This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HcILoJuGSB7AvrcKLLokLEuhgv0.roa File: HcILoJuGSB7AvrcKLLokLEuhgv0.roa (raw, json) Hash identifier: 6fJkthGP3CKCTbQSFGLUSCw0bfpgJ1XUxncmZhdeQ7k= Subject key identifier: 1D:C2:0B:A0:9B:86:48:1E:C0:BE:B7:0A:2C:BA:24:2C:4B:A1:82:FD Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019ADD7A47CE55EB746511DFE18A8670EFC3 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HcILoJuGSB7AvrcKLLokLEuhgv0.roa Signing time: Tue 02 Dec 2025 05:12:49 +0000 ROA not before: Tue 02 Dec 2025 05:12:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 151.240.45.0/24 maxlen: 24 151.240.163.0/24 maxlen: 24 151.240.173.0/24 maxlen: 24 151.241.30.0/24 maxlen: 24 151.241.39.0/24 maxlen: 24 151.241.50.0/24 maxlen: 24 151.241.64.0/24 maxlen: 24 151.241.67.0/24 maxlen: 24 151.241.70.0/24 maxlen: 24 151.241.71.0/24 maxlen: 24 151.241.73.0/24 maxlen: 24 151.241.77.0/24 maxlen: 24 151.241.95.0/24 maxlen: 24 151.241.115.0/24 maxlen: 24 151.241.160.0/24 maxlen: 24 151.241.176.0/24 maxlen: 24 151.241.204.0/24 maxlen: 24 151.242.45.0/24 maxlen: 24 151.242.158.0/24 maxlen: 24 151.243.2.0/24 maxlen: 24 151.243.105.0/24 maxlen: 24 151.243.137.0/24 maxlen: 24 151.244.5.0/24 maxlen: 24 151.244.57.0/24 maxlen: 24 151.244.111.0/24 maxlen: 24 151.244.114.0/24 maxlen: 24 151.244.115.0/24 maxlen: 24 151.244.131.0/24 maxlen: 24 151.244.132.0/24 maxlen: 24 151.244.133.0/24 maxlen: 24 151.244.191.0/24 maxlen: 24 151.244.193.0/24 maxlen: 24 151.244.198.0/24 maxlen: 24 151.244.201.0/24 maxlen: 24 151.244.212.0/24 maxlen: 24 151.244.243.0/24 maxlen: 24 151.245.28.0/24 maxlen: 24 151.245.70.0/24 maxlen: 24 151.245.76.0/24 maxlen: 24 151.245.78.0/24 maxlen: 24 151.245.104.0/24 maxlen: 24 151.245.195.0/24 maxlen: 24 151.245.201.0/24 maxlen: 24 151.245.212.0/24 maxlen: 24 151.247.120.0/23 maxlen: 24 151.247.122.0/23 maxlen: 24 151.247.124.0/23 maxlen: 24 151.247.126.0/23 maxlen: 24 151.247.188.0/24 maxlen: 24 151.247.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:dd:7a:47:ce:55:eb:74:65:11:df:e1:8a:86:70:ef:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 2 05:12:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1dc20ba09b86481ec0beb70a2cba242c4ba182fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bf:2d:a3:60:34:7c:88:ab:9b:c5:e7:31:24: bb:d3:89:f6:33:e3:da:34:02:92:f2:91:c2:b9:2f: 40:c5:5e:a9:dc:a5:21:ce:86:ad:d4:c5:da:50:94: aa:b1:9e:aa:8e:f0:90:48:d9:6a:29:83:54:2e:c5: 98:38:f2:a3:23:8b:6c:6b:45:95:17:1b:d2:63:35: 83:23:f2:07:c0:30:97:63:87:d7:5c:99:f5:44:47: 0f:41:01:55:33:a3:c3:df:5c:be:ea:fe:39:fb:5b: eb:0f:51:c1:0f:af:22:47:e6:83:13:c7:7d:9b:68: df:13:33:5d:1d:c3:bc:c6:8d:c1:80:58:e3:f6:63: df:39:14:41:96:ca:ef:e1:a1:82:a8:81:7f:98:90: e6:c4:fc:77:94:a3:de:5f:c2:f4:a2:90:92:f4:fe: 96:25:fe:89:5f:5a:df:56:71:77:7a:90:49:dc:e9: 93:27:3b:c7:74:02:ae:38:42:bc:c8:39:e1:d8:83: e4:7e:9c:ed:13:bf:1f:25:f7:4a:11:c2:b5:37:3a: 39:69:24:ac:f4:c2:ec:62:48:c7:9f:47:a8:19:70: 53:6a:08:37:40:27:34:35:35:2d:13:7e:7e:15:94: 37:03:f7:a0:99:d6:b0:22:19:ce:57:5f:21:5a:f5: 81:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C2:0B:A0:9B:86:48:1E:C0:BE:B7:0A:2C:BA:24:2C:4B:A1:82:FD X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HcILoJuGSB7AvrcKLLokLEuhgv0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.45.0/24 