This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Rd7VlmtsLIi_wux_oZmsoqpLV-k.roa File: Rd7VlmtsLIi_wux_oZmsoqpLV-k.roa (raw, json) Hash identifier: EqGHMBeLHmviRP7zTPKD9zCQAqz3QdTVIuPF+HaZofc= Subject key identifier: 45:DE:D5:96:6B:6C:2C:88:BF:C2:EC:7F:A1:99:AC:A2:AA:4B:57:E9 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019ABF1775575802A6980F39DC6F288CFCF5 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Rd7VlmtsLIi_wux_oZmsoqpLV-k.roa Signing time: Wed 26 Nov 2025 07:36:16 +0000 ROA not before: Wed 26 Nov 2025 07:36:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 37.202.223.0/24 maxlen: 24 151.240.4.0/24 maxlen: 24 151.240.5.0/24 maxlen: 24 151.240.6.0/24 maxlen: 24 151.240.7.0/24 maxlen: 24 151.240.11.0/24 maxlen: 24 151.240.12.0/24 maxlen: 24 151.240.13.0/24 maxlen: 24 151.240.15.0/24 maxlen: 24 151.240.16.0/24 maxlen: 24 151.240.17.0/24 maxlen: 24 151.240.18.0/24 maxlen: 24 151.240.19.0/24 maxlen: 24 151.240.20.0/24 maxlen: 24 151.240.21.0/24 maxlen: 24 151.240.22.0/24 maxlen: 24 151.240.23.0/24 maxlen: 24 151.240.25.0/24 maxlen: 24 151.240.29.0/24 maxlen: 24 151.240.31.0/24 maxlen: 24 151.240.32.0/24 maxlen: 24 151.240.33.0/24 maxlen: 24 151.240.34.0/24 maxlen: 24 151.240.35.0/24 maxlen: 24 151.240.36.0/24 maxlen: 24 151.240.37.0/24 maxlen: 24 151.240.38.0/24 maxlen: 24 151.240.39.0/24 maxlen: 24 151.240.40.0/24 maxlen: 24 151.240.41.0/24 maxlen: 24 151.240.42.0/24 maxlen: 24 151.240.68.0/24 maxlen: 24 151.240.69.0/24 maxlen: 24 151.240.70.0/24 maxlen: 24 151.240.71.0/24 maxlen: 24 151.240.73.0/24 maxlen: 24 151.240.78.0/24 maxlen: 24 151.240.83.0/24 maxlen: 24 151.240.84.0/24 maxlen: 24 151.240.85.0/24 maxlen: 24 151.240.86.0/24 maxlen: 24 151.240.87.0/24 maxlen: 24 151.240.88.0/24 maxlen: 24 151.240.89.0/24 maxlen: 24 151.240.90.0/24 maxlen: 24 151.240.126.0/24 maxlen: 24 151.240.127.0/24 maxlen: 24 151.240.128.0/24 maxlen: 24 151.240.129.0/24 maxlen: 24 151.240.130.0/24 maxlen: 24 151.240.131.0/24 maxlen: 24 151.240.132.0/24 maxlen: 24 151.240.133.0/24 maxlen: 24 151.240.134.0/24 maxlen: 24 151.240.135.0/24 maxlen: 24 151.240.136.0/24 maxlen: 24 151.240.137.0/24 maxlen: 24 151.240.138.0/24 maxlen: 24 151.240.139.0/24 maxlen: 24 151.240.140.0/24 maxlen: 24 151.240.141.0/24 maxlen: 24 151.240.142.0/24 maxlen: 24 151.240.143.0/24 maxlen: 24 151.240.152.0/24 maxlen: 24 151.240.156.0/24 maxlen: 24 151.240.157.0/24 