This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KGJfM8lrTWG-ZynkFvr5ggmAIVo.roa File: KGJfM8lrTWG-ZynkFvr5ggmAIVo.roa (raw, json) Hash identifier: cwJgSuphqZWuV5gv21tVfXT4bhjRyjuXvxXtadYMaNg= Subject key identifier: 28:62:5F:33:C9:6B:4D:61:BE:67:29:E4:16:FA:F9:82:09:80:21:5A Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AB98C647CA3857FC2FB4389FCF27401F7 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KGJfM8lrTWG-ZynkFvr5ggmAIVo.roa Signing time: Tue 25 Nov 2025 05:46:16 +0000 ROA not before: Tue 25 Nov 2025 05:46:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 61317 IP address blocks: 151.241.206.0/24 maxlen: 24 151.242.200.0/23 maxlen: 24 151.242.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b9:8c:64:7c:a3:85:7f:c2:fb:43:89:fc:f2:74:01:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 25 05:46:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=28625f33c96b4d61be6729e416faf9820980215a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b7:ec:f6:b4:00:67:17:19:0c:82:7d:20:5c: 59:2d:64:1a:45:ed:22:6b:df:87:78:1f:db:ed:21: 00:55:b4:ef:bf:45:59:42:04:c0:7f:02:be:a2:6b: 9c:da:a2:31:9e:20:7b:4d:5f:21:96:6f:2d:a5:7f: 37:6d:43:04:30:af:74:5e:1f:8c:50:95:c4:00:a3: f0:e4:e4:fe:fb:a4:16:e9:63:0c:c1:a7:7b:ef:87: 11:5f:21:e8:25:c6:41:61:bb:69:ae:d0:bb:f5:c1: 45:25:96:b1:84:2b:f8:6e:c7:70:c6:17:c2:ce:98: 34:6b:32:a0:c1:19:90:46:9e:9c:7e:79:19:4c:c4: 3b:03:4d:99:7e:23:9f:e6:c3:ef:d3:c6:16:25:47: a3:e8:91:8f:b4:62:6f:c2:ec:0b:88:19:18:98:d1: 67:23:ee:ef:9b:be:cd:1d:86:26:74:66:8e:79:d6: 5e:5f:1a:b3:34:68:50:35:c3:1a:6a:a8:7c:44:28: 77:f1:33:60:03:d5:b5:ac:03:06:c7:66:e9:5d:3b: f5:4a:f0:10:de:55:be:ee:95:5b:ae:b8:b4:46:00: 18:9a:35:95:9b:c6:2a:f0:60:11:d4:15:19:34:f5: 61:b3:43:83:cd:2a:16:f9:40:e5:4c:d1:d6:22:02: c9:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:62:5F:33:C9:6B:4D:61:BE:67:29:E4:16:FA:F9:82:09:80:21:5A X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KGJfM8lrTWG-ZynkFvr5ggmAIVo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.206.0/24 151.242.200.0/23 Signature Algorithm: sha256WithRSAEncryption 84:b0:75:8e:e9:07:76:bb:be:ac:f0:fb:0d:4f:83:b2:10:49: 74:aa:8f:c6:7b:da:9d:a3:ec:9a:c3:83:af:d1:64:1f:f7:7c: 9b:71:da:b6:a0:4a:5b:a2:99:aa:f2:1a:92:75:58:f7:15:ba: 06:c0:bd:dc:2c:c8:6a:64:e1:c7:ad:8f:92:b1:b9:91:31:ea: 3c:35:00:7b:6d:83:95:d1:78:40:f8:65:58:d4:15:01:bc:3a: e4:f0:82:e7:7c:07:c6:16:34:a7:a5:51:e2:02:9b:e6:2f:e7: 4a:1b:de:4a:d3:92:50:50:21:61:ae:5a:d4:f2:8d:61:71:d6: c2:e8:c4:f9:71:95:49:4f:ee:ce:fe:92:b0:0b:14:ae:dc:1d: 45:a7:bc:bb:c0:79:77:af:41:2d:3a:ec:53:fa:16:cd:74:a3: 2b:84:e0:a2:e7:17:de:7f:6f:74:1c:2d:59:d1:81:fa:d1:94: 5c:9b:2e:91:1d:f4:71:a6:19:37:1c:f1:73:a0:fa:7f:35:aa: 40:f8:57:ce:ed:fd:2e:23:64:25:4a:d7:6b:e5:1e:57:d6:4b: 4b:dd:a6:6d:c1:84:d1:76:2b:64:e7:ad:c9:73:64:39:b7:97: cd:9f:97:30:41:0d:46:45:c4:a5:c5:c2:e9:f8:08:68:13:bd: ce:bb:94:b6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZq5jGR8o4V/wvtDifzydAH3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTI1MDU0NjE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODYyNWYzM2M5NmI0ZDYxYmU2NzI5ZTQxNmZhZjk4MjA5ODAyMTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7fs9rQAZxcZDIJ9IFxZLWQaRe0i a9+HeB/b7SEAVbTvv0VZQgTAfwK+omuc2qIxniB7TV8hlm8tpX83bUMEMK90Xh+M UJXEAKPw5OT++6QW6WMMwad774cRXyHoJcZBYbtprtC79cFFJZaxhCv4bsdwxhfC zpg0azKgwRmQRp6cfnkZTMQ7A02ZfiOf5sPv08YWJUej6JGPtGJvwuwLiBkYmNFn I+7vm77NHYYmdGaOedZeXxqzNGhQNcMaaqh8RCh38TNgA9W1rAMGx2bpXTv1SvAQ 3lW+7pVbrri0RgAYmjWVm8Yq8GAR1BUZNPVhs0ODzSoW+UDlTNHWIgLJLQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFChiXzPJa01hvmcp5Bb6+YIJgCFaMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvS0dKZk04bHJUV0ctWnlua0Z2cjVnZ21BSVZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/HOAwQB l/LIMA0GCSqGSIb3DQEBCwUAA4IBAQCEsHWO6Qd2u76s8PsNT4OyEEl0qo/Ge9qd o+yaw4Ov0WQf93ybcdq2oEpbopmq8hqSdVj3FboGwL3cLMhqZOHHrY+SsbmRMeo8 NQB7bYOV0XhA+GVY1BUBvDrk8ILnfAfGFjSnpVHiApvmL+dKG95K05JQUCFhrlrU 8o1hcdbC6MT5cZVJT+7O/pKwCxSu3B1Fp7y7wHl3r0EtOuxT+hbNdKMrhOCi5xfe f290HC1Z0YH60ZRcmy6RHfRxphk3HPFzoPp/NapA+FfO7f0uI2QlStdr5R5X1ktL 3aZtwYTRditk563Jc2Q5t5fNn5cwQQ1GRcSlxcLp+AhoE73Ou5S2 -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:35 2025 by rpki-client