This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/L00nvCTj-e88R8EdWXVIsj5q4LA.roa File: L00nvCTj-e88R8EdWXVIsj5q4LA.roa (raw, json) Hash identifier: 1ssPBLD3dvZsSg3OHo7MZSP4rluWSqgoPU7zMqLM/NE= Subject key identifier: 2F:4D:27:BC:24:E3:F9:EF:3C:47:C1:1D:59:75:48:B2:3E:6A:E0:B0 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B161FF30FD8F3ABE7A2FFD78BFAF35751 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/L00nvCTj-e88R8EdWXVIsj5q4LA.roa Signing time: Sat 13 Dec 2025 05:12:31 +0000 ROA not before: Sat 13 Dec 2025 05:12:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 395374 IP address blocks: 151.243.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:1f:f3:0f:d8:f3:ab:e7:a2:ff:d7:8b:fa:f3:57:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 13 05:12:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2f4d27bc24e3f9ef3c47c11d597548b23e6ae0b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4d:3f:fe:4a:a2:a8:b6:89:3d:7b:e7:a9:db: 60:15:4f:03:f5:b6:1d:37:ad:32:62:8f:f4:3c:01: 8c:b7:bd:3d:ae:c0:e4:a6:eb:11:f3:13:1a:cb:df: e2:d0:e1:5b:1b:f5:4f:bd:50:5a:d9:3c:58:ae:f1: b8:01:75:2c:96:55:80:e5:7c:ea:97:dc:d4:87:8d: af:3d:9c:73:c4:79:3f:9a:cc:34:b1:5f:f5:48:7a: 52:0b:24:2f:73:f9:09:07:48:6f:ee:d5:47:8c:87: 66:ec:9a:93:f2:0a:42:2c:1e:5e:11:b0:34:4f:4c: 3b:01:d9:88:ad:0b:ec:38:35:cd:48:2f:c7:95:65: fe:6b:8c:65:ac:fe:56:83:02:50:14:ca:96:27:1a: 7e:ad:7f:e5:50:77:9d:88:74:40:97:40:84:5b:93: 01:be:8b:3b:7c:6d:f8:ff:d1:ac:cc:98:c8:f6:74: 20:9c:89:93:54:62:96:59:d3:65:1a:65:87:6a:47: d2:2c:67:75:fa:5f:8a:1a:2a:01:f4:b6:f1:0e:b5: 5e:da:31:35:cf:60:6d:28:70:3d:d7:f1:8a:38:b7: 35:42:0d:2d:80:ed:0d:1c:8f:14:5d:2e:20:40:b2: 57:dc:d3:94:25:f1:3f:94:58:ec:d5:ef:a0:f7:1b: 94:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:4D:27:BC:24:E3:F9:EF:3C:47:C1:1D:59:75:48:B2:3E:6A:E0:B0 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/L00nvCTj-e88R8EdWXVIsj5q4LA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.5.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:af:57:b3:6d:46:e2:b1:94:07:75:ec:0d:bf:dc:5c:00:d1: 31:32:8b:4d:61:65:a3:ee:2c:08:cf:0c:17:32:fc:7b:f7:ba: 7f:b6:27:bd:5e:95:7b:86:ce:43:7b:6c:ea:38:7a:2b:71:12: e9:7c:a4:f1:af:93:83:a1:a3:80:75:ea:69:ce:d0:06:b5:b4: 96:62:e7:b6:d9:b2:07:fd:6c:58:b1:97:20:ff:37:44:41:88: c5:dc:af:ab:4d:6a:e1:2b:3f:71:a6:2f:0f:db:34:83:84:52: 69:53:80:5b:21:9d:f6:62:e1:e0:a9:e9:80:ba:6c:63:f4:27: d8:a8:45:3d:4a:15:2d:a5:09:4f:90:ab:24:e8:87:7f:92:14: 09:b0:c3:e6:33:48:a0:37:75:9d:62:b4:a4:f9:17:cc:37:25: 27:4b:01:fe:83:7d:72:29:3a:5e:4a:bb:ab:e9:d7:a5:c1:6c: 6c:fd:36:6b:fa:df:7b:0f:6f:d5:6d:9d:fe:45:5b:11:fc:95: d7:fd:72:04:3a:ca:ee:35:fc:5d:7f:e2:28:84:3d:ba:18:15: 58:72:35:fc:50:9d:16:0c:83:2e:0d:c5:4c:4b:a4:3e:46:d3: 8a:ce:6e:0e:dc:3d:e1:e9:80:53:86:cb:5d:6d:42:dd:a1:10: d8:7a:4d:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsWH/MP2POr56L/14v681dRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjEzMDUxMjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjRkMjdiYzI0ZTNmOWVmM2M0N2MxMWQ1OTc1NDhiMjNlNmFlMGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApk0//kqiqLaJPXvnqdtgFU8D9bYd N60yYo/0PAGMt709rsDkpusR8xMay9/i0OFbG/VPvVBa2TxYrvG4AXUsllWA5Xzq l9zUh42vPZxzxHk/msw0sV/1SHpSCyQvc/kJB0hv7tVHjIdm7JqT8gpCLB5eEbA0 T0w7AdmIrQvsODXNSC/HlWX+a4xlrP5WgwJQFMqWJxp+rX/lUHediHRAl0CEW5MB vos7fG34/9GszJjI9nQgnImTVGKWWdNlGmWHakfSLGd1+l+KGioB9LbxDrVe2jE1 z2BtKHA91/GKOLc1Qg0tgO0NHI8UXS4gQLJX3NOUJfE/lFjs1e+g9xuUIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC9NJ7wk4/nvPEfBHVl1SLI+auCwMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvTDAwbnZDVGotZTg4UjhFZFdYVklzajVxNExBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/MFMA0G CSqGSIb3DQEBCwUAA4IBAQArr1ezbUbisZQHdewNv9xcANExMotNYWWj7iwIzwwX Mvx797p/tie9XpV7hs5De2zqOHorcRLpfKTxr5ODoaOAdeppztAGtbSWYue22bIH /WxYsZcg/zdEQYjF3K+rTWrhKz9xpi8P2zSDhFJpU4BbIZ32YuHgqemAumxj9CfY qEU9ShUtpQlPkKsk6Id/khQJsMPmM0igN3WdYrSk+RfMNyUnSwH+g31yKTpeSrur 6delwWxs/TZr+t97D2/VbZ3+RVsR/JXX/XIEOsruNfxdf+IohD26GBVYcjX8UJ0W DIMuDcVMS6Q+RtOKzm4O3D3h6YBThstdbULdoRDYek1S -----END CERTIFICATE-----Generated at Sat Dec 20 02:37:35 2025 by rpki-client