This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sA8La7OBa4BrC93lzA4653s9whg.roa File: sA8La7OBa4BrC93lzA4653s9whg.roa (raw, json) Hash identifier: O6yEySDvdJZy4Nbx6uZCctoPJNqsv2g4pC0OLjNf8Kw= Subject key identifier: B0:0F:0B:6B:B3:81:6B:80:6B:0B:DD:E5:CC:0E:3A:E7:7B:3D:C2:18 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B25A0C0F5751082E6C1CBCDDF9C55374B Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sA8La7OBa4BrC93lzA4653s9whg.roa Signing time: Tue 16 Dec 2025 05:27:30 +0000 ROA not before: Tue 16 Dec 2025 05:27:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20326 IP address blocks: 151.241.65.0/24 maxlen: 24 151.241.178.0/24 maxlen: 24 151.241.208.0/22 maxlen: 22 151.243.21.0/24 maxlen: 24 151.243.52.0/23 maxlen: 24 151.243.244.0/24 maxlen: 24 151.244.2.0/24 maxlen: 24 151.244.136.0/22 maxlen: 24 151.244.160.0/22 maxlen: 24 151.244.171.0/24 maxlen: 24 151.244.172.0/22 maxlen: 24 151.244.176.0/22 maxlen: 24 151.245.8.0/21 maxlen: 24 151.245.168.0/21 maxlen: 21 151.247.132.0/24 maxlen: 24 151.247.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:a0:c0:f5:75:10:82:e6:c1:cb:cd:df:9c:55:37:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 16 05:27:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b00f0b6bb3816b806b0bdde5cc0e3ae77b3dc218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0c:d9:74:0c:a7:d6:87:90:39:e1:c4:c6:c9: ef:58:37:e1:1e:84:63:69:62:8d:41:d7:cf:a9:dd: 08:a2:98:4b:bf:8b:9c:6b:9a:73:b1:ed:e4:4b:bc: 36:1d:ff:40:4f:96:fb:57:22:13:03:1a:4e:38:cc: 92:b6:16:a6:2e:20:be:e3:8c:32:55:8b:f0:12:64: 4f:29:06:2d:ed:10:46:9a:0c:a2:22:34:76:93:d4: 7c:0e:c5:24:0a:90:19:e6:17:f9:72:46:87:37:32: 6b:82:1b:a7:81:cc:bc:ea:44:a5:a4:a9:b9:44:f3: 2a:40:b0:ae:69:84:15:36:fb:fd:50:b1:d5:63:8c: db:41:79:d3:85:3d:9d:bd:5d:ce:fc:a7:9e:25:00: 85:37:6b:0d:b9:dc:ce:60:90:4b:2b:d6:9f:4e:fb: c2:e1:b8:ef:7c:cb:a0:1e:ae:cd:ac:42:3e:bd:8a: 50:64:55:a9:e1:a2:ba:68:c2:8f:12:0c:5c:6d:2d: 0f:6b:51:c0:57:d0:49:6c:57:6d:c8:54:99:60:ce: 75:90:e1:43:66:f5:41:2f:93:24:f6:d7:a7:dc:b6: d4:0a:6a:60:12:49:31:84:85:48:e5:5f:9e:4b:41: 4f:b1:ef:c2:a0:75:99:5b:2d:f4:62:8b:7c:32:78: be:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0F:0B:6B:B3:81:6B:80:6B:0B:DD:E5:CC:0E:3A:E7:7B:3D:C2:18 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sA8La7OBa4BrC93lzA4653s9whg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.65.0/24 151.241.178.0/24 151.241.208.0/22 151.243.21.0/24 