This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5SUbgK3qh6UOX25CZs16zNPZcg0.roa File: 5SUbgK3qh6UOX25CZs16zNPZcg0.roa (raw, json) Hash identifier: L8NtSu329MLVR6fbZQnqwtp7OA4wTKtYZpZjs5LhOH8= Subject key identifier: E5:25:1B:80:AD:EA:87:A5:0E:5F:6E:42:66:CD:7A:CC:D3:D9:72:0D Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A860EF6A729FD0841027D7C225A405D59 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5SUbgK3qh6UOX25CZs16zNPZcg0.roa Signing time: Sat 15 Nov 2025 05:48:38 +0000 ROA not before: Sat 15 Nov 2025 05:48:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 207043 IP address blocks: 151.240.151.0/24 maxlen: 24 151.243.18.0/24 maxlen: 24 151.243.28.0/24 maxlen: 24 151.243.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:86:0e:f6:a7:29:fd:08:41:02:7d:7c:22:5a:40:5d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 15 05:48:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e5251b80adea87a50e5f6e4266cd7accd3d9720d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:11:79:ff:8d:76:5e:82:14:13:4e:ca:3a:b4: 27:d9:59:ec:11:d2:b4:7d:06:2a:69:79:ff:f7:99: ed:c4:7d:fd:f3:ea:98:59:fc:a1:de:a5:41:91:cf: 44:97:d1:60:66:6e:a1:cc:84:68:a6:7a:61:3f:87: 38:97:f5:73:7c:f8:21:db:df:b2:e7:46:5f:83:54: cf:8f:f4:10:f4:f9:49:81:cc:28:25:c9:2a:2c:74: 1a:49:50:55:02:2d:76:0c:8d:d2:24:1a:28:db:7f: 4d:75:73:06:a6:27:5d:55:94:07:f4:aa:14:de:ce: 8d:29:13:00:a7:63:6a:72:16:be:45:45:e9:f8:f6: 0e:71:46:86:96:05:a8:b2:1d:7e:85:a3:81:95:e7: 9d:c8:78:e3:ae:48:ce:8f:22:e5:75:88:fb:29:1c: 80:65:db:90:d0:de:ec:59:62:5e:44:1f:20:34:a7: a2:54:ab:c8:d5:1c:8a:a0:d5:19:6f:aa:f5:d9:aa: 62:e4:cc:ca:9e:31:50:d7:c6:97:78:3b:4b:60:d2: ff:45:6a:ef:4c:27:07:18:72:d1:2d:14:a4:d1:51: dd:ab:53:51:35:7c:69:1d:75:78:e0:8f:08:0e:74: dd:db:c4:e7:a3:82:27:cf:fe:6e:50:f1:3a:f6:55: 17:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:25:1B:80:AD:EA:87:A5:0E:5F:6E:42:66:CD:7A:CC:D3:D9:72:0D X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5SUbgK3qh6UOX25CZs16zNPZcg0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.151.0/24 151.243.18.0/24 151.243.28.0/24 151.243.113.0/24 Signature Algorithm: sha256WithRSAEncryption 76:ce:7b:06:d3:b7:ac:d9:95:21:91:03:ec:e5:b1:96:71:97: 83:e8:ca:0e:92:fa:8b:54:1a:24:c6:8c:44:76:73:3b:ba:c2: 1b:b3:ba:50:f8:5c:ff:94:fe:2d:ff:fe:2b:cd:0a:43:bd:7a: fd:cb:ac:c0:bd:0f:a2:79:07:39:ae:d9:25:7c:8f:18:25:eb: 29:f4:60:85:d2:0f:d5:05:6c:3d:a4:e8:9a:ca:33:cb:c8:38: bf:5c:d5:7b:b2:c7:d8:bb:e5:d8:7d:0b:fb:09:5d:bd:d8:9d: db:37:8e:5f:59:05:70:db:91:96:7b:a4:ae:5b:e4:38:db:e4: d1:8b:98:f5:32:d0:29:9f:58:88:4d:14:59:2a:42:cf:d8:63: e1:bd:65:d1:0b:49:28:05:c6:98:26:a2:cd:24:55:fb:10:02: a3:2b:df:8f:a5:72:bc:4b:d5:13:fb:fe:47:1a:12:4b:ee:2a: bd:2d:b1:fe:9b:19:c3:5b:3b:2c:7f:a1:7f:fb:b1:4c:31:cd: 43:26:51:4e:f2:8b:c7:68:17:b4:bd:93:02:55:b0:fd:97:06: 9c:22:ac:43:c0:3c:7b:a3:ea:db:fb:cd:62:92:67:c2:f5:2e: 51:02:3b:25:e6:54:7d:c4:b0:9b:93:7c:c1:fa:9c:93:44:a0: b4:41:b6:db -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZqGDvanKf0IQQJ9fCJaQF1ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTE1MDU0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTI1MWI4MGFkZWE4N2E1MGU1ZjZlNDI2NmNkN2FjY2QzZDk3MjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxF5/412XoIUE07KOrQn2VnsEdK0 fQYqaXn/95ntxH398+qYWfyh3qVBkc9El9FgZm6hzIRopnphP4c4l/VzfPgh29+y 50Zfg1TPj/QQ9PlJgcwoJckqLHQaSVBVAi12DI3SJBoo239NdXMGpiddVZQH9KoU 3s6NKRMAp2Nqcha+RUXp+PYOcUaGlgWosh1+haOBleedyHjjrkjOjyLldYj7KRyA ZduQ0N7sWWJeRB8gNKeiVKvI1RyKoNUZb6r12api5MzKnjFQ18aXeDtLYNL/RWrv TCcHGHLRLRSk0VHdq1NRNXxpHXV44I8IDnTd28Tno4Inz/5uUPE69lUXIQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOUlG4Ct6oelDl9uQmbNeszT2XINMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvNVNVYmdLM3FoNlVPWDI1Q1pzMTZ6TlBaY2cwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/CXAwQA l/MSAwQAl/McAwQAl/NxMA0GCSqGSIb3DQEBCwUAA4IBAQB2znsG07es2ZUhkQPs 5bGWcZeD6MoOkvqLVBokxoxEdnM7usIbs7pQ+Fz/lP4t//4rzQpDvXr9y6zAvQ+i eQc5rtklfI8YJesp9GCF0g/VBWw9pOiayjPLyDi/XNV7ssfYu+XYfQv7CV292J3b N45fWQVw25GWe6SuW+Q42+TRi5j1MtApn1iITRRZKkLP2GPhvWXRC0koBcaYJqLN JFX7EAKjK9+PpXK8S9UT+/5HGhJL7iq9LbH+mxnDWzssf6F/+7FMMc1DJlFO8ovH aBe0vZMCVbD9lwacIqxDwDx7o+rb+81ikmfC9S5RAjsl5lR9xLCbk3zB+pyTRKC0 Qbbb -----END CERTIFICATE-----Generated at Wed Dec 3 09:42:32 2025 by rpki-client