This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6ZMAM-rnOweAku-Qr9coAsFNjVA.roa File: 6ZMAM-rnOweAku-Qr9coAsFNjVA.roa (raw, json) Hash identifier: +qm9umjE8o25xahLN0QyCZzaXra8hjkpAzlkls8a7tY= Subject key identifier: E9:93:00:33:EA:E7:3B:07:80:92:EF:90:AF:D7:28:02:C1:4D:8D:50 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AA7CB2493C5F4A0A8452B9BABEED9841D Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6ZMAM-rnOweAku-Qr9coAsFNjVA.roa Signing time: Fri 21 Nov 2025 19:01:39 +0000 ROA not before: Fri 21 Nov 2025 19:01:39 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16611 IP address blocks: 151.241.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a7:cb:24:93:c5:f4:a0:a8:45:2b:9b:ab:ee:d9:84:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 21 19:01:39 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e9930033eae73b078092ef90afd72802c14d8d50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:de:16:f0:d1:45:42:59:c5:33:f4:da:5f:36: 1d:3b:17:65:ea:d8:c7:87:40:d2:95:40:31:08:d4: 22:7f:4d:6d:5a:52:b2:e0:33:38:98:d6:26:83:52: 0c:dc:38:fe:76:b5:a1:6f:ce:16:37:f8:47:a1:62: 87:83:04:73:aa:fd:c8:1b:4b:cf:c7:3e:4a:f8:4e: dd:41:e3:de:31:40:a3:56:fe:41:f3:e8:9e:d8:86: 7d:95:19:71:d4:dc:2e:ac:0c:dc:b6:ec:6a:a2:8b: a1:fb:f1:78:7f:82:ca:ea:05:73:5a:48:45:ff:40: 10:e7:d0:63:1c:a8:6c:9c:75:9c:1a:5c:50:eb:b0: 36:c4:e8:5d:80:85:37:41:3f:51:1f:97:49:09:db: f6:b4:b1:05:19:86:86:bc:2a:89:ee:70:bf:07:d0: fd:59:83:19:ae:83:b0:d9:1d:5e:d4:0f:96:48:87: ae:fb:4d:4c:b2:e8:4f:26:61:8b:f0:15:9e:7c:52: f3:bf:b1:c5:ce:e0:c4:cd:cd:34:1c:fe:47:f3:38: bb:86:fb:a9:bd:ca:ac:43:c6:cd:cc:46:7e:8a:ff: 4b:32:81:f7:7d:04:6d:f1:45:2c:55:9b:d4:eb:46: 57:7b:3a:5c:d2:70:7f:40:c0:97:82:ac:4d:b6:c6: 22:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:93:00:33:EA:E7:3B:07:80:92:EF:90:AF:D7:28:02:C1:4D:8D:50 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6ZMAM-rnOweAku-Qr9coAsFNjVA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.220.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:f8:92:db:0f:2e:48:b9:63:e4:59:20:54:b6:85:72:6d:e7: 53:a3:87:2e:89:e8:8d:f8:11:96:5a:8b:14:19:04:95:97:12: 4c:d3:56:64:09:89:72:ca:63:c2:61:56:08:c3:a3:eb:dd:dd: 8e:6f:ab:6a:43:5a:74:91:87:9c:54:c1:e5:31:a2:2b:5d:88: 11:45:43:2e:b6:53:07:d6:16:d4:91:0c:d7:52:27:a9:9e:b8: a6:20:f0:36:04:02:ba:d5:7c:91:d7:1f:fd:41:a7:d7:67:a7: a3:74:34:04:b9:07:7f:09:d0:e0:7c:39:16:e0:fb:42:5b:ae: f2:7a:d6:b4:81:b3:1f:64:d1:5d:88:52:97:f2:6a:7b:d3:69: 57:49:86:56:12:5f:9e:e9:0a:98:a8:95:b2:4d:46:71:32:b3: 4c:02:c5:84:ba:4c:9e:39:18:5e:3b:c9:96:4e:e5:7a:e4:d2: 9e:f8:20:69:3c:f2:8a:0d:21:ae:28:2a:31:ec:48:e8:22:82: 45:73:bc:53:06:51:87:6b:4e:c6:92:0b:3c:8c:4f:61:e0:6f: 51:9c:e2:ea:3a:7c:5a:26:9c:62:be:c1:02:a4:d9:ec:ac:4f: 1b:a4:f6:e2:e4:1a:30:bf:d5:dd:19:12:c5:6f:ae:c4:2f:5f: 2b:64:20:1f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqnyySTxfSgqEUrm6vu2YQdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTIxMTkwMTM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTkzMDAzM2VhZTczYjA3ODA5MmVmOTBhZmQ3MjgwMmMxNGQ4ZDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp94W8NFFQlnFM/TaXzYdOxdl6tjH h0DSlUAxCNQif01tWlKy4DM4mNYmg1IM3Dj+drWhb84WN/hHoWKHgwRzqv3IG0vP xz5K+E7dQePeMUCjVv5B8+ie2IZ9lRlx1NwurAzctuxqoouh+/F4f4LK6gVzWkhF /0AQ59BjHKhsnHWcGlxQ67A2xOhdgIU3QT9RH5dJCdv2tLEFGYaGvCqJ7nC/B9D9 WYMZroOw2R1e1A+WSIeu+01MsuhPJmGL8BWefFLzv7HFzuDEzc00HP5H8zi7hvup vcqsQ8bNzEZ+iv9LMoH3fQRt8UUsVZvU60ZXezpc0nB/QMCXgqxNtsYi+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOmTADPq5zsHgJLvkK/XKALBTY1QMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvNlpNQU0tcm5Pd2VBa3UtUXI5Y29Bc0ZOalZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/HcMA0G CSqGSIb3DQEBCwUAA4IBAQBP+JLbDy5IuWPkWSBUtoVybedTo4cuieiN+BGWWosU GQSVlxJM01ZkCYlyymPCYVYIw6Pr3d2Ob6tqQ1p0kYecVMHlMaIrXYgRRUMutlMH 1hbUkQzXUiepnrimIPA2BAK61XyR1x/9QafXZ6ejdDQEuQd/CdDgfDkW4PtCW67y eta0gbMfZNFdiFKX8mp702lXSYZWEl+e6QqYqJWyTUZxMrNMAsWEukyeORheO8mW TuV65NKe+CBpPPKKDSGuKCox7EjoIoJFc7xTBlGHa07Gkgs8jE9h4G9RnOLqOnxa JpxivsECpNnsrE8bpPbi5Bowv9XdGRLFb67EL18rZCAf -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:01 2025 by rpki-client