This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WQvezpSVy7guB8jCGJS-l8RmdgE.roa File: WQvezpSVy7guB8jCGJS-l8RmdgE.roa (raw, json) Hash identifier: +0AYUM/H/EmDJIYEqBM5VijkkXOLt7Uy1dCN1RHlXB8= Subject key identifier: 59:0B:DE:CE:94:95:CB:B8:2E:07:C8:C2:18:94:BE:97:C4:66:76:01 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B2083922E87C8840D3856EAED86FDD520 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WQvezpSVy7guB8jCGJS-l8RmdgE.roa Signing time: Mon 15 Dec 2025 05:37:32 +0000 ROA not before: Mon 15 Dec 2025 05:37:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 397630 IP address blocks: 151.240.2.0/24 maxlen: 24 151.241.33.0/24 maxlen: 24 151.241.43.0/24 maxlen: 24 151.241.48.0/24 maxlen: 24 151.242.26.0/24 maxlen: 24 151.243.26.0/24 maxlen: 24 151.244.42.0/24 maxlen: 24 151.245.69.0/24 maxlen: 24 151.245.162.0/24 maxlen: 24 151.245.166.0/24 maxlen: 24 151.245.177.0/24 maxlen: 24 151.247.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:83:92:2e:87:c8:84:0d:38:56:ea:ed:86:fd:d5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 15 05:37:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=590bdece9495cbb82e07c8c21894be97c4667601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:22:9f:d5:21:fd:de:55:9f:fa:03:7b:37:41: af:df:34:cb:8e:14:6c:b2:f3:5d:fa:03:0d:b7:0b: 71:5d:60:53:80:fc:d6:3e:66:6b:f7:61:09:ed:24: ce:7d:e7:d4:1d:c2:62:ac:30:2e:a0:64:fb:5b:4f: fe:74:33:d1:52:f5:cc:84:e5:b3:94:2b:cb:7e:10: 51:89:df:c0:7a:bb:f7:c8:1c:39:8d:3d:b7:87:e5: 89:20:5f:55:c0:5b:e0:22:49:b6:db:73:59:73:b8: 02:ac:1e:2b:44:57:6a:39:98:7c:10:c6:67:7e:e2: 85:f4:fb:ae:93:2e:64:a3:08:8f:ee:9f:e7:7d:a2: 4e:e6:92:c8:87:ce:3e:da:61:d6:c5:d3:9c:f0:eb: b4:db:21:48:24:76:5e:12:17:c1:32:e4:be:ac:ac: 79:0c:98:01:bd:69:c6:e8:7f:b3:ce:d8:3a:11:e1: c3:dc:53:91:c9:0d:b8:34:2f:ab:70:96:3f:09:c5: 83:3b:fb:94:83:8b:b3:b5:cb:65:0d:1f:a3:e1:e9: 4a:62:93:00:17:a3:f9:cb:8d:a9:ad:d8:6f:39:78: 1c:1d:87:b8:ec:8f:3a:ed:c7:2b:e8:6a:d9:0f:7d: 34:96:57:f0:14:2b:7d:8f:31:9e:7f:88:02:3a:f6: 86:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0B:DE:CE:94:95:CB:B8:2E:07:C8:C2:18:94:BE:97:C4:66:76:01 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WQvezpSVy7guB8jCGJS-l8RmdgE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.2.0/24 151.241.33.0/24 151.241.43.0/24 151.241.48.0/24 151.242.26.0/24 151.243.26.0/24 151.244.42.0/24 151.245.69.0/24 151.245.162.0/24 151.245.166.0/24 151.245.177.0/24 151.247.246.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:90:93:ae:90:73:b3:0e:06:89:dc:ef:df:1a:8b:e9:d3:c3: 54:a3:b3:8c:54:6d:28:da:5c:a0:cf:dc:f5:c5:e8:ab:46:7d: 2a:65:6f:c5:06:c6:15:6d:b3:99:91:32:ee:31:71:6b:b1:af: b9:d4:05:f7:73:b3:72:0d:20:b3:f3:f6:a3:84:3c:1d:ce:a6: 9d:5f:5e:81:a2:cd:84:3f:8c:88:e7:a2:9f:f6:00:74:ea:df: 43:90:bd:22:85:65:00:0f:e3:97:27:19:08:d4:04:6c:38:54: fb:e6:dd:85:02:a2:04:c8:70:6f:2e:a6:7e:fe:d3:54:ea:19: 7b:b5:76:f1:83:e2:9d:64:ee:41:f5:0d:97:23:c8:5c:fe:82: 51:22:73:af:c9:e7:e4:ba:01:99:50:81:f6:5e:9e:f6:52:e3: 3f:8d:96:3d:5b:b1:a0:6c:75:f4:e7:88:75:58:f5:14:1a:2b: 16:2c:cf:a2:d7:2a:67:da:a5:b6:4b:5f:0a:5d:f6:9f:35:ba: f4:82:c5:6c:b6:ef:79:4d:5d:f4:76:0c:f4:d2:74:de:e8:25: 15:9f:25:aa:d1:3d:12:29:6b:4a:19:d9:f5:48:67:74:6d:f2: fa:50:c5:a6:c8:97:4d:66:10:b1:be:cc:c3:ff:8b:b2:77:f5: 4d:ce:7c:8d -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZsgg5Iuh8iEDThW6u2G/dUgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjE1MDUzNzMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTBiZGVjZTk0OTVjYmI4MmUwN2M4YzIxODk0YmU5N2M0NjY3NjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyKf1SH93lWf+gN7N0Gv3zTLjhRs svNd+gMNtwtxXWBTgPzWPmZr92EJ7STOfefUHcJirDAuoGT7W0/+dDPRUvXMhOWz lCvLfhBRid/Aerv3yBw5jT23h+WJIF9VwFvgIkm223NZc7gCrB4rRFdqOZh8EMZn fuKF9Puuky5kowiP7p/nfaJO5pLIh84+2mHWxdOc8Ou02yFIJHZeEhfBMuS+rKx5 DJgBvWnG6H+zztg6EeHD3FORyQ24NC+rcJY/CcWDO/uUg4uztctlDR+j4elKYpMA F6P5y42prdhvOXgcHYe47I867ccr6GrZD300llfwFCt9jzGef4gCOvaG+wIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFFkL3s6Ulcu4LgfIwhiUvpfEZnYBMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvV1F2ZXpwU1Z5N2d1QjhqQ0dKUy1sOFJtZGdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAl/ACAwQA l/EhAwQAl/ErAwQAl/EwAwQAl/IaAwQAl/MaAwQAl/QqAwQAl/VFAwQAl/WiAwQA l/WmAwQAl/WxAwQAl/f2MA0GCSqGSIb3DQEBCwUAA4IBAQB/kJOukHOzDgaJ3O/f Govp08NUo7OMVG0o2lygz9z1xeirRn0qZW/FBsYVbbOZkTLuMXFrsa+51AX3c7Ny DSCz8/ajhDwdzqadX16Bos2EP4yI56Kf9gB06t9DkL0ihWUAD+OXJxkI1ARsOFT7 5t2FAqIEyHBvLqZ+/tNU6hl7tXbxg+KdZO5B9Q2XI8hc/oJRInOvyefkugGZUIH2 Xp72UuM/jZY9W7GgbHX054h1WPUUGisWLM+i1ypn2qW2S18KXfafNbr0gsVstu95 TV30dgz00nTe6CUVnyWq0T0SKWtKGdn1SGd0bfL6UMWmyJdNZhCxvszD/4uyd/VN znyN -----END CERTIFICATE-----Generated at Thu Dec 18 22:33:20 2025 by rpki-client