67:32:82:1e:b8:39:fd:c4: 73:fe:46:ea:0a:88:58:5c:2c:64:03:37:41:ca:4f:72:f3:b5: 45:07:fb:d3:5b:11:28:1e:a0:ce:21:76:61:ff:a2:f4:43:83: 88:58:bc:81:04:a8:9b:56:df:c2:e0:5d:48:37:45:83:7b:39: d0:07:61:99:0f:ee:0a:89:44:c5:a0:39:92:f6:9f:05:08:34: 5b:40:20:cd:58:2a:6d:3f:8c:6a:e5:1d:22:d6:84:3c:95:63: d7:7f:00:2c:b0:55:c9:55:d5:26:6f:78:9d:44:da:8b:4b:17: 50:a3:e7:3c:57:2a:e3:67:21:ca:77:cf:99:98:98:58:49:c8: c8:50:7e:d0 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZs1r3uxIFZDCqmlyEQsT8gRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjE5MDgxNzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzUxYTUyMjVhN2IyMzgxNDE4ZTA2MzU0ZDQ0YjIyNmQ5YjMwY2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisc2zhAR4kqEh7jjU0owo7N++GHO BjbGXab+gGeeur41Hs08sD/g9PQcfCr+93n1kN4OryxJmjFTFzn6zMDXhluZbxcU 0PaV+Jc2PFaHj2t2r4XZfoQk/KFVsrPaNOnQ9/IepKCopf9RcCNp8cfWD2hN/mGZ 27HIFxjPHhqodCNZruhGYqNYNfkYVIQMiQ8/aaSMhaeGs1u2Mzcwc5C3jfOd08Ch rrh9P2Q7KRFs0sPxXzU8psUEKJ4GlEj7DhN/qXF/BYOBes7sdKPCFLrTwg32N/dl V7XQ9Ed3T8zq1/tXtYTF8uub4AfJpKRn6F3/GkKgXbH2L5QOJtxCeWm6swIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFBNRpSJaeyOBQY4GNU1EsibZswy3MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvRTFHbElscDdJNEZCamdZMVRVU3lKdG16RExjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAl/CXAwQA l/MSAwQAl/McAwQAl/NxAwQAl/OWMA0GCSqGSIb3DQEBCwUAA4IBAQBs33G4T08v Kqy0ZH1OdBpuCXNskCJCXkOobzbDY5uUdCAn06FrR7u/5d7oxGrD9dBhh0jSfNMG 5L02EyeNMS5U7Ue/fpEHVERzWZu5dJXeuJv/XrMXOMkclCUO4Nj7qLL/dOvPbK8p H3iySX14AFe0GtNoZSyqZzKCHrg5/cRz/kbqCohYXCxkAzdByk9y87VFB/vTWxEo HqDOIXZh/6L0Q4OIWLyBBKibVt/C4F1IN0WDeznQB2GZD+4KiUTFoDmS9p8FCDRb QCDNWCptP4xq5R0i1oQ8lWPXfwAssFXJVdUmb3idRNqLSxdQo+c8VyrjZyHKd8+Z mJhYScjIUH7Q -----END CERTIFICATE-----Generated at Sat Dec 20 11:10:09 2025 by rpki-client