This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ADvotvraRGzBvbC53jY00eagtOE.roa File: ADvotvraRGzBvbC53jY00eagtOE.roa (raw, json) Hash identifier: X5TnTOBKVR2CbWxOWo023x0ZFSpBvI3F26YLsqmnFE8= Subject key identifier: 00:3B:E8:B6:FA:DA:44:6C:C1:BD:B0:B9:DE:36:34:D1:E6:A0:B4:E1 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A769CC9FBD453DDCCECB59A2023540471 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ADvotvraRGzBvbC53jY00eagtOE.roa Signing time: Wed 12 Nov 2025 05:49:38 +0000 ROA not before: Wed 12 Nov 2025 05:49:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 141383 IP address blocks: 151.242.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:76:9c:c9:fb:d4:53:dd:cc:ec:b5:9a:20:23:54:04:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 12 05:49:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=003be8b6fada446cc1bdb0b9de3634d1e6a0b4e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4f:04:85:44:81:d3:a3:96:67:5c:9b:c2:85: fb:e6:57:5c:c6:9a:c6:e2:b4:6d:82:0f:ae:2d:99: c2:3c:c6:a3:f3:36:8a:15:10:e5:ab:9d:40:7a:7b: c0:1d:56:5d:4e:88:ca:a0:0b:16:34:69:b7:5e:34: cf:96:59:79:d1:02:7e:66:2a:39:0a:40:38:77:1d: 19:9b:95:57:7e:56:bb:7c:69:51:22:d6:2e:19:c4: 5e:cd:69:41:af:e1:b5:86:e6:ab:c7:22:b8:69:80: 6c:d8:74:8c:15:0e:06:46:07:55:74:87:46:78:60: ce:8b:bf:3a:1f:34:2c:08:d8:f5:76:c8:78:a7:4a: 1c:e2:10:4c:f7:54:81:f2:7e:48:41:36:72:ec:c5: 6e:b4:9a:d2:c1:50:97:c7:38:50:d2:b4:7f:b3:76: 59:2e:37:a8:6c:55:95:58:5b:80:9b:74:6d:4b:9a: fb:08:1f:6a:ac:f9:e3:05:c7:cb:b3:ed:bf:b8:d4: d2:04:9d:46:e8:ce:c7:44:e1:2f:30:ba:7b:fe:f2: 97:fb:e3:00:6b:ee:9d:74:7f:e5:16:8e:f4:81:b5: 5a:13:13:de:cc:79:c4:ba:18:25:93:4c:65:01:e6: f2:2a:aa:8c:75:06:16:61:89:65:7e:3d:28:be:b7: db:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3B:E8:B6:FA:DA:44:6C:C1:BD:B0:B9:DE:36:34:D1:E6:A0:B4:E1 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ADvotvraRGzBvbC53jY00eagtOE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.150.0/23 Signature Algorithm: sha256WithRSAEncryption 06:45:9b:91:53:84:3c:bb:4b:69:ed:af:a8:0f:96:82:4b:3f: bd:f9:7a:d6:91:59:d4:97:59:31:50:04:c0:62:d6:9c:65:4c: 50:1f:d8:fe:7f:3b:c5:ef:4f:3f:24:2c:79:cd:0f:e7:55:aa: 82:16:ab:94:90:63:25:9f:35:60:04:43:4a:90:e3:fe:93:6a: e4:a5:8e:12:de:28:87:07:8f:77:d3:7e:4a:69:36:1f:7d:13: 49:3a:b7:29:0b:24:cd:0a:73:fc:42:41:49:43:15:d2:18:87: 52:54:02:ea:81:e8:ac:83:45:23:69:33:90:16:93:d8:2a:de: 74:cf:d0:b4:d5:55:3d:f0:ae:92:a2:33:ae:74:55:88:d3:5c: bf:49:26:f8:a8:50:d4:87:32:fb:70:62:a0:f4:82:02:ba:a2: 51:36:44:bf:54:15:fa:31:dc:17:df:50:19:95:07:48:63:76: d2:0a:70:0f:d1:bc:20:15:43:8b:f0:e1:09:6f:5d:7b:c0:08: 6b:20:9e:2a:4f:ee:18:f0:61:98:94:58:38:76:9a:9e:f6:76: 06:8e:b6:51:45:55:52:7c:aa:07:a7:82:54:05:60:9a:90:8f: 15:b8:fa:1e:fd:e1:ed:45:cb:ec:34:87:60:2c:70:9b:41:ff: f4:40:42:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp2nMn71FPdzOy1miAjVARxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTEyMDU0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDNiZThiNmZhZGE0NDZjYzFiZGIwYjlkZTM2MzRkMWU2YTBiNGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsE8EhUSB06OWZ1ybwoX75ldcxprG 4rRtgg+uLZnCPMaj8zaKFRDlq51AenvAHVZdTojKoAsWNGm3XjTPlll50QJ+Zio5 CkA4dx0Zm5VXfla7fGlRItYuGcRezWlBr+G1huarxyK4aYBs2HSMFQ4GRgdVdIdG eGDOi786HzQsCNj1dsh4p0oc4hBM91SB8n5IQTZy7MVutJrSwVCXxzhQ0rR/s3ZZ LjeobFWVWFuAm3RtS5r7CB9qrPnjBcfLs+2/uNTSBJ1G6M7HROEvMLp7/vKX++MA a+6ddH/lFo70gbVaExPezHnEuhglk0xlAebyKqqMdQYWYYllfj0ovrfb0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAA76Lb62kRswb2wud42NNHmoLThMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvQUR2b3R2cmFSR3pCdmJDNTNqWTAwZWFndE9FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl/KWMA0G CSqGSIb3DQEBCwUAA4IBAQAGRZuRU4Q8u0tp7a+oD5aCSz+9+XrWkVnUl1kxUATA YtacZUxQH9j+fzvF708/JCx5zQ/nVaqCFquUkGMlnzVgBENKkOP+k2rkpY4S3iiH B493035KaTYffRNJOrcpCyTNCnP8QkFJQxXSGIdSVALqgeisg0UjaTOQFpPYKt50 z9C01VU98K6SojOudFWI01y/SSb4qFDUhzL7cGKg9IICuqJRNkS/VBX6MdwX31AZ lQdIY3bSCnAP0bwgFUOL8OEJb117wAhrIJ4qT+4Y8GGYlFg4dpqe9nYGjrZRRVVS fKoHp4JUBWCakI8VuPoe/eHtRcvsNIdgLHCbQf/0QELJ -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:35 2025 by rpki-client