This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3X0VcazfWHUHxVj5wqIdSVNo23g.roa File: 3X0VcazfWHUHxVj5wqIdSVNo23g.roa (raw, json) Hash identifier: w6rCCSBJ5qhTagQU6Woc8sKVPIlvMMWHhHv6b7+XKMs= Subject key identifier: DD:7D:15:71:AC:DF:58:75:07:C5:58:F9:C2:A2:1D:49:53:68:DB:78 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A8798A2075C43E2848DE6EDC77F9E880E Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3X0VcazfWHUHxVj5wqIdSVNo23g.roa Signing time: Sat 15 Nov 2025 12:58:38 +0000 ROA not before: Sat 15 Nov 2025 12:58:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 135391 IP address blocks: 151.242.29.0/24 maxlen: 24 151.242.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:87:98:a2:07:5c:43:e2:84:8d:e6:ed:c7:7f:9e:88:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 15 12:58:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=dd7d1571acdf587507c558f9c2a21d495368db78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a1:86:d2:0f:32:3f:48:d0:e8:05:3a:73:2b: 2b:63:77:74:03:83:8f:ef:c7:f6:99:0b:24:b2:ac: 62:fc:f1:80:8d:55:7a:8e:1a:1a:9e:ed:94:28:5b: 87:f6:49:dc:f1:11:d8:c5:df:65:52:7e:c9:a3:1a: 79:62:28:48:f7:91:d5:6b:23:30:ec:f5:eb:bd:1b: 95:e0:3d:85:99:ee:e7:5c:f9:85:68:70:75:aa:f8: ed:fe:40:b5:f4:dd:92:34:28:8b:e1:d2:bf:19:29: 39:c6:e8:27:21:29:b9:0b:e1:77:a3:e8:6f:7f:1e: 29:b6:fa:ac:6a:71:0f:5b:ff:1b:53:84:77:01:3f: 08:52:c2:8a:5e:76:89:f5:b8:e6:eb:47:17:cf:80: 40:45:36:14:1c:9d:2c:f2:ac:bb:e8:c7:cb:20:66: 81:2a:2a:e0:22:d1:cd:be:f6:cc:9f:f7:bf:46:55: f6:68:40:03:99:34:4e:c1:0e:a4:b4:bc:20:8e:10: ea:54:da:84:f7:ca:8f:84:58:83:44:5b:ec:fc:f1: 30:b0:d3:0b:7f:3f:df:4c:70:73:90:56:45:a1:38: 46:97:11:b8:bc:e7:1d:10:ac:0b:96:a5:31:f8:dc: 76:cf:10:a5:96:c4:fa:1c:97:da:fd:33:17:de:c0: ca:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:7D:15:71:AC:DF:58:75:07:C5:58:F9:C2:A2:1D:49:53:68:DB:78 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3X0VcazfWHUHxVj5wqIdSVNo23g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.29.0/24 151.242.66.0/24 Signature Algorithm: sha256WithRSAEncryption 07:80:1f:1b:a7:f0:b1:b6:7b:ff:aa:d0:ed:74:9b:55:2f:6d: 2e:a0:5b:55:1d:c5:6a:d7:e5:91:0c:45:e6:98:fe:c1:bc:3a: c7:91:7f:03:a3:39:0f:15:a4:bc:94:98:73:e3:d4:74:75:41: 83:d2:1e:bc:d8:cb:bd:57:c2:f6:0a:08:13:90:91:0e:ac:b1: c1:1a:88:8b:95:93:d0:c2:36:fe:80:09:c0:78:2d:b0:b8:b5: 7f:af:3f:10:58:5a:8c:94:e3:cb:a1:b7:c6:4e:83:3b:b6:e3: 86:d2:d9:e5:46:eb:4a:45:09:2d:e4:ed:ee:1c:90:29:ba:7f: 6c:0b:b0:39:78:d9:88:05:d3:89:98:84:f4:1e:d0:23:2f:1f: 5a:78:68:e9:92:43:9e:61:3e:7e:a5:42:71:fd:d7:e8:1d:d1: 42:26:be:6c:e0:29:d3:26:8b:ca:e8:2b:86:b9:36:36:2d:49: ec:87:70:7b:ee:b8:b2:67:ea:28:77:63:21:23:e4:69:83:32: 90:46:4e:2d:44:07:ea:54:9c:a7:93:f4:64:7f:9a:dd:da:71: f9:9d:76:46:83:c8:61:8d:c7:79:46:42:74:fa:2c:fe:83:6f: 6f:45:4b:27:15:67:ff:17:70:17:16:47:66:03:8c:62:7f:fb: ca:85:f8:6a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqHmKIHXEPihI3m7cd/nogOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTE1MTI1ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZDdkMTU3MWFjZGY1ODc1MDdjNTU4ZjljMmEyMWQ0OTUzNjhkYjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaGG0g8yP0jQ6AU6cysrY3d0A4OP 78f2mQsksqxi/PGAjVV6jhoanu2UKFuH9knc8RHYxd9lUn7Joxp5YihI95HVayMw 7PXrvRuV4D2Fme7nXPmFaHB1qvjt/kC19N2SNCiL4dK/GSk5xugnISm5C+F3o+hv fx4ptvqsanEPW/8bU4R3AT8IUsKKXnaJ9bjm60cXz4BARTYUHJ0s8qy76MfLIGaB KirgItHNvvbMn/e/RlX2aEADmTROwQ6ktLwgjhDqVNqE98qPhFiDRFvs/PEwsNML fz/fTHBzkFZFoThGlxG4vOcdEKwLlqUx+Nx2zxCllsT6HJfa/TMX3sDKpQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFN19FXGs31h1B8VY+cKiHUlTaNt4MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvM1gwVmNhemZXSFVIeFZqNXdxSWRTVk5vMjNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/IdAwQA l/JCMA0GCSqGSIb3DQEBCwUAA4IBAQAHgB8bp/Cxtnv/qtDtdJtVL20uoFtVHcVq 1+WRDEXmmP7BvDrHkX8DozkPFaS8lJhz49R0dUGD0h682Mu9V8L2CggTkJEOrLHB GoiLlZPQwjb+gAnAeC2wuLV/rz8QWFqMlOPLobfGToM7tuOG0tnlRutKRQkt5O3u HJApun9sC7A5eNmIBdOJmIT0HtAjLx9aeGjpkkOeYT5+pUJx/dfoHdFCJr5s4CnT JovK6CuGuTY2LUnsh3B77riyZ+ood2MhI+RpgzKQRk4tRAfqVJynk/Rkf5rd2nH5 nXZGg8hhjcd5RkJ0+iz+g29vRUsnFWf/F3AXFkdmA4xif/vKhfhq -----END CERTIFICATE-----Generated at Wed Dec 3 09:43:15 2025 by rpki-client