This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/68XKmTKkjfXpxGBtyfok1HFJT0c.roa File: 68XKmTKkjfXpxGBtyfok1HFJT0c.roa (raw, json) Hash identifier: fHvfZ02XGPJiQUP16wTy/0YzsS/NMqKgQcqcGXRAjLg= Subject key identifier: EB:C5:CA:99:32:A4:8D:F5:E9:C4:60:6D:C9:FA:24:D4:71:49:4F:47 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AAB9ABEB2F144B7E8E8353C799FA0427E Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/68XKmTKkjfXpxGBtyfok1HFJT0c.roa Signing time: Sat 22 Nov 2025 12:47:16 +0000 ROA not before: Sat 22 Nov 2025 12:47:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209630 IP address blocks: 151.241.144.0/24 maxlen: 24 151.243.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ab:9a:be:b2:f1:44:b7:e8:e8:35:3c:79:9f:a0:42:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 22 12:47:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ebc5ca9932a48df5e9c4606dc9fa24d471494f47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bf:93:72:c9:b2:2c:25:3e:7f:3a:85:f7:73: 0a:0c:d1:82:07:ac:2e:13:10:42:4b:a5:cf:17:7b: 03:74:69:69:8b:83:df:5c:15:53:34:b8:b7:89:97: b6:79:d9:3c:b5:77:f9:61:42:f1:79:d6:a5:9e:87: 23:72:ce:a6:1e:5d:8c:91:1f:ad:8f:d4:25:cf:2e: 5b:3c:89:4b:84:4d:08:12:aa:f3:ef:11:83:57:98: ad:6e:fd:43:29:a1:b1:94:82:43:d2:b5:01:3d:21: 1d:a2:29:6c:17:92:08:45:64:04:f3:db:3e:73:31: f8:93:40:59:58:a5:01:e0:74:68:dd:0d:b6:39:15: e2:ca:5c:18:ba:30:15:0c:3e:32:4c:aa:ba:92:0d: e7:3f:3c:a6:b8:fe:24:a8:ce:70:8b:41:d1:04:0d: 09:fc:cb:62:51:61:fc:88:7e:cb:5a:e5:8b:ac:25: f2:a2:e7:da:a0:84:43:a4:fe:81:90:82:29:da:2a: cf:f0:9c:ca:6d:08:4e:5b:47:bd:3f:3c:a0:7a:e9: 94:71:c5:79:d0:12:4e:8d:33:6e:ec:a1:da:dc:a5: 5f:ec:a2:a5:e6:93:d1:3a:d3:24:9f:51:75:85:76: 7b:32:63:98:87:4f:1f:48:7c:a9:db:e8:48:46:52: 42:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C5:CA:99:32:A4:8D:F5:E9:C4:60:6D:C9:FA:24:D4:71:49:4F:47 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/68XKmTKkjfXpxGBtyfok1HFJT0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.144.0/24 151.243.11.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:d2:f9:72:cf:e3:ad:c9:9f:c9:65:b3:53:78:7a:8d:91:da: 79:18:3e:41:99:c9:09:21:04:40:7a:24:d2:41:78:f2:80:17: a4:ad:da:51:ea:15:50:15:23:39:a7:01:90:c1:5c:de:23:e5: 2a:25:23:2b:f7:04:eb:ea:22:35:bb:39:d5:82:10:a6:2b:60: 4a:14:50:58:dd:8a:6f:76:67:ba:b3:1b:d9:0e:da:3a:04:c6: 1f:1c:6f:e8:8b:80:ce:77:49:b8:83:47:63:2d:be:f1:26:2d: a4:e9:4a:0a:06:9f:df:da:4d:31:71:3d:54:8a:d0:73:40:da: 76:03:b2:98:c3:6d:b8:62:1a:86:4e:f2:93:9b:84:e9:6b:d9: d2:6f:03:69:96:12:83:ee:ac:e4:4c:73:55:3f:a0:53:05:f1: 91:e5:e2:77:9a:aa:80:e8:b5:02:77:bc:de:e5:43:03:8e:02: 3a:39:3a:ed:71:40:6e:e3:84:80:39:16:76:5c:fd:14:14:99: 61:b0:14:21:56:fe:c3:56:75:c8:42:33:99:29:bb:99:58:f7: 73:fe:75:3c:6a:45:90:80:cb:63:29:87:cf:31:bf:c5:02:33: 15:db:5d:b1:fc:1a:d4:ff:ee:a4:e7:6d:b5:91:df:5e:89:bb: 92:e6:06:37 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqrmr6y8US36Og1PHmfoEJ+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTIyMTI0NzE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmM1Y2E5OTMyYTQ4ZGY1ZTljNDYwNmRjOWZhMjRkNDcxNDk0ZjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwL+TcsmyLCU+fzqF93MKDNGCB6wu ExBCS6XPF3sDdGlpi4PfXBVTNLi3iZe2edk8tXf5YULxedalnocjcs6mHl2MkR+t j9Qlzy5bPIlLhE0IEqrz7xGDV5itbv1DKaGxlIJD0rUBPSEdoilsF5IIRWQE89s+ czH4k0BZWKUB4HRo3Q22ORXiylwYujAVDD4yTKq6kg3nPzymuP4kqM5wi0HRBA0J /MtiUWH8iH7LWuWLrCXyoufaoIRDpP6BkIIp2irP8JzKbQhOW0e9PzygeumUccV5 0BJOjTNu7KHa3KVf7KKl5pPROtMkn1F1hXZ7MmOYh08fSHyp2+hIRlJCOQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOvFypkypI316cRgbcn6JNRxSU9HMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvNjhYS21US2tqZlhweEdCdHlmb2sxSEZKVDBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/GQAwQA l/MLMA0GCSqGSIb3DQEBCwUAA4IBAQBb0vlyz+OtyZ/JZbNTeHqNkdp5GD5BmckJ IQRAeiTSQXjygBekrdpR6hVQFSM5pwGQwVzeI+UqJSMr9wTr6iI1uznVghCmK2BK FFBY3Ypvdme6sxvZDto6BMYfHG/oi4DOd0m4g0djLb7xJi2k6UoKBp/f2k0xcT1U itBzQNp2A7KYw224YhqGTvKTm4Tpa9nSbwNplhKD7qzkTHNVP6BTBfGR5eJ3mqqA 6LUCd7ze5UMDjgI6OTrtcUBu44SAORZ2XP0UFJlhsBQhVv7DVnXIQjOZKbuZWPdz /nU8akWQgMtjKYfPMb/FAjMV212x/BrU/+6k5221kd9eibuS5gY3 -----END CERTIFICATE-----Generated at Wed Dec 3 09:43:15 2025 by rpki-client