This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Dje6XjcetaquiPCeE2AURf0jW-w.roa File: Dje6XjcetaquiPCeE2AURf0jW-w.roa (raw, json) Hash identifier: 4oU9DtC6mvgb23TmVoSgVfTT1xQF0qL0++6159E6X54= Subject key identifier: 0E:37:BA:5E:37:1E:B5:AA:AE:88:F0:9E:13:60:14:45:FD:23:5B:EC Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AE559B84C9872EA50E5758047666AF65B Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Dje6XjcetaquiPCeE2AURf0jW-w.roa Signing time: Wed 03 Dec 2025 17:54:13 +0000 ROA not before: Wed 03 Dec 2025 17:54:13 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 36530 IP address blocks: 151.241.128.0/22 maxlen: 24 151.243.44.0/24 maxlen: 24 151.243.115.0/24 maxlen: 24 151.244.128.0/24 maxlen: 24 151.244.130.0/24 maxlen: 24 151.244.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e5:59:b8:4c:98:72:ea:50:e5:75:80:47:66:6a:f6:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 3 17:54:13 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=0e37ba5e371eb5aaae88f09e13601445fd235bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a8:fd:cc:66:1e:d4:a8:ef:57:9c:d9:98:7b: b1:86:67:4a:7b:7b:c8:c4:cb:cf:9b:7e:51:5c:5d: c6:a9:60:d9:cf:74:e9:31:77:4d:2f:5b:e1:f0:18: 00:37:37:ad:58:f2:f6:d2:a0:e5:61:f8:72:db:0d: 89:69:ee:0c:c5:a1:05:70:60:b9:56:67:22:5b:b9: 33:43:77:eb:ea:9b:30:90:e1:b2:bf:00:2b:f5:76: ed:27:0c:81:a9:a8:0d:25:06:38:72:7d:b7:be:13: 8f:0a:bb:06:9f:12:bd:ab:33:2a:52:79:4c:55:0e: 54:06:83:87:52:cc:5b:04:72:07:9d:c0:93:2b:1c: e7:ba:59:aa:3b:bb:f8:8e:f7:fe:66:38:b6:5b:7f: 96:93:e3:77:3a:e2:ba:dc:63:68:c9:66:11:22:c5: eb:62:18:9e:70:4d:fe:9f:ba:03:f8:a9:2c:54:ea: be:f8:d4:db:8f:21:6c:cc:65:a0:eb:34:6d:04:99: dc:a1:b1:10:eb:a0:33:d2:e2:2f:9c:62:c7:69:c7: b2:1b:94:7b:f4:87:92:4f:44:e3:81:d7:cd:bb:05: 8c:37:99:c1:ac:aa:a2:13:a0:15:d1:64:12:4e:39: 2b:c7:11:be:21:88:9d:68:65:76:53:b7:9e:b5:32: 1f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:37:BA:5E:37:1E:B5:AA:AE:88:F0:9E:13:60:14:45:FD:23:5B:EC X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Dje6XjcetaquiPCeE2AURf0jW-w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.128.0/22 151.243.44.0/24 151.243.115.0/24 151.244.128.0/24 151.244.130.0/24 151.244.236.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:f3:46:45:3e:a6:f7:ec:26:2e:36:d5:51:33:01:51:77:e6: 12:d6:11:ec:00:5d:d9:60:5b:2a:7b:0c:54:a2:8a:2c:55:a9: 47:23:4f:f4:d3:ed:9e:cd:46:7a:89:ed:e1:5e:d4:59:fd:14: db:50:91:b1:78:77:46:28:30:d5:1f:c4:f2:2a:1a:09:7b:0a: 03:7b:2e:a3:1a:91:68:c9:d2:57:f0:80:55:3b:c8:52:32:e1: ca:42:bf:5f:1b:d0:9e:1e:42:00:fc:ab:82:bb:1b:40:17:97: e2:cf:37:bf:d4:fa:65:7f:5f:f0:71:ef:35:95:ab:c2:ed:ae: f8:fa:3a:ff:55:59:45:d6:b6:a7:65:0b:fd:7c:fa:b5:ee:08: 4b:36:9d:f5:b6:52:34:a8:c8:80:36:b8:41:41:22:e5:2f:ae: bd:e4:f7:ae:51:4d:c1:9d:10:00:d4:35:6a:49:ae:52:db:57: 5f:a2:08:e5:fd:9b:e2:94:7b:12:29:b7:e6:d4:fa:c9:b9:3d: 8c:d2:17:c0:4c:59:3b:b5:32:ef:f4:50:5e:01:d5:58:d4:0a: cf:b4:55:95:be:d3:00:95:b3:0e:c8:8c:19:21:9f:37:70:49: 27:e1:bb:7e:56:e5:5c:d1:b3:16:44:f5:b1:a4:b5:ed:e3:ae: 04:24:b4:8c -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZrlWbhMmHLqUOV1gEdmavZbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjAzMTc1NDEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTM3YmE1ZTM3MWViNWFhYWU4OGYwOWUxMzYwMTQ0NWZkMjM1YmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaj9zGYe1KjvV5zZmHuxhmdKe3vI xMvPm35RXF3GqWDZz3TpMXdNL1vh8BgANzetWPL20qDlYfhy2w2Jae4MxaEFcGC5 VmciW7kzQ3fr6pswkOGyvwAr9XbtJwyBqagNJQY4cn23vhOPCrsGnxK9qzMqUnlM VQ5UBoOHUsxbBHIHncCTKxznulmqO7v4jvf+Zji2W3+Wk+N3OuK63GNoyWYRIsXr YhiecE3+n7oD+KksVOq++NTbjyFszGWg6zRtBJncobEQ66Az0uIvnGLHaceyG5R7 9IeST0TjgdfNuwWMN5nBrKqiE6AV0WQSTjkrxxG+IYidaGV2U7eetTIfZQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFA43ul43HrWqrojwnhNgFEX9I1vsMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvRGplNlhqY2V0YXF1aVBDZUUyQVVSZjBqVy13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCl/GAAwQA l/MsAwQAl/NzAwQAl/SAAwQAl/SCAwQAl/TsMA0GCSqGSIb3DQEBCwUAA4IBAQBr 80ZFPqb37CYuNtVRMwFRd+YS1hHsAF3ZYFsqewxUooosValHI0/00+2ezUZ6ie3h XtRZ/RTbUJGxeHdGKDDVH8TyKhoJewoDey6jGpFoydJX8IBVO8hSMuHKQr9fG9Ce HkIA/KuCuxtAF5fizze/1Pplf1/wce81lavC7a74+jr/VVlF1ranZQv9fPq17ghL Np31tlI0qMiANrhBQSLlL6695PeuUU3BnRAA1DVqSa5S21dfogjl/ZvilHsSKbfm 1PrJuT2M0hfATFk7tTLv9FBeAdVY1ArPtFWVvtMAlbMOyIwZIZ83cEkn4bt+VuVc 0bMWRPWxpLXt464EJLSM -----END CERTIFICATE-----Generated at Sat Dec 6 01:49:45 2025 by rpki-client