This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NloP26KJf7LjNCvOXFgCgVEmxiU.roa File: NloP26KJf7LjNCvOXFgCgVEmxiU.roa (raw, json) Hash identifier: qYiOZoB1MSU9lGy1as0/IwOTC8puM06amUQ+tvYx+/w= Subject key identifier: 36:5A:0F:DB:A2:89:7F:B2:E3:34:2B:CE:5C:58:02:81:51:26:C6:25 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A860EF52AEB5D3BF44B2410C0DE434191 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NloP26KJf7LjNCvOXFgCgVEmxiU.roa Signing time: Sat 15 Nov 2025 05:48:38 +0000 ROA not before: Sat 15 Nov 2025 05:48:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132372 IP address blocks: 151.245.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:86:0e:f5:2a:eb:5d:3b:f4:4b:24:10:c0:de:43:41:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 15 05:48:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=365a0fdba2897fb2e3342bce5c5802815126c625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:16:a1:8a:50:5c:c0:6b:da:40:40:7e:92:53: 9c:17:5b:94:e3:bc:e1:7e:53:a8:fb:c1:63:e4:7c: 3f:8e:24:85:29:07:0c:16:86:03:84:23:a6:e3:a4: cb:fa:5d:3d:16:ae:80:8a:2a:48:fa:2b:42:b3:01: b6:5c:47:25:c0:1f:38:8e:06:5a:75:92:14:94:54: e0:63:d2:dc:d4:16:2f:08:f7:ca:96:f5:3d:f1:67: 79:e7:ed:bd:23:d9:2e:82:aa:5f:de:96:b1:b1:75: 8d:46:9a:60:40:40:ce:38:e9:02:a1:c8:63:83:62: 5e:56:2a:f0:03:b0:9d:8c:ec:1c:d6:12:f5:c2:44: 10:24:ac:2a:08:45:64:fc:3e:ba:88:99:05:28:4a: b0:71:4e:1e:46:a5:74:6f:4c:37:aa:a4:f7:00:21: 35:65:cb:27:b3:8d:df:b0:6f:2e:96:5d:8f:8a:f4: 34:af:9f:55:20:d3:d0:13:91:d9:e3:ba:8a:ed:86: 80:62:1c:fc:15:1a:d3:10:cf:16:44:50:9e:56:89: 0c:1a:a2:20:ae:70:b5:b2:c1:26:0b:a1:08:cb:15: 99:23:22:44:d0:0e:d5:06:2c:59:45:30:23:85:25: c4:49:ed:38:64:a4:4c:fd:1f:96:42:1c:25:c2:83: 79:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:5A:0F:DB:A2:89:7F:B2:E3:34:2B:CE:5C:58:02:81:51:26:C6:25 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NloP26KJf7LjNCvOXFgCgVEmxiU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.245.110.0/24 Signature Algorithm: sha256WithRSAEncryption 78:80:f5:54:2e:80:28:9e:12:ed:0f:67:84:5a:d2:a7:5a:7c: 54:29:ed:e4:ec:9c:f7:be:04:1f:35:0b:fa:4e:b4:27:d4:f2: 12:02:da:4f:1c:2e:5a:26:99:bd:f6:53:78:e4:60:25:fb:f3: 4b:f1:b1:d6:9f:1f:e0:25:e1:7d:8b:df:fb:6e:45:5e:5d:09: 9f:fb:64:1c:e3:57:85:3a:42:6b:8c:cb:bd:93:35:ab:dd:71: 68:40:01:69:b6:68:ba:30:ed:ed:0a:be:71:8e:60:42:16:8d: 14:ae:cb:88:1b:84:5e:c0:54:26:39:c3:6a:bc:82:e1:b8:fb: eb:ce:43:3c:7c:2f:1f:6e:23:b0:c8:3d:a5:31:72:5c:b7:68: fe:de:31:e9:46:2f:32:a1:81:56:53:dd:ad:1e:74:b1:52:c2: 4a:9b:c4:21:34:0c:8b:4a:d0:b1:89:e2:c2:22:ff:86:d7:c6: 0b:12:8e:97:23:34:07:1f:2d:44:a0:35:18:8d:b3:4d:58:75: 92:3d:c2:17:b5:1c:48:2c:6b:24:e5:73:0c:ed:34:c0:32:18: 96:4f:35:ec:de:82:0e:c4:78:95:a0:9c:d1:86:f1:8b:40:5b: 08:fa:9b:d2:d8:50:0a:37:d3:43:38:7e:48:b9:60:ad:6f:a9: 19:96:a4:83 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqGDvUq61079EskEMDeQ0GRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTE1MDU0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNjVhMGZkYmEyODk3ZmIyZTMzNDJiY2U1YzU4MDI4MTUxMjZjNjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hahilBcwGvaQEB+klOcF1uU47zh flOo+8Fj5Hw/jiSFKQcMFoYDhCOm46TL+l09Fq6AiipI+itCswG2XEclwB84jgZa dZIUlFTgY9Lc1BYvCPfKlvU98Wd55+29I9kugqpf3paxsXWNRppgQEDOOOkCochj g2JeVirwA7CdjOwc1hL1wkQQJKwqCEVk/D66iJkFKEqwcU4eRqV0b0w3qqT3ACE1 Zcsns43fsG8ull2PivQ0r59VINPQE5HZ47qK7YaAYhz8FRrTEM8WRFCeVokMGqIg rnC1ssEmC6EIyxWZIyJE0A7VBixZRTAjhSXESe04ZKRM/R+WQhwlwoN58QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDZaD9uiiX+y4zQrzlxYAoFRJsYlMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvTmxvUDI2S0pmN0xqTkN2T1hGZ0NnVkVteGlVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/VuMA0G CSqGSIb3DQEBCwUAA4IBAQB4gPVULoAonhLtD2eEWtKnWnxUKe3k7Jz3vgQfNQv6 TrQn1PISAtpPHC5aJpm99lN45GAl+/NL8bHWnx/gJeF9i9/7bkVeXQmf+2Qc41eF OkJrjMu9kzWr3XFoQAFptmi6MO3tCr5xjmBCFo0UrsuIG4RewFQmOcNqvILhuPvr zkM8fC8fbiOwyD2lMXJct2j+3jHpRi8yoYFWU92tHnSxUsJKm8QhNAyLStCxieLC Iv+G18YLEo6XIzQHHy1EoDUYjbNNWHWSPcIXtRxILGsk5XMM7TTAMhiWTzXs3oIO xHiVoJzRhvGLQFsI+pvS2FAKN9NDOH5IuWCtb6kZlqSD -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:35 2025 by rpki-client