This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R7HuCWQZjBeDj2-DbzNqPQEsvmA.roa File: R7HuCWQZjBeDj2-DbzNqPQEsvmA.roa (raw, json) Hash identifier: WB1eaMZgBbV/htfCthQOHKV7pM9NbpGf1jQR1rgRu40= Subject key identifier: 47:B1:EE:09:64:19:8C:17:83:8F:6F:83:6F:33:6A:3D:01:2C:BE:60 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A61E035FD224AF0CA3474AA45BFD85F24 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R7HuCWQZjBeDj2-DbzNqPQEsvmA.roa Signing time: Sat 08 Nov 2025 05:11:15 +0000 ROA not before: Sat 08 Nov 2025 05:11:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214404 IP address blocks: 151.242.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:61:e0:35:fd:22:4a:f0:ca:34:74:aa:45:bf:d8:5f:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 8 05:11:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=47b1ee0964198c17838f6f836f336a3d012cbe60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8c:0e:cf:8a:cc:7e:bd:99:5a:a0:b7:9f:a0: 3f:65:70:c8:26:84:39:d1:16:03:61:f0:af:fb:7b: 3b:32:0a:f3:e4:43:f2:5e:a1:b1:54:0c:58:41:dc: 18:e0:08:e3:18:ad:ab:21:72:a2:54:73:f1:ff:3a: 86:30:77:cc:5a:58:0b:3a:99:55:9f:26:95:b1:79: d6:33:65:dd:ab:08:73:c7:2b:3f:9f:9a:cd:b4:cb: 6a:14:07:59:ba:00:7c:b6:2c:99:0d:7c:bb:f9:29: 5d:9f:58:ae:d0:8c:81:e5:df:ac:6e:2b:23:8a:5e: c0:e6:28:b8:23:33:d3:40:9c:28:12:d6:5b:ff:a8: 5a:e0:b6:6e:8b:c1:c9:f2:2b:df:73:4a:c5:d6:4b: a9:34:f4:b6:cd:1f:23:b8:0d:af:29:ee:ae:98:92: 02:7a:a0:24:a9:74:69:46:27:a3:81:44:31:22:b6: b1:84:67:af:1a:31:0a:aa:e7:0a:d3:1c:9a:e7:87: 46:66:b2:f5:06:09:e0:ab:89:50:98:7d:43:f1:1e: a9:9f:d4:b2:73:57:88:e7:b6:4e:19:d8:13:7d:91: 68:23:76:28:df:39:f1:3d:9c:01:46:b0:9b:13:f1: 0b:ae:9f:3e:2e:9d:7c:5c:ad:41:ec:55:fd:14:5c: 8f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B1:EE:09:64:19:8C:17:83:8F:6F:83:6F:33:6A:3D:01:2C:BE:60 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R7HuCWQZjBeDj2-DbzNqPQEsvmA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.68.0/24 Signature Algorithm: sha256WithRSAEncryption 36:0f:3a:6b:e3:76:b7:29:2c:5a:a0:ba:23:17:a1:44:a6:4f: 3d:77:b4:e5:47:2c:41:23:3c:df:be:fd:0d:a5:22:98:44:fd: 09:df:83:93:b6:9e:4d:a1:14:e4:0f:64:85:d1:df:af:40:87: cc:6a:98:0c:54:be:f8:71:4b:ff:60:37:22:e4:01:41:d4:75: c5:70:47:ed:54:01:7f:04:59:7b:d9:63:0f:7b:18:49:c9:c0: e5:18:c6:41:6e:d5:1d:bf:a1:a4:b0:a4:a0:77:1b:23:88:c6: 05:3b:dc:aa:bb:df:7a:2a:42:24:9c:bc:a3:8f:ba:65:e0:42: 81:90:c4:d3:5a:30:bd:8f:fa:57:8c:78:42:73:4f:1a:88:52: 84:39:b8:f2:a2:e6:23:82:4b:68:c7:be:1e:d6:92:d2:e8:aa: 2f:3f:ca:3a:3a:4a:f3:e9:34:82:f2:7f:ce:2c:f4:8a:a2:80: b4:27:7c:f5:95:83:d0:77:82:cb:a1:97:67:6d:83:e6:5e:11: d8:ed:d9:c9:55:0a:e4:f5:f4:f8:c3:bf:9c:ba:9f:95:41:f1: ed:8b:ac:01:b2:e6:aa:8e:6c:c0:03:b3:83:1f:d1:67:65:27: 74:17:1d:5f:fd:62:c4:f6:0f:4b:8a:13:c8:db:db:b9:76:81: 4a:f9:c7:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZph4DX9IkrwyjR0qkW/2F8kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTA4MDUxMTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2IxZWUwOTY0MTk4YzE3ODM4ZjZmODM2ZjMzNmEzZDAxMmNiZTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYwOz4rMfr2ZWqC3n6A/ZXDIJoQ5 0RYDYfCv+3s7Mgrz5EPyXqGxVAxYQdwY4AjjGK2rIXKiVHPx/zqGMHfMWlgLOplV nyaVsXnWM2Xdqwhzxys/n5rNtMtqFAdZugB8tiyZDXy7+Sldn1iu0IyB5d+sbisj il7A5ii4IzPTQJwoEtZb/6ha4LZui8HJ8ivfc0rF1kupNPS2zR8juA2vKe6umJIC eqAkqXRpRiejgUQxIraxhGevGjEKqucK0xya54dGZrL1Bgngq4lQmH1D8R6pn9Sy c1eI57ZOGdgTfZFoI3Yo3znxPZwBRrCbE/ELrp8+Lp18XK1B7FX9FFyPrQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEex7glkGYwXg49vg28zaj0BLL5gMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvUjdIdUNXUVpqQmVEajItRGJ6TnFQUUVzdm1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/JEMA0G CSqGSIb3DQEBCwUAA4IBAQA2Dzpr43a3KSxaoLojF6FEpk89d7TlRyxBIzzfvv0N pSKYRP0J34OTtp5NoRTkD2SF0d+vQIfMapgMVL74cUv/YDci5AFB1HXFcEftVAF/ BFl72WMPexhJycDlGMZBbtUdv6GksKSgdxsjiMYFO9yqu996KkIknLyjj7pl4EKB kMTTWjC9j/pXjHhCc08aiFKEObjyouYjgktox74e1pLS6KovP8o6Okrz6TSC8n/O LPSKooC0J3z1lYPQd4LLoZdnbYPmXhHY7dnJVQrk9fT4w7+cup+VQfHti6wBsuaq jmzAA7ODH9FnZSd0Fx1f/WLE9g9LihPI29u5doFK+cdk -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:04 2025 by rpki-client