This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jAcHWZwE_0_hAMbTAjP3ANcS4k8.roa File: jAcHWZwE_0_hAMbTAjP3ANcS4k8.roa (raw, json) Hash identifier: GrPK+ipFRTmZQbdc8CJLaEd3EjSHd/htxKyGOxtOnWU= Subject key identifier: 8C:07:07:59:9C:04:FF:4F:E1:00:C6:D3:02:33:F7:00:D7:12:E2:4F Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B06CEBF5AE249BB5C4954142BC4CA3849 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jAcHWZwE_0_hAMbTAjP3ANcS4k8.roa Signing time: Wed 10 Dec 2025 05:49:31 +0000 ROA not before: Wed 10 Dec 2025 05:49:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6079 IP address blocks: 37.202.206.0/24 maxlen: 24 151.242.49.0/24 maxlen: 24 151.243.64.0/20 maxlen: 24 151.243.97.0/24 maxlen: 24 151.243.106.0/24 maxlen: 24 151.245.18.0/24 maxlen: 24 151.247.226.0/24 maxlen: 24 151.247.232.0/24 maxlen: 24 151.247.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:ce:bf:5a:e2:49:bb:5c:49:54:14:2b:c4:ca:38:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 10 05:49:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8c0707599c04ff4fe100c6d30233f700d712e24f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:6c:62:af:dd:42:01:cf:3f:e3:db:c9:28:7e: ec:98:3b:c2:3e:89:44:f6:f0:08:dc:8f:18:b4:18: c5:d6:4f:9e:fe:7e:4f:9f:b7:24:ce:26:08:79:ed: 24:54:28:b5:14:1c:c1:09:11:f9:72:9f:24:93:76: 18:bf:e4:79:36:6a:b6:93:14:39:7e:7b:8d:35:5b: 5b:50:82:1c:a4:3e:13:8d:db:3d:62:98:d8:e5:d7: f1:85:68:71:a3:3a:f4:28:71:90:fd:60:6a:cc:71: b5:43:13:2c:86:a9:59:81:de:11:89:70:af:98:16: d8:f5:d1:21:81:e4:5e:0c:d0:2c:b3:f6:43:fc:11: 3b:46:89:15:3c:65:7b:5e:d0:d2:06:39:d0:a6:c3: b8:d2:66:c5:6d:27:3a:8e:de:45:fa:42:0d:08:7d: e6:83:56:69:c7:54:e2:48:b0:7d:8b:0d:b3:bf:a6: 1d:8e:2d:bf:92:75:c6:d7:86:90:93:6c:5d:bd:77: 16:a3:a3:1d:bc:c1:ed:64:6e:9d:1c:d7:1b:23:c4: 7e:10:02:74:dc:0f:9b:0e:62:2b:a7:48:c5:62:65: 41:6b:c0:7d:93:25:b8:31:e2:ab:05:d1:29:d0:16: 7e:9b:25:c6:e4:0b:38:63:ad:c9:f1:90:04:17:98: a9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:07:07:59:9C:04:FF:4F:E1:00:C6:D3:02:33:F7:00:D7:12:E2:4F X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jAcHWZwE_0_hAMbTAjP3ANcS4k8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.206.0/24 151.242.49.0/24 151.243.64.0/20 151.243.97.0/24 151.243.106.0/24 151.245.18.0/24 151.247.226.0/24 151.247.232.0/24 151.247.239.0/24 Signature Algorithm: sha256WithRSAEncryption 67:8b:8d:2d:a4:ea:c4:12:fb:42:7e:8e:15:a9:c1:cb:48:bc: 13:91:a4:b4:ab:32:d9:b8:ce:ff:1c:8f:1f:fa:ba:f6:a1:51: 65:94:3d:b5:35:00:ad:48:6f:83:92:5d:a5:89:02:eb:07:db: e9:f4:cb:98:fe:d8:df:31:50:74:3a:15:26:fd:ae:34:80:2b: 11:c2:cf:e7:52:df:51:00:7c:a5:46:1e:ac:de:45:58:54:61: ce:d5:c1:ee:10:14:36:66:49:33:af:eb:d8:c3:06:6b:85:ed: 44:6d:fe:50:24:86:a9:a4:2e:e2:9f:0b:fd:59:b0:36:aa:c4: c5:7e:75:85:68:2c:20:3c:79:96:b7:ca:84:03:ca:8e:1f:6a: 6b:bf:11:9d:af:20:a5:f2:a0:02:e8:08:aa:30:f1:f1:e9:86: 10:0d:48:f8:2e:8e:07:40:bc:20:8b:3b:a0:5b:e1:77:8f:7d: 5f:58:dc:6f:fe:bd:d0:7a:b3:33:2c:7b:a8:dc:f3:31:09:f9: 3f:3a:71:d1:e0:cb:38:fa:b1:ba:7d:b6:7a:d8:fb:58:35:ad: 4b:27:08:f5:d1:40:82:3b:95:30:47:42:2f:c6:94:5a:f1:2a: 13:9c:58:04:ab:e8:5e:9b:d4:04:25:83:3b:85:c6:35:13:e8: df:a6:44:ac -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZsGzr9a4km7XElUFCvEyjhJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjEwMDU0OTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzA3MDc1OTljMDRmZjRmZTEwMGM2ZDMwMjMzZjcwMGQ3MTJlMjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mxir91CAc8/49vJKH7smDvCPolE 9vAI3I8YtBjF1k+e/n5Pn7ckziYIee0kVCi1FBzBCRH5cp8kk3YYv+R5Nmq2kxQ5 fnuNNVtbUIIcpD4Tjds9YpjY5dfxhWhxozr0KHGQ/WBqzHG1QxMshqlZgd4RiXCv mBbY9dEhgeReDNAss/ZD/BE7RokVPGV7XtDSBjnQpsO40mbFbSc6jt5F+kINCH3m g1Zpx1TiSLB9iw2zv6Ydji2/knXG14aQk2xdvXcWo6MdvMHtZG6dHNcbI8R+EAJ0 3A+bDmIrp0jFYmVBa8B9kyW4MeKrBdEp0BZ+myXG5As4Y63J8ZAEF5ipgQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFIwHB1mcBP9P4QDG0wIz9wDXEuJPMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvakFjSFdad0VfMF9oQU1iVEFqUDNBTmNTNGs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAJcrOAwQA l/IxAwQEl/NAAwQAl/NhAwQAl/NqAwQAl/USAwQAl/fiAwQAl/foAwQAl/fvMA0G CSqGSIb3DQEBCwUAA4IBAQBni40tpOrEEvtCfo4VqcHLSLwTkaS0qzLZuM7/HI8f +rr2oVFllD21NQCtSG+Dkl2liQLrB9vp9MuY/tjfMVB0OhUm/a40gCsRws/nUt9R AHylRh6s3kVYVGHO1cHuEBQ2Zkkzr+vYwwZrhe1Ebf5QJIappC7inwv9WbA2qsTF fnWFaCwgPHmWt8qEA8qOH2prvxGdryCl8qAC6AiqMPHx6YYQDUj4Lo4HQLwgizug W+F3j31fWNxv/r3QerMzLHuo3PMxCfk/OnHR4Ms4+rG6fbZ62PtYNa1LJwj10UCC O5UwR0IvxpRa8SoTnFgEq+hem9QEJYM7hcY1E+jfpkSs -----END CERTIFICATE-----Generated at Fri Dec 19 20:18:49 2025 by rpki-client