maxlen: 24 151.240.159.0/24 maxlen: 24 151.240.160.0/24 maxlen: 24 151.240.162.0/24 maxlen: 24 151.240.163.0/24 maxlen: 24 151.240.164.0/24 maxlen: 24 151.240.166.0/24 maxlen: 24 151.240.167.0/24 maxlen: 24 151.240.168.0/24 maxlen: 24 151.240.169.0/24 maxlen: 24 151.240.170.0/24 maxlen: 24 151.240.171.0/24 maxlen: 24 151.240.172.0/24 maxlen: 24 151.240.173.0/24 maxlen: 24 151.240.174.0/24 maxlen: 24 151.240.175.0/24 maxlen: 24 151.240.176.0/24 maxlen: 24 151.240.178.0/24 maxlen: 24 151.240.180.0/24 maxlen: 24 151.240.181.0/24 maxlen: 24 151.240.182.0/24 maxlen: 24 151.240.183.0/24 maxlen: 24 151.240.184.0/24 maxlen: 24 151.240.185.0/24 maxlen: 24 151.240.186.0/24 maxlen: 24 151.240.187.0/24 maxlen: 24 151.240.188.0/24 maxlen: 24 151.240.189.0/24 maxlen: 24 151.240.190.0/24 maxlen: 24 151.240.191.0/24 maxlen: 24 151.240.192.0/24 maxlen: 24 151.240.193.0/24 maxlen: 24 151.240.194.0/24 maxlen: 24 151.240.195.0/24 maxlen: 24 151.240.196.0/24 maxlen: 24 151.240.197.0/24 maxlen: 24 151.240.198.0/24 maxlen: 24 151.240.199.0/24 maxlen: 24 151.240.200.0/24 maxlen: 24 151.240.201.0/24 maxlen: 24 151.240.202.0/24 maxlen: 24 151.240.203.0/24 maxlen: 24 151.240.204.0/24 maxlen: 24 151.240.206.0/24 maxlen: 24 151.240.207.0/24 maxlen: 24 151.240.208.0/24 maxlen: 24 151.240.209.0/24 maxlen: 24 151.240.210.0/24 maxlen: 24 151.240.211.0/24 maxlen: 24 151.240.212.0/24 maxlen: 24 151.240.213.0/24 maxlen: 24 151.240.214.0/24 maxlen: 24 151.240.215.0/24 maxlen: 24 151.240.216.0/24 maxlen: 24 151.240.217.0/24 maxlen: 24 151.240.218.0/24 maxlen: 24 151.240.219.0/24 maxlen: 24 151.240.220.0/24 maxlen: 24 151.240.221.0/24 maxlen: 24 151.240.222.0/24 maxlen: 24 151.240.223.0/24 maxlen: 24 151.240.224.0/24 maxlen: 24 151.240.225.0/24 maxlen: 24 151.240.229.0/24 maxlen: 24 151.240.233.0/24 maxlen: 24 151.240.234.0/24 maxlen: 24 151.240.235.0/24 maxlen: 24 151.240.236.0/24 maxlen: 24 151.240.237.0/24 maxlen: 24 151.240.238.0/24 maxlen: 24 151.240.240.0/24 maxlen: 24 151.240.248.0/24 maxlen: 24 151.240.254.0/24 maxlen: 24 151.241.32.0/24 maxlen: 24 151.242.145.0/24 maxlen: 24 151.242.148.0/24 maxlen: 24 151.243.45.0/24 maxlen: 24 151.243.88.0/24 maxlen: 24 151.243.89.0/24 maxlen: 24 151.244.3.0/24 maxlen: 24 151.244.4.0/24 maxlen: 24 151.244.141.0/24 maxlen: 24 151.244.187.0/24 maxlen: 24 151.245.68.0/24 maxlen: 24 151.245.132.0/24 maxlen: 24 151.245.203.0/24 maxlen: 24 151.247.