This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/K0UHkALixtwuPW1ishtlasi07yw.roa File: K0UHkALixtwuPW1ishtlasi07yw.roa (raw, json) Hash identifier: 69AUOzoOcuCgqIcJ1AU87+YMJfGEZ9mmRe5XVNGZJMw= Subject key identifier: 2B:45:07:90:02:E2:C6:DC:2E:3D:6D:62:B2:1B:65:6A:C8:B4:EF:2C Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AB98C651052471374B1B4EF1326B4A90D Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/K0UHkALixtwuPW1ishtlasi07yw.roa Signing time: Tue 25 Nov 2025 05:46:17 +0000 ROA not before: Tue 25 Nov 2025 05:46:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 63199 IP address blocks: 151.240.226.0/24 maxlen: 24 151.241.136.0/24 maxlen: 24 151.245.165.0/24 maxlen: 24 151.247.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b9:8c:65:10:52:47:13:74:b1:b4:ef:13:26:b4:a9:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 25 05:46:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2b45079002e2c6dc2e3d6d62b21b656ac8b4ef2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:98:ed:cb:a5:cc:80:db:b6:26:69:78:d7:21: a4:75:cf:9f:85:37:40:23:01:1b:bd:30:da:55:37: 19:c2:dd:e2:59:78:86:df:28:8c:a7:52:c2:49:f2: 56:48:b7:9d:79:8a:2c:2d:c2:87:38:6c:42:69:05: d0:77:80:ef:9f:40:aa:71:47:d7:87:3b:38:fc:9e: cf:8a:b3:04:e7:96:95:f3:0f:95:0d:2f:16:62:12: b4:e8:3b:a6:2e:96:99:f1:36:6c:67:7c:29:b3:e3: 8c:64:27:eb:3c:36:7c:db:4d:7a:a6:c8:d1:f8:75: a8:45:9c:9a:a9:9f:83:f0:e1:ba:fa:7c:fb:83:fa: c9:9b:2c:85:8a:f5:b1:93:f5:c4:d4:eb:c3:e2:7d: 39:20:3b:aa:ed:83:0c:82:01:48:a3:25:16:ec:c2: 58:2c:66:e2:ae:1e:95:7d:6c:d1:cd:98:56:f2:e4: 07:20:90:29:72:c3:92:3d:f7:9b:b6:f4:68:20:be: 3e:fe:95:fc:e1:da:9e:44:f5:43:9a:9e:03:e0:ee: c6:74:4b:82:66:97:91:6a:df:45:bd:db:d2:85:a9: e2:82:d7:00:71:ea:74:84:c4:4c:e9:a6:90:01:85: 62:d4:a5:5b:b6:cc:65:b7:b3:1a:b4:03:73:f7:6e: 13:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:45:07:90:02:E2:C6:DC:2E:3D:6D:62:B2:1B:65:6A:C8:B4:EF:2C X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/K0UHkALixtwuPW1ishtlasi07yw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.226.0/24 151.241.136.0/24 151.245.165.0/24 151.247.139.0/24 Signature Algorithm: sha256WithRSAEncryption 30:6f:bb:50:19:b0:08:18:fa:61:47:96:d5:61:6a:da:fd:b4: 71:fb:06:70:13:83:b0:67:28:9e:ee:87:29:59:cd:52:a0:f7: 29:7f:c9:a4:10:96:a1:ec:8b:f7:5f:da:0d:65:72:8d:e0:b7: 0d:72:a6:1a:c2:a7:b8:8a:f2:3b:6a:6f:7a:be:22:25:44:59: ea:6e:46:5d:74:29:1c:f0:78:15:9c:c3:4a:e8:41:2c:f2:2b: f2:79:25:03:6b:7f:4f:ca:79:6c:6b:b7:90:f1:7b:bd:3b:e2: 79:45:c2:37:63:06:b4:89:ec:e0:ba:a7:51:1c:f8:24:78:73: c4:ae:ef:a3:7a:8a:28:6b:b7:70:68:21:8f:97:48:97:f0:6a: bb:4e:97:37:d7:4c:30:d9:6b:62:33:c6:3f:68:c9:6e:f8:f0: a5:03:f1:7c:30:21:f9:60:33:5a:4a:92:cb:8b:41:49:51:58: c8:40:a9:b3:e9:a8:86:4b:9d:69:14:9d:95:d9:4f:93:11:ba: ca:44:bd:f5:aa:38:1f:f3:1e:c0:aa:8a:35:c8:c3:10:d8:c0: b6:29:79:59:ee:e5:7d:2c:42:5a:89:7f:51:d3:c9:3e:83:32: 03:bf:90:ff:13:d2:74:a7:ce:93:a0:53:f2:a7:6f:ba:84:57: 12:35:3a:b2 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZq5jGUQUkcTdLG07xMmtKkNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTI1MDU0NjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjQ1MDc5MDAyZTJjNmRjMmUzZDZkNjJiMjFiNjU2YWM4YjRlZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5jty6XMgNu2Jml41yGkdc+fhTdA IwEbvTDaVTcZwt3iWXiG3yiMp1LCSfJWSLedeYosLcKHOGxCaQXQd4Dvn0CqcUfX hzs4/J7PirME55aV8w+VDS8WYhK06DumLpaZ8TZsZ3wps+OMZCfrPDZ82016psjR +HWoRZyaqZ+D8OG6+nz7g/rJmyyFivWxk/XE1OvD4n05IDuq7YMMggFIoyUW7MJY LGbirh6VfWzRzZhW8uQHIJApcsOSPfebtvRoIL4+/pX84dqeRPVDmp4D4O7GdEuC ZpeRat9FvdvShanigtcAcep0hMRM6aaQAYVi1KVbtsxlt7MatANz924TCQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFCtFB5AC4sbcLj1tYrIbZWrItO8sMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvSzBVSGtBTGl4dHd1UFcxaXNodGxhc2kwN3l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/DiAwQA l/GIAwQAl/WlAwQAl/eLMA0GCSqGSIb3DQEBCwUAA4IBAQAwb7tQGbAIGPphR5bV YWra/bRx+wZwE4OwZyie7ocpWc1SoPcpf8mkEJah7Iv3X9oNZXKN4LcNcqYawqe4 ivI7am96viIlRFnqbkZddCkc8HgVnMNK6EEs8ivyeSUDa39Pynlsa7eQ8Xu9O+J5 RcI3Ywa0iezguqdRHPgkeHPEru+jeoooa7dwaCGPl0iX8Gq7Tpc310ww2WtiM8Y/ aMlu+PClA/F8MCH5YDNaSpLLi0FJUVjIQKmz6aiGS51pFJ2V2U+TEbrKRL31qjgf 8x7Aqoo1yMMQ2MC2KXlZ7uV9LEJaiX9R08k+gzIDv5D/E9J0p86ToFPyp2+6hFcS NTqy -----END CERTIFICATE-----Generated at Wed Dec 3 09:42:30 2025 by rpki-client