This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QCZomJ7bfmBUd5S1Qx3phOJ7yxc.roa File: QCZomJ7bfmBUd5S1Qx3phOJ7yxc.roa (raw, json) Hash identifier: EAwtn4nJTl8/mBUnisonfTrQOGx/CWMmQBGrPPyF94Q= Subject key identifier: 40:26:68:98:9E:DB:7E:60:54:77:94:B5:43:1D:E9:84:E2:7B:CB:17 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A61E60FB1ABB260741E98F230A9A67EB9 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QCZomJ7bfmBUd5S1Qx3phOJ7yxc.roa Signing time: Sat 08 Nov 2025 05:17:38 +0000 ROA not before: Sat 08 Nov 2025 05:17:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 64267 IP address blocks: 151.240.2.0/24 maxlen: 24 151.241.33.0/24 maxlen: 24 151.241.43.0/24 maxlen: 24 151.241.47.0/24 maxlen: 24 151.241.48.0/24 maxlen: 24 151.241.164.0/24 maxlen: 24 151.241.179.0/24 maxlen: 24 151.242.26.0/24 maxlen: 24 151.243.26.0/24 maxlen: 24 151.244.42.0/24 maxlen: 24 151.244.69.0/24 maxlen: 24 151.244.90.0/24 maxlen: 24 151.245.69.0/24 maxlen: 24 151.245.162.0/24 maxlen: 24 151.245.166.0/24 maxlen: 24 151.245.177.0/24 maxlen: 24 151.245.199.0/24 maxlen: 24 151.247.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:61:e6:0f:b1:ab:b2:60:74:1e:98:f2:30:a9:a6:7e:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 8 05:17:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=402668989edb7e60547794b5431de984e27bcb17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:20:32:cc:f4:ba:07:14:d7:80:46:36:ea:12: 81:35:69:02:a0:31:6a:ba:e9:6d:b3:49:05:22:14: 70:76:16:f1:60:c8:8d:74:b1:cd:34:25:cd:c8:ff: 91:f1:2f:ee:e6:a8:b9:e5:0b:b3:85:fb:47:25:4f: fc:19:60:aa:72:4c:2d:7c:6d:a9:32:c8:ce:19:df: 1c:bb:bb:ba:d9:d7:42:ef:ab:e8:db:88:f4:1a:d9: 19:56:a9:a8:4d:35:0b:67:1a:99:dd:7c:c1:56:51: 7c:ca:55:26:1e:8f:26:08:44:c1:26:f9:0d:a1:62: 2e:b4:66:f7:0e:79:65:1b:dc:03:4b:ea:da:53:c6: d7:16:38:96:6d:12:95:8b:11:04:c6:f8:0d:e7:bb: 00:e9:fc:0a:d8:6a:74:82:43:8b:bd:ad:68:39:e2: 31:0d:0f:af:1d:4b:8b:7d:14:8c:82:78:3a:9e:c0: 76:22:cf:d3:80:9e:9d:8b:04:5f:e9:2c:3d:01:ce: 1e:fd:81:b6:cc:52:77:bf:fc:9e:61:fc:ef:51:98: 3b:d1:d8:bf:15:70:14:17:00:38:04:ba:a4:17:07: 29:8f:58:e8:33:fb:3b:f6:f5:d4:4c:ac:64:53:6d: 76:6e:1f:0c:d6:b0:ba:ac:ee:0b:1c:e0:b4:fa:42: b8:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:26:68:98:9E:DB:7E:60:54:77:94:B5:43:1D:E9:84:E2:7B:CB:17 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QCZomJ7bfmBUd5S1Qx3phOJ7yxc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.2.0/24 151.241.33.0/24 151.241.43.0/24 151.241.47.0-151.241.48.255 151.241.164.0/24 151.241.179.0/24 151.242.26.0/24 151.243.26.0/24 151.244.42.0/24 151.244.69.0/24 151.244.90.0/24 151.245.69.0/24 151.245.162.0/24 151.245.166.0/24 151.245.177.0/24 151.245.199.0/24 151.247.246.