This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SRq04xJ8p0XUXwqWhTPOND48US8.roa File: SRq04xJ8p0XUXwqWhTPOND48US8.roa (raw, json) Hash identifier: pJ5rsccCn/dU+tW77xPNXgM1L8s3ZNLbq4UjHfQfCZ8= Subject key identifier: 49:1A:B4:E3:12:7C:A7:45:D4:5F:0A:96:85:33:CE:34:3E:3C:51:2F Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B25A0C1B24E55BFA64AB3BCBD6281A057 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SRq04xJ8p0XUXwqWhTPOND48US8.roa Signing time: Tue 16 Dec 2025 05:27:30 +0000 ROA not before: Tue 16 Dec 2025 05:27:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21840 IP address blocks: 151.240.76.0/24 maxlen: 24 151.243.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:a0:c1:b2:4e:55:bf:a6:4a:b3:bc:bd:62:81:a0:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 16 05:27:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=491ab4e3127ca745d45f0a968533ce343e3c512f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3f:e6:c2:e1:79:72:8b:7c:42:40:d7:d9:c8: 0a:7a:ab:3d:27:14:7a:11:79:ea:9f:32:60:c6:4b: 1d:f7:31:b1:11:fe:63:a3:e1:62:98:db:e6:9e:5a: 5b:c3:11:c5:d4:9c:78:80:8f:2b:1e:8e:47:2f:44: a1:a6:2e:45:26:2b:45:f3:7f:75:40:e6:ea:51:d6: 17:29:2a:b7:e0:8f:63:43:16:b6:7c:b0:d7:19:37: 72:89:b0:29:d4:59:66:58:2a:e3:7f:8a:6d:b6:b2: ef:59:ba:37:bd:f3:b4:12:d0:f9:06:53:73:c3:51: 94:19:af:15:df:98:87:a6:94:01:3b:91:4e:e9:1f: ef:04:50:8a:87:8b:d5:95:54:9b:8f:38:8f:c1:3c: 6a:aa:0c:2c:93:9d:76:95:e3:c7:80:8b:ce:0f:d5: 03:d3:77:b3:99:a7:1b:87:1e:35:ac:07:aa:15:10: be:52:64:ca:8f:8e:37:36:ec:de:e9:ec:5c:89:03: 65:fd:80:82:9a:5e:4f:4c:6f:f2:f2:18:02:b4:6b: 97:dc:f3:5a:8a:2e:e1:e1:ec:56:5d:dd:93:4d:f7: dc:b1:5b:19:b8:fa:9b:bf:93:12:21:7d:df:a2:c0: 66:c6:25:ea:82:6d:71:01:2b:d6:1c:6b:0b:d4:3d: a0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1A:B4:E3:12:7C:A7:45:D4:5F:0A:96:85:33:CE:34:3E:3C:51:2F X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SRq04xJ8p0XUXwqWhTPOND48US8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.76.0/24 151.243.31.0/24 Signature Algorithm: sha256WithRSAEncryption 23:01:bf:b8:f5:2c:6e:45:96:a9:d5:c9:cb:ff:26:26:6a:21: 97:2b:53:21:b9:3e:29:c1:c7:8c:32:7e:27:b1:8a:e9:a7:05: a4:87:be:10:bc:09:27:47:b6:f0:ca:0b:aa:4c:a2:a1:17:3f: e7:11:3b:80:2b:8f:d6:3d:56:ab:2f:9b:58:92:7a:9c:39:e6: d2:d2:bb:23:dd:da:c8:07:60:e8:5b:b7:8d:fb:2a:06:ec:fc: 1f:ee:f2:7e:7b:5d:0e:d9:59:82:4a:62:60:bd:5e:8c:ce:f4: 12:f4:ee:3d:a9:18:d6:9f:37:f6:05:14:e9:87:35:02:58:80: 06:e1:63:e6:36:39:0b:bd:54:6b:79:d1:e9:ba:32:b2:15:22: f8:cb:11:b6:11:66:62:d5:ad:a9:54:ec:65:ee:db:4d:58:8e: 8f:83:ac:e2:c9:d2:b2:c6:2a:e0:27:f2:6b:c2:de:b7:1c:0a: c9:61:0d:d1:cb:a0:c6:24:ce:16:40:02:21:33:54:d8:1c:1f: 84:ef:c5:58:c8:44:2c:9c:a9:51:80:08:b3:ff:b5:ce:8a:5d: 5b:29:61:8d:49:af:0f:26:3e:e6:39:8d:81:84:75:40:83:70: ee:f3:3a:d1:f1:00:6f:1d:f4:eb:a0:33:59:42:16:e3:fd:9e: ec:b8:ff:f8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsloMGyTlW/pkqzvL1igaBXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjE2MDUyNzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTFhYjRlMzEyN2NhNzQ1ZDQ1ZjBhOTY4NTMzY2UzNDNlM2M1MTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj/mwuF5cot8QkDX2cgKeqs9JxR6 EXnqnzJgxksd9zGxEf5jo+FimNvmnlpbwxHF1Jx4gI8rHo5HL0Shpi5FJitF8391 QObqUdYXKSq34I9jQxa2fLDXGTdyibAp1FlmWCrjf4pttrLvWbo3vfO0EtD5BlNz w1GUGa8V35iHppQBO5FO6R/vBFCKh4vVlVSbjziPwTxqqgwsk512lePHgIvOD9UD 03ezmacbhx41rAeqFRC+UmTKj443Nuze6exciQNl/YCCml5PTG/y8hgCtGuX3PNa ii7h4exWXd2TTffcsVsZuPqbv5MSIX3fosBmxiXqgm1xASvWHGsL1D2g2wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEkatOMSfKdF1F8KloUzzjQ+PFEvMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvU1JxMDR4SjhwMFhVWHdxV2hUUE9ORDQ4VVM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/BMAwQA l/MfMA0GCSqGSIb3DQEBCwUAA4IBAQAjAb+49SxuRZap1cnL/yYmaiGXK1MhuT4p wceMMn4nsYrppwWkh74QvAknR7bwyguqTKKhFz/nETuAK4/WPVarL5tYknqcOebS 0rsj3drIB2DoW7eN+yoG7Pwf7vJ+e10O2VmCSmJgvV6MzvQS9O49qRjWnzf2BRTp hzUCWIAG4WPmNjkLvVRredHpujKyFSL4yxG2EWZi1a2pVOxl7ttNWI6Pg6ziydKy xirgJ/Jrwt63HArJYQ3Ry6DGJM4WQAIhM1TYHB+E78VYyEQsnKlRgAiz/7XOil1b KWGNSa8PJj7mOY2BhHVAg3Du8zrR8QBvHfTroDNZQhbj/Z7suP/4 -----END CERTIFICATE-----Generated at Fri Dec 19 12:18:28 2025 by rpki-client