This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uOne0hBleyNSx8h7T_Gx8fUBstc.roa File: uOne0hBleyNSx8h7T_Gx8fUBstc.roa (raw, json) Hash identifier: /SX26IvzXQyT9sqM2OsXP6wPY72r/Mdixp42tHkMQsY= Subject key identifier: B8:E9:DE:D2:10:65:7B:23:52:C7:C8:7B:4F:F1:B1:F1:F5:01:B2:D7 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B1159BAA1953664F0A11AB78722260096 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uOne0hBleyNSx8h7T_Gx8fUBstc.roa Signing time: Fri 12 Dec 2025 06:57:31 +0000 ROA not before: Fri 12 Dec 2025 06:57:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57043 IP address blocks: 151.240.97.0/24 maxlen: 24 151.241.109.0/24 maxlen: 24 151.241.146.0/24 maxlen: 24 151.241.155.0/24 maxlen: 24 151.241.215.0/24 maxlen: 24 151.241.216.0/24 maxlen: 24 151.241.217.0/24 maxlen: 24 151.241.221.0/24 maxlen: 24 151.241.226.0/24 maxlen: 24 151.241.227.0/24 maxlen: 24 151.241.228.0/24 maxlen: 24 151.241.229.0/24 maxlen: 24 151.241.234.0/24 maxlen: 24 151.242.88.0/24 maxlen: 24 151.243.3.0/24 maxlen: 24 151.243.169.0/24 maxlen: 24 151.243.171.0/24 maxlen: 24 151.245.92.0/24 maxlen: 24 151.245.136.0/24 maxlen: 24 151.245.137.0/24 maxlen: 24 151.245.139.0/24 maxlen: 24 151.245.140.0/24 maxlen: 24 151.245.216.0/24 maxlen: 24 151.245.217.0/24 maxlen: 24 151.245.218.0/23 maxlen: 24 151.247.196.0/24 maxlen: 24 151.247.197.0/24 maxlen: 24 151.247.208.0/24 maxlen: 24 151.247.209.0/24 maxlen: 24 151.247.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:59:ba:a1:95:36:64:f0:a1:1a:b7:87:22:26:00:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 12 06:57:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b8e9ded210657b2352c7c87b4ff1b1f1f501b2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5c:a7:25:31:c8:24:c3:d6:78:0d:43:35:a4: 97:c4:82:e3:81:ca:7e:e9:87:1b:13:08:6e:bf:55: 87:14:34:6a:bd:22:81:30:ab:74:0d:78:fd:2a:27: 63:86:5d:b3:8a:6a:4f:6b:a3:da:9f:d8:99:89:19: 52:dc:1a:9e:8d:58:08:59:3e:bf:40:ce:1c:88:dd: 11:40:17:f1:a5:84:a0:62:36:52:01:e3:75:2c:4b: e1:2a:a6:49:af:24:03:64:8d:9e:87:e3:b6:8a:b7: 4b:d1:af:04:34:96:db:e8:ed:70:8b:be:03:9c:31: 22:cc:65:1f:12:5a:09:06:c6:9d:ec:14:e8:cb:3c: 54:c3:bd:cb:4f:45:47:bc:82:77:cc:16:94:55:37: 69:5b:10:31:55:4a:0a:5d:08:e9:0b:92:1d:bc:ac: 2e:da:7b:0d:40:33:83:f3:db:45:88:1b:95:fd:39: 93:b2:ad:1b:16:77:57:94:a3:4a:ff:cd:b4:25:f7: e4:c8:24:c2:93:2f:3c:d6:1b:9a:13:93:5a:34:f8: aa:7b:52:97:1e:f2:e2:29:32:7a:c6:ed:54:c9:e0: 6b:7c:ba:f7:d6:ca:86:ab:8f:9b:4d:fa:38:00:06: c0:85:08:b8:7b:64:cb:8d:e8:e9:eb:cf:7c:8e:94: 2d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E9:DE:D2:10:65:7B:23:52:C7:C8:7B:4F:F1:B1:F1:F5:01:B2:D7 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uOne0hBleyNSx8h7T_Gx8fUBstc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.97.0/24 151.241.109.0/24 151.241.146.0/24 151.241.155.0/24 151.241.215.0-151.241.217.255 151.241.221.0/24 151.241.226.0-151.241.229.255 151.241.234.0/24 151.242.88.0/24 151.243.3.0/24 151.243.169.0/24 151.243.171.0/24 151.245.92.0/24 151.245.136.0/23 151.245.139.0-151.245.140.255 151.245.216.0/22 151.247.196.0/23 151.247.208.0/23 151.247.219.