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:b2:71:94:57:78:2f:06:c5:54:67:49:51:9b:f6:d2:e7:0e: d1:61:9c:15:70:83:24:58:fd:4a:b0:c0:42:89:e6:7a:d2:22: f5:53:7a:71:cb:84:8e:b7:bb:2b:33:45:09:b5:4f:47:c0:2a: 5d:9d:81:68:70:af:12:fd:d7:1d:47:48:2b:1e:f7:b6:ed:da: 69:a7:2e:54:f4:c1:f1:27:fd:d1:5e:fc:8f:88:f7:9c:7a:c1: 18:93:be:8a:bf:9d:7d:c1:a5:6c:e7:4b:07:bc:92:e8:03:ba: 54:47:93:41:4b:48:4b:fa:dd:65:ad:2b:cd:b3:5a:59:91:e9: e9:19:b8:50:dd:f0:2e:f0:02:8d:06:d9:34:53:19:78:0f:3a: c6:ef:61:1c:8f:fc:11:9a:e6:2a:2b:0b:b2:80:ef:2d:d5:f0: e4:61:c3:29:47:da:14:47:59:81:e5:ff:a7:74:dc:e6:5f:4e: 5d:ae:8d:47:4f:25:fc:be:b4:95:5f:a1:93:d4:cd:53:b8:fa: 37:30:19:8e:53:46:78:65:3b:23:11:63:3b:1b:fb:e7:e1:53: 40:74:cd:87:59:f9:df:d1:4c:86:4f:53:88:a5:fe:69:5c:3d: c3:ae:e7:d9:3f:d6:9c:dd:6b:39:87:6d:69:e4:fb:22:df:b0: f0:76:6f:b1 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgISAZph5g+xq7JgdB6Y8jCppn65MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTA4MDUxNzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MDI2Njg5ODllZGI3ZTYwNTQ3Nzk0YjU0MzFkZTk4NGUyN2JjYjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8CAyzPS6BxTXgEY26hKBNWkCoDFq uults0kFIhRwdhbxYMiNdLHNNCXNyP+R8S/u5qi55QuzhftHJU/8GWCqckwtfG2p MsjOGd8cu7u62ddC76vo24j0GtkZVqmoTTULZxqZ3XzBVlF8ylUmHo8mCETBJvkN oWIutGb3DnllG9wDS+raU8bXFjiWbRKVixEExvgN57sA6fwK2Gp0gkOLva1oOeIx DQ+vHUuLfRSMgng6nsB2Is/TgJ6diwRf6Sw9Ac4e/YG2zFJ3v/yeYfzvUZg70di/ FXAUFwA4BLqkFwcpj1joM/s79vXUTKxkU212bh8M1rC6rO4LHOC0+kK4uwIDAQAB o4ICcjCCAm4wHQYDVR0OBBYEFEAmaJie235gVHeUtUMd6YTie8sXMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvUUNab21KN2JmbUJVZDVTMVF4M3BoT0o3eXhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbgMEAJfwAgME AJfxIQMEAJfxKzAMAwQAl/EvAwQAl/EwAwQAl/GkAwQAl/GzAwQAl/IaAwQAl/Ma AwQAl/QqAwQAl/RFAwQAl/RaAwQAl/VFAwQAl/WiAwQAl/WmAwQAl/WxAwQAl/XH AwQAl/f2MA0GCSqGSIb3DQEBCwUAA4IBAQAfsnGUV3gvBsVUZ0lRm/bS5w7RYZwV cIMkWP1KsMBCieZ60iL1U3pxy4SOt7srM0UJtU9HwCpdnYFocK8S/dcdR0grHve2 7dpppy5U9MHxJ/3RXvyPiPecesEYk76Kv519waVs50sHvJLoA7pUR5NBS0hL+t1l rSvNs1pZkenpGbhQ3fAu8AKNBtk0Uxl4DzrG72Ecj/wRmuYqKwuygO8t1fDkYcMp R9oUR1mB5f+ndNzmX05dro1HTyX8vrSVX6GT1M1TuPo3MBmOU0Z4ZTsjEWM7G/vn 4VNAdM2HWfnf0UyGT1OIpf5pXD3DrufZP9ac3Ws5h21p5Psi37Dwdm+x -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:35 2025 by rpki-client