This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cLrBiatafKJAftLUxzRMg6n2BM0.roa File: cLrBiatafKJAftLUxzRMg6n2BM0.roa (raw, json) Hash identifier: hYlU8n4uG3sq9/NDsnWAiKCLQ9X4/4qJnjnT9Ltzym4= Subject key identifier: 70:BA:C1:89:AB:5A:7C:A2:40:7E:D2:D4:C7:34:4C:83:A9:F6:04:CD Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B20838FC8E82A3F968FC5CD653BFDEABF Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cLrBiatafKJAftLUxzRMg6n2BM0.roa Signing time: Mon 15 Dec 2025 05:37:31 +0000 ROA not before: Mon 15 Dec 2025 05:37:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 54252 IP address blocks: 151.240.2.0/24 maxlen: 24 151.241.33.0/24 maxlen: 24 151.241.43.0/24 maxlen: 24 151.241.48.0/24 maxlen: 24 151.241.51.0/24 maxlen: 24 151.241.164.0/24 maxlen: 24 151.242.26.0/24 maxlen: 24 151.243.26.0/24 maxlen: 24 151.244.42.0/24 maxlen: 24 151.245.69.0/24 maxlen: 24 151.245.162.0/24 maxlen: 24 151.245.166.0/24 maxlen: 24 151.245.177.0/24 maxlen: 24 151.247.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:83:8f:c8:e8:2a:3f:96:8f:c5:cd:65:3b:fd:ea:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 15 05:37:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=70bac189ab5a7ca2407ed2d4c7344c83a9f604cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:2a:dc:d1:7c:0e:2b:c0:e2:6e:fc:92:2e:22: 1d:b2:4d:92:7a:d4:0d:68:45:46:24:9f:8d:df:e9: 35:24:64:fe:46:0e:89:8c:c9:51:e6:d7:d7:6d:a2: ae:26:f4:21:8f:92:c1:90:82:12:05:34:c5:44:a9: 15:d2:d6:af:7b:ee:03:1e:8a:84:ef:d7:69:7d:2e: 7b:bb:ac:c9:08:11:96:89:38:ba:3b:67:4c:5b:3e: 9b:76:f2:03:31:0e:ba:f0:5a:c8:06:c7:af:69:a1: 93:38:d4:bd:1c:c4:98:fe:70:db:5d:ed:15:75:db: d7:83:53:69:89:c1:97:00:a5:76:4c:28:9c:90:fd: 61:c8:f2:18:6f:89:d3:6e:aa:1a:ad:18:f3:f4:85: b7:1b:88:68:66:7c:66:68:43:34:60:cc:65:aa:89: 3f:d8:11:43:3c:2a:96:bb:74:49:ee:cd:aa:ef:0f: 65:58:62:3a:f8:c5:90:65:77:ee:41:34:55:1d:eb: 8f:4d:ba:ee:08:6a:70:f7:3c:a2:57:38:45:0c:b1: a1:71:1d:72:cd:55:74:5f:db:ab:36:39:79:7f:e5: 8d:60:72:f5:4a:d7:22:b9:63:62:b0:7f:1c:d8:5f: b8:76:6f:2d:f5:47:be:2d:88:68:bf:c6:dd:8f:0c: 2d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BA:C1:89:AB:5A:7C:A2:40:7E:D2:D4:C7:34:4C:83:A9:F6:04:CD X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cLrBiatafKJAftLUxzRMg6n2BM0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.2.0/24 151.241.33.0/24 151.241.43.0/24 151.241.48.0/24 151.241.51.0/24 151.241.164.0/24 151.242.26.0/24 151.243.26.0/24 151.244.42.0/24 151.245.69.0/24 151.245.162.0/24 151.245.166.0/24 151.245.177.0/24 151.247.246.