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 28 Nov 2025 20:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bf:17:75:57:58:02:a6:98:0f:39:dc:6f:28:8c:fc:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 26 07:36:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=45ded5966b6c2c88bfc2ec7fa199aca2aa4b57e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:49:bc:45:96:98:42:c4:08:e0:8b:5e:b9:b1: 14:1a:4b:06:0d:2e:dc:3a:41:b3:f2:be:38:ab:d6: b8:25:f5:26:40:52:20:bf:96:68:45:cc:e0:67:00: 6c:c6:69:a6:fc:70:4d:9a:fd:15:7c:14:a0:ee:ae: b0:e8:03:17:a2:10:38:1c:06:a3:ec:fc:94:20:4f: 68:13:1e:bc:b5:e5:3f:1b:c1:96:7b:1b:2c:62:b8: 38:03:2c:00:7f:e5:73:bb:0d:b6:ca:7b:e8:55:9c: aa:79:80:79:b5:6d:5a:e3:cb:0b:5e:69:62:6f:47: 39:bb:d0:23:59:e2:29:1a:b3:6d:c0:16:c6:f4:5f: 22:f8:42:f0:27:45:83:46:0f:7d:16:07:de:66:0c: 72:b8:61:00:ab:29:16:2d:65:f4:c1:35:fd:95:ba: 74:b8:f2:53:9e:9d:a7:9a:89:06:58:ba:d9:a0:10: da:2d:b3:35:e8:92:5f:67:c1:d6:28:05:19:e1:2a: 24:12:39:8a:63:f0:07:db:6a:19:f5:47:42:0b:86: 46:a0:77:62:ec:ed:5e:43:4b:25:c2:2d:bd:41:61: 27:92:7b:08:3d:c3:a6:3f:0e:22:54:ac:08:71:f4: 61:d1:d7:c5:dc:af:36:8a:4b:af:e6:10:40:89:ed: 30:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DE:D5:96:6B:6C:2C:88:BF:C2:EC:7F:A1:99:AC:A2:AA:4B:57:E9 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Rd7VlmtsLIi_wux_oZmsoqpLV-k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.223.0/24 151.240.4.0/22 151.240.11.0-151.240.13.255 151.240.15.0-151.240.23.255 151.240.25.0/24 151.240.29.0/24 151.240.31.0-151.240.42.255 151.240.68.0/22 151.240.73.0/24 151.240.78.0/24 151.240.83.0-151.240.90.255 151.240.126.0-151.240.143.255 151.240.152.0/24 151.240.156.0/23 151.240.159.0-151.240.160.255 151.240.162.0-151.240.164.255 151.240.166.0-151.240.176.255 151.240.178.0/24 151.240.180.0-151.240.204.255 151.240.206.0-151.240.225.255 151.240.229.0/24 151.240.233.0-151.240.238.255 151.240.240.0/24 151.240.248.0/24 151.240.254.0/24 151.241.32.0/24 151.242.145.0/24 151.242.148.0/24 151.243.45.0/24 151.243.88.0/23 151.244.3.0-151.244.4.255 151.244.141.0/24 151.244.187.0/24 151.245.68.0/24 151.245.132.0/24 151.245.203.0/24 151.247.218.