This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KziSMshmkdXUOJqYM7-0dcQSer8.roa File: KziSMshmkdXUOJqYM7-0dcQSer8.roa (raw, json) Hash identifier: pyINn89ZZIAK6kE5YiH2uer96Kh2IEqDAseMgLUExXk= Subject key identifier: 2B:38:92:32:C8:66:91:D5:D4:38:9A:98:33:BF:B4:75:C4:12:7A:BF Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A9AE4CFC53B6E4FFD30EF7B17A359823E Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KziSMshmkdXUOJqYM7-0dcQSer8.roa Signing time: Wed 19 Nov 2025 06:54:37 +0000 ROA not before: Wed 19 Nov 2025 06:54:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 123 IP address blocks: 151.240.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9a:e4:cf:c5:3b:6e:4f:fd:30:ef:7b:17:a3:59:82:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 19 06:54:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2b389232c86691d5d4389a9833bfb475c4127abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f1:77:cb:85:39:02:29:7e:85:78:27:8d:ed: 7a:ad:cd:41:39:ae:91:4f:8b:67:10:6a:de:eb:3f: ae:7e:67:a4:7e:42:16:c5:06:ba:a6:0c:64:a9:0a: fa:92:60:f3:62:3d:16:a1:7b:f0:21:11:2a:4f:e9: 1e:c3:7a:5c:9a:e1:ad:62:99:ae:c5:ec:81:10:55: 3f:34:1b:51:d5:66:e7:71:3e:2b:2d:17:4e:ab:11: 16:af:61:93:0a:de:4b:9a:59:7e:9d:c1:e9:41:dc: d6:72:17:71:27:e5:87:11:51:9f:79:08:03:ad:d2: 12:92:23:57:24:b9:85:c1:05:56:2a:5b:08:de:9c: 5c:b7:00:60:94:4e:b1:94:08:cc:e4:64:60:e0:a3: 1f:12:75:12:cd:f1:4f:bf:a2:1e:2e:0e:93:f7:5f: c5:46:45:fa:83:40:ee:50:1b:e7:e0:b9:a3:b7:bf: ce:21:d9:3b:15:73:51:c3:9b:2b:65:08:6b:01:6d: 5d:b0:57:44:62:d6:e8:ad:cb:86:53:5f:13:f3:d5: 07:58:1a:8c:bd:22:5c:51:03:2c:5a:f6:6c:59:27: 15:67:49:84:90:99:f5:0e:9c:1d:59:ff:56:a2:75: b7:e1:19:87:f8:37:8e:0f:62:95:6d:32:fe:c1:0d: 22:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:38:92:32:C8:66:91:D5:D4:38:9A:98:33:BF:B4:75:C4:12:7A:BF X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KziSMshmkdXUOJqYM7-0dcQSer8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.148.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:b4:ad:2f:45:d8:c1:95:08:63:6d:74:95:05:04:03:6f:44: 40:0f:b5:88:3c:b0:f6:6c:a3:88:dd:69:5e:4e:5e:9d:7f:67: 47:47:b2:af:80:df:75:e4:5f:b6:86:d4:27:41:cb:a3:e1:e2: 3b:fb:3e:cb:98:2d:32:e2:62:61:77:40:d3:6f:09:2c:d7:c7: 47:de:e2:30:a1:41:a9:e8:38:98:d0:21:28:b0:59:67:67:ee: d4:7b:f1:96:4e:27:0b:93:82:f8:e4:39:2a:54:b4:e0:09:3e: c5:5d:86:fe:bf:a7:eb:cb:16:bb:b8:a8:0d:e2:d8:a1:21:7b: a0:e2:f1:af:bf:9c:85:a9:24:01:97:40:c7:33:2e:a4:59:9d: 13:07:4f:c6:31:21:31:94:89:f7:18:17:fc:33:4a:b8:20:95: 5e:d5:76:93:0b:5d:eb:c1:79:14:e0:85:92:da:64:3b:30:1d: 6b:e5:4a:b7:7c:69:ea:63:0b:54:a8:da:0e:69:7e:8b:8e:38: e8:62:58:b6:3a:b5:b7:b4:71:1a:a0:16:c7:47:4e:1c:6c:1e: 5d:18:f4:a9:e3:79:a8:e5:fb:da:71:0a:35:7b:ab:a9:1d:32: 82:f3:2d:c2:0f:db:7c:df:b7:c1:96:a1:89:0b:69:e4:72:e0: 93:ee:5a:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqa5M/FO25P/TDvexejWYI+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTE5MDY1NDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYjM4OTIzMmM4NjY5MWQ1ZDQzODlhOTgzM2JmYjQ3NWM0MTI3YWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fF3y4U5Ail+hXgnje16rc1BOa6R T4tnEGre6z+ufmekfkIWxQa6pgxkqQr6kmDzYj0WoXvwIREqT+kew3pcmuGtYpmu xeyBEFU/NBtR1WbncT4rLRdOqxEWr2GTCt5Lmll+ncHpQdzWchdxJ+WHEVGfeQgD rdISkiNXJLmFwQVWKlsI3pxctwBglE6xlAjM5GRg4KMfEnUSzfFPv6IeLg6T91/F RkX6g0DuUBvn4Lmjt7/OIdk7FXNRw5srZQhrAW1dsFdEYtborcuGU18T89UHWBqM vSJcUQMsWvZsWScVZ0mEkJn1DpwdWf9WonW34RmH+DeOD2KVbTL+wQ0i7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCs4kjLIZpHV1DiamDO/tHXEEnq/MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvS3ppU01zaG1rZFhVT0pxWU03LTBkY1FTZXI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/CUMA0G CSqGSIb3DQEBCwUAA4IBAQBqtK0vRdjBlQhjbXSVBQQDb0RAD7WIPLD2bKOI3Wle Tl6df2dHR7KvgN915F+2htQnQcuj4eI7+z7LmC0y4mJhd0DTbwks18dH3uIwoUGp 6DiY0CEosFlnZ+7Ue/GWTicLk4L45DkqVLTgCT7FXYb+v6fryxa7uKgN4tihIXug 4vGvv5yFqSQBl0DHMy6kWZ0TB0/GMSExlIn3GBf8M0q4IJVe1XaTC13rwXkU4IWS 2mQ7MB1r5Uq3fGnqYwtUqNoOaX6LjjjoYli2OrW3tHEaoBbHR04cbB5dGPSp43mo 5fvacQo1e6upHTKC8y3CD9t837fBlqGJC2nkcuCT7lo5 -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:38 2025 by rpki-client