This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JN5RY76FWEcOZkSX5ivgj_0NcvY.roa File: JN5RY76FWEcOZkSX5ivgj_0NcvY.roa (raw, json) Hash identifier: JDuGGosjTuhEMG9Rg0S7B69V57lbI9pVijkoOOpsy/U= Subject key identifier: 24:DE:51:63:BE:85:58:47:0E:66:44:97:E6:2B:E0:8F:FD:0D:72:F6 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A718F287656121280FB8329A0B46EB339 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JN5RY76FWEcOZkSX5ivgj_0NcvY.roa Signing time: Tue 11 Nov 2025 06:16:38 +0000 ROA not before: Tue 11 Nov 2025 06:16:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 59993 IP address blocks: 151.243.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:71:8f:28:76:56:12:12:80:fb:83:29:a0:b4:6e:b3:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 11 06:16:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=24de5163be8558470e664497e62be08ffd0d72f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a9:95:d5:44:ea:79:63:88:58:05:bc:bc:02: fb:39:0c:9e:55:ca:80:40:2c:66:69:c3:38:23:80: 45:61:a0:2c:8e:8a:9a:37:14:3c:a7:e7:e4:a1:af: dd:0d:73:3f:f9:1d:c1:ff:50:9d:db:d4:f2:f3:ba: ae:88:9a:44:71:7b:32:90:e9:a9:50:5d:9a:cc:84: d8:61:aa:00:d6:d9:27:d9:83:66:0b:fc:6d:53:63: 10:26:1e:92:9f:dd:0f:eb:07:4f:b6:e4:50:0f:5b: 35:15:f3:5e:5c:50:d8:22:5a:b3:08:bb:58:c7:f4: 73:b0:ee:87:14:a6:d3:d6:a5:cd:7a:a5:48:68:cc: e2:e2:a0:9b:45:f6:99:1d:40:d0:7c:c4:27:50:1d: 8f:53:3e:af:4e:1b:1e:d8:ae:50:a1:6c:d7:58:f0: 48:4c:4e:2f:ef:40:37:cf:d6:55:4a:74:86:3c:bb: 8f:e1:cd:b6:6f:39:c9:36:b0:33:54:54:4d:d8:4b: fb:b5:41:ce:d5:76:ae:56:36:f1:31:e4:a3:e1:ea: fb:4f:e8:84:35:0d:2a:e0:f4:06:2e:88:fa:6b:1f: c7:3d:d7:61:d9:63:fb:95:c9:3c:c0:2f:60:82:90: 05:4d:d4:b8:ff:e8:cf:31:69:7e:f4:9a:80:10:af: 70:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:DE:51:63:BE:85:58:47:0E:66:44:97:E6:2B:E0:8F:FD:0D:72:F6 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JN5RY76FWEcOZkSX5ivgj_0NcvY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.100.0/24 Signature Algorithm: sha256WithRSAEncryption 86:f4:18:34:b0:20:f4:94:e9:7b:64:1d:ce:42:a6:86:89:f1: 7a:1b:ca:71:6b:7e:0b:23:b4:f5:d2:af:46:4b:04:81:ff:d0: 3a:50:cf:8f:ea:b0:d5:aa:d9:78:3f:4b:e7:0d:52:56:1c:1a: e2:8b:15:52:01:a7:d8:38:45:14:ef:3d:95:b5:e2:f3:f3:98: 45:04:7d:cf:7f:42:80:e0:17:53:b0:ed:bf:7c:c2:f8:05:cf: 75:ac:22:31:a7:bd:62:64:27:8b:84:aa:fa:03:45:ed:5b:99: 31:33:bd:61:c6:b8:37:7a:ee:b7:36:11:eb:76:03:d5:e8:99: c8:81:1b:76:b7:7f:cd:7f:96:74:83:ba:78:95:22:de:b9:9a: fe:6c:c3:66:b0:fb:52:d2:13:f2:2d:68:70:24:f0:c3:d8:f5: ce:cd:e8:85:99:42:18:5c:c2:4e:2a:0f:c5:a1:e1:c5:cd:1a: 91:3a:03:2b:ba:1f:2c:8e:05:25:8b:7a:04:9a:a1:3e:37:9e: 19:9f:cc:f8:11:0f:bf:a8:b2:80:ed:0e:4e:c0:64:8d:5e:7e: 9e:04:17:0f:a2:c4:21:d3:ff:b7:e4:4b:84:b4:84:9a:7d:bc: a4:62:a6:8c:a5:99:63:81:43:a5:92:e3:e8:6a:04:f4:cc:8b: 09:c5:fe:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpxjyh2VhISgPuDKaC0brM5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTExMDYxNjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNGRlNTE2M2JlODU1ODQ3MGU2NjQ0OTdlNjJiZTA4ZmZkMGQ3MmY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6mV1UTqeWOIWAW8vAL7OQyeVcqA QCxmacM4I4BFYaAsjoqaNxQ8p+fkoa/dDXM/+R3B/1Cd29Ty87quiJpEcXsykOmp UF2azITYYaoA1tkn2YNmC/xtU2MQJh6Sn90P6wdPtuRQD1s1FfNeXFDYIlqzCLtY x/RzsO6HFKbT1qXNeqVIaMzi4qCbRfaZHUDQfMQnUB2PUz6vThse2K5QoWzXWPBI TE4v70A3z9ZVSnSGPLuP4c22bznJNrAzVFRN2Ev7tUHO1XauVjbxMeSj4er7T+iE NQ0q4PQGLoj6ax/HPddh2WP7lck8wC9ggpAFTdS4/+jPMWl+9JqAEK9w+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCTeUWO+hVhHDmZEl+Yr4I/9DXL2MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvSk41Ulk3NkZXRWNPWmtTWDVpdmdqXzBOY3ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/NkMA0G CSqGSIb3DQEBCwUAA4IBAQCG9Bg0sCD0lOl7ZB3OQqaGifF6G8pxa34LI7T10q9G SwSB/9A6UM+P6rDVqtl4P0vnDVJWHBriixVSAafYOEUU7z2VteLz85hFBH3Pf0KA 4BdTsO2/fML4Bc91rCIxp71iZCeLhKr6A0XtW5kxM71hxrg3eu63NhHrdgPV6JnI gRt2t3/Nf5Z0g7p4lSLeuZr+bMNmsPtS0hPyLWhwJPDD2PXOzeiFmUIYXMJOKg/F oeHFzRqROgMruh8sjgUli3oEmqE+N54Zn8z4EQ+/qLKA7Q5OwGSNXn6eBBcPosQh 0/+35EuEtISafbykYqaMpZljgUOlkuPoagT0zIsJxf5W -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:37 2025 by rpki-client