This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lO5sO2wdIJ7HZhRYxAB-obO0r8o.roa File: lO5sO2wdIJ7HZhRYxAB-obO0r8o.roa (raw, json) Hash identifier: whIsHHntbemYsxFDHs+jmp5vKaCgTcUUs4vaA91jhO4= Subject key identifier: 94:EE:6C:3B:6C:1D:20:9E:C7:66:14:58:C4:00:7E:A1:B3:B4:AF:CA Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B35BD3B0AB058A79AEA8226265A92B2AF Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lO5sO2wdIJ7HZhRYxAB-obO0r8o.roa Signing time: Fri 19 Dec 2025 08:32:32 +0000 ROA not before: Fri 19 Dec 2025 08:32:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 36530 IP address blocks: 151.241.128.0/22 maxlen: 24 151.243.44.0/24 maxlen: 24 151.244.128.0/24 maxlen: 24 151.244.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:bd:3b:0a:b0:58:a7:9a:ea:82:26:26:5a:92:b2:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 19 08:32:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=94ee6c3b6c1d209ec7661458c4007ea1b3b4afca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:7b:e9:be:0c:08:17:0b:1e:75:d3:bb:00:cc: c8:44:13:c0:c0:f3:3e:4f:e5:0f:ea:5d:c8:62:97: bc:ac:af:53:3b:b5:f3:49:e8:d9:55:d5:82:a2:65: a1:d4:72:9e:a8:49:63:20:17:30:5d:9a:0f:52:0f: ec:0e:96:ea:db:32:02:92:dc:66:66:50:83:63:57: ab:96:67:5d:ca:63:51:28:5a:6a:77:9d:68:af:c4: 65:09:89:94:48:80:dd:ee:57:27:e4:ff:8e:ca:35: 15:d9:5f:52:d3:23:17:3b:b6:b6:53:55:bd:83:51: 07:b4:40:e7:5f:65:55:6b:84:d3:01:81:da:e0:df: 20:69:8e:28:5d:9a:74:2e:2c:04:8b:46:6a:b7:cd: 5f:f5:a9:5a:91:25:03:d6:77:9c:41:e9:37:5f:0f: 3c:6a:ab:7f:ad:24:73:6b:54:ce:02:54:87:58:7e: 9e:97:c4:ef:b5:5f:d5:88:73:6c:c8:24:8e:c0:e3: ff:80:b6:13:ac:77:93:68:a8:92:31:bf:05:20:9e: 49:41:96:5d:86:10:87:4d:b1:0b:94:ed:98:0d:41: 3e:f6:96:f6:41:a1:1a:9b:12:d0:43:47:bf:1e:3b: 65:ac:a8:9b:16:30:4c:1c:29:28:96:10:63:12:37: 8d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:EE:6C:3B:6C:1D:20:9E:C7:66:14:58:C4:00:7E:A1:B3:B4:AF:CA X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lO5sO2wdIJ7HZhRYxAB-obO0r8o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.128.0/22 151.243.44.0/24 151.244.128.0/24 151.244.130.0/24 Signature Algorithm: sha256WithRSAEncryption af:2f:ae:99:ec:fc:6a:ae:0b:75:c7:ac:38:4e:f9:f8:c1:cf: 2b:c5:48:83:23:12:63:e0:de:1e:04:4c:b9:15:db:9c:5b:4f: 2b:5a:fb:9c:15:d6:4a:a0:b1:11:07:cc:4b:02:88:3c:62:19: b7:f0:8b:5c:9b:50:e0:11:df:90:5a:ec:39:62:7e:ad:5a:0e: 2c:e4:8d:ab:b7:33:11:b5:43:6f:4a:4e:fe:5c:e7:b2:c0:6d: 7c:63:07:30:14:50:42:01:b6:bc:c5:ac:fd:bc:c0:47:94:6e: 52:f1:ee:54:4e:db:82:da:b4:b2:25:06:b4:25:cd:d7:c6:93: a5:96:68:91:7d:bc:dd:f6:dc:46:19:4c:cd:ae:35:59:ad:c8: 1d:ae:21:94:86:5e:d3:55:0b:71:0b:fc:6b:55:1b:bf:f0:7a: 33:33:d5:96:48:11:97:64:21:d5:28:e2:e0:18:b1:da:64:0c: 45:56:d7:1e:de:74:14:82:b5:4c:cd:19:0f:15:98:b4:95:da: 36:b8:8b:11:6e:4f:a5:18:ec:64:ea:19:38:56:a2:2f:02:22: 9a:15:a4:8d:7c:0e:cd:17:23:70:1e:f8:3d:40:fd:74:f2:67: 59:6c:8f:e5:f4:91:d9:11:68:32:13:b3:80:27:73:34:58:f7: 58:0b:9b:67 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZs1vTsKsFinmuqCJiZakrKvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjE5MDgzMjMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGVlNmMzYjZjMWQyMDllYzc2NjE0NThjNDAwN2VhMWIzYjRhZmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XvpvgwIFwseddO7AMzIRBPAwPM+ T+UP6l3IYpe8rK9TO7XzSejZVdWComWh1HKeqEljIBcwXZoPUg/sDpbq2zICktxm ZlCDY1erlmddymNRKFpqd51or8RlCYmUSIDd7lcn5P+OyjUV2V9S0yMXO7a2U1W9 g1EHtEDnX2VVa4TTAYHa4N8gaY4oXZp0LiwEi0Zqt81f9alakSUD1necQek3Xw88 aqt/rSRza1TOAlSHWH6el8TvtV/ViHNsyCSOwOP/gLYTrHeTaKiSMb8FIJ5JQZZd hhCHTbELlO2YDUE+9pb2QaEamxLQQ0e/HjtlrKibFjBMHCkolhBjEjeNGQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFJTubDtsHSCex2YUWMQAfqGztK/KMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvbE81c08yd2RJSjdIWmhSWXhBQi1vYk8wcjhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCl/GAAwQA l/MsAwQAl/SAAwQAl/SCMA0GCSqGSIb3DQEBCwUAA4IBAQCvL66Z7Pxqrgt1x6w4 Tvn4wc8rxUiDIxJj4N4eBEy5FducW08rWvucFdZKoLERB8xLAog8Yhm38Itcm1Dg Ed+QWuw5Yn6tWg4s5I2rtzMRtUNvSk7+XOeywG18YwcwFFBCAba8xaz9vMBHlG5S 8e5UTtuC2rSyJQa0Jc3XxpOllmiRfbzd9txGGUzNrjVZrcgdriGUhl7TVQtxC/xr VRu/8HozM9WWSBGXZCHVKOLgGLHaZAxFVtce3nQUgrVMzRkPFZi0ldo2uIsRbk+l GOxk6hk4VqIvAiKaFaSNfA7NFyNwHvg9QP108mdZbI/l9JHZEWgyE7OAJ3M0WPdY C5tn -----END CERTIFICATE-----Generated at Fri Dec 19 12:46:29 2025 by rpki-client