This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EDEz7a4eJK8DocFGIhX9ykRKZ3M.roa File: EDEz7a4eJK8DocFGIhX9ykRKZ3M.roa (raw, json) Hash identifier: vQ9Atpqmup0HmAWwS0D36ByHykVZ1UJXF2A9TqrbX5U= Subject key identifier: 10:31:33:ED:AE:1E:24:AF:03:A1:C1:46:22:15:FD:CA:44:4A:67:73 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B35BD3C6857513254A272F9A457DA46BF Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EDEz7a4eJK8DocFGIhX9ykRKZ3M.roa Signing time: Fri 19 Dec 2025 08:32:32 +0000 ROA not before: Fri 19 Dec 2025 08:32:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208905 IP address blocks: 151.245.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:bd:3c:68:57:51:32:54:a2:72:f9:a4:57:da:46:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 19 08:32:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=103133edae1e24af03a1c1462215fdca444a6773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:70:07:ec:12:32:cc:f9:bc:bf:d8:d8:d9:86: 4e:ad:e9:b1:11:b9:ef:66:28:01:f6:9c:34:47:89: 82:f6:0d:e7:29:21:ad:37:fe:4d:6f:8d:97:59:3d: e0:48:e6:56:6c:33:09:8e:b9:b1:e0:93:5b:1f:ca: 52:1e:f0:6a:0f:e9:15:9f:88:53:6d:34:f5:b6:f7: b5:b1:86:32:7c:19:7d:be:14:a8:00:ad:ff:28:0a: 17:43:b4:4c:16:0b:2a:08:0c:7e:22:56:c0:80:bd: 11:fc:7a:d1:26:04:9e:26:21:f9:80:a4:f4:ca:ba: 16:f7:ab:ac:68:6c:82:69:c0:8b:d5:a6:5a:b8:09: e0:43:60:33:03:ab:b8:8d:47:05:2d:96:46:d9:39: b2:ab:2b:34:ed:6b:98:1a:63:8a:52:b5:f1:81:c3: 6f:fd:61:73:25:38:f5:d7:af:44:02:c3:5b:b6:4e: a9:8e:b8:f6:b7:0b:50:f1:5e:8e:a6:46:b2:76:43: 71:d5:67:55:73:59:bb:42:0a:20:f6:b7:ce:81:ec: b2:f1:12:28:c6:c6:c3:43:c1:64:7c:74:f9:c3:3a: 98:de:92:6f:7a:af:c9:f4:7a:08:03:2f:53:d4:95: 25:6b:ee:e3:45:3d:e0:e3:09:48:ce:82:0a:a1:52: 97:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:31:33:ED:AE:1E:24:AF:03:A1:C1:46:22:15:FD:CA:44:4A:67:73 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EDEz7a4eJK8DocFGIhX9ykRKZ3M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.245.72.0/24 Signature Algorithm: sha256WithRSAEncryption b8:9a:6d:7e:98:99:8e:ab:85:03:75:0a:59:d8:c2:b2:d4:8a: 1d:24:f0:1c:5d:cf:05:02:ea:48:96:37:3e:5c:92:82:a7:4d: cf:81:ef:fd:84:83:f9:69:1e:1a:7f:f5:1a:bf:8f:9c:a6:b1: 6a:8a:00:82:d5:df:c8:42:29:9c:d6:07:f9:84:44:0f:2b:05: af:bc:11:91:be:91:76:2b:62:d5:5f:eb:2e:14:b8:5a:4f:4d: 0b:78:70:89:34:14:99:2a:db:fa:ea:af:35:bc:60:ae:4c:7a: 58:13:31:c2:78:eb:53:ad:33:d6:58:2d:99:9a:81:82:db:84: d9:3c:e8:c4:51:ff:26:06:c4:76:c5:89:07:81:38:aa:f2:ae: 99:80:82:d3:30:f4:1d:ca:69:07:47:3f:ff:e6:ff:f0:08:8e: 79:ff:2b:32:f8:cb:4e:84:e0:09:b9:ac:b4:97:52:67:7f:a5: fd:53:ee:ae:7a:c1:f9:6e:4d:57:27:43:4c:ab:6e:f1:dd:b3: 89:e3:46:e7:62:47:7f:1b:bb:f9:0e:c7:e8:cb:85:90:bb:67: 55:6c:6a:4b:ce:97:e8:50:f1:6e:99:7b:99:75:7b:03:60:d5: b1:1c:94:fa:55:8f:86:77:6d:79:4f:e2:4e:0f:04:14:87:0f: 63:4a:bb:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZs1vTxoV1EyVKJy+aRX2ka/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjE5MDgzMjMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDMxMzNlZGFlMWUyNGFmMDNhMWMxNDYyMjE1ZmRjYTQ0NGE2NzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnAH7BIyzPm8v9jY2YZOremxEbnv ZigB9pw0R4mC9g3nKSGtN/5Nb42XWT3gSOZWbDMJjrmx4JNbH8pSHvBqD+kVn4hT bTT1tve1sYYyfBl9vhSoAK3/KAoXQ7RMFgsqCAx+IlbAgL0R/HrRJgSeJiH5gKT0 yroW96usaGyCacCL1aZauAngQ2AzA6u4jUcFLZZG2Tmyqys07WuYGmOKUrXxgcNv /WFzJTj1169EAsNbtk6pjrj2twtQ8V6OpkaydkNx1WdVc1m7Qgog9rfOgeyy8RIo xsbDQ8FkfHT5wzqY3pJveq/J9HoIAy9T1JUla+7jRT3g4wlIzoIKoVKXqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBAxM+2uHiSvA6HBRiIV/cpESmdzMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvRURFejdhNGVKSzhEb2NGR0loWDl5a1JLWjNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/VIMA0G CSqGSIb3DQEBCwUAA4IBAQC4mm1+mJmOq4UDdQpZ2MKy1IodJPAcXc8FAupIljc+ XJKCp03Pge/9hIP5aR4af/Uav4+cprFqigCC1d/IQimc1gf5hEQPKwWvvBGRvpF2 K2LVX+suFLhaT00LeHCJNBSZKtv66q81vGCuTHpYEzHCeOtTrTPWWC2ZmoGC24TZ POjEUf8mBsR2xYkHgTiq8q6ZgILTMPQdymkHRz//5v/wCI55/ysy+MtOhOAJuay0 l1Jnf6X9U+6uesH5bk1XJ0NMq27x3bOJ40bnYkd/G7v5Dsfoy4WQu2dVbGpLzpfo UPFumXuZdXsDYNWxHJT6VY+Gd215T+JODwQUhw9jSrsD -----END CERTIFICATE-----Generated at Sat Dec 20 13:00:39 2025 by rpki-client