This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/G_26Kz-RfGt66IX_tbuEM9ujTIg.roa File: G_26Kz-RfGt66IX_tbuEM9ujTIg.roa (raw, json) Hash identifier: LdBxXUOg8a1tJzvbuFB6hebsWTPOfVb5rjM1HdJ8eEQ= Subject key identifier: 1B:FD:BA:2B:3F:91:7C:6B:7A:E8:85:FF:B5:BB:84:33:DB:A3:4C:88 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A718F2AE4C2312A9BB09407D935DDB6BE Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/G_26Kz-RfGt66IX_tbuEM9ujTIg.roa Signing time: Tue 11 Nov 2025 06:16:39 +0000 ROA not before: Tue 11 Nov 2025 06:16:39 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216102 IP address blocks: 151.245.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:71:8f:2a:e4:c2:31:2a:9b:b0:94:07:d9:35:dd:b6:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 11 06:16:39 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1bfdba2b3f917c6b7ae885ffb5bb8433dba34c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:66:e6:b1:5c:b0:67:a5:54:52:44:49:cd:77: 1c:54:e5:dc:e6:80:7a:02:9e:54:70:29:16:9d:2b: 9b:68:41:e7:59:34:b5:0f:67:9b:14:a2:a8:2a:bc: 0d:17:7d:8e:5c:e2:f9:c7:8c:ad:2d:bd:6c:63:76: 31:d8:19:36:f8:ed:5d:9b:91:de:0e:90:f9:9e:b5: be:e5:41:9f:08:3e:aa:b9:5e:80:bc:64:5a:98:3c: 3d:63:37:8d:16:ce:85:21:0b:b5:4a:ba:f4:24:23: 10:75:21:f8:7e:b7:30:d5:a8:eb:03:41:83:72:29: d2:8e:db:aa:b5:62:74:2f:a9:8a:ec:c5:f8:10:95: 7c:d5:e2:0e:47:c1:b3:85:7a:26:9a:ba:38:63:2f: 41:9a:fc:3f:cf:55:89:12:9f:cc:a2:d4:45:13:2b: d0:11:24:89:2b:3c:b1:ee:89:6a:d4:b1:66:5c:22: a9:8f:a7:48:7a:36:d4:a0:86:27:88:4e:4a:f9:a1: 74:fd:39:29:6c:3c:41:75:58:83:b0:e4:4f:79:a9: e9:89:c0:d1:c5:83:36:f5:c8:6e:5e:1e:5a:45:84: 4d:0a:08:7a:2f:56:40:f7:32:03:f7:5f:55:62:06: aa:ea:75:b0:77:50:e4:d9:39:ca:92:bf:26:f1:8a: ca:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:FD:BA:2B:3F:91:7C:6B:7A:E8:85:FF:B5:BB:84:33:DB:A3:4C:88 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/G_26Kz-RfGt66IX_tbuEM9ujTIg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.245.160.0/24 Signature Algorithm: sha256WithRSAEncryption 44:2e:9e:32:35:6d:4e:41:6b:b5:d9:e9:8d:f5:af:cf:30:62: ac:9e:ef:bc:c8:0c:17:cd:4c:72:ba:bf:b2:b2:c9:e1:4c:4e: b2:c6:b0:4e:43:07:df:e7:e5:1e:b0:b2:80:09:39:6e:2d:f8: da:8d:27:ef:4d:83:e6:4b:a4:f0:29:34:3a:34:5f:fb:c1:32: bf:d5:63:62:20:b3:fe:74:2f:96:c2:17:4f:99:51:ec:ca:e4: 47:1e:0f:b1:b4:6d:a4:e4:63:4b:6b:85:d1:0d:94:97:3b:b9: 16:86:cb:34:71:aa:65:2d:77:59:af:93:57:20:d6:16:63:94: fe:61:70:f0:3f:6b:e2:f0:cc:3f:97:6c:e7:42:2f:04:c5:83: a2:78:3f:08:da:50:04:15:71:1a:29:dd:4f:fe:2d:17:36:9e: ce:a4:17:46:47:0b:a3:17:38:cc:f1:6d:90:8d:75:db:d4:0c: a0:e9:17:00:d3:34:02:c7:b3:5d:38:56:6c:55:9f:71:a4:67: a8:62:06:ec:42:17:53:ea:72:f8:13:01:10:f6:34:7c:d5:0a: 9d:8f:e3:ff:1c:35:9a:d1:43:0a:9d:40:55:57:93:7a:7e:6e: ee:69:e4:31:50:08:ec:ca:36:60:b9:94:f7:07:f9:22:5a:51: ab:85:52:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpxjyrkwjEqm7CUB9k13ba+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTExMDYxNjM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxYmZkYmEyYjNmOTE3YzZiN2FlODg1ZmZiNWJiODQzM2RiYTM0Yzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2bmsVywZ6VUUkRJzXccVOXc5oB6 Ap5UcCkWnSubaEHnWTS1D2ebFKKoKrwNF32OXOL5x4ytLb1sY3Yx2Bk2+O1dm5He DpD5nrW+5UGfCD6quV6AvGRamDw9YzeNFs6FIQu1Srr0JCMQdSH4frcw1ajrA0GD cinSjtuqtWJ0L6mK7MX4EJV81eIOR8GzhXommro4Yy9Bmvw/z1WJEp/MotRFEyvQ ESSJKzyx7olq1LFmXCKpj6dIejbUoIYniE5K+aF0/TkpbDxBdViDsORPeanpicDR xYM29chuXh5aRYRNCgh6L1ZA9zID919VYgaq6nWwd1Dk2TnKkr8m8YrK6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBv9uis/kXxreuiF/7W7hDPbo0yIMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvR18yNkt6LVJmR3Q2NklYX3RidUVNOXVqVElnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/WgMA0G CSqGSIb3DQEBCwUAA4IBAQBELp4yNW1OQWu12emN9a/PMGKsnu+8yAwXzUxyur+y ssnhTE6yxrBOQwff5+UesLKACTluLfjajSfvTYPmS6TwKTQ6NF/7wTK/1WNiILP+ dC+WwhdPmVHsyuRHHg+xtG2k5GNLa4XRDZSXO7kWhss0caplLXdZr5NXINYWY5T+ YXDwP2vi8Mw/l2znQi8ExYOieD8I2lAEFXEaKd1P/i0XNp7OpBdGRwujFzjM8W2Q jXXb1Ayg6RcA0zQCx7NdOFZsVZ9xpGeoYgbsQhdT6nL4EwEQ9jR81Qqdj+P/HDWa 0UMKnUBVV5N6fm7uaeQxUAjsyjZguZT3B/kiWlGrhVIR -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:37 2025 by rpki-client