This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-rCEqiirMreUCe3T8OhVoQJKlME.roa File: 1-rCEqiirMreUCe3T8OhVoQJKlME.roa (raw, json) Hash identifier: 0JRgc/X+bEa1uh8ZGTLh24bo7Rn7p58kEZh1RoPLQmY= Subject key identifier: FA:B0:84:AA:28:AB:32:B7:94:09:ED:D3:F0:E8:55:A1:02:4A:94:C1 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019ABFBF37F7A2D7239D3D4075A199940752 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-rCEqiirMreUCe3T8OhVoQJKlME.roa Signing time: Wed 26 Nov 2025 10:39:31 +0000 ROA not before: Wed 26 Nov 2025 10:39:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29802 IP address blocks: 37.202.194.0/24 maxlen: 24 151.243.7.0/24 maxlen: 24 151.243.228.0/24 maxlen: 24 151.243.231.0/24 maxlen: 24 151.244.54.0/24 maxlen: 24 151.244.167.0/24 maxlen: 24 151.244.180.0/24 maxlen: 24 151.244.224.0/24 maxlen: 24 151.244.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:bf:37:f7:a2:d7:23:9d:3d:40:75:a1:99:94:07:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 26 10:39:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fab084aa28ab32b79409edd3f0e855a1024a94c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cf:d0:2c:d3:e0:09:92:e4:bb:b6:e2:e9:04: 42:73:75:6c:be:df:c0:0c:8e:ac:58:49:da:b2:af: 44:d2:dc:12:c7:5b:25:2e:06:a1:b6:d6:8a:b1:dd: 7a:93:b7:aa:22:29:ed:7c:1e:a4:48:67:da:6e:22: 2c:5d:ec:48:91:01:e1:8f:f9:f8:42:c0:fe:44:db: 1a:3d:53:54:05:20:52:e5:23:92:68:83:53:b8:88: 23:da:f3:91:01:8a:5b:37:dc:02:df:bc:f6:5b:91: 71:e7:7d:56:d6:aa:66:1c:a7:0b:1b:b1:89:13:5b: e3:63:60:a6:ae:1c:64:b3:d3:31:25:45:cb:9a:b1: 44:d8:78:4c:b1:e2:d5:d2:7a:1e:49:7f:ed:46:26: eb:77:72:68:a7:55:16:bb:af:20:f2:92:73:fd:99: 19:6c:b3:c5:4e:04:e6:68:26:e4:0c:5f:24:a1:c7: 35:c9:93:47:a0:54:1f:17:0c:39:14:94:0d:3a:f6: 37:bb:0e:6b:1e:e3:9a:b5:4a:45:31:01:d1:5a:59: fd:40:f7:35:c3:22:ed:13:45:a7:12:73:c2:f0:a9: 0e:a4:b5:a8:f1:d1:26:1a:25:e4:4f:d8:87:e1:9f: 82:1c:84:f7:e3:8d:13:d9:e6:a6:1e:55:df:18:b4: 3f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B0:84:AA:28:AB:32:B7:94:09:ED:D3:F0:E8:55:A1:02:4A:94:C1 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-rCEqiirMreUCe3T8OhVoQJKlME.