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:bf:32:2e:78:c0:55:9a:2c:52:bc:8f:09:9b:f5:4d:b8:ff: a5:e7:00:89:e1:6a:44:0a:5b:4a:21:53:0a:7c:27:d3:36:7b: 60:db:11:d0:a7:ef:4e:db:a9:e0:f9:83:57:00:6e:40:8f:55: aa:4c:80:94:a1:ec:2f:2d:dc:70:05:8f:a5:85:73:a6:14:fb: 45:15:c1:e2:29:df:2a:82:52:2f:ba:56:01:82:0b:49:f8:aa: 07:58:5d:88:62:89:b3:d2:7e:72:87:cd:1b:9d:a1:6c:4b:56: 11:b6:cc:d6:bb:c6:5d:97:49:0b:58:2d:c2:bc:6c:f2:15:62: 66:51:6d:38:27:76:69:83:56:4e:1e:ec:d7:29:2e:18:ab:7b: c6:76:fd:90:64:1e:81:73:1c:1e:98:65:af:ea:3b:f2:e5:28: e9:fe:e2:c3:29:23:8e:6f:00:90:fd:52:26:30:38:e5:3c:6d: 5d:32:66:c5:51:aa:75:93:71:03:15:b7:22:c7:ec:4b:2f:d4: 45:8e:73:97:a3:80:7f:37:23:3d:c9:a1:37:58:5f:9a:39:bb: 1a:81:d4:48:3c:81:3d:aa:84:d1:c8:72:5c:ce:64:71:86:fa: c4:8c:a0:db:5f:a3:ef:7f:16:b3:99:d1:2e:38:4a:d3:42:eb: c5:4a:f1:b5 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZsgg4/I6Co/lo/FzWU7/eq/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjE1MDUzNzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGJhYzE4OWFiNWE3Y2EyNDA3ZWQyZDRjNzM0NGM4M2E5ZjYwNGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSrc0XwOK8DibvySLiIdsk2SetQN aEVGJJ+N3+k1JGT+Rg6JjMlR5tfXbaKuJvQhj5LBkIISBTTFRKkV0tave+4DHoqE 79dpfS57u6zJCBGWiTi6O2dMWz6bdvIDMQ668FrIBsevaaGTONS9HMSY/nDbXe0V ddvXg1NpicGXAKV2TCickP1hyPIYb4nTbqoarRjz9IW3G4hoZnxmaEM0YMxlqok/ 2BFDPCqWu3RJ7s2q7w9lWGI6+MWQZXfuQTRVHeuPTbruCGpw9zyiVzhFDLGhcR1y zVV0X9urNjl5f+WNYHL1StciuWNisH8c2F+4dm8t9Ue+LYhov8bdjwwtjQIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFHC6wYmrWnyiQH7S1Mc0TIOp9gTNMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvY0xyQmlhdGFmS0pBZnRMVXh6Uk1nNm4yQk0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAl/ACAwQA l/EhAwQAl/ErAwQAl/EwAwQAl/EzAwQAl/GkAwQAl/IaAwQAl/MaAwQAl/QqAwQA l/VFAwQAl/WiAwQAl/WmAwQAl/WxAwQAl/f2MA0GCSqGSIb3DQEBCwUAA4IBAQBc vzIueMBVmixSvI8Jm/VNuP+l5wCJ4WpECltKIVMKfCfTNntg2xHQp+9O26ng+YNX AG5Aj1WqTICUoewvLdxwBY+lhXOmFPtFFcHiKd8qglIvulYBggtJ+KoHWF2IYomz 0n5yh80bnaFsS1YRtszWu8Zdl0kLWC3CvGzyFWJmUW04J3Zpg1ZOHuzXKS4Yq3vG dv2QZB6BcxwemGWv6jvy5Sjp/uLDKSOObwCQ/VImMDjlPG1dMmbFUap1k3EDFbci x+xLL9RFjnOXo4B/NyM9yaE3WF+aObsagdRIPIE9qoTRyHJczmRxhvrEjKDbX6Pv fxazmdEuOErTQuvFSvG1 -----END CERTIFICATE-----Generated at Fri Dec 19 16:06:39 2025 by rpki-client