This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FgmIcyP6cWG9qaOMidxCkMIODBQ.roa File: FgmIcyP6cWG9qaOMidxCkMIODBQ.roa (raw, json) Hash identifier: 2/v+7PyKfQbZRBuDnswjazANzumQ8q5umETz+OdD5Js= Subject key identifier: 16:09:88:73:23:FA:71:61:BD:A9:A3:8C:89:DC:42:90:C2:0E:0C:14 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019ADD7A4790BBC61C551E1FBBC98F4084B1 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FgmIcyP6cWG9qaOMidxCkMIODBQ.roa Signing time: Tue 02 Dec 2025 05:12:49 +0000 ROA not before: Tue 02 Dec 2025 05:12:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 30058 IP address blocks: 151.241.145.0/24 maxlen: 24 151.241.147.0/24 maxlen: 24 151.244.0.0/24 maxlen: 24 151.247.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:dd:7a:47:90:bb:c6:1c:55:1e:1f:bb:c9:8f:40:84:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 2 05:12:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1609887323fa7161bda9a38c89dc4290c20e0c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8a:dc:12:67:95:b0:44:05:d7:39:b3:5a:0c: 79:0f:76:f8:35:40:2e:04:8c:5d:73:6f:eb:fa:d4: 5d:d2:67:aa:96:56:f3:50:0b:ed:9c:fd:28:17:59: 29:84:84:96:29:b1:ee:5c:cd:54:5b:a0:8b:b8:89: 85:b0:42:fa:e3:d3:da:6d:78:e2:bc:0b:15:66:05: 8e:bd:06:12:01:37:f0:7e:a6:18:51:27:15:a0:b4: 3d:ef:cc:be:42:80:c2:d1:7d:3a:fa:8d:44:53:4a: 5b:1d:24:94:41:96:a1:9a:21:77:0c:f3:99:b1:2b: 58:79:4c:03:76:00:62:fc:40:ab:c7:07:d0:85:aa: df:69:ec:ca:f4:07:e0:ab:6a:ca:ff:c9:3b:df:9a: f7:e5:52:2f:f7:88:df:17:5f:1f:ee:30:2c:b0:b1: 41:70:a0:ea:dc:5f:68:f5:68:d9:ee:5f:45:0c:40: 31:8d:9a:89:28:61:7e:c3:79:08:ef:62:ce:08:b0: 21:06:01:cc:48:6d:0b:2d:2a:8a:a5:5a:de:c9:63: 6c:a4:2e:f5:b8:f5:e8:2a:fd:ac:30:b6:e5:6f:f5: 20:ab:aa:fb:09:85:05:e8:0c:e8:db:26:e1:f2:6f: 97:aa:e1:3f:d1:bd:18:51:e7:91:28:f2:02:89:d7: 2c:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:09:88:73:23:FA:71:61:BD:A9:A3:8C:89:DC:42:90:C2:0E:0C:14 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FgmIcyP6cWG9qaOMidxCkMIODBQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.145.0/24 151.241.147.0/24 151.244.0.0/24 151.247.129.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:6e:ba:dd:bc:5d:29:1b:c4:4f:45:47:91:08:81:52:57:cd: 9d:60:b6:7f:9b:e9:a5:f8:73:6e:01:7b:72:50:d8:7d:0c:b8: 9f:80:f5:d0:b3:0f:fc:14:54:47:c9:99:81:9b:08:1f:fe:f0: 31:97:5f:7d:c5:b8:9d:fb:88:7d:b8:a3:b1:a4:b9:ef:a3:7d: 63:7c:f7:0f:82:02:93:e6:61:cd:85:e0:14:17:85:12:90:26: 50:d6:a7:18:d9:a9:eb:d4:7a:83:9c:69:88:f5:4d:d6:d7:a0: 78:d9:b7:18:63:81:f8:b0:6e:11:82:e9:15:fd:b8:8d:9c:2c: 0c:02:53:66:18:e5:09:61:5c:9f:11:8d:56:12:29:40:0e:9d: 9d:fb:ba:00:0a:76:47:70:fd:d6:bb:02:30:41:10:45:e7:7f: 9d:de:3f:38:67:28:0d:42:42:c4:cc:0d:ab:ad:ff:04:6b:c4: a2:71:9d:a9:78:ec:db:1b:38:5b:99:a9:2b:88:22:e2:7f:7b: 24:a1:0a:37:fd:47:30:bc:4a:ad:72:f2:36:94:ba:44:b5:4e: af:33:5e:1d:c3:88:55:0e:b3:b0:0a:e9:05:2c:95:47:a1:2c: 7b:f5:07:b7:4e:c6:7f:5f:05:19:05:d9:8c:8d:0c:78:7c:35: ea:1d:4e:42 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZrdekeQu8YcVR4fu8mPQISxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjAyMDUxMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjA5ODg3MzIzZmE3MTYxYmRhOWEzOGM4OWRjNDI5MGMyMGUwYzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyorcEmeVsEQF1zmzWgx5D3b4NUAu BIxdc2/r+tRd0meqllbzUAvtnP0oF1kphISWKbHuXM1UW6CLuImFsEL649PabXji vAsVZgWOvQYSATfwfqYYUScVoLQ978y+QoDC0X06+o1EU0pbHSSUQZahmiF3DPOZ sStYeUwDdgBi/ECrxwfQharfaezK9Afgq2rK/8k735r35VIv94jfF18f7jAssLFB cKDq3F9o9WjZ7l9FDEAxjZqJKGF+w3kI72LOCLAhBgHMSG0LLSqKpVreyWNspC71 uPXoKv2sMLblb/Ugq6r7CYUF6Azo2ybh8m+XquE/0b0YUeeRKPICidcs3QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFBYJiHMj+nFhvamjjIncQpDCDgwUMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvRmdtSWN5UDZjV0c5cWFPTWlkeENrTUlPREJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/GRAwQA l/GTAwQAl/QAAwQAl/eBMA0GCSqGSIb3DQEBCwUAA4IBAQCNbrrdvF0pG8RPRUeR CIFSV82dYLZ/m+ml+HNuAXtyUNh9DLifgPXQsw/8FFRHyZmBmwgf/vAxl199xbid +4h9uKOxpLnvo31jfPcPggKT5mHNheAUF4USkCZQ1qcY2anr1HqDnGmI9U3W16B4 2bcYY4H4sG4RgukV/biNnCwMAlNmGOUJYVyfEY1WEilADp2d+7oACnZHcP3WuwIw QRBF53+d3j84ZygNQkLEzA2rrf8Ea8SicZ2peOzbGzhbmakriCLif3skoQo3/Ucw vEqtcvI2lLpEtU6vM14dw4hVDrOwCukFLJVHoSx79Qe3TsZ/XwUZBdmMjQx4fDXq HU5C -----END CERTIFICATE-----Generated at Wed Dec 3 09:42:32 2025 by rpki-client