This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OtqmNLwRCVn151oJmscDKoHah70.roa File: OtqmNLwRCVn151oJmscDKoHah70.roa (raw, json) Hash identifier: kb6/TIkD//r1i1Gni3HMkv6IRN4rzgmd8b3G/+3PIoo= Subject key identifier: 3A:DA:A6:34:BC:11:09:59:F5:E7:5A:09:9A:C7:03:2A:81:DA:87:BD Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B1159BC10B82D0FE1BF79FF3966BBEAFE Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OtqmNLwRCVn151oJmscDKoHah70.roa Signing time: Fri 12 Dec 2025 06:57:32 +0000 ROA not before: Fri 12 Dec 2025 06:57:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212384 IP address blocks: 151.240.113.0/24 maxlen: 24 151.240.167.0/24 maxlen: 24 151.240.175.0/24 maxlen: 24 151.241.4.0/24 maxlen: 24 151.242.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 19:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:59:bc:10:b8:2d:0f:e1:bf:79:ff:39:66:bb:ea:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 12 06:57:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=3adaa634bc110959f5e75a099ac7032a81da87bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f6:03:e8:21:44:fd:57:a3:44:69:9f:a0:89: 75:bc:f3:1e:95:26:a0:f0:04:2a:65:ff:7d:de:87: 16:ed:25:cf:88:f9:08:5e:13:68:5d:47:5f:84:a9: da:84:3d:69:01:ff:5c:fd:b0:11:72:63:30:46:71: d9:5b:2d:c2:bd:c5:b8:67:00:a0:cb:c9:25:67:a8: 22:df:ea:08:bc:22:7e:c4:fe:30:ae:09:47:cd:be: bf:29:cc:96:1b:91:31:98:b7:b5:50:22:87:d1:91: 8c:f8:7a:62:d4:b9:0e:48:61:90:bf:09:10:fd:3c: 8c:7d:29:96:f5:86:50:b6:e6:b8:c5:4b:76:e9:e6: 83:b9:cd:95:91:56:b8:fc:3d:c9:2a:ce:d6:03:1c: bc:4b:9c:ea:f6:c9:8f:b5:33:88:d4:31:9a:d9:eb: 59:c4:c0:33:df:55:b8:0a:71:b2:be:28:c4:e8:14: f6:59:f0:a3:99:3b:38:73:4a:5f:b4:f4:7c:d2:08: 02:23:f4:1f:38:03:c8:bb:da:7a:f2:a7:5d:a2:a2: 1c:ec:d7:28:1b:36:5f:8e:1b:3a:94:3c:32:14:5e: 81:3e:ee:97:f5:7f:29:ee:94:69:27:f5:33:ed:d5: 18:fb:a9:a0:13:a9:43:98:e9:93:a7:29:96:6a:af: 32:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DA:A6:34:BC:11:09:59:F5:E7:5A:09:9A:C7:03:2A:81:DA:87:BD X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OtqmNLwRCVn151oJmscDKoHah70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.113.0/24 151.240.167.0/24 151.240.175.0/24 151.241.4.0/24 151.242.138.0/24 Signature Algorithm: sha256WithRSAEncryption 82:33:43:19:3b:69:b6:8d:c0:00:ec:50:79:d9:7c:33:63:ed: e7:1a:88:3e:a0:f5:8a:9b:56:7c:78:36:b1:da:be:20:43:a7: 86:b4:f9:eb:33:6e:39:0c:fe:ff:b0:d3:16:2f:c0:20:60:b6: ec:da:7a:5e:3b:08:ff:c8:5b:27:12:87:02:00:98:62:b2:f1: 07:0e:12:cc:c5:f5:a1:c6:e8:8d:b5:94:3e:11:e0:33:af:58: b3:fd:f1:b4:0f:72:f5:85:3c:20:b5:69:b0:6f:ee:aa:61:5b: 94:51:57:25:a2:37:41:33:c6:b0:5e:a6:3e:bd:79:02:4b:7a: 46:f0:3e:e0:1e:94:58:28:e2:3d:17:e7:47:c2:2e:b6:ad:bb: 23:95:8f:7a:43:62:a9:a9:9f:88:f0:3f:f8:c6:d5:f0:7c:1c: 50:06:e3:e6:d2:ab:7e:0b:8c:1f:46:f6:90:2e:6e:41:d9:a1: 02:56:f6:19:71:82:6e:03:d2:42:62:9b:ca:79:5d:f7:b2:67: 86:7e:97:9b:87:c7:e5:52:14:33:8f:2d:c8:21:c1:53:8f:c1: 8c:f2:5a:f1:86:ec:22:19:7b:ac:23:d2:9c:6e:cf:0f:27:de: 0b:1a:40:58:35:b0:b1:b5:40:1f:c1:66:90:48:9d:ca:1f:0d: 23:0c:03:92 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZsRWbwQuC0P4b95/zlmu+r+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjEyMDY1NzMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYWRhYTYzNGJjMTEwOTU5ZjVlNzVhMDk5YWM3MDMyYTgxZGE4N2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvYD6CFE/VejRGmfoIl1vPMelSag 8AQqZf993ocW7SXPiPkIXhNoXUdfhKnahD1pAf9c/bARcmMwRnHZWy3CvcW4ZwCg y8klZ6gi3+oIvCJ+xP4wrglHzb6/KcyWG5ExmLe1UCKH0ZGM+Hpi1LkOSGGQvwkQ /TyMfSmW9YZQtua4xUt26eaDuc2VkVa4/D3JKs7WAxy8S5zq9smPtTOI1DGa2etZ xMAz31W4CnGyvijE6BT2WfCjmTs4c0pftPR80ggCI/QfOAPIu9p68qddoqIc7Nco GzZfjhs6lDwyFF6BPu6X9X8p7pRpJ/Uz7dUY+6mgE6lDmOmTpymWaq8yeQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFDrapjS8EQlZ9edaCZrHAyqB2oe9MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvT3RxbU5Md1JDVm4xNTFvSm1zY0RLb0hhaDcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAl/BxAwQA l/CnAwQAl/CvAwQAl/EEAwQAl/KKMA0GCSqGSIb3DQEBCwUAA4IBAQCCM0MZO2m2 jcAA7FB52XwzY+3nGog+oPWKm1Z8eDax2r4gQ6eGtPnrM245DP7/sNMWL8AgYLbs 2npeOwj/yFsnEocCAJhisvEHDhLMxfWhxuiNtZQ+EeAzr1iz/fG0D3L1hTwgtWmw b+6qYVuUUVclojdBM8awXqY+vXkCS3pG8D7gHpRYKOI9F+dHwi62rbsjlY96Q2Kp qZ+I8D/4xtXwfBxQBuPm0qt+C4wfRvaQLm5B2aECVvYZcYJuA9JCYpvKeV33smeG fpebh8flUhQzjy3IIcFTj8GM8lrxhuwiGXusI9Kcbs8PJ94LGkBYNbCxtUAfwWaQ SJ3KHw0jDAOS -----END CERTIFICATE-----Generated at Thu Dec 18 05:48:56 2025 by rpki-client