This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LvSFZR6Qb7NLpjyPxDhZq9jQVYA.roa File: LvSFZR6Qb7NLpjyPxDhZq9jQVYA.roa (raw, json) Hash identifier: eQ6Df07/77AotY9fgosB2JYecEGi6s/TmeyOYCELpzY= Subject key identifier: 2E:F4:85:65:1E:90:6F:B3:4B:A6:3C:8F:C4:38:59:AB:D8:D0:55:80 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB3B2A70838E7BCFE9229D44CF23C3 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LvSFZR6Qb7NLpjyPxDhZq9jQVYA.roa Signing time: Fri 02 Jan 2026 08:20:29 +0000 ROA not before: Fri 02 Jan 2026 08:20:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54252 IP address blocks: 151.240.2.0/24 maxlen: 24 151.241.33.0/24 maxlen: 24 151.241.43.0/24 maxlen: 24 151.241.48.0/24 maxlen: 24 151.241.51.0/24 maxlen: 24 151.241.164.0/24 maxlen: 24 151.242.26.0/24 maxlen: 24 151.243.26.0/24 maxlen: 24 151.244.42.0/24 maxlen: 24 151.245.69.0/24 maxlen: 24 151.245.162.0/24 maxlen: 24 151.245.166.0/24 maxlen: 24 151.245.177.0/24 maxlen: 24 151.247.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:3b:2a:70:83:8e:7b:cf:e9:22:9d:44:cf:23:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ef485651e906fb34ba63c8fc43859abd8d05580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b1:32:00:79:11:60:29:2e:2a:ab:59:e7:14: 0f:3c:56:87:72:a4:35:ea:cd:10:ba:76:14:c6:58: a0:8a:ff:36:a8:1a:13:d6:bb:27:dc:82:6e:2f:df: 88:c1:09:b6:a3:10:00:28:6b:55:86:21:67:87:0a: 1f:0a:2e:79:ac:a8:57:c3:15:04:5b:36:be:fd:25: fc:65:04:86:53:11:ec:3e:40:8a:38:78:1d:1e:78: 3a:ba:8c:89:3d:6d:ed:a4:4c:39:f7:44:08:fe:9b: 68:1d:10:53:ca:bc:d6:f7:0e:42:50:62:f1:00:fd: 08:fc:e0:1b:9a:e6:d3:be:9f:e4:44:7b:81:9a:f4: b5:c7:0b:55:94:09:3d:80:08:0a:d3:6a:5e:0d:af: 8a:8a:fa:1a:8a:24:e3:cb:6e:86:73:0d:de:e9:be: 8c:92:b3:45:83:c3:21:7a:66:b9:d2:ef:45:ee:9b: d8:79:ca:10:45:7b:ce:e3:14:e4:b6:4a:a5:20:0e: 10:f8:a5:0f:c3:2c:f5:dc:20:e6:2e:05:fa:4d:64: 71:7a:02:e2:e9:e3:7f:bc:39:f9:24:7f:04:74:8d: e2:44:68:84:e9:0e:ab:12:28:c6:3c:77:57:a4:c2: 64:20:ef:ec:fa:72:63:08:71:78:cf:11:77:81:02: 34:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F4:85:65:1E:90:6F:B3:4B:A6:3C:8F:C4:38:59:AB:D8:D0:55:80 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LvSFZR6Qb7NLpjyPxDhZq9jQVYA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.2.0/24 151.241.33.0/24 151.241.43.0/24 151.241.48.0/24 151.241.51.0/24 151.241.164.0/24 