This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kaEaiz6ecM8i4es30Uu12JsCPmM.roa File: kaEaiz6ecM8i4es30Uu12JsCPmM.roa (raw, json) Hash identifier: BgBCqbpYtJ3CcF+NXfOrfiKXQCf7T9MGlHpQuOyNhno= Subject key identifier: 91:A1:1A:8B:3E:9E:70:CF:22:E1:EB:37:D1:4B:B5:D8:9B:02:3E:63 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B44E364B8897C82287EEDA4DB18DEB20E Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kaEaiz6ecM8i4es30Uu12JsCPmM.roa Signing time: Mon 22 Dec 2025 07:08:31 +0000 ROA not before: Mon 22 Dec 2025 07:08:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 400906 IP address blocks: 151.243.172.0/24 maxlen: 24 151.245.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:e3:64:b8:89:7c:82:28:7e:ed:a4:db:18:de:b2:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 22 07:08:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=91a11a8b3e9e70cf22e1eb37d14bb5d89b023e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e1:84:42:a1:13:da:46:9c:fc:68:70:b2:41: bb:b3:31:aa:35:14:64:12:71:99:d6:94:04:8e:2f: 75:1b:4e:95:4a:f4:be:a1:f8:0f:38:4b:84:90:41: 9e:b5:28:f6:cb:a6:29:e6:03:4a:e5:d4:93:45:37: 49:70:44:30:5b:d3:f7:14:db:94:4d:26:0e:c3:db: 02:27:a7:a4:fc:8d:31:9a:8f:c1:48:bf:45:4e:d1: 3d:28:0c:3c:b9:05:ce:34:20:6a:8a:8e:55:28:b1: 5f:64:79:a3:28:40:3e:75:46:1e:bc:e8:62:fb:31: fa:10:b6:41:76:b3:61:f6:64:66:34:d8:80:0a:74: 76:27:b9:d9:f7:d0:7c:d6:16:9f:a7:00:10:c6:0b: 69:ea:37:09:4b:5d:36:c9:1a:c4:a7:0c:00:64:23: 72:36:44:99:5d:82:f5:8b:e3:97:20:b3:07:f3:38: 53:7e:e4:4f:98:12:88:e1:01:79:4e:ec:86:2b:47: 31:28:b4:52:fd:c3:68:c4:b1:60:5b:49:f8:42:8d: 26:66:d8:f0:55:65:e9:6e:64:46:c9:a4:ee:ce:8f: 60:b5:cb:cb:b8:81:5f:68:9a:7b:2a:0c:d4:0d:b4: b7:2c:5f:0e:8c:90:64:d5:af:62:c2:20:95:22:12: b7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A1:1A:8B:3E:9E:70:CF:22:E1:EB:37:D1:4B:B5:D8:9B:02:3E:63 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kaEaiz6ecM8i4es30Uu12JsCPmM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.172.0/24 151.245.86.0/24 Signature Algorithm: sha256WithRSAEncryption 37:5a:70:a1:ce:21:cb:05:16:8e:7a:cf:c8:2d:72:ea:f5:9a: 18:fb:b6:b4:34:3e:22:b7:88:67:f9:b6:24:07:cb:ef:13:f5: c1:fa:5d:cd:84:b1:09:ea:0d:ef:27:9a:ad:65:e4:72:e7:1a: 97:3d:a5:7c:e2:b9:4c:d0:e1:70:4d:f5:bd:26:65:d9:3b:cd: 5a:b5:36:ff:c8:3c:f7:66:f9:62:c1:20:52:f3:e6:d1:d0:f8: ab:01:59:a1:0b:67:e0:cb:86:05:9e:65:26:93:c4:f9:a3:6e: ac:4f:d2:02:f5:e6:77:2d:73:9b:5a:e5:50:9e:84:a8:10:ac: f6:58:f8:ea:f1:59:5d:b3:e6:bc:34:9f:80:c5:92:7c:ce:9d: 34:dd:ed:f3:f4:2c:d0:3b:3c:b6:5e:8b:e9:c6:37:d5:c5:28: 50:9e:3b:09:89:cd:62:cc:09:97:e0:2b:4c:1d:43:65:8e:cd: 3b:3a:73:b5:83:4d:6e:c5:e1:01:df:00:1a:fb:76:cd:a2:0c: 75:5f:eb:61:9a:d2:fa:57:1a:47:21:70:d6:b3:54:82:c7:04: ff:0e:b1:d4:a6:fb:d8:4d:63:44:e9:65:80:51:93:c4:6d:b3: 2f:63:2f:65:c0:33:42:d9:79:cf:8c:98:1e:e3:ea:8b:8e:9a: 4f:27:d4:57 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZtE42S4iXyCKH7tpNsY3rIOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjIyMDcwODMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWExMWE4YjNlOWU3MGNmMjJlMWViMzdkMTRiYjVkODliMDIzZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OGEQqET2kac/GhwskG7szGqNRRk EnGZ1pQEji91G06VSvS+ofgPOEuEkEGetSj2y6Yp5gNK5dSTRTdJcEQwW9P3FNuU TSYOw9sCJ6ek/I0xmo/BSL9FTtE9KAw8uQXONCBqio5VKLFfZHmjKEA+dUYevOhi +zH6ELZBdrNh9mRmNNiACnR2J7nZ99B81hafpwAQxgtp6jcJS102yRrEpwwAZCNy NkSZXYL1i+OXILMH8zhTfuRPmBKI4QF5TuyGK0cxKLRS/cNoxLFgW0n4Qo0mZtjw VWXpbmRGyaTuzo9gtcvLuIFfaJp7KgzUDbS3LF8OjJBk1a9iwiCVIhK3xwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJGhGos+nnDPIuHrN9FLtdibAj5jMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEva2FFYWl6NmVjTThpNGVzMzBVdTEySnNDUG1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/OsAwQA l/VWMA0GCSqGSIb3DQEBCwUAA4IBAQA3WnChziHLBRaOes/ILXLq9ZoY+7a0ND4i t4hn+bYkB8vvE/XB+l3NhLEJ6g3vJ5qtZeRy5xqXPaV84rlM0OFwTfW9JmXZO81a tTb/yDz3ZvliwSBS8+bR0PirAVmhC2fgy4YFnmUmk8T5o26sT9IC9eZ3LXObWuVQ noSoEKz2WPjq8Vlds+a8NJ+AxZJ8zp003e3z9CzQOzy2XovpxjfVxShQnjsJic1i zAmX4CtMHUNljs07OnO1g01uxeEB3wAa+3bNogx1X+thmtL6VxpHIXDWs1SCxwT/ DrHUpvvYTWNE6WWAUZPEbbMvYy9lwDNC2XnPjJge4+qLjppPJ9RX -----END CERTIFICATE-----Generated at Sat Dec 27 05:56:38 2025 by rpki-client