This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FxBx5xMvGQgW3AT-ntnibjpKnV0.roa File: FxBx5xMvGQgW3AT-ntnibjpKnV0.roa (raw, json) Hash identifier: XJhEPOg3QvvtZe+45VS36bb5Zx1GsjPxskai+1Q4EFI= Subject key identifier: 17:10:71:E7:13:2F:19:08:16:DC:04:FE:9E:D9:E2:6E:3A:4A:9D:5D Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019ABA7C68D38F7A68E4855DB48983FA0100 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FxBx5xMvGQgW3AT-ntnibjpKnV0.roa Signing time: Tue 25 Nov 2025 10:08:26 +0000 ROA not before: Tue 25 Nov 2025 10:08:26 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 63473 IP address blocks: 151.241.5.0/24 maxlen: 24 151.241.113.0/24 maxlen: 24 151.242.15.0/24 maxlen: 24 151.242.74.0/24 maxlen: 24 151.242.85.0/24 maxlen: 24 151.245.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ba:7c:68:d3:8f:7a:68:e4:85:5d:b4:89:83:fa:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 25 10:08:26 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=171071e7132f190816dc04fe9ed9e26e3a4a9d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d9:f5:a2:de:36:47:cb:00:51:8b:89:a0:5f: 70:95:37:88:92:7c:71:30:e5:e6:ae:d3:87:8f:d8: 26:e3:3b:cd:9c:bb:5f:f2:7a:dd:3a:bc:4f:18:47: cb:15:08:66:75:2d:4d:67:5a:49:9a:8d:14:40:73: 61:a3:31:23:4e:96:a6:f9:56:34:b0:61:85:1d:29: 18:fb:87:46:06:c1:97:ca:d9:fd:41:6b:ea:57:0f: d9:7d:24:e5:7b:fe:77:ef:df:19:fc:ed:da:d4:7f: ce:b5:c9:db:05:39:d8:40:0f:27:a5:b1:ef:47:85: 9f:4d:bc:ca:0f:75:2b:d1:e6:0f:1b:2e:67:86:c7: 1a:2e:91:5a:67:79:34:41:51:f4:1b:00:85:5b:b2: 66:76:c0:dd:5c:79:17:f0:5a:65:44:2a:4f:d6:48: 4f:6b:a3:a2:06:20:1f:82:f1:5b:3d:8c:de:ba:29: d9:76:7a:f8:ca:d3:69:23:c7:09:e3:f7:2b:51:f7: ec:90:77:55:d4:2b:ff:6c:c9:0e:70:33:27:19:10: 5f:31:aa:2a:4c:eb:f6:24:c0:f2:1c:55:0e:c0:99: b1:79:50:44:4e:59:2c:a1:5a:4e:ed:cf:6d:24:60: 9c:47:37:9e:f4:71:20:34:57:2a:46:ad:3b:e7:b3: 46:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:10:71:E7:13:2F:19:08:16:DC:04:FE:9E:D9:E2:6E:3A:4A:9D:5D X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FxBx5xMvGQgW3AT-ntnibjpKnV0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.5.0/24 151.241.113.0/24 151.242.15.0/24 151.242.74.0/24 151.242.85.0/24 151.245.106.0/24 Signature Algorithm: sha256WithRSAEncryption 64:a1:c5:1a:f8:63:7e:09:3d:5f:df:77:4a:cc:2c:39:50:61: 12:6b:3b:7e:c2:2e:ca:12:3e:88:8e:1f:47:fc:97:dc:6f:47: 0a:e4:27:9c:4e:55:44:95:5f:90:5f:a6:1e:50:16:2d:41:5b: d1:02:05:6e:e9:fd:aa:16:96:1a:e1:f7:c0:ab:3f:ee:44:ba: a4:8b:12:dd:27:2c:7a:6f:d8:47:b0:fb:80:4c:bb:4c:61:42: b3:c6:fb:b7:59:6d:95:bd:7c:73:8c:f4:57:79:02:79:98:78: 10:58:b7:e5:9a:77:31:02:f9:fd:eb:15:11:4d:cb:c5:7d:05: e8:0c:d4:32:44:12:62:d0:a5:cc:d2:37:26:dc:d3:a5:84:3e: 7b:1b:46:6f:71:4a:f4:45:ff:36:bd:95:d0:b2:50:9c:31:5d: f3:e1:ce:d0:f2:7a:fc:9d:4a:35:c8:77:a9:4a:ff:b0:c0:49: 3d:af:77:0c:ae:88:e0:66:2d:6c:30:2d:76:56:5b:00:e9:c3: d1:e4:49:6c:4f:f9:34:03:56:2f:92:0c:0c:59:3a:46:4d:17: e7:b8:58:26:2e:10:85:b2:e1:b8:ab:2f:79:3d:86:8c:42:bc: 4f:f8:2c:bd:41:68:67:73:65:87:cf:c2:de:1a:e8:a2:3a:56: 2f:0c:8e:5b -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZq6fGjTj3po5IVdtImD+gEAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTI1MTAwODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzEwNzFlNzEzMmYxOTA4MTZkYzA0ZmU5ZWQ5ZTI2ZTNhNGE5ZDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Nn1ot42R8sAUYuJoF9wlTeIknxx MOXmrtOHj9gm4zvNnLtf8nrdOrxPGEfLFQhmdS1NZ1pJmo0UQHNhozEjTpam+VY0 sGGFHSkY+4dGBsGXytn9QWvqVw/ZfSTle/53798Z/O3a1H/OtcnbBTnYQA8npbHv R4WfTbzKD3Ur0eYPGy5nhscaLpFaZ3k0QVH0GwCFW7JmdsDdXHkX8FplRCpP1khP a6OiBiAfgvFbPYzeuinZdnr4ytNpI8cJ4/crUffskHdV1Cv/bMkOcDMnGRBfMaoq TOv2JMDyHFUOwJmxeVBETlksoVpO7c9tJGCcRzee9HEgNFcqRq0757NGAQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFBcQcecTLxkIFtwE/p7Z4m46Sp1dMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvRnhCeDV4TXZHUWdXM0FULW50bmlianBLblYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAl/EFAwQA l/FxAwQAl/IPAwQAl/JKAwQAl/JVAwQAl/VqMA0GCSqGSIb3DQEBCwUAA4IBAQBk ocUa+GN+CT1f33dKzCw5UGESazt+wi7KEj6Ijh9H/Jfcb0cK5CecTlVElV+QX6Ye UBYtQVvRAgVu6f2qFpYa4ffAqz/uRLqkixLdJyx6b9hHsPuATLtMYUKzxvu3WW2V vXxzjPRXeQJ5mHgQWLflmncxAvn96xURTcvFfQXoDNQyRBJi0KXM0jcm3NOlhD57 G0ZvcUr0Rf82vZXQslCcMV3z4c7Q8nr8nUo1yHepSv+wwEk9r3cMrojgZi1sMC12 VlsA6cPR5ElsT/k0A1YvkgwMWTpGTRfnuFgmLhCFsuG4qy95PYaMQrxP+Cy9QWhn c2WHz8LeGuiiOlYvDI5b -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:08 2025 by rpki-client