151.240.163.0/24 151.240.173.0/24 151.241.30.0/24 151.241.39.0/24 151.241.50.0/24 151.241.64.0/24 151.241.67.0/24 151.241.70.0/23 151.241.73.0/24 151.241.77.0/24 151.241.95.0/24 151.241.115.0/24 151.241.160.0/24 151.241.176.0/24 151.241.204.0/24 151.242.45.0/24 151.242.158.0/24 151.243.2.0/24 151.243.105.0/24 151.243.137.0/24 151.244.5.0/24 151.244.57.0/24 151.244.111.0/24 151.244.114.0/23 151.244.131.0-151.244.133.255 151.244.191.0/24 151.244.193.0/24 151.244.198.0/24 151.244.201.0/24 151.244.212.0/24 151.244.243.0/24 151.245.28.0/24 151.245.70.0/24 151.245.76.0/24 151.245.78.0/24 151.245.104.0/24 151.245.195.0/24 151.245.201.0/24 151.245.212.0/24 151.247.120.0/21 151.247.188.0/24 151.247.221.0/24 Signature Algorithm: sha256WithRSAEncryption 09:ba:27:29:b3:1e:1b:13:72:b3:b6:ed:e5:b9:af:b4:62:20: cf:71:7f:ee:41:6d:b1:db:cd:79:2a:71:97:4d:c4:78:20:e5: b1:f2:08:1f:94:30:62:ed:11:25:a1:38:e9:5d:47:6b:eb:0b: 28:48:11:d8:74:36:11:e0:2d:3e:e1:aa:73:32:a6:6a:57:a4: 4d:b2:e1:42:64:d4:59:27:f4:79:e8:e7:13:80:13:b4:54:9d: b3:b3:5c:dd:2b:c3:d1:03:d9:06:e1:fb:20:4f:c2:9e:5a:e3: bd:6e:3e:ec:03:01:25:85:ca:af:69:bf:ee:47:b3:79:b8:8e: 02:6a:16:9b:39:7c:b0:2a:1e:cd:7f:f7:d0:41:03:15:9b:e2: dc:e9:d0:bf:ff:06:0e:0e:6d:e1:99:46:c3:86:43:d0:ea:99: 67:f2:86:80:3b:c4:8d:7d:e5:89:4f:cf:a7:95:56:c6:8b:34: 68:fa:33:7c:3c:c6:c6:c3:e1:60:7f:ca:dc:db:77:b0:1d:9d: a4:48:d3:07:f1:32:c1:7c:e4:e2:cc:68:57:e7:3d:14:45:86: 4d:99:3e:d6:d5:2d:c8:59:53:d1:33:66:34:cb:7a:8c:5f:d7: b1:5f:bd:6a:1a:de:24:90:e4:f7:b6:e2:5f:7d:94:08:66:c6: 4a:ba:ce:a7 -----BEGIN CERTIFICATE----- MIIGCzCCBPOgAwIBAgISAZrdekfOVet0ZRHf4YqGcO/DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjAyMDUxMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZGMyMGJhMDliODY0ODFlYzBiZWI3MGEyY2JhMjQyYzRiYTE4MmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmr8to2A0fIirm8XnMSS704n2M+Pa NAKS8pHCuS9AxV6p3KUhzoat1MXaUJSqsZ6qjvCQSNlqKYNULsWYOPKjI4tsa0WV FxvSYzWDI/IHwDCXY4fXXJn1REcPQQFVM6PD31y+6v45+1vrD1HBD68iR+aDE8d9 m2jfEzNdHcO8xo3BgFjj9mPfORRBlsrv4aGCqIF/mJDmxPx3lKPeX8L0opCS9P6W Jf6JX1rfVnF3epBJ3OmTJzvHdAKuOEK8yDnh2IPkfpztE78fJfdKEcK1Nzo5aSSs 9MLsYkjHn0eoGXBTagg3QCc0NTUtE35+FZQ3A/egmdawIhnOV18hWvWBBQIDAQAB o4IDFzCCAxMwHQYDVR0OBBYEFB3CC6CbhkgewL63Ciy6JCxLoYL9MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvSGNJTG9KdUdTQjdBdnJjS0xMb2tMRXVoZ3YwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBKwYIKwYBBQUHAQcBAf8EggEaMIIBFjCCARIEAgABMIIB CgMEAJfwLQMEAJfwowMEAJfwrQMEAJfxHgMEAJfxJwMEAJfxMgMEAJfxQAMEAJfx QwMEAZfxRgMEAJfxSQMEAJfxTQMEAJfxXwMEAJfxcwMEAJfxoAMEAJfxsAMEAJfx zAMEAJfyLQMEAJfyngMEAJfzAgMEAJfzaQMEAJfziQMEAJf0BQMEAJf0OQMEAJf0 bwMEAZf0cjAMAwQAl/SDAwQBl/SEAwQAl/S/AwQAl/TBAwQAl/TGAwQAl/TJAwQA l/TUAwQAl/TzAwQAl/UcAwQAl/VGAwQAl/VMAwQAl/VOAwQAl/VoAwQAl/XDAwQA l/XJAwQAl/XUAwQDl/d4AwQAl/e8AwQAl/fdMA0GCSqGSIb3DQEBCwUAA4IBAQAJ uicpsx4bE3Kztu3lua+0YiDPcX/uQW2x2815KnGXTcR4IOWx8ggflDBi7REloTjp XUdr6wsoSBHYdDYR4C0+4apzMqZqV6RNsuFCZNRZJ/R56OcTgBO0VJ2zs1zdK8PR A9kG4fsgT8KeWuO9bj7sAwElhcqvab/uR7N5uI4CahabOXywKh7Nf/fQQQMVm+Lc 6dC//wYODm3hmUbDhkPQ6pln8oaAO8SNfeWJT8+nlVbGizRo+jN8PMbGw+Fgf8rc 23ewHZ2kSNMH8TLBfOTizGhX5z0URYZNmT7W1S3IWVPRM2Y0y3qMX9exX71qGt4k kOT3tuJffZQIZsZKus6n -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:09 2025 by rpki-client