This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0tBR0erET5Ske-WFxi8G7NVn9zY.roa File: 0tBR0erET5Ske-WFxi8G7NVn9zY.roa (raw, json) Hash identifier: JHHt7fvShWnKjDxpuZapWGZeHp6xo2WtWSgn2juICWs= Subject key identifier: D2:D0:51:D1:EA:C4:4F:94:A4:7B:E5:85:C6:2F:06:EC:D5:67:F7:36 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A769CCB395D901BBDDCBD6D624B9E6316 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0tBR0erET5Ske-WFxi8G7NVn9zY.roa Signing time: Wed 12 Nov 2025 05:49:38 +0000 ROA not before: Wed 12 Nov 2025 05:49:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 399486 IP address blocks: 151.241.154.0/24 maxlen: 24 151.242.63.0/24 maxlen: 24 151.244.125.0/24 maxlen: 24 151.244.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:76:9c:cb:39:5d:90:1b:bd:dc:bd:6d:62:4b:9e:63:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 12 05:49:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d2d051d1eac44f94a47be585c62f06ecd567f736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:18:5f:b5:fb:c2:a8:6d:43:8a:65:ac:89:3a: e7:3c:7b:0f:fd:f5:03:5e:cc:c9:94:d4:00:f1:60: e7:aa:58:53:61:51:de:20:bb:59:d2:9c:b8:83:cc: 39:c6:87:16:52:0a:30:60:87:b7:d9:ac:57:7c:ed: 7a:6a:f6:ca:9e:1c:d7:a3:d0:df:cf:e4:ef:57:4c: 12:72:8a:d6:50:4d:12:b7:5e:43:e9:ac:12:f1:b0: 58:59:85:fc:7e:6b:5f:a2:3a:85:05:e2:6d:c2:4b: 47:f0:21:2c:1c:3d:a8:98:fb:fd:d7:04:1c:b2:a8: 82:c5:d1:6e:eb:13:8d:4c:87:b2:ea:a7:57:0d:c5: b9:08:4e:83:03:7a:af:7a:34:ce:50:d8:1c:45:9e: 67:3a:0a:16:9f:f0:1d:e8:79:25:de:97:7f:e7:ee: 38:4a:8c:48:66:2b:75:e8:2a:d3:7c:82:c4:b7:85: 2a:88:08:82:c9:fe:ab:d6:75:44:47:00:7f:86:74: 73:c1:b4:40:79:2d:5b:8b:6a:1f:f7:71:0e:86:8a: ce:6f:ab:d5:46:bd:d1:90:35:94:dc:c4:f5:72:e1: b1:28:08:fc:f5:d5:05:7b:69:e4:3b:c1:68:15:12: 01:41:79:9b:04:73:aa:ad:32:e9:b2:1a:74:22:bb: 70:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D0:51:D1:EA:C4:4F:94:A4:7B:E5:85:C6:2F:06:EC:D5:67:F7:36 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0tBR0erET5Ske-WFxi8G7NVn9zY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.154.0/24 151.242.63.0/24 151.244.125.0/24 151.244.234.0/24 Signature Algorithm: sha256WithRSAEncryption b4:ad:cf:13:12:ba:06:1d:77:fd:41:06:c6:6c:35:95:60:a7: ec:42:56:d6:fe:41:1e:a0:e4:81:b8:41:bb:44:7e:1f:6c:e3: 2e:09:7f:34:e8:57:a0:00:fa:2b:5c:8c:28:c5:98:77:40:63: c9:bb:74:70:48:40:c1:e3:04:f1:8e:ab:e1:79:36:b5:0d:d2: cb:48:d4:71:c0:17:72:3f:48:c7:48:e0:f7:88:b8:2d:81:38: 28:96:6a:ea:6c:ff:b8:f0:de:cd:10:87:a4:19:4c:98:a7:84: b4:09:ee:b4:4b:6a:b8:fd:a3:e9:67:e2:b9:c4:db:d0:c9:31: 24:06:34:9e:a9:fd:6f:13:a8:b8:c6:55:1f:74:ee:e9:0d:41: 2f:25:92:6f:12:9d:4e:2f:b6:55:fc:f8:8d:d5:01:e6:ae:da: e0:81:9c:08:30:24:d8:c1:4a:dd:7b:5e:b1:53:5b:b9:da:8c: b9:29:78:20:7d:ac:8d:f5:16:5c:e3:e9:ca:25:79:cc:cc:e6: 5a:dc:d6:17:9e:56:d6:38:e7:e0:ed:7e:e6:81:1a:96:55:4e: 2e:2b:cb:c2:c9:50:f1:f1:85:69:20:2f:66:32:ef:b2:a6:87: 61:ba:02:3a:55:92:31:81:d7:a7:3c:43:8b:f7:f1:8d:0d:5e: f4:59:c0:12 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZp2nMs5XZAbvdy9bWJLnmMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTEyMDU0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmQwNTFkMWVhYzQ0Zjk0YTQ3YmU1ODVjNjJmMDZlY2Q1NjdmNzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5hhftfvCqG1DimWsiTrnPHsP/fUD XszJlNQA8WDnqlhTYVHeILtZ0py4g8w5xocWUgowYIe32axXfO16avbKnhzXo9Df z+TvV0wScorWUE0St15D6awS8bBYWYX8fmtfojqFBeJtwktH8CEsHD2omPv91wQc sqiCxdFu6xONTIey6qdXDcW5CE6DA3qvejTOUNgcRZ5nOgoWn/Ad6Hkl3pd/5+44 SoxIZit16CrTfILEt4UqiAiCyf6r1nVERwB/hnRzwbRAeS1bi2of93EOhorOb6vV Rr3RkDWU3MT1cuGxKAj89dUFe2nkO8FoFRIBQXmbBHOqrTLpshp0IrtwcwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNLQUdHqxE+UpHvlhcYvBuzVZ/c2MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvMHRCUjBlckVUNVNrZS1XRnhpOEc3TlZuOXpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/GaAwQA l/I/AwQAl/R9AwQAl/TqMA0GCSqGSIb3DQEBCwUAA4IBAQC0rc8TEroGHXf9QQbG bDWVYKfsQlbW/kEeoOSBuEG7RH4fbOMuCX806FegAPorXIwoxZh3QGPJu3RwSEDB 4wTxjqvheTa1DdLLSNRxwBdyP0jHSOD3iLgtgTgolmrqbP+48N7NEIekGUyYp4S0 Ce60S2q4/aPpZ+K5xNvQyTEkBjSeqf1vE6i4xlUfdO7pDUEvJZJvEp1OL7ZV/PiN 1QHmrtrggZwIMCTYwUrde16xU1u52oy5KXggfayN9RZc4+nKJXnMzOZa3NYXnlbW OOfg7X7mgRqWVU4uK8vCyVDx8YVpIC9mMu+ypodhugI6VZIxgdenPEOL9/GNDV70 WcAS -----END CERTIFICATE-----Generated at Wed Dec 3 09:43:15 2025 by rpki-client