This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IT0fkLnZAXOb9FCw4v98SHJKuWk.roa File: IT0fkLnZAXOb9FCw4v98SHJKuWk.roa (raw, json) Hash identifier: TU+WP5R5Ey+A6Yg1hvHt36C4kO6MXhK8lQy26o4wTi8= Subject key identifier: 21:3D:1F:90:B9:D9:01:73:9B:F4:50:B0:E2:FF:7C:48:72:4A:B9:69 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AD87EF3736962839C5DE31297E7CCAE62 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IT0fkLnZAXOb9FCw4v98SHJKuWk.roa Signing time: Mon 01 Dec 2025 05:59:49 +0000 ROA not before: Mon 01 Dec 2025 05:59:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214024 IP address blocks: 151.241.128.0/22 maxlen: 24 151.242.4.0/24 maxlen: 24 151.242.14.0/24 maxlen: 24 151.242.32.0/24 maxlen: 24 151.242.139.0/24 maxlen: 24 151.243.44.0/24 maxlen: 24 151.244.128.0/24 maxlen: 24 151.244.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d8:7e:f3:73:69:62:83:9c:5d:e3:12:97:e7:cc:ae:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 1 05:59:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=213d1f90b9d901739bf450b0e2ff7c48724ab969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f3:35:7e:e3:fe:9f:ce:e4:56:be:6b:dd:c0: 58:73:82:c4:6f:0b:78:56:06:e7:e5:dc:cd:97:49: f2:c1:21:2f:6c:ed:63:0a:9d:4c:fc:11:2f:58:35: bb:09:f5:94:b7:38:a6:37:c7:b3:b5:b0:ef:ed:8c: 2b:d6:4f:d2:8c:c9:26:b5:db:0f:1c:78:0f:c5:d8: 46:26:16:59:29:06:44:08:cd:46:e7:4b:02:dc:f0: b2:88:3d:c6:2d:11:a9:0a:ef:47:ac:32:3e:5d:d5: 18:0c:d8:f9:8a:ab:db:9b:3e:8a:c6:9c:e4:79:8d: 78:29:5b:e2:6f:e9:64:bc:f0:02:3e:f1:5f:a5:18: 66:68:6c:f7:b0:f1:4e:8d:9d:83:0d:27:33:3c:52: f5:80:a8:64:ec:0e:91:35:31:f3:e2:cd:64:a5:39: c5:ec:1a:f4:de:59:b1:e5:d6:e1:2d:07:38:42:40: 76:9e:cd:24:7d:80:d6:86:a8:46:84:74:1a:9a:db: e5:59:c5:fc:c9:e8:6d:a0:ed:81:a1:53:dc:57:ef: a4:d2:2e:ac:4d:97:c5:f7:b2:a9:ef:c1:55:98:01: 6d:bd:81:15:a3:c4:8d:48:18:e7:4c:0e:e3:1d:7e: f1:8f:30:72:bf:60:3f:be:7c:c2:41:9b:01:dd:f1: 03:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3D:1F:90:B9:D9:01:73:9B:F4:50:B0:E2:FF:7C:48:72:4A:B9:69 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IT0fkLnZAXOb9FCw4v98SHJKuWk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.128.0/22 151.242.4.0/24 151.242.14.0/24 151.242.32.0/24 151.242.139.0/24 151.243.44.0/24 151.244.128.0/24 151.244.130.0/24 Signature Algorithm: sha256WithRSAEncryption 61:08:cf:81:9a:9f:ca:af:62:ec:3f:62:62:db:1f:ea:b4:a6: 6b:28:5f:d8:f8:de:9f:c9:70:55:f5:de:66:23:20:7a:38:94: d4:98:3c:55:7a:8f:7d:4a:cb:a8:eb:17:78:f5:44:7c:c9:49: 12:c6:86:8a:13:52:c5:e0:59:08:07:df:d4:21:a1:50:03:bd: ae:48:5e:dd:d5:ff:12:6d:b5:bd:d1:54:9d:48:ac:5f:6e:26: 8b:a1:2a:65:39:1a:70:32:98:62:8f:b7:a8:78:ee:df:a8:94: f1:3e:4d:01:68:2b:a2:76:25:99:74:2a:5b:ca:48:06:b6:10: 86:ef:9b:cc:02:14:2c:a5:75:0b:43:b6:7d:8f:c4:45:89:1f: 89:82:68:99:62:8b:db:fd:96:3a:f6:dd:3a:88:26:c2:25:60: 26:84:7a:ea:3f:f2:24:9f:e0:af:fd:9c:b5:71:43:a5:91:9a: e7:b3:3f:4e:ae:55:82:97:e3:1d:db:6c:25:b9:9f:2c:b1:77: dd:65:37:dd:7a:b3:0e:ad:9b:f5:85:6f:71:e8:33:cd:74:46: c3:c0:5f:01:a1:32:49:8d:1f:25:0e:cb:65:3d:c1:75:f4:4f: 96:32:19:08:15:19:32:7a:c3:f6:ec:19:77:97:92:c0:21:56: 82:45:a0:9a -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZrYfvNzaWKDnF3jEpfnzK5iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjAxMDU1OTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMTNkMWY5MGI5ZDkwMTczOWJmNDUwYjBlMmZmN2M0ODcyNGFiOTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvM1fuP+n87kVr5r3cBYc4LEbwt4 Vgbn5dzNl0nywSEvbO1jCp1M/BEvWDW7CfWUtzimN8eztbDv7Ywr1k/SjMkmtdsP HHgPxdhGJhZZKQZECM1G50sC3PCyiD3GLRGpCu9HrDI+XdUYDNj5iqvbmz6Kxpzk eY14KVvib+lkvPACPvFfpRhmaGz3sPFOjZ2DDSczPFL1gKhk7A6RNTHz4s1kpTnF 7Br03lmx5dbhLQc4QkB2ns0kfYDWhqhGhHQamtvlWcX8yehtoO2BoVPcV++k0i6s TZfF97Kp78FVmAFtvYEVo8SNSBjnTA7jHX7xjzByv2A/vnzCQZsB3fED9QIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFCE9H5C52QFzm/RQsOL/fEhySrlpMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvSVQwZmtMblpBWE9iOUZDdzR2OThTSEpLdVdrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCl/GAAwQA l/IEAwQAl/IOAwQAl/IgAwQAl/KLAwQAl/MsAwQAl/SAAwQAl/SCMA0GCSqGSIb3 DQEBCwUAA4IBAQBhCM+Bmp/Kr2LsP2Ji2x/qtKZrKF/Y+N6fyXBV9d5mIyB6OJTU mDxVeo99Ssuo6xd49UR8yUkSxoaKE1LF4FkIB9/UIaFQA72uSF7d1f8SbbW90VSd SKxfbiaLoSplORpwMphij7eoeO7fqJTxPk0BaCuidiWZdCpbykgGthCG75vMAhQs pXULQ7Z9j8RFiR+JgmiZYovb/ZY69t06iCbCJWAmhHrqP/Ikn+Cv/Zy1cUOlkZrn sz9OrlWCl+Md22wluZ8ssXfdZTfderMOrZv1hW9x6DPNdEbDwF8BoTJJjR8lDstl PcF19E+WMhkIFRkyesP27Bl3l5LAIVaCRaCa -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:01 2025 by rpki-client