This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Up8gNgtl0oVHVgZbksEd2KxSxRQ.roa File: Up8gNgtl0oVHVgZbksEd2KxSxRQ.roa (raw, json) Hash identifier: Ov4xTrigEr21QkGSgWZIK960NfhGBo1O5ROJMvxnrdE= Subject key identifier: 52:9F:20:36:0B:65:D2:85:47:56:06:5B:92:C1:1D:D8:AC:52:C5:14 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B2B666B6DC60991C7489433D0FB747051 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Up8gNgtl0oVHVgZbksEd2KxSxRQ.roa Signing time: Wed 17 Dec 2025 08:21:31 +0000 ROA not before: Wed 17 Dec 2025 08:21:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401776 IP address blocks: 151.243.189.0/24 maxlen: 24 151.243.191.0/24 maxlen: 24 151.243.199.0/24 maxlen: 24 151.244.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:66:6b:6d:c6:09:91:c7:48:94:33:d0:fb:74:70:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 17 08:21:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=529f20360b65d2854756065b92c11dd8ac52c514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:76:91:e1:4b:e3:b6:95:21:c3:60:1a:67:ca: 61:f1:b4:7e:3a:0e:d0:e0:bd:e2:ce:46:bc:9e:9d: 45:d8:f9:91:2b:ba:c2:8a:d2:78:f1:f6:fe:08:63: 0f:dd:1d:13:b6:8f:e6:ae:25:ec:3f:09:48:d0:3b: 5d:cb:6e:cf:fb:61:25:b1:9f:a4:a5:97:67:ef:5f: 5b:c4:41:45:e2:c6:2c:a9:17:c7:d6:f8:07:93:be: bd:69:76:ca:e1:85:bb:cc:7f:d6:71:30:83:36:ba: 64:5e:67:05:b3:24:c6:b0:93:14:92:ff:be:fe:c2: b7:e1:d5:0c:35:5b:85:c2:68:96:ec:2a:68:26:ba: e6:7f:f3:d8:15:8f:ef:4e:9c:88:a1:bb:ac:3b:ce: 95:3e:61:08:e2:b2:a7:5e:8b:d5:1e:14:bf:fd:8f: 32:e8:2d:db:03:2c:86:de:04:52:60:fc:22:9b:54: 4d:aa:20:ed:da:10:a9:e6:e0:80:ff:b9:83:ee:b5: 00:e7:28:ad:bb:4a:90:ff:a4:8b:88:11:e2:92:bb: a3:dd:7f:7d:b3:fb:20:0d:75:6e:5f:3e:d5:0f:92: e2:a8:7c:d0:2a:e8:76:a0:8e:b1:cf:1c:86:44:7a: 12:e1:84:cd:81:ba:3e:ef:39:d8:0e:a9:6d:d0:e5: e2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:9F:20:36:0B:65:D2:85:47:56:06:5B:92:C1:1D:D8:AC:52:C5:14 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Up8gNgtl0oVHVgZbksEd2KxSxRQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.189.0/24 151.243.191.0/24 151.243.199.0/24 151.244.109.0/24 Signature Algorithm: sha256WithRSAEncryption 91:13:4f:c1:26:6a:f9:53:da:bf:5d:8c:e4:2c:4f:96:bf:ea: b8:dc:38:21:3c:31:4d:31:8a:f8:a4:ee:7a:6d:c2:00:6b:52: 7f:49:9b:d0:bf:75:d7:4b:6d:96:97:1f:92:35:9a:7b:be:9c: 98:3b:85:ea:78:72:46:e3:d4:64:7a:dd:f6:cb:9a:c5:4a:e6: 62:dd:d3:48:64:ed:ab:3d:a6:1e:44:4b:68:31:3a:a3:26:f7: 8b:1a:c4:32:ba:04:e7:36:b4:6a:d5:ca:06:54:17:a3:21:2f: 4b:4f:71:82:c3:bd:58:73:fd:64:27:4a:a5:da:cc:e0:14:ac: 42:a4:e1:4f:20:97:10:0f:f1:ab:33:1c:80:72:68:56:85:83: 1a:5f:ec:a0:e7:8f:94:ea:ae:83:ea:c3:98:b6:ba:77:3a:13: 82:c2:8e:eb:25:f2:bb:6b:34:9a:64:22:be:24:4b:5f:38:46: 1d:57:a0:07:a3:f6:e3:41:bc:cd:f7:dd:bf:6d:e9:73:5a:23: 8e:37:41:19:61:07:f1:25:43:5c:b2:18:98:35:be:e3:fd:16: b2:bc:cb:3b:26:43:86:86:2b:20:87:4a:4e:e4:43:b8:35:dc: 0a:6b:43:80:0e:c8:e8:33:6f:af:59:d2:85:5a:47:b3:0d:64: d4:6c:fa:5e -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsrZmttxgmRx0iUM9D7dHBRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjE3MDgyMTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjlmMjAzNjBiNjVkMjg1NDc1NjA2NWI5MmMxMWRkOGFjNTJjNTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3aR4UvjtpUhw2AaZ8ph8bR+Og7Q 4L3izka8np1F2PmRK7rCitJ48fb+CGMP3R0Tto/mriXsPwlI0Dtdy27P+2ElsZ+k pZdn719bxEFF4sYsqRfH1vgHk769aXbK4YW7zH/WcTCDNrpkXmcFsyTGsJMUkv++ /sK34dUMNVuFwmiW7CpoJrrmf/PYFY/vTpyIobusO86VPmEI4rKnXovVHhS//Y8y 6C3bAyyG3gRSYPwim1RNqiDt2hCp5uCA/7mD7rUA5yitu0qQ/6SLiBHikruj3X99 s/sgDXVuXz7VD5LiqHzQKuh2oI6xzxyGRHoS4YTNgbo+7znYDqlt0OXi4QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFFKfIDYLZdKFR1YGW5LBHdisUsUUMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvVXA4Z05ndGwwb1ZIVmdaYmtzRWQyS3hTeFJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/O9AwQA l/O/AwQAl/PHAwQAl/RtMA0GCSqGSIb3DQEBCwUAA4IBAQCRE0/BJmr5U9q/XYzk LE+Wv+q43DghPDFNMYr4pO56bcIAa1J/SZvQv3XXS22Wlx+SNZp7vpyYO4XqeHJG 49Rket32y5rFSuZi3dNIZO2rPaYeREtoMTqjJveLGsQyugTnNrRq1coGVBejIS9L T3GCw71Yc/1kJ0ql2szgFKxCpOFPIJcQD/GrMxyAcmhWhYMaX+yg54+U6q6D6sOY trp3OhOCwo7rJfK7azSaZCK+JEtfOEYdV6AHo/bjQbzN992/belzWiOON0EZYQfx JUNcshiYNb7j/RayvMs7JkOGhisgh0pO5EO4NdwKa0OADsjoM2+vWdKFWkezDWTU bPpe -----END CERTIFICATE-----Generated at Sat Dec 20 09:32:44 2025 by rpki-client