This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aBf9_WBMb0jz3Lu8-3rOYvlnRE0.roa File: aBf9_WBMb0jz3Lu8-3rOYvlnRE0.roa (raw, json) Hash identifier: vU4uF4nEtpMwb6OKOsk7rdYXLjTz0kFfM+qxYzg0duA= Subject key identifier: 68:17:FD:FD:60:4C:6F:48:F3:DC:BB:BC:FB:7A:CE:62:F9:67:44:4D Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B2BDAB36295E979ADECDDC5655CD56C79 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aBf9_WBMb0jz3Lu8-3rOYvlnRE0.roa Signing time: Wed 17 Dec 2025 10:28:31 +0000 ROA not before: Wed 17 Dec 2025 10:28:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215638 IP address blocks: 151.243.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:18:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:da:b3:62:95:e9:79:ad:ec:dd:c5:65:5c:d5:6c:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 17 10:28:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6817fdfd604c6f48f3dcbbbcfb7ace62f967444d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:cf:31:a3:8f:c2:08:9e:45:4d:67:3b:46:8c: b4:b4:94:ad:eb:0f:87:f1:16:36:0c:3c:23:57:7b: 95:fa:df:f1:fb:66:d7:9e:9b:4d:4d:ca:60:a0:52: 32:4f:34:1b:a7:a7:65:7d:4d:99:8a:44:b5:a5:de: 37:9f:13:49:b9:00:96:53:aa:cf:ba:3a:d3:65:4d: 9f:79:49:34:af:2b:f3:8a:6a:ab:68:3b:94:b3:5b: c8:19:d4:42:90:ad:6a:ea:0f:18:ca:95:2b:87:5d: 00:96:42:8d:8c:62:67:50:31:de:cf:31:08:03:03: fb:a3:47:3f:aa:31:bb:a0:f8:2a:68:ed:12:e7:ae: 69:21:36:ab:17:4e:e1:91:db:24:a5:50:1a:05:6f: 6d:3d:8b:b3:0a:68:03:ff:9e:5e:2b:8c:8e:da:52: 3b:74:eb:02:4f:4f:d1:89:42:f1:e6:31:eb:5a:56: 20:11:d5:62:20:7d:19:33:d9:d0:ea:12:18:dd:8a: f5:83:ba:b0:64:f7:39:12:7b:78:8c:f4:92:5b:41: db:dc:0b:bf:a9:77:77:da:f9:e2:25:46:60:c6:8c: 99:b5:58:27:1b:3f:6d:3b:7c:0b:3f:75:5b:f3:8a: cd:aa:86:58:66:43:47:85:53:f4:e7:c5:44:a6:44: 98:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:17:FD:FD:60:4C:6F:48:F3:DC:BB:BC:FB:7A:CE:62:F9:67:44:4D X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aBf9_WBMb0jz3Lu8-3rOYvlnRE0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.216.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:72:63:9e:a6:87:1a:73:e5:76:b9:81:b7:ba:d5:ef:20:10: f6:7d:fb:67:39:50:53:52:f0:81:0c:e6:e0:13:44:6d:98:59: e4:df:97:15:77:1f:b8:b7:af:fc:f0:cd:c1:bd:55:7e:2f:5f: fe:a2:14:c9:8d:eb:af:43:b8:47:03:e3:fb:64:e9:db:23:4a: 73:1c:56:c3:2a:67:8b:ab:3a:5b:00:fb:a9:3b:f2:8b:cb:99: 44:8e:95:76:f8:8b:1c:6a:94:da:ec:1c:52:05:51:79:44:40: f5:d7:11:c5:ad:96:af:9d:1b:e6:ed:a1:e2:c8:f1:61:33:b4: 3c:cc:d5:b6:fe:8a:44:46:ce:eb:c1:c8:39:48:b0:f2:a8:8a: a3:03:39:7c:7d:a9:cb:b3:99:82:4c:0c:85:87:bb:36:55:a0: 6e:4b:cb:94:eb:d2:0e:72:e0:28:e3:f9:a1:b6:0a:ca:1e:0f: e2:ce:9d:d9:22:0c:e0:71:cf:45:46:75:62:6b:f8:b0:60:d2: 8d:67:bd:99:d9:78:ed:0e:60:60:91:a1:b8:3c:a5:3d:c4:de: 65:f1:bd:8f:47:dc:9d:12:af:c7:ff:db:f6:e7:55:55:29:77: 81:a1:50:86:ca:ad:9e:84:3a:67:30:82:6a:cf:0e:9d:96:60: 48:3b:60:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsr2rNilel5rezdxWVc1Wx5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjE3MTAyODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODE3ZmRmZDYwNGM2ZjQ4ZjNkY2JiYmNmYjdhY2U2MmY5Njc0NDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc8xo4/CCJ5FTWc7Roy0tJSt6w+H 8RY2DDwjV3uV+t/x+2bXnptNTcpgoFIyTzQbp6dlfU2ZikS1pd43nxNJuQCWU6rP ujrTZU2feUk0ryvzimqraDuUs1vIGdRCkK1q6g8YypUrh10AlkKNjGJnUDHezzEI AwP7o0c/qjG7oPgqaO0S565pITarF07hkdskpVAaBW9tPYuzCmgD/55eK4yO2lI7 dOsCT0/RiULx5jHrWlYgEdViIH0ZM9nQ6hIY3Yr1g7qwZPc5Ent4jPSSW0Hb3Au/ qXd32vniJUZgxoyZtVgnGz9tO3wLP3Vb84rNqoZYZkNHhVP058VEpkSYEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGgX/f1gTG9I89y7vPt6zmL5Z0RNMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvYUJmOV9XQk1iMGp6M0x1OC0zck9ZdmxuUkUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/PYMA0G CSqGSIb3DQEBCwUAA4IBAQBvcmOepocac+V2uYG3utXvIBD2fftnOVBTUvCBDObg E0RtmFnk35cVdx+4t6/88M3BvVV+L1/+ohTJjeuvQ7hHA+P7ZOnbI0pzHFbDKmeL qzpbAPupO/KLy5lEjpV2+IscapTa7BxSBVF5RED11xHFrZavnRvm7aHiyPFhM7Q8 zNW2/opERs7rwcg5SLDyqIqjAzl8fanLs5mCTAyFh7s2VaBuS8uU69IOcuAo4/mh tgrKHg/izp3ZIgzgcc9FRnVia/iwYNKNZ72Z2XjtDmBgkaG4PKU9xN5l8b2PR9yd Eq/H/9v251VVKXeBoVCGyq2ehDpnMIJqzw6dlmBIO2Bt -----END CERTIFICATE-----Generated at Sun Dec 21 20:31:24 2025 by rpki-client