This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zG-o7PWpjJNwEnlfJLLDgJC4BfM.roa File: zG-o7PWpjJNwEnlfJLLDgJC4BfM.roa (raw, json) Hash identifier: u0v6XbS1eqeSGROBxoqsKCkkSbqiOPC0Au3dYbN0v0M= Subject key identifier: CC:6F:A8:EC:F5:A9:8C:93:70:12:79:5F:24:B2:C3:80:90:B8:05:F3 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B1159B8846D2B55F7F2B4FD4EEF614BEE Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zG-o7PWpjJNwEnlfJLLDgJC4BfM.roa Signing time: Fri 12 Dec 2025 06:57:31 +0000 ROA not before: Fri 12 Dec 2025 06:57:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 984 IP address blocks: 151.242.54.0/24 maxlen: 24 151.242.134.0/24 maxlen: 24 151.243.107.0/24 maxlen: 24 151.243.108.0/24 maxlen: 24 151.244.16.0/21 maxlen: 24 151.244.168.0/23 maxlen: 24 151.244.216.0/23 maxlen: 24 151.244.218.0/24 maxlen: 24 151.246.48.0/21 maxlen: 24 151.246.56.0/21 maxlen: 24 151.246.80.0/21 maxlen: 24 151.246.88.0/21 maxlen: 24 151.246.96.0/21 maxlen: 24 151.246.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:59:b8:84:6d:2b:55:f7:f2:b4:fd:4e:ef:61:4b:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 12 06:57:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=cc6fa8ecf5a98c937012795f24b2c38090b805f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:55:b4:03:a4:81:0f:27:7a:6a:42:3c:21:92: 0c:3c:b6:6f:73:48:e0:30:d2:2a:3d:e4:60:62:57: af:0f:c1:05:fd:d3:c2:b9:1f:b3:12:57:a5:b3:48: 3f:6a:41:e9:0b:6e:24:36:29:db:ef:36:65:6f:e8: 5b:3c:31:6f:4a:69:aa:00:27:0a:ce:1a:40:9f:12: 5c:ec:d0:7c:dc:41:93:ee:d4:41:c6:b1:1f:e2:b0: 91:aa:b2:05:a8:2d:b4:2d:f7:af:50:e0:57:50:4e: 82:c4:95:cc:8b:ba:47:78:98:60:0f:ac:97:f5:72: 06:45:18:dd:b3:fa:e9:00:58:4f:fd:c0:29:0c:d5: fa:ba:a7:1e:67:0a:81:f1:e0:13:0d:94:08:cf:e1: 1c:a4:ad:f0:4c:98:9e:f4:28:26:cf:f6:dc:71:fd: 68:5b:46:5f:c1:09:96:68:2e:9e:69:5e:bf:e1:27: a2:5e:c9:87:b8:48:2e:71:a8:c3:be:d5:4e:55:aa: 0e:82:87:a4:a4:63:9a:1b:b4:77:48:76:59:2f:ff: d0:0c:21:68:66:94:03:0a:24:b0:4b:ad:bc:24:28: 25:3b:28:97:6e:c8:16:2c:5f:66:01:54:22:f3:6f: 1a:ae:a8:49:fd:64:ff:7c:d8:87:e6:f5:67:44:7c: 97:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:6F:A8:EC:F5:A9:8C:93:70:12:79:5F:24:B2:C3:80:90:B8:05:F3 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zG-o7PWpjJNwEnlfJLLDgJC4BfM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.54.0/24 151.242.134.0/24 151.243.107.0-151.243.108.255 