This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VAcKfmEV4LZ-ZKVKbYnFom9LrAs.roa File: VAcKfmEV4LZ-ZKVKbYnFom9LrAs.roa (raw, json) Hash identifier: d8kto8DYu3C1eg0QL9b2txYdEKCoqPs5vddPehFXMlw= Subject key identifier: 54:07:0A:7E:61:15:E0:B6:7E:64:A5:4A:6D:89:C5:A2:6F:4B:AC:0B Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AFE121CE787268C46682943067218EA72 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VAcKfmEV4LZ-ZKVKbYnFom9LrAs.roa Signing time: Mon 08 Dec 2025 13:06:31 +0000 ROA not before: Mon 08 Dec 2025 13:06:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213200 IP address blocks: 151.243.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:12:1c:e7:87:26:8c:46:68:29:43:06:72:18:ea:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 8 13:06:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=54070a7e6115e0b67e64a54a6d89c5a26f4bac0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:66:31:08:f6:c9:52:d9:3e:53:7a:c7:a3:13: 4f:94:8f:8c:59:5e:e1:70:a3:bb:d2:e1:c4:6a:ab: d2:2b:2d:ab:a5:99:41:d1:eb:f8:03:73:44:5b:17: c9:1f:7c:88:ae:06:5b:d1:80:f4:5c:7b:19:bc:d5: 21:4c:2b:5e:ac:86:b2:c8:7b:60:7d:14:37:70:ff: 13:7a:c6:15:51:9d:33:e5:0c:9b:f9:06:9a:66:db: ed:06:02:30:a5:a5:fa:2d:7a:c8:55:b3:75:62:24: aa:b2:1b:48:e4:f3:db:1d:f9:ba:33:8e:96:e4:42: b0:b5:76:b0:38:ea:c2:90:8b:de:96:39:7e:ee:b3: 1f:a8:8e:ad:ba:9a:44:6a:17:0a:3a:b5:67:32:0d: 17:09:93:91:cd:ca:62:9e:08:c1:05:c2:88:fb:86: 12:d8:45:60:8a:d3:96:46:e4:c6:54:3e:31:d2:e6: 7e:80:13:08:f1:fc:88:d1:e2:48:f3:23:f9:1e:2b: d8:32:c4:10:e6:a8:6f:6d:2c:6a:4c:9b:7a:f3:29: 8e:61:eb:b6:e8:4b:a2:9b:bf:af:45:4b:d8:4f:6d: 50:37:28:94:e3:03:ab:9d:fd:a8:c9:d2:71:cd:d4: 64:7d:8d:10:3a:ed:1d:f1:df:ca:10:01:0f:f3:84: 35:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:07:0A:7E:61:15:E0:B6:7E:64:A5:4A:6D:89:C5:A2:6F:4B:AC:0B X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VAcKfmEV4LZ-ZKVKbYnFom9LrAs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.212.0/24 Signature Algorithm: sha256WithRSAEncryption 57:b1:1b:ad:da:14:86:03:c3:62:2f:ba:fa:c9:ec:cb:23:37: da:3e:bf:36:21:03:f1:4b:e7:0c:6d:88:f2:29:04:86:04:80: 6b:3e:6b:0e:53:fb:0d:bf:d8:ab:ce:35:ab:c0:13:dc:d6:fa: 3f:04:b9:0d:a5:2a:a9:cc:75:d2:46:b9:57:8e:7e:90:dc:87: c1:ca:f0:dc:22:04:80:6c:32:23:32:fc:74:3b:f9:f3:0b:50: df:d3:3e:0c:ef:05:03:f8:cc:44:48:1d:c2:fd:78:19:e8:7c: 85:a9:ad:30:68:ad:f0:b9:29:ec:14:6d:1f:47:34:b7:28:c3: 5c:ac:4c:fd:8c:76:1f:40:db:16:b2:ff:e1:0e:5a:dd:fe:55: b4:94:8b:c6:a5:d2:b2:9f:f9:9f:08:0c:17:65:cf:08:8c:38: e7:ab:09:a0:62:d0:00:d1:c8:c8:5e:58:e2:66:ed:47:f9:69: 0f:12:be:d0:6c:9c:fe:7b:b0:0d:38:1d:47:00:94:58:fe:7e: bb:6a:25:ca:7c:94:dd:92:0c:98:63:b3:16:93:e4:e2:95:53: f5:50:17:34:4f:a8:e0:3f:dd:46:80:28:e5:f5:a2:46:47:ca: 8f:0a:2c:a3:02:71:79:e0:e1:61:8f:9d:8e:0a:df:23:3d:98: ab:46:97:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr+EhznhyaMRmgpQwZyGOpyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjA4MTMwNjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NDA3MGE3ZTYxMTVlMGI2N2U2NGE1NGE2ZDg5YzVhMjZmNGJhYzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GYxCPbJUtk+U3rHoxNPlI+MWV7h cKO70uHEaqvSKy2rpZlB0ev4A3NEWxfJH3yIrgZb0YD0XHsZvNUhTCterIayyHtg fRQ3cP8TesYVUZ0z5Qyb+QaaZtvtBgIwpaX6LXrIVbN1YiSqshtI5PPbHfm6M46W 5EKwtXawOOrCkIveljl+7rMfqI6tuppEahcKOrVnMg0XCZORzcpingjBBcKI+4YS 2EVgitOWRuTGVD4x0uZ+gBMI8fyI0eJI8yP5HivYMsQQ5qhvbSxqTJt68ymOYeu2 6Euim7+vRUvYT21QNyiU4wOrnf2oydJxzdRkfY0QOu0d8d/KEAEP84Q15wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFQHCn5hFeC2fmSlSm2JxaJvS6wLMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvVkFjS2ZtRVY0TFotWktWS2JZbkZvbTlMckFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/PUMA0G CSqGSIb3DQEBCwUAA4IBAQBXsRut2hSGA8NiL7r6yezLIzfaPr82IQPxS+cMbYjy KQSGBIBrPmsOU/sNv9irzjWrwBPc1vo/BLkNpSqpzHXSRrlXjn6Q3IfByvDcIgSA bDIjMvx0O/nzC1Df0z4M7wUD+MxESB3C/XgZ6HyFqa0waK3wuSnsFG0fRzS3KMNc rEz9jHYfQNsWsv/hDlrd/lW0lIvGpdKyn/mfCAwXZc8IjDjnqwmgYtAA0cjIXlji Zu1H+WkPEr7QbJz+e7ANOB1HAJRY/n67aiXKfJTdkgyYY7MWk+TilVP1UBc0T6jg P91GgCjl9aJGR8qPCiyjAnF54OFhj52OCt8jPZirRpel -----END CERTIFICATE-----Generated at Tue Dec 16 04:33:54 2025 by rpki-client