This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AYBFVcGjgDkJsfIv7IUuHN4rh9U.roa File: AYBFVcGjgDkJsfIv7IUuHN4rh9U.roa (raw, json) Hash identifier: /Wr4GoOsN30OG9QC5Xi8ALb9n0rTqVMxbdf7QTHgmKI= Subject key identifier: 01:80:45:55:C1:A3:80:39:09:B1:F2:2F:EC:85:2E:1C:DE:2B:87:D5 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A4E50070A2C379B6AE5A81AD68ED2E50A Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AYBFVcGjgDkJsfIv7IUuHN4rh9U.roa Signing time: Tue 04 Nov 2025 10:00:58 +0000 ROA not before: Tue 04 Nov 2025 10:00:58 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 137517 IP address blocks: 151.240.120.0/24 maxlen: 24 151.241.20.0/24 maxlen: 24 151.242.140.0/24 maxlen: 24 151.243.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:4e:50:07:0a:2c:37:9b:6a:e5:a8:1a:d6:8e:d2:e5:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 4 10:00:58 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=01804555c1a3803909b1f22fec852e1cde2b87d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2b:86:d6:03:8a:00:e4:8d:4b:3b:e3:99:05: 1d:d5:31:bc:46:45:9b:53:a6:42:f5:62:5f:71:d5: 0a:97:06:84:b3:72:27:11:ca:1a:eb:b3:7b:4b:70: 76:4b:0e:d0:13:58:f2:4c:76:49:41:41:0e:52:7e: e4:69:5a:4a:86:4e:3d:6f:f8:64:0b:c5:47:15:b8: dd:55:1e:eb:d0:2c:68:ec:06:0a:eb:c7:f4:89:08: 6c:fd:8f:2f:7d:c6:fd:65:7e:1d:c3:e3:15:b0:56: 93:a2:c7:5a:b9:3a:76:6f:22:aa:74:68:41:10:1c: 1c:ff:57:89:a9:53:eb:b9:6b:0e:c0:34:2a:ef:23: eb:bd:35:4a:06:b7:47:c2:8c:cd:28:31:be:de:0d: c8:b8:d2:de:20:ce:b1:34:68:1b:2a:dc:b7:cc:95: 21:3c:d1:28:ff:51:8a:be:e6:40:47:90:75:60:56: d0:4d:f6:d2:c9:d3:fc:06:81:96:5d:9b:ac:32:6c: c5:82:00:37:47:f0:cc:e2:a0:56:91:c0:4e:52:b9: cc:cd:f1:93:72:1d:fd:05:e0:ce:5f:ae:18:ba:aa: 74:0a:4d:ec:dc:66:76:f8:a6:33:13:16:81:b9:b4: be:78:0b:0a:68:97:ca:a3:42:9a:c0:99:ef:f9:ea: 5b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:80:45:55:C1:A3:80:39:09:B1:F2:2F:EC:85:2E:1C:DE:2B:87:D5 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/AYBFVcGjgDkJsfIv7IUuHN4rh9U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.120.0/24 151.241.20.0/24 151.242.140.0/24 151.243.136.0/24 Signature Algorithm: sha256WithRSAEncryption 01:2a:a9:35:de:7a:2f:c3:1e:71:6f:63:cf:42:ec:60:a8:75: ab:46:9c:7e:d2:ec:2b:a7:ae:13:e8:d7:fc:a9:bf:3c:59:95: 4f:04:30:2c:b1:44:1c:4e:c1:7d:24:40:7f:b0:c0:26:83:ea: cc:57:de:4f:1a:c1:81:66:50:03:35:76:a7:ff:55:4b:47:06: f4:26:c2:6b:ec:ca:c7:29:62:c3:1a:ec:a9:72:8f:8f:20:0f: a3:91:28:1e:da:fb:26:f1:56:19:c1:84:ba:1b:08:c4:3f:7c: 21:d7:92:ce:2d:eb:c2:40:98:f5:0c:7c:d2:6f:2c:2c:ca:ee: 64:73:33:c2:f3:61:01:99:86:48:f1:cc:2b:a6:20:36:3e:33: 9d:30:f8:b1:35:f0:b8:a0:70:52:90:fa:f8:34:b6:9d:40:d0: 1f:aa:c6:84:66:22:b3:49:42:cf:d2:b4:2a:46:3a:87:77:f4: c4:27:38:93:ea:8d:3c:43:a6:9b:96:2f:4d:95:e0:ad:2c:b2: 62:31:56:2b:c3:5d:68:c7:4e:1c:44:39:49:53:67:58:64:48: 70:9d:e0:c0:ea:5f:fc:8a:ef:92:e8:3c:ce:ca:5c:24:3e:6e: 8c:0b:68:dd:a9:f9:68:2f:f0:b8:79:0f:24:c4:73:77:0a:4f: 17:ae:2b:b7 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZpOUAcKLDebauWoGtaO0uUKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTA0MTAwMDU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTgwNDU1NWMxYTM4MDM5MDliMWYyMmZlYzg1MmUxY2RlMmI4N2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SuG1gOKAOSNSzvjmQUd1TG8RkWb U6ZC9WJfcdUKlwaEs3InEcoa67N7S3B2Sw7QE1jyTHZJQUEOUn7kaVpKhk49b/hk C8VHFbjdVR7r0Cxo7AYK68f0iQhs/Y8vfcb9ZX4dw+MVsFaTosdauTp2byKqdGhB EBwc/1eJqVPruWsOwDQq7yPrvTVKBrdHwozNKDG+3g3IuNLeIM6xNGgbKty3zJUh PNEo/1GKvuZAR5B1YFbQTfbSydP8BoGWXZusMmzFggA3R/DM4qBWkcBOUrnMzfGT ch39BeDOX64Yuqp0Ck3s3GZ2+KYzExaBubS+eAsKaJfKo0KawJnv+epb2wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAGARVXBo4A5CbHyL+yFLhzeK4fVMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvQVlCRlZjR2pnRGtKc2ZJdjdJVXVITjRyaDlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/B4AwQA l/EUAwQAl/KMAwQAl/OIMA0GCSqGSIb3DQEBCwUAA4IBAQABKqk13novwx5xb2PP QuxgqHWrRpx+0uwrp64T6Nf8qb88WZVPBDAssUQcTsF9JEB/sMAmg+rMV95PGsGB ZlADNXan/1VLRwb0JsJr7MrHKWLDGuypco+PIA+jkSge2vsm8VYZwYS6GwjEP3wh 15LOLevCQJj1DHzSbywsyu5kczPC82EBmYZI8cwrpiA2PjOdMPixNfC4oHBSkPr4 NLadQNAfqsaEZiKzSULP0rQqRjqHd/TEJziT6o08Q6abli9NleCtLLJiMVYrw11o x04cRDlJU2dYZEhwneDA6l/8iu+S6DzOylwkPm6MC2jdqfloL/C4eQ8kxHN3Ck8X riu3 -----END CERTIFICATE-----Generated at Wed Dec 3 09:42:31 2025 by rpki-client