151.244.16.0/21 151.244.168.0/23 151.244.216.0-151.244.218.255 151.246.48.0/20 151.246.80.0-151.246.103.255 151.246.112.0/21 Signature Algorithm: sha256WithRSAEncryption a6:b3:54:c7:4b:57:d6:ff:c5:73:86:e8:1f:ca:91:f9:f2:ac: ab:83:00:74:a2:6a:ea:77:24:72:00:7a:16:c6:55:5f:1e:3e: 7f:66:0b:6e:40:6f:ad:ae:02:a9:df:a3:6c:f6:cf:b9:57:33: 7d:5e:23:a9:1e:ca:5f:ad:6c:90:ff:c8:4c:6e:37:00:de:26: ee:18:a4:7b:41:49:3b:c4:78:8f:01:a0:36:12:78:1c:5f:f8: b8:96:1b:2e:ce:4d:02:a6:72:bc:f0:a9:8b:ef:8c:3a:dd:c7: 1a:85:99:b7:69:bc:b2:d1:a8:81:f4:3c:a0:72:d1:92:09:3a: a7:1d:c1:77:a7:73:fa:a1:01:0c:62:dc:71:e7:ab:87:dc:68: 0a:3f:8f:dd:12:30:d7:3e:86:b5:6b:6d:3e:fe:4c:ac:b0:55: 37:f3:09:79:d3:6c:06:59:b1:e8:4e:f4:02:06:8e:d4:c6:65: b4:8c:d0:a9:36:1d:cf:78:27:2f:8d:9a:13:6e:34:b7:b2:9f: ad:be:d3:b2:91:7a:7a:c9:2d:2c:c2:c4:3e:6e:c0:f3:4a:82: bf:19:a7:16:b4:58:5f:10:dd:7c:f7:53:77:1f:92:e5:3a:ea: e7:77:65:59:03:60:e4:07:66:0e:4e:b8:a8:45:20:1b:d5:82: f8:10:bf:66 -----BEGIN CERTIFICATE----- MIIFRTCCBC2gAwIBAgISAZsRWbiEbStV9/K0/U7vYUvuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjEyMDY1NzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYzZmYThlY2Y1YTk4YzkzNzAxMjc5NWYyNGIyYzM4MDkwYjgwNWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FW0A6SBDyd6akI8IZIMPLZvc0jg MNIqPeRgYlevD8EF/dPCuR+zElels0g/akHpC24kNinb7zZlb+hbPDFvSmmqACcK zhpAnxJc7NB83EGT7tRBxrEf4rCRqrIFqC20LfevUOBXUE6CxJXMi7pHeJhgD6yX 9XIGRRjds/rpAFhP/cApDNX6uqceZwqB8eATDZQIz+EcpK3wTJie9Cgmz/bccf1o W0ZfwQmWaC6eaV6/4SeiXsmHuEgucajDvtVOVaoOgoekpGOaG7R3SHZZL//QDCFo ZpQDCiSwS628JCglOyiXbsgWLF9mAVQi828arqhJ/WT/fNiH5vVnRHyXhwIDAQAB o4ICUTCCAk0wHQYDVR0OBBYEFMxvqOz1qYyTcBJ5XySyw4CQuAXzMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvekctbzdQV3BqSk53RW5sZkpMTERnSkM0QmZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQAl/I2AwQA l/KGMAwDBACX82sDBACX82wDBAOX9BADBAGX9KgwDAMEA5f02AMEAJf02gMEBJf2 MDAMAwQEl/ZQAwQDl/ZgAwQDl/ZwMA0GCSqGSIb3DQEBCwUAA4IBAQCms1THS1fW /8VzhugfypH58qyrgwB0omrqdyRyAHoWxlVfHj5/ZgtuQG+trgKp36Ns9s+5VzN9 XiOpHspfrWyQ/8hMbjcA3ibuGKR7QUk7xHiPAaA2EngcX/i4lhsuzk0CpnK88KmL 74w63ccahZm3abyy0aiB9DygctGSCTqnHcF3p3P6oQEMYtxx56uH3GgKP4/dEjDX Poa1a20+/kyssFU38wl502wGWbHoTvQCBo7UxmW0jNCpNh3PeCcvjZoTbjS3sp+t vtOykXp6yS0swsQ+bsDzSoK/GacWtFhfEN1891N3H5LlOurnd2VZA2DkB2YOTrio RSAb1YL4EL9m -----END CERTIFICATE-----Generated at Fri Dec 19 22:50:31 2025 by rpki-client