This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Cj10_yhYUws5JMhPDyoKw9ci5zk.roa File: Cj10_yhYUws5JMhPDyoKw9ci5zk.roa (raw, json) Hash identifier: wIiaWqtYxzCJ/1jgs5umUxRbU7HxcqV4MFZF9uZD9Wo= Subject key identifier: 0A:3D:74:FF:28:58:53:0B:39:24:C8:4F:0F:2A:0A:C3:D7:22:E7:39 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AA64DF1DDB0C476B657BC81DF0AC895D4 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Cj10_yhYUws5JMhPDyoKw9ci5zk.roa Signing time: Fri 21 Nov 2025 12:05:17 +0000 ROA not before: Fri 21 Nov 2025 12:05:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209260 IP address blocks: 151.241.173.0/24 maxlen: 24 151.242.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:4d:f1:dd:b0:c4:76:b6:57:bc:81:df:0a:c8:95:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 21 12:05:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0a3d74ff2858530b3924c84f0f2a0ac3d722e739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:6f:7b:c7:8d:59:b5:e2:2a:0b:22:2c:62:af: 66:ec:33:4e:1a:08:f3:c8:84:87:1f:ba:4f:ee:e6: 1d:ce:f1:2b:fc:5e:5e:e2:50:bb:6b:cf:3c:96:b8: 1f:77:cc:41:10:e5:ad:1d:c1:69:f5:aa:04:06:6c: aa:1d:ad:8e:d4:19:e9:9d:a0:ea:b1:9d:31:c3:b1: a1:f2:8e:f3:04:45:60:4a:36:4e:2a:8a:f3:03:83: 26:d8:1a:97:7d:2f:6e:9e:e2:1d:31:4e:53:49:70: bc:7f:6a:5b:d2:57:31:b1:ac:4b:0b:d6:e5:04:08: aa:4f:5f:f0:6d:62:0c:f8:ca:16:7e:3e:97:f2:50: 38:6f:72:86:2f:df:7a:28:b2:64:2b:c8:78:53:6e: 7f:f0:ff:01:1f:63:72:dd:2e:96:c3:82:ed:d2:b6: 53:0d:55:a5:1f:b9:55:06:2b:57:1a:cd:08:4b:bd: bb:29:67:0e:46:cf:c8:a9:50:1e:c0:b7:95:12:a2: 29:33:50:f7:07:1b:89:61:4d:74:7f:f3:56:1f:4c: 1b:71:26:42:f5:ef:87:67:af:15:cf:e6:49:9b:db: 2f:6c:a3:9f:a5:03:91:ab:88:e7:66:92:05:e3:7e: e7:f3:af:e0:ac:b0:8a:b5:ab:55:91:4d:a8:5f:31: 55:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3D:74:FF:28:58:53:0B:39:24:C8:4F:0F:2A:0A:C3:D7:22:E7:39 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Cj10_yhYUws5JMhPDyoKw9ci5zk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.173.0/24 151.242.191.0/24 Signature Algorithm: sha256WithRSAEncryption 73:63:de:39:eb:3e:fc:a9:7c:93:d8:8d:3c:2e:cd:99:71:0a: 2a:18:07:f2:e4:25:c4:5c:71:74:68:e8:84:c1:49:04:7f:36: e6:f9:d3:b4:a4:c0:0d:96:29:26:08:94:c3:ef:3e:5a:71:33: 3c:1f:ec:94:1e:7a:7b:11:a3:ea:45:1a:27:8d:16:d4:6d:f7: 1c:7d:aa:48:e9:be:19:72:d0:90:fb:40:7e:50:9d:50:66:b7: fa:fb:db:d1:2e:ba:b1:85:7f:b4:02:e7:9d:06:ad:aa:4c:a6: 65:9d:5d:36:de:6a:a0:ce:b6:5d:85:58:e7:6a:9f:bb:b9:0a: 93:10:35:d7:f8:bc:49:f8:0b:84:41:bb:6a:28:f3:96:c2:50: bd:e2:3b:ea:f1:0b:27:87:fc:b2:27:5a:75:2a:76:99:2b:7f: cf:c3:ae:86:70:68:26:e9:2a:5a:c5:bd:a0:b5:ef:47:47:24: c7:dc:1f:55:d3:39:6e:35:93:10:ad:ff:33:08:1c:3d:06:21: 2d:29:83:8c:26:35:3e:d4:af:f1:5e:15:8d:f6:b9:43:23:c1: fa:1b:0e:11:83:aa:ed:c6:29:73:44:63:8b:dc:b8:af:a7:d9: bd:af:24:a0:10:2c:42:1e:f0:51:64:02:50:af:a7:e9:17:9d: dd:82:15:ef -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqmTfHdsMR2tle8gd8KyJXUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTIxMTIwNTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTNkNzRmZjI4NTg1MzBiMzkyNGM4NGYwZjJhMGFjM2Q3MjJlNzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8W97x41ZteIqCyIsYq9m7DNOGgjz yISHH7pP7uYdzvEr/F5e4lC7a888lrgfd8xBEOWtHcFp9aoEBmyqHa2O1BnpnaDq sZ0xw7Gh8o7zBEVgSjZOKorzA4Mm2BqXfS9unuIdMU5TSXC8f2pb0lcxsaxLC9bl BAiqT1/wbWIM+MoWfj6X8lA4b3KGL996KLJkK8h4U25/8P8BH2Ny3S6Ww4Lt0rZT DVWlH7lVBitXGs0IS727KWcORs/IqVAewLeVEqIpM1D3BxuJYU10f/NWH0wbcSZC 9e+HZ68Vz+ZJm9svbKOfpQORq4jnZpIF437n86/grLCKtatVkU2oXzFVFwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAo9dP8oWFMLOSTITw8qCsPXIuc5MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvQ2oxMF95aFlVd3M1Sk1oUER5b0t3OWNpNXprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/GtAwQA l/K/MA0GCSqGSIb3DQEBCwUAA4IBAQBzY9456z78qXyT2I08Ls2ZcQoqGAfy5CXE XHF0aOiEwUkEfzbm+dO0pMANlikmCJTD7z5acTM8H+yUHnp7EaPqRRonjRbUbfcc fapI6b4ZctCQ+0B+UJ1QZrf6+9vRLrqxhX+0AuedBq2qTKZlnV023mqgzrZdhVjn ap+7uQqTEDXX+LxJ+AuEQbtqKPOWwlC94jvq8Qsnh/yyJ1p1KnaZK3/Pw66GcGgm 6Spaxb2gte9HRyTH3B9V0zluNZMQrf8zCBw9BiEtKYOMJjU+1K/xXhWN9rlDI8H6 Gw4Rg6rtxilzRGOL3Livp9m9rySgECxCHvBRZAJQr6fpF53dghXv -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:34 2025 by rpki-client