This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DKmMKNZZnIg0sMSgfNB--jp63HU.roa File: DKmMKNZZnIg0sMSgfNB--jp63HU.roa (raw, json) Hash identifier: nPTRYmdlPXFj88PDgE9TAViJqhJjzqpS5iRiCo3HMpc= Subject key identifier: 0C:A9:8C:28:D6:59:9C:88:34:B0:C4:A0:7C:D0:7E:FA:3A:7A:DC:75 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AED9CDF2082971794A094894C9F878145 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DKmMKNZZnIg0sMSgfNB--jp63HU.roa Signing time: Fri 05 Dec 2025 08:24:32 +0000 ROA not before: Fri 05 Dec 2025 08:24:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211484 IP address blocks: 151.240.144.0/24 maxlen: 24 151.246.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:9c:df:20:82:97:17:94:a0:94:89:4c:9f:87:81:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 5 08:24:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0ca98c28d6599c8834b0c4a07cd07efa3a7adc75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1c:13:1b:0e:28:99:12:67:7d:65:45:50:30: 9a:80:4b:82:fb:ba:34:73:58:1a:12:ef:a0:0b:af: 1e:74:2d:43:d5:bf:e8:33:73:5c:be:3f:f2:e6:2f: 88:a6:42:ff:c6:22:c8:d1:5f:fb:7d:48:04:87:3e: b9:d3:c1:46:63:1c:87:02:e4:f0:be:28:c5:24:d2: 33:9d:c3:66:a0:11:b9:c5:62:f2:d0:62:bc:10:79: fd:66:be:4c:45:06:7d:72:f8:13:04:a7:e0:ef:bc: 6e:b8:98:95:a5:60:38:93:09:3c:1f:b4:26:c8:90: a0:2e:1b:1e:f4:8e:76:0e:b9:8b:1e:76:82:4f:3f: 5d:1c:d3:c8:11:a2:93:ef:1d:56:89:23:4b:02:5d: 01:bd:c2:08:51:eb:3e:b9:c2:37:1e:8e:3c:9e:c5: 40:fd:f8:eb:ef:85:b6:c5:61:ad:18:eb:af:d4:aa: f8:ec:19:84:47:70:00:12:4d:cc:fd:c7:d4:12:26: 98:42:47:a4:05:10:07:7b:07:91:e5:63:a5:80:06: 3a:6b:b4:eb:ce:9e:e1:57:12:0c:c7:51:8d:b6:6c: 8b:87:fd:c8:d1:db:7d:3b:5a:a6:63:97:33:f0:83: 51:89:ff:47:c5:fa:27:ba:80:43:8b:7e:a0:0d:80: 16:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A9:8C:28:D6:59:9C:88:34:B0:C4:A0:7C:D0:7E:FA:3A:7A:DC:75 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DKmMKNZZnIg0sMSgfNB--jp63HU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.144.0/24 151.246.128.0/17 Signature Algorithm: sha256WithRSAEncryption 0d:d2:21:24:fc:d3:73:9f:b6:bc:99:e0:cd:d8:a7:d0:30:d1: ea:ab:88:f0:18:05:34:f0:e6:ca:da:04:fb:66:90:b5:0f:45: 7a:72:2a:99:f1:d3:b3:f3:11:2f:dd:7f:66:70:cd:d6:e9:c7: 08:60:c2:8a:de:35:3b:ee:c0:22:7f:b8:32:e8:be:83:76:70: 5b:82:7d:1a:1f:14:79:cd:fc:c0:23:c5:03:ad:48:79:28:16: da:45:c1:9d:37:21:24:9c:a8:89:33:af:b2:10:5a:5a:a7:89: 73:33:2a:dc:c5:3f:dd:c8:1b:77:e2:fc:26:07:42:fb:d1:17: 67:47:4e:d8:12:1d:84:c5:6c:e7:92:ad:da:1e:6f:d2:89:b2: 8f:f6:43:a7:1d:d1:8c:a8:dd:ec:f8:e3:9f:49:35:73:75:4e: 2e:92:71:fe:ae:5e:4f:36:78:16:c5:8d:7b:a1:d5:27:cf:1f: d7:91:ea:70:d3:71:8a:d1:fd:9f:08:b9:38:93:66:39:93:0c: f0:10:b6:54:e7:a7:c7:f8:ff:c6:38:3e:e7:84:66:e9:4d:c0: 54:60:22:57:46:39:e5:09:e1:04:da:64:0a:35:ab:6f:a9:c2: 11:20:bf:df:ea:df:2d:8a:f2:89:fc:9c:a8:7c:e6:bd:c3:86: f7:b7:43:66 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZrtnN8ggpcXlKCUiUyfh4FFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjA1MDgyNDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwY2E5OGMyOGQ2NTk5Yzg4MzRiMGM0YTA3Y2QwN2VmYTNhN2FkYzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxwTGw4omRJnfWVFUDCagEuC+7o0 c1gaEu+gC68edC1D1b/oM3Ncvj/y5i+IpkL/xiLI0V/7fUgEhz6508FGYxyHAuTw vijFJNIzncNmoBG5xWLy0GK8EHn9Zr5MRQZ9cvgTBKfg77xuuJiVpWA4kwk8H7Qm yJCgLhse9I52DrmLHnaCTz9dHNPIEaKT7x1WiSNLAl0BvcIIUes+ucI3Ho48nsVA /fjr74W2xWGtGOuv1Kr47BmER3AAEk3M/cfUEiaYQkekBRAHeweR5WOlgAY6a7Tr zp7hVxIMx1GNtmyLh/3I0dt9O1qmY5cz8INRif9HxfonuoBDi36gDYAWRwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAypjCjWWZyINLDEoHzQfvo6etx1MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvREttTUtOWlpuSWcwc01TZ2ZOQi0tanA2M0hVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/CQAwQH l/aAMA0GCSqGSIb3DQEBCwUAA4IBAQAN0iEk/NNzn7a8meDN2KfQMNHqq4jwGAU0 8ObK2gT7ZpC1D0V6ciqZ8dOz8xEv3X9mcM3W6ccIYMKK3jU77sAif7gy6L6DdnBb gn0aHxR5zfzAI8UDrUh5KBbaRcGdNyEknKiJM6+yEFpap4lzMyrcxT/dyBt34vwm B0L70RdnR07YEh2ExWznkq3aHm/SibKP9kOnHdGMqN3s+OOfSTVzdU4uknH+rl5P NngWxY17odUnzx/Xkepw03GK0f2fCLk4k2Y5kwzwELZU56fH+P/GOD7nhGbpTcBU YCJXRjnlCeEE2mQKNatvqcIRIL/f6t8tivKJ/JyofOa9w4b3t0Nm -----END CERTIFICATE-----Generated at Fri Dec 5 18:22:19 2025 by rpki-client