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.194.0/24 151.243.7.0/24 151.243.228.0/24 151.243.231.0/24 151.244.54.0/24 151.244.167.0/24 151.244.180.0/24 151.244.224.0/24 151.244.235.0/24 Signature Algorithm: sha256WithRSAEncryption 68:ab:68:79:14:f5:75:6b:c2:38:91:9a:5f:0a:ef:be:9d:ac: d4:ea:46:b0:31:dc:1e:48:af:41:a2:16:42:66:5a:d0:f0:63: 38:20:01:b3:70:62:92:d5:66:39:83:3c:00:2d:49:cd:6b:be: 4d:55:fc:e9:74:68:0d:cb:58:b3:c0:9d:c7:6f:78:b5:59:86: d1:79:58:af:53:99:9b:c1:95:9c:5a:c6:f5:1b:e5:b0:0e:50: 1a:ed:a1:94:ff:ec:19:56:9c:2c:fd:20:9d:32:e7:57:37:6d: c7:29:2a:9c:7d:10:31:84:26:eb:5e:c5:6b:0b:ab:3b:89:60: ef:35:d4:ed:66:40:05:0c:5f:ce:71:85:f0:13:dd:7b:49:9c: fe:4d:3a:62:46:49:bd:05:52:3a:ac:67:13:c5:dc:3e:d2:9c: 75:2a:c9:5f:89:e5:81:9e:a0:ad:13:99:1c:59:1b:c7:79:41: b0:ca:6d:e9:c1:09:71:02:79:73:0c:c4:ea:22:a7:c2:4d:09: 4f:c2:df:e4:f1:8c:85:4b:0e:b8:f8:3b:b8:7f:33:c8:1d:07: 77:dc:af:e3:29:b7:ea:81:b1:b7:11:26:3a:28:32:c3:34:b2: 32:05:6c:66:b7:c5:14:73:36:6d:31:5f:0b:33:ba:fa:5d:93: 98:e2:af:3c -----BEGIN CERTIFICATE----- MIIFLjCCBBagAwIBAgISAZq/vzf3otcjnT1AdaGZlAdSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTI2MTAzOTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYWIwODRhYTI4YWIzMmI3OTQwOWVkZDNmMGU4NTVhMTAyNGE5NGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns/QLNPgCZLku7bi6QRCc3Vsvt/A DI6sWEnasq9E0twSx1slLgahttaKsd16k7eqIintfB6kSGfabiIsXexIkQHhj/n4 QsD+RNsaPVNUBSBS5SOSaINTuIgj2vORAYpbN9wC37z2W5Fx531W1qpmHKcLG7GJ E1vjY2Cmrhxks9MxJUXLmrFE2HhMseLV0noeSX/tRibrd3Jop1UWu68g8pJz/ZkZ bLPFTgTmaCbkDF8kocc1yZNHoFQfFww5FJQNOvY3uw5rHuOatUpFMQHRWln9QPc1 wyLtE0WnEnPC8KkOpLWo8dEmGiXkT9iH4Z+CHIT3440T2eamHlXfGLQ/nwIDAQAB o4ICOjCCAjYwHQYDVR0OBBYEFPqwhKooqzK3lAnt0/DoVaECSpTBMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvMS1yQ0VxaWlyTXJlVUNlM1Q4T2hWb1FKS2xNRS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGUvZjQzYjFkLTllNTAtNDU1MS1hZTZhLTE3YjlkZTE0MTI1 Mi8xL3htSm05R2I3SkppamxGbXpOUzJpVVZHbHBNQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjBPBggrBgEFBQcBBwEB/wRAMD4wPAQCAAEwNgMEACXKwgME AJfzBwMEAJfz5AMEAJfz5wMEAJf0NgMEAJf0pwMEAJf0tAMEAJf04AMEAJf06zAN BgkqhkiG9w0BAQsFAAOCAQEAaKtoeRT1dWvCOJGaXwrvvp2s1OpGsDHcHkivQaIW QmZa0PBjOCABs3BiktVmOYM8AC1JzWu+TVX86XRoDctYs8Cdx294tVmG0XlYr1OZ m8GVnFrG9RvlsA5QGu2hlP/sGVacLP0gnTLnVzdtxykqnH0QMYQm617FawurO4lg 7zXU7WZABQxfznGF8BPde0mc/k06YkZJvQVSOqxnE8XcPtKcdSrJX4nlgZ6grROZ HFkbx3lBsMpt6cEJcQJ5cwzE6iKnwk0JT8Lf5PGMhUsOuPg7uH8zyB0Hd9yv4ym3 6oGxtxEmOigywzSyMgVsZrfFFHM2bTFfCzO6+l2TmOKvPA== -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:07 2025 by rpki-client