This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Lx1mFyGUuswjdHxKIyH7KiX99o0.roa File: Lx1mFyGUuswjdHxKIyH7KiX99o0.roa (raw, json) Hash identifier: x8zVlsKeEArweJUDV/MQtt/TW+EIHkmIw4Hg4GFXXTI= Subject key identifier: 2F:1D:66:17:21:94:BA:CC:23:74:7C:4A:23:21:FB:2A:25:FD:F6:8D Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B1CDF8CF09C5C6542E65202E6ADDEFE39 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Lx1mFyGUuswjdHxKIyH7KiX99o0.roa Signing time: Sun 14 Dec 2025 12:39:31 +0000 ROA not before: Sun 14 Dec 2025 12:39:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207252 IP address blocks: 151.240.157.0/24 maxlen: 24 151.242.160.0/22 maxlen: 24 151.243.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 14:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:df:8c:f0:9c:5c:65:42:e6:52:02:e6:ad:de:fe:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 14 12:39:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2f1d66172194bacc23747c4a2321fb2a25fdf68d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8b:97:64:d0:10:2a:93:29:2f:d3:b4:9b:1a: 72:43:b4:eb:fc:bc:b6:d7:21:05:09:75:de:6a:d1: a5:45:ff:5a:3c:f3:b6:46:3e:d1:c5:45:86:e2:89: 9b:08:30:fc:9c:ec:f2:c3:a9:c2:9d:d3:0f:4a:fd: bd:d2:2c:78:9b:48:aa:fa:0d:f7:16:18:9b:6d:9c: f0:bc:04:71:af:f2:7f:8e:0a:c6:fc:d5:75:99:57: 47:08:5d:86:1e:db:3d:2b:20:a9:77:cf:a2:cb:82: 68:bf:1b:7c:78:9c:2e:31:4f:44:e5:d8:35:fb:c9: c4:18:6c:a8:38:5c:c9:46:20:4d:18:e7:7b:9e:dd: 45:15:d7:a0:ee:58:a3:52:a1:0d:fb:a5:75:c9:68: 27:f7:a1:85:30:12:a3:50:13:14:55:21:a7:7e:2e: e9:63:16:2d:53:b2:11:d4:c5:ed:00:64:a6:32:bb: 5b:4e:06:55:68:e9:51:eb:dc:a6:6d:b2:02:fb:05: ef:fc:a1:01:e4:9a:52:94:fe:16:7b:b1:8d:a6:6c: 7d:b4:95:10:1c:de:85:3d:76:a5:87:68:f3:db:ef: 70:74:d0:a1:68:70:4d:14:40:a4:59:d0:b4:10:83: 4c:01:40:37:0d:f5:5c:1a:5a:b8:e2:f5:e2:f4:13: a1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:1D:66:17:21:94:BA:CC:23:74:7C:4A:23:21:FB:2A:25:FD:F6:8D X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Lx1mFyGUuswjdHxKIyH7KiX99o0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.157.0/24 151.242.160.0/22 151.243.208.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:f2:ee:40:04:aa:e5:0e:ff:55:0e:37:ff:24:6a:eb:47:66: 8a:c2:e7:9e:9d:35:8c:c5:7b:73:78:36:31:29:89:5b:50:82: f9:6a:9e:78:be:97:2d:c0:15:1c:7d:b9:33:70:ea:25:06:3a: 55:aa:74:77:d9:c4:38:26:32:2a:4c:8c:83:9a:ac:0a:ee:7a: af:94:b1:50:9b:a5:e6:bf:85:dc:33:6f:b9:5a:b3:4b:8f:1b: ae:b1:b6:49:d9:4a:5f:93:93:05:34:26:b7:f6:80:d3:d8:2d: 0d:b9:37:e8:af:3c:57:a2:c8:3e:0a:69:b0:c0:c1:5d:a3:b7: 41:6e:39:91:a7:23:fe:12:96:46:73:e1:35:1d:96:a4:31:c0: 4d:4a:7c:fd:ac:c4:e3:34:e3:fe:05:b3:1e:41:f3:fe:94:ae: 2d:68:73:d7:a1:01:d5:92:fa:21:71:a2:1b:ec:1a:f3:41:5d: 5a:47:dc:ea:ec:9e:33:c7:4d:1b:8f:1c:ac:25:ec:3f:8b:82: f9:9b:e0:c7:db:b4:5b:12:c0:6b:ec:ff:2f:10:a8:d8:f0:6d: dd:22:c7:bf:72:9c:04:de:f0:c9:73:e6:17:66:3a:9f:f1:06: 57:1b:16:35:d9:a1:1a:2d:e0:9e:b7:96:d5:8a:24:95:97:64: 44:76:91:76 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsc34zwnFxlQuZSAuat3v45MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjE0MTIzOTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjFkNjYxNzIxOTRiYWNjMjM3NDdjNGEyMzIxZmIyYTI1ZmRmNjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4uXZNAQKpMpL9O0mxpyQ7Tr/Ly2 1yEFCXXeatGlRf9aPPO2Rj7RxUWG4ombCDD8nOzyw6nCndMPSv290ix4m0iq+g33 FhibbZzwvARxr/J/jgrG/NV1mVdHCF2GHts9KyCpd8+iy4Jovxt8eJwuMU9E5dg1 +8nEGGyoOFzJRiBNGOd7nt1FFdeg7lijUqEN+6V1yWgn96GFMBKjUBMUVSGnfi7p YxYtU7IR1MXtAGSmMrtbTgZVaOlR69ymbbIC+wXv/KEB5JpSlP4We7GNpmx9tJUQ HN6FPXalh2jz2+9wdNChaHBNFECkWdC0EINMAUA3DfVcGlq44vXi9BOhoQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFC8dZhchlLrMI3R8SiMh+yol/faNMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvTHgxbUZ5R1V1c3dqZEh4S0l5SDdLaVg5OW8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/CdAwQC l/KgAwQCl/PQMA0GCSqGSIb3DQEBCwUAA4IBAQAb8u5ABKrlDv9VDjf/JGrrR2aK wueenTWMxXtzeDYxKYlbUIL5ap54vpctwBUcfbkzcOolBjpVqnR32cQ4JjIqTIyD mqwK7nqvlLFQm6Xmv4XcM2+5WrNLjxuusbZJ2Upfk5MFNCa39oDT2C0NuTforzxX osg+CmmwwMFdo7dBbjmRpyP+EpZGc+E1HZakMcBNSnz9rMTjNOP+BbMeQfP+lK4t aHPXoQHVkvohcaIb7BrzQV1aR9zq7J4zx00bjxysJew/i4L5m+DH27RbEsBr7P8v EKjY8G3dIse/cpwE3vDJc+YXZjqf8QZXGxY12aEaLeCet5bViiSVl2REdpF2 -----END CERTIFICATE-----Generated at Sat Dec 20 21:34:41 2025 by rpki-client