This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/As_07ojWzywb1ZOTm6pUproHBQ8.roa File: As_07ojWzywb1ZOTm6pUproHBQ8.roa (raw, json) Hash identifier: IY7AJx7DzHKf5Gg4oj4NWem1TJxHujDTS53QiRw+R60= Subject key identifier: 02:CF:F4:EE:88:D6:CF:2C:1B:D5:93:93:9B:AA:54:A6:BA:07:05:0F Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A52BD869CACF6562446D024B54985C24B Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/As_07ojWzywb1ZOTm6pUproHBQ8.roa Signing time: Wed 05 Nov 2025 06:39:03 +0000 ROA not before: Wed 05 Nov 2025 06:39:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8075 IP address blocks: 151.241.36.0/24 maxlen: 24 151.241.37.0/24 maxlen: 24 151.242.202.0/24 maxlen: 24 151.242.203.0/24 maxlen: 24 151.242.205.0/24 maxlen: 24 151.243.36.0/24 maxlen: 24 151.243.47.0/24 maxlen: 24 151.244.14.0/24 maxlen: 24 151.244.66.0/24 maxlen: 24 151.244.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:52:bd:86:9c:ac:f6:56:24:46:d0:24:b5:49:85:c2:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 5 06:39:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=02cff4ee88d6cf2c1bd593939baa54a6ba07050f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b1:75:44:36:a1:df:b3:61:58:a7:93:9f:bc: 5f:d6:02:34:b3:aa:97:fb:2d:78:a0:69:4d:5b:e3: 6a:b1:bd:b2:5b:26:18:c5:f7:d9:02:ba:c2:16:8c: 84:47:08:17:bf:62:2b:5a:43:ed:8d:e5:e2:4e:4e: ea:d5:34:0b:1d:c4:c2:d9:29:2e:7a:50:e0:d6:29: f1:a3:e2:41:a5:80:67:d6:38:29:9e:08:72:2d:48: 09:36:07:ad:95:0b:98:fd:3c:70:e3:5f:cc:a2:55: ea:ad:09:40:55:01:5f:b9:51:4c:dc:8d:6b:37:7f: c6:43:56:24:df:19:9e:20:12:60:76:11:27:2a:d4: 4a:fc:22:27:54:62:93:3b:b9:05:f5:f7:5f:b1:9d: 05:5d:e8:3a:63:2f:6f:28:d7:97:d0:e1:69:9a:38: 8f:b1:91:72:da:fe:ab:1c:72:7c:14:53:03:b1:32: 57:0c:88:88:9f:20:0b:59:e4:c2:aa:f5:58:af:f5: f2:42:8f:86:1d:47:10:68:89:25:b1:c3:2f:75:16: 96:c7:a0:74:93:42:2a:33:eb:2b:9c:f3:62:ae:a4: d2:31:d4:f2:95:fc:16:22:38:3e:9a:a0:8b:50:eb: da:7b:6c:3b:87:d5:01:0c:89:4d:81:7e:9e:ac:20: e0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:CF:F4:EE:88:D6:CF:2C:1B:D5:93:93:9B:AA:54:A6:BA:07:05:0F X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/As_07ojWzywb1ZOTm6pUproHBQ8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.36.0/23 151.242.202.0/23 151.242.205.0/24 151.243.36.0/24 151.243.47.0/24 151.244.14.0/24 151.244.66.0/23 Signature Algorithm: sha256WithRSAEncryption 47:12:d5:51:a8:e1:83:2d:41:13:9e:21:e5:64:81:e3:0b:5c: fe:9d:cd:73:d9:50:70:bf:3a:17:e9:f6:6c:dc:6c:4c:2e:2a: 62:8d:03:e7:bc:76:8f:67:14:a7:28:07:87:08:81:d7:82:4a: 9a:aa:37:a7:9f:e0:e9:eb:71:ec:01:d8:59:e9:45:bd:7f:95: 8e:2e:d7:79:ae:59:5c:01:40:56:70:d7:aa:8e:49:6b:04:f9: 49:08:33:1c:d5:1e:31:48:4c:59:cd:4f:37:ad:6a:fc:34:e3: 2a:e1:d4:5f:26:5b:5e:8d:99:d4:a9:1c:79:a7:42:0b:09:68: 31:6f:51:91:97:b1:af:92:c3:11:d0:3a:49:5f:d8:74:53:a0: e1:22:7c:6f:d1:ed:1b:73:02:73:79:1e:a2:83:2f:65:fa:08: 94:70:82:81:6e:be:5f:a5:cb:4c:bc:a0:97:e5:19:01:d5:8b: d0:ce:84:9b:6e:f9:fc:dd:cc:82:77:31:fa:f4:af:ca:13:3c: e4:5a:cf:79:de:84:a1:be:bd:fc:e8:49:2e:49:6e:c0:f3:29: 6c:d2:77:f5:e0:f0:ca:fb:ac:4f:9d:31:4d:f8:0f:b9:c9:c1: 84:11:ed:5c:09:fc:84:2f:24:55:74:29:55:93:0e:a3:c7:94: 77:86:ba:87 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZpSvYacrPZWJEbQJLVJhcJLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTA1MDYzOTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmNmZjRlZTg4ZDZjZjJjMWJkNTkzOTM5YmFhNTRhNmJhMDcwNTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLF1RDah37NhWKeTn7xf1gI0s6qX +y14oGlNW+Nqsb2yWyYYxffZArrCFoyERwgXv2IrWkPtjeXiTk7q1TQLHcTC2Sku elDg1inxo+JBpYBn1jgpnghyLUgJNgetlQuY/Txw41/MolXqrQlAVQFfuVFM3I1r N3/GQ1Yk3xmeIBJgdhEnKtRK/CInVGKTO7kF9fdfsZ0FXeg6Yy9vKNeX0OFpmjiP sZFy2v6rHHJ8FFMDsTJXDIiInyALWeTCqvVYr/XyQo+GHUcQaIklscMvdRaWx6B0 k0IqM+srnPNirqTSMdTylfwWIjg+mqCLUOvae2w7h9UBDIlNgX6erCDgcwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFALP9O6I1s8sG9WTk5uqVKa6BwUPMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvQXNfMDdvald6eXdiMVpPVG02cFVwcm9IQlE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBl/EkAwQB l/LKAwQAl/LNAwQAl/MkAwQAl/MvAwQAl/QOAwQBl/RCMA0GCSqGSIb3DQEBCwUA A4IBAQBHEtVRqOGDLUETniHlZIHjC1z+nc1z2VBwvzoX6fZs3GxMLipijQPnvHaP ZxSnKAeHCIHXgkqaqjenn+Dp63HsAdhZ6UW9f5WOLtd5rllcAUBWcNeqjklrBPlJ CDMc1R4xSExZzU83rWr8NOMq4dRfJltejZnUqRx5p0ILCWgxb1GRl7GvksMR0DpJ X9h0U6DhInxv0e0bcwJzeR6igy9l+giUcIKBbr5fpctMvKCX5RkB1YvQzoSbbvn8 3cyCdzH69K/KEzzkWs953oShvr386EkuSW7A8yls0nf14PDK+6xPnTFN+A+5ycGE Ee1cCfyELyRVdClVkw6jx5R3hrqH -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:55 2025 by rpki-client