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:d1:10:57:aa:88:a5:69:07:1a:b6:95:4c:d8:33:90:12:e8: 25:4f:27:e8:d9:e0:6f:44:dd:35:77:62:7d:7a:50:c1:29:05: 0e:bd:f7:39:1d:7c:ab:56:bc:4c:37:30:d6:cd:4b:ed:58:35: fd:3c:7d:4e:53:ea:cd:44:56:41:01:de:12:88:94:fd:ab:34: 48:e7:64:0e:ab:dd:d9:5f:a6:0b:ac:54:03:dc:20:33:7d:c0: d8:12:8d:79:1e:41:b5:b4:2d:33:a3:38:7a:1b:53:36:ff:75: b1:f8:3f:43:39:0b:b8:2c:e8:41:42:aa:59:b4:5a:c8:56:7d: f2:0f:ee:87:a3:81:66:49:3f:42:66:c1:5a:bc:83:4c:01:ac: 48:c4:75:96:8a:84:d0:50:be:9a:73:46:ba:a6:27:d8:a3:f5: be:7a:95:d0:05:f9:65:59:99:74:9c:38:59:5e:4b:08:49:08: 7e:14:9a:8a:41:07:da:a6:16:84:fc:0a:1a:ae:32:51:61:07: c1:42:98:03:f1:76:a7:88:4b:97:1a:2f:2b:cb:c4:6d:1d:6e: fb:94:2e:a9:f2:eb:43:d9:48:14:50:75:78:98:fa:a6:d5:4c: e9:eb:50:59:77:27:7c:8b:8e:f7:11:1a:45:22:b5:7f:4d:48: 18:ea:b9:54 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgISAZsRWbqhlTZk8KEat4ciJgCWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjEyMDY1NzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGU5ZGVkMjEwNjU3YjIzNTJjN2M4N2I0ZmYxYjFmMWY1MDFiMmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFynJTHIJMPWeA1DNaSXxILjgcp+ 6YcbEwhuv1WHFDRqvSKBMKt0DXj9Kidjhl2zimpPa6Pan9iZiRlS3BqejVgIWT6/ QM4ciN0RQBfxpYSgYjZSAeN1LEvhKqZJryQDZI2eh+O2irdL0a8ENJbb6O1wi74D nDEizGUfEloJBsad7BToyzxUw73LT0VHvIJ3zBaUVTdpWxAxVUoKXQjpC5IdvKwu 2nsNQDOD89tFiBuV/TmTsq0bFndXlKNK/820JffkyCTCky881huaE5NaNPiqe1KX HvLiKTJ6xu1UyeBrfLr31sqGq4+bTfo4AAbAhQi4e2TLjejp6898jpQtFQIDAQAB o4ICkjCCAo4wHQYDVR0OBBYEFLjp3tIQZXsjUsfIe0/xsfH1AbLXMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvdU9uZTBoQmxleU5TeDhoN1RfR3g4ZlVCc3RjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGnBggrBgEFBQcBBwEB/wSBlzCBlDCBkQQCAAEwgYoDBACX 8GEDBACX8W0DBACX8ZIDBACX8ZswDAMEAJfx1wMEAZfx2AMEAJfx3TAMAwQBl/Hi AwQBl/HkAwQAl/HqAwQAl/JYAwQAl/MDAwQAl/OpAwQAl/OrAwQAl/VcAwQBl/WI MAwDBACX9YsDBACX9YwDBAKX9dgDBAGX98QDBAGX99ADBACX99swDQYJKoZIhvcN AQELBQADggEBAHrREFeqiKVpBxq2lUzYM5AS6CVPJ+jZ4G9E3TV3Yn16UMEpBQ69 9zkdfKtWvEw3MNbNS+1YNf08fU5T6s1EVkEB3hKIlP2rNEjnZA6r3dlfpgusVAPc IDN9wNgSjXkeQbW0LTOjOHobUzb/dbH4P0M5C7gs6EFCqlm0WshWffIP7oejgWZJ P0JmwVq8g0wBrEjEdZaKhNBQvppzRrqmJ9ij9b56ldAF+WVZmXScOFleSwhJCH4U mopBB9qmFoT8ChquMlFhB8FCmAPxdqeIS5caLyvLxG0dbvuULqny60PZSBRQdXiY +qbVTOnrUFl3J3yLjvcRGkUitX9NSBjquVQ= -----END CERTIFICATE-----Generated at Fri Dec 19 22:50:30 2025 by rpki-client