This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wXUPFhZN0IvT4XKwj2p20okZK2Y.roa File: wXUPFhZN0IvT4XKwj2p20okZK2Y.roa (raw, json) Hash identifier: wWRBfHqeSOVkJTFmRhsiZ4S5WW0IX/V6q31VaLIXqiM= Subject key identifier: C1:75:0F:16:16:4D:D0:8B:D3:E1:72:B0:8F:6A:76:D2:89:19:2B:66 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B35BD3CECA0E3FB4D28B2A0D78EB639DC Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wXUPFhZN0IvT4XKwj2p20okZK2Y.roa Signing time: Fri 19 Dec 2025 08:32:32 +0000 ROA not before: Fri 19 Dec 2025 08:32:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 395656 IP address blocks: 151.243.172.0/24 maxlen: 24 151.245.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:bd:3c:ec:a0:e3:fb:4d:28:b2:a0:d7:8e:b6:39:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 19 08:32:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c1750f16164dd08bd3e172b08f6a76d289192b66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:90:6c:5c:55:54:1d:02:36:50:8b:44:a8:f0: b3:4a:98:89:bd:ae:c3:b6:94:15:b9:2a:d1:1e:a6: d7:ed:2d:1d:9a:d3:17:17:48:28:90:e9:01:c7:97: 88:37:bc:78:eb:49:57:91:bc:89:04:75:78:ac:27: 7a:02:77:36:e0:76:a0:7d:7f:b4:f0:4f:d8:b2:ec: 7c:d2:35:a5:b8:77:05:d4:60:2f:95:78:6f:52:a3: 61:f7:81:ae:d3:dc:c8:f4:7c:1b:20:7a:81:0e:ce: 69:4b:53:df:ea:67:f8:d0:1a:5b:ed:08:7d:14:11: 8f:90:d2:0a:81:40:0d:83:db:ae:b3:0c:0e:00:ca: 23:4b:ad:69:b2:19:fa:b0:99:42:0c:26:fd:f2:4f: 5c:65:d7:ca:44:d9:34:b3:ee:02:12:7b:49:3d:29: 27:8e:fe:ac:b1:27:9e:bb:ea:01:e1:74:f2:ae:14: 38:37:58:4d:61:42:5b:35:a9:45:eb:ee:3f:e8:7e: 03:46:87:c7:2f:c9:15:4c:6d:71:89:72:be:31:ec: ec:da:42:ee:45:ac:81:17:8a:40:ce:28:a2:f4:8c: ef:77:e4:e6:dd:b2:c3:8a:3c:62:19:aa:d2:53:a7: 15:a7:33:c3:61:8f:86:38:1a:ad:9b:6b:32:cb:80: dd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:75:0F:16:16:4D:D0:8B:D3:E1:72:B0:8F:6A:76:D2:89:19:2B:66 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wXUPFhZN0IvT4XKwj2p20okZK2Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.172.0/24 151.245.86.0/24 Signature Algorithm: sha256WithRSAEncryption 78:81:e0:01:e3:35:52:4c:58:fe:6b:46:90:47:45:1a:f0:89: d9:90:74:e3:0c:90:0a:56:71:f9:99:71:7c:50:d3:c8:f8:5d: 0d:35:cd:a3:09:87:7f:20:5a:06:0f:e5:5a:fc:b3:59:6d:87: 52:48:52:80:1d:e8:12:98:b8:ca:ae:c7:12:1e:ae:78:41:dd: 62:2d:2c:d3:07:f6:94:74:d0:83:7c:6d:55:d9:27:da:3b:fc: e5:e1:1d:70:a8:75:46:3c:13:a3:47:12:9c:da:da:c9:1c:7f: 7c:ed:3b:b2:88:79:f8:b9:59:d6:83:9f:a8:85:55:a4:e6:6d: ec:f9:1c:89:ae:58:76:99:01:3b:5d:7b:f5:df:86:7f:10:56: b2:64:96:19:58:3a:65:4f:ae:91:40:13:45:a9:81:f4:59:11: 3f:a2:80:4b:17:2d:88:0a:d8:d6:9f:8a:ca:d4:5b:6b:fa:13: 50:49:f7:6e:7e:b5:b0:2b:17:68:f3:34:6c:7f:9e:d4:1e:f9: 4f:dd:51:fb:7a:9f:23:32:b0:07:cc:2b:a8:3b:e3:b1:75:de: 6b:5f:5f:a0:f7:d0:00:a7:ea:6e:9e:7e:59:6b:b9:f6:e7:5a: d7:21:a0:64:c1:4e:fb:14:dc:52:8f:0f:a1:6d:1a:02:36:a6: 68:9a:d0:0a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZs1vTzsoOP7TSiyoNeOtjncMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjE5MDgzMjMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTc1MGYxNjE2NGRkMDhiZDNlMTcyYjA4ZjZhNzZkMjg5MTkyYjY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspBsXFVUHQI2UItEqPCzSpiJva7D tpQVuSrRHqbX7S0dmtMXF0gokOkBx5eIN7x460lXkbyJBHV4rCd6Anc24HagfX+0 8E/Ysux80jWluHcF1GAvlXhvUqNh94Gu09zI9HwbIHqBDs5pS1Pf6mf40Bpb7Qh9 FBGPkNIKgUANg9uuswwOAMojS61pshn6sJlCDCb98k9cZdfKRNk0s+4CEntJPSkn jv6ssSeeu+oB4XTyrhQ4N1hNYUJbNalF6+4/6H4DRofHL8kVTG1xiXK+Mezs2kLu RayBF4pAziii9Izvd+Tm3bLDijxiGarSU6cVpzPDYY+GOBqtm2syy4Dd8wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMF1DxYWTdCL0+FysI9qdtKJGStmMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvd1hVUEZoWk4wSXZUNFhLd2oycDIwb2taSzJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/OsAwQA l/VWMA0GCSqGSIb3DQEBCwUAA4IBAQB4geAB4zVSTFj+a0aQR0Ua8InZkHTjDJAK VnH5mXF8UNPI+F0NNc2jCYd/IFoGD+Va/LNZbYdSSFKAHegSmLjKrscSHq54Qd1i LSzTB/aUdNCDfG1V2SfaO/zl4R1wqHVGPBOjRxKc2trJHH987TuyiHn4uVnWg5+o hVWk5m3s+RyJrlh2mQE7XXv134Z/EFayZJYZWDplT66RQBNFqYH0WRE/ooBLFy2I CtjWn4rK1Ftr+hNQSfdufrWwKxdo8zRsf57UHvlP3VH7ep8jMrAHzCuoO+Oxdd5r X1+g99AAp+punn5Za7n251rXIaBkwU77FNxSjw+hbRoCNqZomtAK -----END CERTIFICATE-----Generated at Sat Dec 20 04:36:09 2025 by rpki-client