This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6Xqxu_bTgHnDvAORF46tahGp3HI.roa File: 6Xqxu_bTgHnDvAORF46tahGp3HI.roa (raw, json) Hash identifier: nGqQMk9pKSj0xLiIts7YyisycAuClANpEKRkBOWaIAo= Subject key identifier: E9:7A:B1:BB:F6:D3:80:79:C3:BC:03:91:17:8E:AD:6A:11:A9:DC:72 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A81C36A013F681D8FFB2E68C08993136B Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6Xqxu_bTgHnDvAORF46tahGp3HI.roa Signing time: Fri 14 Nov 2025 09:47:38 +0000 ROA not before: Fri 14 Nov 2025 09:47:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 398256 IP address blocks: 151.241.99.0/24 maxlen: 24 151.241.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:c3:6a:01:3f:68:1d:8f:fb:2e:68:c0:89:93:13:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 14 09:47:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e97ab1bbf6d38079c3bc0391178ead6a11a9dc72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:0b:4e:42:63:39:2e:ff:51:9d:11:bc:67:1f: 87:13:da:ef:19:cb:3b:74:65:4a:47:42:fe:e3:75: 8b:09:16:ea:ff:fc:84:cf:6b:73:dc:6f:a4:00:cb: b1:46:37:67:9d:8d:13:35:ae:35:d7:78:d2:0d:36: e2:37:a8:f1:21:47:85:d0:8c:50:4e:49:23:25:97: bb:27:22:a9:74:48:b3:01:9a:19:0a:e9:9e:c0:5a: a3:0b:40:eb:d1:0c:6c:ed:62:12:4b:39:f3:82:0f: 18:cd:5f:45:fc:ee:7a:68:fd:e4:ca:3a:df:19:ae: 25:e6:c3:16:93:28:22:f9:a8:a0:0c:b9:5a:40:57: b1:6a:86:56:3c:90:4a:bb:c7:4f:8f:10:1b:e6:bd: f8:94:87:54:fb:a8:0d:13:eb:f3:7d:da:0d:52:ff: 3b:a8:b6:7f:f8:f9:19:88:8b:3b:d3:9d:81:71:68: 6f:48:af:14:38:07:41:76:46:f7:fc:59:d8:cc:cc: 91:e5:ad:17:f6:83:73:6e:40:27:cd:5d:2b:5f:50: 8e:bb:9a:da:fc:41:51:5c:04:10:24:b8:cb:a8:2f: 34:90:03:86:88:f8:99:1e:7a:51:63:e1:6f:65:51: fe:f6:6c:0b:d1:e1:e0:70:d4:09:e3:e9:36:3f:ca: b4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7A:B1:BB:F6:D3:80:79:C3:BC:03:91:17:8E:AD:6A:11:A9:DC:72 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6Xqxu_bTgHnDvAORF46tahGp3HI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.99.0/24 151.241.117.0/24 Signature Algorithm: sha256WithRSAEncryption 43:11:ce:06:85:42:95:65:0e:eb:28:03:bb:fe:c6:43:bf:e6: 3c:6b:c0:c2:1d:e7:b3:24:0f:da:88:5e:1b:ab:a1:6e:5b:eb: c6:3b:6a:3c:8d:3e:9b:fa:65:e8:30:74:9d:91:18:97:50:85: 44:b1:89:6b:70:c1:fe:64:a6:5f:96:55:92:36:6f:22:be:c8: fd:6b:e7:1f:03:5f:eb:4e:7e:c0:be:31:8a:34:fa:eb:97:ea: a6:5f:a6:d0:c8:76:5b:2c:2b:84:9e:4d:09:a5:45:01:0f:1f: d7:19:bb:34:45:ec:14:05:ae:d6:de:8d:13:f7:8b:ba:70:ba: 3b:73:d6:82:f3:27:bf:0e:42:9e:47:80:48:86:44:b1:7e:e8: fc:6c:62:96:3e:84:71:81:70:c5:9c:ff:10:f9:c8:34:06:d6: 9c:33:4b:8f:8f:84:81:09:00:93:48:57:5e:b3:bc:90:4e:3f: 50:b0:b2:41:0c:7d:b2:c0:33:cf:d7:9a:d4:ed:04:e3:fd:c8: c7:44:62:8d:ba:ba:d1:3e:2e:91:43:fb:3a:42:b6:1c:9c:dd: 31:80:75:37:80:24:d8:c7:8e:a1:b6:97:e9:35:e4:21:86:d5: c2:2a:58:60:5b:cf:68:2f:3d:28:7c:47:11:29:bc:44:dd:fd: 59:27:23:df -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqBw2oBP2gdj/suaMCJkxNrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTE0MDk0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTdhYjFiYmY2ZDM4MDc5YzNiYzAzOTExNzhlYWQ2YTExYTlkYzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywtOQmM5Lv9RnRG8Zx+HE9rvGcs7 dGVKR0L+43WLCRbq//yEz2tz3G+kAMuxRjdnnY0TNa4113jSDTbiN6jxIUeF0IxQ TkkjJZe7JyKpdEizAZoZCumewFqjC0Dr0Qxs7WISSznzgg8YzV9F/O56aP3kyjrf Ga4l5sMWkygi+aigDLlaQFexaoZWPJBKu8dPjxAb5r34lIdU+6gNE+vzfdoNUv87 qLZ/+PkZiIs7052BcWhvSK8UOAdBdkb3/FnYzMyR5a0X9oNzbkAnzV0rX1COu5ra /EFRXAQQJLjLqC80kAOGiPiZHnpRY+FvZVH+9mwL0eHgcNQJ4+k2P8q0KwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOl6sbv204B5w7wDkReOrWoRqdxyMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvNlhxeHVfYlRnSG5EdkFPUkY0NnRhaEdwM0hJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/FjAwQA l/F1MA0GCSqGSIb3DQEBCwUAA4IBAQBDEc4GhUKVZQ7rKAO7/sZDv+Y8a8DCHeez JA/aiF4bq6FuW+vGO2o8jT6b+mXoMHSdkRiXUIVEsYlrcMH+ZKZfllWSNm8ivsj9 a+cfA1/rTn7AvjGKNPrrl+qmX6bQyHZbLCuEnk0JpUUBDx/XGbs0RewUBa7W3o0T 94u6cLo7c9aC8ye/DkKeR4BIhkSxfuj8bGKWPoRxgXDFnP8Q+cg0BtacM0uPj4SB CQCTSFdes7yQTj9QsLJBDH2ywDPP15rU7QTj/cjHRGKNurrRPi6RQ/s6QrYcnN0x gHU3gCTYx46htpfpNeQhhtXCKlhgW89oLz0ofEcRKbxE3f1ZJyPf -----END CERTIFICATE-----Generated at Wed Dec 3 09:42:32 2025 by rpki-client