This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Jpamzi4E16OFeFwwFpXkPZQgImw.roa File: Jpamzi4E16OFeFwwFpXkPZQgImw.roa (raw, json) Hash identifier: HBRi1NZVl5y63CbmttD9L4z/ydcn2mzCrDvX5unkJx8= Subject key identifier: 26:96:A6:CE:2E:04:D7:A3:85:78:5C:30:16:95:E4:3D:94:20:22:6C Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019ACF3BD2578FB2802DBF9CD6091CCECCFB Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Jpamzi4E16OFeFwwFpXkPZQgImw.roa Signing time: Sat 29 Nov 2025 10:49:55 +0000 ROA not before: Sat 29 Nov 2025 10:49:55 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 21859 IP address blocks: 37.202.222.0/24 maxlen: 24 151.242.87.0/24 maxlen: 24 151.242.174.0/23 maxlen: 23 151.242.192.0/23 maxlen: 23 151.243.101.0/24 maxlen: 24 151.244.188.0/24 maxlen: 24 151.245.4.0/24 maxlen: 24 151.247.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cf:3b:d2:57:8f:b2:80:2d:bf:9c:d6:09:1c:ce:cc:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 29 10:49:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2696a6ce2e04d7a385785c301695e43d9420226c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:02:eb:03:d0:b2:34:f4:90:07:63:aa:70:33: 7b:65:9f:29:7a:51:18:14:f1:78:9f:d0:e1:42:53: 8b:ce:db:d8:fc:19:b3:f9:1b:c3:5f:0f:61:45:ed: e7:8d:d5:c7:32:1f:96:25:6d:39:26:a7:7a:ae:10: e3:34:0b:6b:bf:61:ba:5e:0f:18:04:07:e5:e6:e6: 98:08:e4:b0:07:67:ae:cd:b7:7b:ca:59:1a:42:f1: 6b:75:e1:7c:85:54:a6:df:72:e4:61:70:23:05:93: 90:f0:d5:ad:db:c4:65:5d:5c:fb:a7:7c:bc:af:a6: 7a:37:62:fc:59:07:d5:e1:c3:9a:7e:00:6f:60:4c: 22:21:ba:21:e6:12:c4:e0:02:1e:17:d3:f4:4e:e0: e1:f6:db:64:8f:3f:0e:4c:fd:b6:cf:9d:42:7f:fa: ae:65:ed:00:02:da:a3:ce:8c:cf:4a:f1:a9:97:40: 3e:5c:22:07:84:cc:3d:9e:08:05:90:20:0c:fc:56: 92:4b:0a:ef:65:de:8b:ae:55:f4:00:0b:49:46:c5: eb:2a:56:f3:7e:39:9a:4e:1e:a0:de:39:1d:f3:47: 22:20:25:50:18:e5:09:4e:16:dc:d5:a2:df:cb:de: 2a:ae:8b:63:07:7d:8e:29:00:1c:00:15:36:cc:4a: 93:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:96:A6:CE:2E:04:D7:A3:85:78:5C:30:16:95:E4:3D:94:20:22:6C X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Jpamzi4E16OFeFwwFpXkPZQgImw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.222.0/24 151.242.87.0/24 151.242.174.0/23 151.242.192.0/23 151.243.101.0/24 151.244.188.0/24 151.245.4.0/24 151.247.245.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:62:3f:78:a2:8e:49:5b:e2:e9:18:f5:2a:67:30:cb:c7:45: 20:7d:52:39:d3:32:9a:87:a2:2b:ec:96:3d:89:b4:fa:3d:fb: f8:7b:48:d3:4d:d8:1d:7d:ff:d0:b6:03:0d:a3:be:7d:d0:c0: 9c:3b:ec:79:9b:9a:ac:f0:5f:ad:a7:98:10:ad:de:2d:e9:62: 14:57:8c:b5:78:c0:47:aa:06:1f:63:67:76:5d:14:29:41:ea: 53:2c:bd:60:2f:70:5e:c1:f6:13:af:4d:12:93:37:85:6d:52: a4:58:db:7b:b1:f9:2c:a3:c9:3e:4e:d0:72:30:40:48:e2:12: 34:22:27:ca:8a:e5:61:7f:05:15:0d:29:e8:72:ef:0b:0e:31: 85:2b:ec:e8:c0:3b:43:96:c2:9c:12:09:61:fa:76:9e:28:4c: 0b:ac:93:cd:14:72:c8:bc:aa:d7:4c:9c:cf:ee:1a:80:8e:d7: fd:4e:19:db:97:c9:2a:38:53:ed:3e:b2:d6:54:3e:d8:a8:ae: 35:0a:07:19:ab:0f:a0:18:fe:7e:87:1a:43:21:61:1d:d1:21: 46:1c:2e:7d:ed:77:a1:44:50:ba:a6:bf:15:1a:37:ae:3f:6d: 68:21:4e:83:a3:4a:3e:32:9d:18:c2:01:cd:93:af:97:5e:59: 5c:fc:3e:ea -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZrPO9JXj7KALb+c1gkczsz7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTI5MTA0OTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjk2YTZjZTJlMDRkN2EzODU3ODVjMzAxNjk1ZTQzZDk0MjAyMjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQLrA9CyNPSQB2OqcDN7ZZ8pelEY FPF4n9DhQlOLztvY/Bmz+RvDXw9hRe3njdXHMh+WJW05Jqd6rhDjNAtrv2G6Xg8Y BAfl5uaYCOSwB2euzbd7ylkaQvFrdeF8hVSm33LkYXAjBZOQ8NWt28RlXVz7p3y8 r6Z6N2L8WQfV4cOafgBvYEwiIboh5hLE4AIeF9P0TuDh9ttkjz8OTP22z51Cf/qu Ze0AAtqjzozPSvGpl0A+XCIHhMw9nggFkCAM/FaSSwrvZd6LrlX0AAtJRsXrKlbz fjmaTh6g3jkd80ciICVQGOUJThbc1aLfy94qrotjB32OKQAcABU2zEqTOwIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFCaWps4uBNejhXhcMBaV5D2UICJsMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvSnBhbXppNEUxNk9GZUZ3d0ZwWGtQWlFnSW13LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAJcreAwQA l/JXAwQBl/KuAwQBl/LAAwQAl/NlAwQAl/S8AwQAl/UEAwQAl/f1MA0GCSqGSIb3 DQEBCwUAA4IBAQA8Yj94oo5JW+LpGPUqZzDLx0UgfVI50zKah6Ir7JY9ibT6Pfv4 e0jTTdgdff/QtgMNo7590MCcO+x5m5qs8F+tp5gQrd4t6WIUV4y1eMBHqgYfY2d2 XRQpQepTLL1gL3BewfYTr00SkzeFbVKkWNt7sfkso8k+TtByMEBI4hI0IifKiuVh fwUVDSnocu8LDjGFK+zowDtDlsKcEglh+naeKEwLrJPNFHLIvKrXTJzP7hqAjtf9 Thnbl8kqOFPtPrLWVD7YqK41CgcZqw+gGP5+hxpDIWEd0SFGHC597XehRFC6pr8V GjeuP21oIU6Do0o+Mp0YwgHNk6+XXllc/D7q -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:38 2025 by rpki-client