151.242.26.0/24 151.243.26.0/24 151.244.42.0/24 151.245.69.0/24 151.245.162.0/24 151.245.166.0/24 151.245.177.0/24 151.247.246.0/24 Signature Algorithm: sha256WithRSAEncryption b6:97:27:b8:6e:57:fb:9d:1a:68:17:6c:12:88:d8:27:0c:f2: 1a:b2:36:d8:0f:ce:4a:72:2d:90:29:7c:08:09:69:55:30:b1: 79:06:c4:48:a8:24:6a:b1:8b:12:b3:71:57:bb:a2:12:92:33: 73:8e:6e:89:b2:5c:dc:66:ab:c6:6c:2b:51:2e:52:bc:6b:65: 06:27:bb:ee:e6:b6:3f:25:ab:ff:32:ff:60:c7:d7:c6:6c:4d: e1:b5:d4:a1:7e:f7:6c:89:1a:17:06:f7:20:22:93:81:d7:c9: 05:f3:5d:52:73:3a:20:f4:58:cd:6e:7d:c5:75:de:25:82:96: 78:51:f3:26:14:52:97:e4:79:38:3b:ae:29:d5:46:6b:59:11: 0a:4b:c6:67:96:f5:d7:23:7d:46:ed:a6:91:f2:f5:be:7a:7d: f5:93:0d:59:4c:a8:f0:23:af:80:ec:6c:1e:aa:29:58:9c:23: 3b:b9:de:f8:58:fe:8b:df:c4:5b:3a:a2:de:d2:ea:63:94:ae: 9c:83:45:f1:1d:4b:20:d2:33:ee:51:47:81:62:4b:7d:c4:ea: 24:f1:f3:8e:5d:2f:84:d2:ad:fc:91:8f:76:25:04:7f:c0:fd: 08:32:0a:6d:9f:c0:37:98:e4:ad:6d:9c:db:f0:45:39:c6:9f: a0:82:18:f3 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZt9yzsqcIOOe8/pIp1EzyPDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWY0ODU2NTFlOTA2ZmIzNGJhNjNjOGZjNDM4NTlhYmQ4ZDA1NTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbEyAHkRYCkuKqtZ5xQPPFaHcqQ1 6s0QunYUxligiv82qBoT1rsn3IJuL9+IwQm2oxAAKGtVhiFnhwofCi55rKhXwxUE Wza+/SX8ZQSGUxHsPkCKOHgdHng6uoyJPW3tpEw590QI/ptoHRBTyrzW9w5CUGLx AP0I/OAbmubTvp/kRHuBmvS1xwtVlAk9gAgK02peDa+KivoaiiTjy26Gcw3e6b6M krNFg8Mhema50u9F7pvYecoQRXvO4xTktkqlIA4Q+KUPwyz13CDmLgX6TWRxegLi 6eN/vDn5JH8EdI3iRGiE6Q6rEijGPHdXpMJkIO/s+nJjCHF4zxF3gQI0DwIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFC70hWUekG+zS6Y8j8Q4WavY0FWAMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvTHZTRlpSNlFiN05McGp5UHhEaFpxOWpRVllBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAl/ACAwQA l/EhAwQAl/ErAwQAl/EwAwQAl/EzAwQAl/GkAwQAl/IaAwQAl/MaAwQAl/QqAwQA l/VFAwQAl/WiAwQAl/WmAwQAl/WxAwQAl/f2MA0GCSqGSIb3DQEBCwUAA4IBAQC2 lye4blf7nRpoF2wSiNgnDPIasjbYD85Kci2QKXwICWlVMLF5BsRIqCRqsYsSs3FX u6ISkjNzjm6JslzcZqvGbCtRLlK8a2UGJ7vu5rY/Jav/Mv9gx9fGbE3htdShfvds iRoXBvcgIpOB18kF811Sczog9FjNbn3Fdd4lgpZ4UfMmFFKX5Hk4O64p1UZrWREK S8ZnlvXXI31G7aaR8vW+en31kw1ZTKjwI6+A7GweqilYnCM7ud74WP6L38RbOqLe 0upjlK6cg0XxHUsg0jPuUUeBYkt9xOok8fOOXS+E0q38kY92JQR/wP0IMgptn8A3 mOStbZzb8EU5xp+gghjz -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:07 2026 by rpki-client