This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0sHVy2Gszv6MtfM1-L2g_VUR7GU.roa File: 0sHVy2Gszv6MtfM1-L2g_VUR7GU.roa (raw, json) Hash identifier: Tlm6HNp0IGp0VNkNLCwidFVDbh5Y2ndzmXgPnlpJDE8= Subject key identifier: D2:C1:D5:CB:61:AC:CE:FE:8C:B5:F3:35:F8:BD:A0:FD:55:11:EC:65 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B208390C032941F5A5219256A137512DC Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0sHVy2Gszv6MtfM1-L2g_VUR7GU.roa Signing time: Mon 15 Dec 2025 05:37:31 +0000 ROA not before: Mon 15 Dec 2025 05:37:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 153523 IP address blocks: 151.241.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:83:90:c0:32:94:1f:5a:52:19:25:6a:13:75:12:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 15 05:37:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d2c1d5cb61accefe8cb5f335f8bda0fd5511ec65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f7:fa:58:d3:24:4a:ce:db:1b:88:49:96:71: c6:1f:4c:60:3c:e4:66:69:68:e7:2e:14:37:20:03: f4:4f:3e:cd:61:14:fa:6f:6c:7d:b4:97:41:a1:77: 73:0c:80:d4:78:b7:9a:fa:2a:8f:22:fd:74:f6:f7: ff:78:2d:df:aa:b1:da:c8:6a:7e:60:8a:a0:ae:f4: d7:3c:f2:fb:16:54:8e:ae:08:74:ab:b1:6d:67:1f: ab:23:31:70:88:95:54:0c:5f:ce:5b:95:59:8a:16: 9b:67:50:7a:89:54:6a:db:d7:9f:46:81:eb:21:ca: 0e:9d:e9:de:3d:16:c9:ce:1b:d4:b8:8b:90:bb:2e: 69:c6:f0:b4:f9:7b:ad:a6:fe:27:d6:a1:bf:40:3f: ea:02:8c:fb:ea:af:1e:3c:b8:3c:68:95:ba:6c:4d: 1d:ab:1d:4d:bf:5d:df:ee:e2:22:b8:15:9d:fd:1a: 70:32:bc:79:15:0f:73:13:e6:26:89:34:9d:4b:58: a9:67:e2:c1:ce:d5:53:d2:22:fb:e4:10:08:83:1a: 93:a3:3b:a0:5a:37:22:9a:d9:4c:6a:68:e2:96:d7: 81:47:b9:a4:7a:ba:f3:5b:15:32:f4:90:22:46:c6: 7a:d1:55:12:2a:a2:74:02:31:a4:74:62:fc:49:e0: 26:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C1:D5:CB:61:AC:CE:FE:8C:B5:F3:35:F8:BD:A0:FD:55:11:EC:65 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0sHVy2Gszv6MtfM1-L2g_VUR7GU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.142.0/23 Signature Algorithm: sha256WithRSAEncryption 68:90:15:4d:8d:6b:8b:21:7c:56:85:32:ce:77:65:84:9e:02: ef:60:b5:52:8c:e4:f1:43:a5:2c:3d:66:3d:6f:8d:7c:fc:bf: f7:36:6d:44:cf:ff:4b:a6:84:fc:d3:19:02:e1:06:29:50:e5: 4f:5b:ae:be:f6:c6:78:85:1c:4e:1d:05:dd:0b:05:a0:78:27: a1:60:7f:95:63:f8:cd:f6:6c:a5:75:78:05:95:fd:6b:38:b9: f4:02:11:0b:21:a1:75:47:9e:0b:16:24:c1:3c:0d:57:f9:cc: ce:83:01:e6:35:1a:8d:aa:84:db:72:24:8c:a0:fd:df:d8:70: 2d:6d:62:d9:15:b2:c8:ac:e1:bc:7f:75:20:06:6b:7b:eb:3e: 90:86:e5:8d:0e:c5:26:d9:e9:77:d3:52:0a:ce:a0:7e:ff:30: 3b:2c:75:f5:90:0f:3e:36:a9:00:d3:a5:f9:2c:fb:47:bf:9c: d7:1c:73:ac:65:c0:a6:26:30:1e:80:52:ae:bb:83:19:e0:0d: 9b:fb:42:d6:da:28:5b:3f:99:dc:3f:8c:ac:86:9a:39:58:cd: 0c:d8:0a:22:17:e6:d0:a5:7a:08:bd:d1:81:cc:ef:3f:c0:05: cc:2c:d9:fd:cd:3c:bc:54:c1:5f:41:34:8e:5b:65:4a:db:fb: c4:33:2e:47 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsgg5DAMpQfWlIZJWoTdRLcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjE1MDUzNzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmMxZDVjYjYxYWNjZWZlOGNiNWYzMzVmOGJkYTBmZDU1MTFlYzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/f6WNMkSs7bG4hJlnHGH0xgPORm aWjnLhQ3IAP0Tz7NYRT6b2x9tJdBoXdzDIDUeLea+iqPIv109vf/eC3fqrHayGp+ YIqgrvTXPPL7FlSOrgh0q7FtZx+rIzFwiJVUDF/OW5VZihabZ1B6iVRq29efRoHr IcoOnenePRbJzhvUuIuQuy5pxvC0+Xutpv4n1qG/QD/qAoz76q8ePLg8aJW6bE0d qx1Nv13f7uIiuBWd/RpwMrx5FQ9zE+YmiTSdS1ipZ+LBztVT0iL75BAIgxqTozug WjcimtlMamjilteBR7mkerrzWxUy9JAiRsZ60VUSKqJ0AjGkdGL8SeAmiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNLB1cthrM7+jLXzNfi9oP1VEexlMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvMHNIVnkyR3N6djZNdGZNMS1MMmdfVlVSN0dVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl/GOMA0G CSqGSIb3DQEBCwUAA4IBAQBokBVNjWuLIXxWhTLOd2WEngLvYLVSjOTxQ6UsPWY9 b418/L/3Nm1Ez/9LpoT80xkC4QYpUOVPW66+9sZ4hRxOHQXdCwWgeCehYH+VY/jN 9myldXgFlf1rOLn0AhELIaF1R54LFiTBPA1X+czOgwHmNRqNqoTbciSMoP3f2HAt bWLZFbLIrOG8f3UgBmt76z6QhuWNDsUm2el301IKzqB+/zA7LHX1kA8+NqkA06X5 LPtHv5zXHHOsZcCmJjAegFKuu4MZ4A2b+0LW2ihbP5ncP4yshpo5WM0M2AoiF+bQ pXoIvdGBzO8/wAXMLNn9zTy8VMFfQTSOW2VK2/vEMy5H -----END CERTIFICATE-----Generated at Sat Dec 20 07:12:50 2025 by rpki-client