This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HRoGN9lFzyIv-uQxOiRjIvHo2ZE.roa File: HRoGN9lFzyIv-uQxOiRjIvHo2ZE.roa (raw, json) Hash identifier: T6o36dYw1BceVSeB00r+nxf7YnuBVWoC6Nxjk9e5CQc= Subject key identifier: 1D:1A:06:37:D9:45:CF:22:2F:FA:E4:31:3A:24:63:22:F1:E8:D9:91 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B35BD3C9E2B81A3818E82A0387A3B0617 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HRoGN9lFzyIv-uQxOiRjIvHo2ZE.roa Signing time: Fri 19 Dec 2025 08:32:32 +0000 ROA not before: Fri 19 Dec 2025 08:32:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215304 IP address blocks: 151.241.128.0/22 maxlen: 24 151.243.44.0/24 maxlen: 24 151.244.128.0/24 maxlen: 24 151.244.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 08:32:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:bd:3c:9e:2b:81:a3:81:8e:82:a0:38:7a:3b:06:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 19 08:32:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1d1a0637d945cf222ffae4313a246322f1e8d991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1b:35:f8:ce:81:dc:8c:d6:43:8c:20:9e:70: 4e:76:a9:1c:2c:6c:72:60:be:4b:a4:2a:8f:47:a7: ba:79:8c:7e:be:9c:24:49:ec:20:61:5f:2e:d1:2d: a9:51:e1:33:b2:5e:3f:e6:88:d5:02:9c:d8:3a:73: 8d:0e:7a:99:9c:f8:40:16:a2:1f:dd:0c:ed:26:85: 04:48:89:37:7e:82:52:b6:22:55:b3:3c:b6:6a:9b: 44:69:c6:af:55:ca:d8:88:f6:78:36:f5:52:91:2a: 96:d8:5d:40:3c:4d:22:44:91:13:b2:7d:8b:75:c1: f1:04:7a:0f:9e:f0:2c:27:36:de:16:59:d2:a6:c9: 87:c4:fe:ac:42:5c:24:e0:ca:cc:2d:19:8a:55:31: 5b:8f:e2:e4:31:df:88:47:a0:37:b8:45:a8:4c:0e: 01:e0:1c:1d:83:a1:ac:a8:28:26:43:0a:71:3f:c1: 59:05:43:c9:ee:3e:92:07:92:71:62:e5:2b:e2:e1: b4:f9:81:bc:a4:48:61:89:ff:13:48:f0:ec:53:7f: 5d:29:d0:77:81:bb:93:d0:7c:cf:ca:bd:25:08:f5: c7:55:f5:0b:35:2d:28:4a:9d:60:96:25:cc:ec:8d: 9f:cc:da:b6:14:2f:fd:5d:c6:87:d7:cc:62:ad:91: a9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1A:06:37:D9:45:CF:22:2F:FA:E4:31:3A:24:63:22:F1:E8:D9:91 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HRoGN9lFzyIv-uQxOiRjIvHo2ZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.128.0/22 151.243.44.0/24 151.244.128.0/24 151.244.130.0/24 Signature Algorithm: sha256WithRSAEncryption 20:dc:2b:86:28:2c:6d:4e:83:21:40:b1:e1:95:55:74:c8:cd: 15:f2:37:fa:69:38:02:1d:b1:9b:0e:86:37:56:a2:24:20:b1: 51:c0:ce:2c:50:68:ab:99:2e:1a:ce:7c:80:33:5b:69:16:27: dd:a1:9f:34:6a:00:fe:ce:03:f5:45:20:6e:ce:c4:2f:df:dc: 2f:f6:c0:1b:ca:6c:02:15:8f:1c:5d:5f:65:d7:af:8f:a3:37: b0:bb:ad:f2:5b:e2:6b:18:24:71:fb:b1:a8:ab:11:dd:c7:80: f6:16:a6:24:b3:db:68:0b:d8:d2:31:18:85:f6:c3:f5:8e:b4: cf:c2:6f:70:4e:ef:a7:10:4d:b0:66:ea:bd:22:64:16:2f:ad: fe:9c:84:5c:58:3f:d9:04:97:ad:0b:69:90:b0:ee:1c:95:53: 6d:c9:9d:df:39:44:45:dd:fc:7e:06:48:ea:08:25:b2:7e:8e: df:88:bc:f6:ec:1a:a6:16:91:28:79:be:cb:f2:8f:e7:76:34: 63:58:e5:74:e4:8d:b6:e2:02:2a:91:f1:e1:0f:d0:0d:ca:a7: d2:67:25:93:c7:db:94:36:fa:f0:3d:f8:86:63:93:1b:24:32: 74:1a:c7:5b:32:e8:90:d7:f7:b7:db:ce:ec:8e:e2:f6:a9:14: 44:71:80:e9 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZs1vTyeK4GjgY6CoDh6OwYXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjE5MDgzMjMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZDFhMDYzN2Q5NDVjZjIyMmZmYWU0MzEzYTI0NjMyMmYxZThkOTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxs1+M6B3IzWQ4wgnnBOdqkcLGxy YL5LpCqPR6e6eYx+vpwkSewgYV8u0S2pUeEzsl4/5ojVApzYOnONDnqZnPhAFqIf 3QztJoUESIk3foJStiJVszy2aptEacavVcrYiPZ4NvVSkSqW2F1APE0iRJETsn2L dcHxBHoPnvAsJzbeFlnSpsmHxP6sQlwk4MrMLRmKVTFbj+LkMd+IR6A3uEWoTA4B 4Bwdg6GsqCgmQwpxP8FZBUPJ7j6SB5JxYuUr4uG0+YG8pEhhif8TSPDsU39dKdB3 gbuT0HzPyr0lCPXHVfULNS0oSp1gliXM7I2fzNq2FC/9XcaH18xirZGpKwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFB0aBjfZRc8iL/rkMTokYyLx6NmRMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvSFJvR045bEZ6eUl2LXVReE9pUmpJdkhvMlpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCl/GAAwQA l/MsAwQAl/SAAwQAl/SCMA0GCSqGSIb3DQEBCwUAA4IBAQAg3CuGKCxtToMhQLHh lVV0yM0V8jf6aTgCHbGbDoY3VqIkILFRwM4sUGirmS4aznyAM1tpFifdoZ80agD+ zgP1RSBuzsQv39wv9sAbymwCFY8cXV9l16+Pozewu63yW+JrGCRx+7GoqxHdx4D2 FqYks9toC9jSMRiF9sP1jrTPwm9wTu+nEE2wZuq9ImQWL63+nIRcWD/ZBJetC2mQ sO4clVNtyZ3fOURF3fx+BkjqCCWyfo7fiLz27BqmFpEoeb7L8o/ndjRjWOV05I22 4gIqkfHhD9ANyqfSZyWTx9uUNvrwPfiGY5MbJDJ0GsdbMuiQ1/e3287sjuL2qRRE cYDp -----END CERTIFICATE-----Generated at Fri Dec 19 17:27:51 2025 by rpki-client