151.243.52.0/23 151.243.244.0/24 151.244.2.0/24 151.244.136.0/22 151.244.160.0/22 151.244.171.0-151.244.179.255 151.245.8.0/21 151.245.168.0/21 151.247.132.0/24 151.247.228.0/22 Signature Algorithm: sha256WithRSAEncryption 2c:29:70:94:f1:25:8c:e4:46:d3:6b:cd:63:9b:e0:be:27:d6: 11:4f:5e:e2:ba:45:9e:a9:17:08:c5:98:28:f5:fa:4c:27:77: 46:47:89:4d:61:2a:cd:b9:8f:cf:43:67:bb:35:4a:04:c6:19: e8:bd:5e:6f:be:d5:7c:1e:ef:fb:0c:94:f7:30:2d:24:3f:d9: 3f:c2:0f:7b:4c:f3:c3:4a:2a:14:bc:a3:02:7e:c8:15:d2:f0: 92:77:dc:63:bb:96:66:11:78:ca:ea:2c:cf:06:9d:d7:ac:1d: bb:46:d0:cd:5a:f7:96:e1:4b:39:dd:93:07:c5:61:94:71:84: e1:56:a2:0c:e5:09:ef:61:7f:42:24:d2:e1:1f:e8:a8:ee:12: 99:ad:dd:8b:7d:b9:99:72:d3:90:5f:66:52:e4:a2:91:92:05: 8a:59:6a:cc:00:cb:2d:1b:5f:57:1d:13:35:28:53:12:46:8c: 3a:06:2c:53:27:bd:f8:d6:43:39:d5:f7:7e:12:48:24:04:19: fd:87:63:7c:cf:3f:ff:b0:45:77:ad:9c:83:a0:c6:20:cb:89: 20:36:e0:41:6d:23:c6:5a:09:8e:ed:8d:05:1c:ea:4c:f4:cf: 11:86:fc:84:28:93:26:12:18:0f:fb:d8:d1:1c:4a:f5:b6:86: 46:1e:8d:84 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgISAZsloMD1dRCC5sHLzd+cVTdLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjE2MDUyNzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDBmMGI2YmIzODE2YjgwNmIwYmRkZTVjYzBlM2FlNzdiM2RjMjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgzZdAyn1oeQOeHExsnvWDfhHoRj aWKNQdfPqd0IophLv4uca5pzse3kS7w2Hf9AT5b7VyITAxpOOMySthamLiC+44wy VYvwEmRPKQYt7RBGmgyiIjR2k9R8DsUkCpAZ5hf5ckaHNzJrghungcy86kSlpKm5 RPMqQLCuaYQVNvv9ULHVY4zbQXnThT2dvV3O/KeeJQCFN2sNudzOYJBLK9afTvvC 4bjvfMugHq7NrEI+vYpQZFWp4aK6aMKPEgxcbS0Pa1HAV9BJbFdtyFSZYM51kOFD ZvVBL5Mk9ten3LbUCmpgEkkxhIVI5V+eS0FPse/CoHWZWy30Yot8Mni+GQIDAQAB o4ICXzCCAlswHQYDVR0OBBYEFLAPC2uzgWuAawvd5cwOOud7PcIYMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvc0E4TGE3T0JhNEJyQzkzbHpBNDY1M3M5d2hnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQAl/FBAwQA l/GyAwQCl/HQAwQAl/MVAwQBl/M0AwQAl/P0AwQAl/QCAwQCl/SIAwQCl/SgMAwD BACX9KsDBAKX9LADBAOX9QgDBAOX9agDBACX94QDBAKX9+QwDQYJKoZIhvcNAQEL BQADggEBACwpcJTxJYzkRtNrzWOb4L4n1hFPXuK6RZ6pFwjFmCj1+kwnd0ZHiU1h Ks25j89DZ7s1SgTGGei9Xm++1Xwe7/sMlPcwLSQ/2T/CD3tM88NKKhS8owJ+yBXS 8JJ33GO7lmYReMrqLM8GndesHbtG0M1a95bhSzndkwfFYZRxhOFWogzlCe9hf0Ik 0uEf6KjuEpmt3Yt9uZly05BfZlLkopGSBYpZaswAyy0bX1cdEzUoUxJGjDoGLFMn vfjWQznV934SSCQEGf2HY3zPP/+wRXetnIOgxiDLiSA24EFtI8ZaCY7tjQUc6kz0 zxGG/IQokyYSGA/72NEcSvW2hkYejYQ= -----END CERTIFICATE-----Generated at Sat Dec 20 12:46:47 2025 by rpki-client