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:93:35:b2:f1:9c:2b:d2:9b:6c:76:5e:11:61:79:6c:a0:91: 1f:0d:1c:00:2a:73:0c:fe:25:05:52:af:51:f1:57:2c:e1:93: c4:cd:eb:12:b0:0b:2a:38:0a:e8:07:54:65:fb:b1:59:47:6f: 18:91:90:07:c8:99:e7:74:8a:e5:c1:be:38:b9:c4:28:65:45: 3a:46:5e:f9:66:b6:a9:f1:77:6c:ad:ae:93:7e:b7:0c:a2:5e: 9b:df:ee:86:b6:7e:77:ab:69:a5:3f:10:37:17:6f:8e:a3:a6: 68:3e:c8:7e:e1:aa:98:da:fc:21:24:b7:9a:8d:10:6a:70:83: c7:13:b6:a3:89:22:32:eb:27:0c:27:40:5a:a4:ba:b4:c1:1d: b7:14:4c:5a:bf:4b:e0:d3:ce:a4:30:4f:36:a1:bf:ea:15:88: d5:80:de:f3:14:c1:52:60:b0:a5:e4:77:91:f5:b2:6a:d5:0f: 84:a2:56:72:92:ad:11:46:90:eb:58:68:2e:7a:14:d3:04:90: 45:e3:71:10:ba:e7:af:b2:3f:b9:9f:0a:87:11:86:24:3b:a1: 2d:ff:3b:f9:c6:79:1b:86:a3:35:6b:d4:a7:c8:c3:79:12:ce: a6:b9:f4:b4:b3:ef:33:f3:c7:c7:06:3e:9c:26:ae:b2:0d:d8: 35:08:78:5e -----BEGIN CERTIFICATE----- MIIGPzCCBSegAwIBAgISAZq/F3VXWAKmmA853G8ojPz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTI2MDczNjE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWRlZDU5NjZiNmMyYzg4YmZjMmVjN2ZhMTk5YWNhMmFhNGI1N2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Em8RZaYQsQI4IteubEUGksGDS7c OkGz8r44q9a4JfUmQFIgv5ZoRczgZwBsxmmm/HBNmv0VfBSg7q6w6AMXohA4HAaj 7PyUIE9oEx68teU/G8GWexssYrg4AywAf+Vzuw22ynvoVZyqeYB5tW1a48sLXmli b0c5u9AjWeIpGrNtwBbG9F8i+ELwJ0WDRg99FgfeZgxyuGEAqykWLWX0wTX9lbp0 uPJTnp2nmokGWLrZoBDaLbM16JJfZ8HWKAUZ4SokEjmKY/AH22oZ9UdCC4ZGoHdi 7O1eQ0slwi29QWEnknsIPcOmPw4iVKwIcfRh0dfF3K82ikuv5hBAie0wSwIDAQAB o4IDSzCCA0cwHQYDVR0OBBYEFEXe1ZZrbCyIv8Lsf6GZrKKqS1fpMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvUmQ3VmxtdHNMSWlfd3V4X29abXNvcXBMVi1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBXwYIKwYBBQUHAQcBAf8EggFOMIIBSjCCAUYEAgABMIIB PgMEACXK3wMEApfwBDAMAwQAl/ALAwQBl/AMMAwDBACX8A8DBAOX8BADBACX8BkD BACX8B0wDAMEAJfwHwMEAJfwKgMEApfwRAMEAJfwSQMEAJfwTjAMAwQAl/BTAwQA l/BaMAwDBAGX8H4DBASX8IADBACX8JgDBAGX8JwwDAMEAJfwnwMEAJfwoDAMAwQB l/CiAwQAl/CkMAwDBAGX8KYDBACX8LADBACX8LIwDAMEApfwtAMEAJfwzDAMAwQB l/DOAwQBl/DgAwQAl/DlMAwDBACX8OkDBACX8O4DBACX8PADBACX8PgDBACX8P4D BACX8SADBACX8pEDBACX8pQDBACX8y0DBAGX81gwDAMEAJf0AwMEAJf0BAMEAJf0 jQMEAJf0uwMEAJf1RAMEAJf1hAMEAJf1ywMEAJf32jANBgkqhkiG9w0BAQsFAAOC AQEADZM1svGcK9KbbHZeEWF5bKCRHw0cACpzDP4lBVKvUfFXLOGTxM3rErALKjgK 6AdUZfuxWUdvGJGQB8iZ53SK5cG+OLnEKGVFOkZe+Wa2qfF3bK2uk363DKJem9/u hrZ+d6tppT8QNxdvjqOmaD7IfuGqmNr8ISS3mo0QanCDxxO2o4kiMusnDCdAWqS6 tMEdtxRMWr9L4NPOpDBPNqG/6hWI1YDe8xTBUmCwpeR3kfWyatUPhKJWcpKtEUaQ 61hoLnoU0wSQReNxELrnr7I/uZ8KhxGGJDuhLf87+cZ5G4ajNWvUp8jDeRLOprn0 tLPvM/PHxwY+nCausg3YNQh4Xg== -----END CERTIFICATE-----Generated at Fri Nov 28 05:01:31 2025 by rpki-client