This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/U9G66i_VjKLl9szi9T1oKzrrsLA.roa File: U9G66i_VjKLl9szi9T1oKzrrsLA.roa (raw, json) Hash identifier: zoakLKvVkU9FkUFFQ7FsRueWsO+fJIKLqrCxtWublIE= Subject key identifier: 53:D1:BA:EA:2F:D5:8C:A2:E5:F6:CC:E2:F5:3D:68:2B:3A:EB:B0:B0 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A860EF57EA782C3B400C68C1E07203074 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/U9G66i_VjKLl9szi9T1oKzrrsLA.roa Signing time: Sat 15 Nov 2025 05:48:38 +0000 ROA not before: Sat 15 Nov 2025 05:48:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202736 IP address blocks: 151.246.48.0/21 maxlen: 24 151.246.56.0/21 maxlen: 24 151.246.80.0/21 maxlen: 24 151.246.88.0/21 maxlen: 24 151.246.96.0/21 maxlen: 24 151.246.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 26 Nov 2025 13:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:86:0e:f5:7e:a7:82:c3:b4:00:c6:8c:1e:07:20:30:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 15 05:48:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=53d1baea2fd58ca2e5f6cce2f53d682b3aebb0b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:28:2d:ab:a5:c8:f5:00:4e:48:f1:e2:1d:54: 1e:60:c7:68:b2:34:c0:91:a6:95:f0:0f:88:c3:fb: 80:a0:4e:c8:2f:be:bc:a5:eb:68:c0:8d:cf:cd:ef: 94:74:40:a4:b0:39:de:60:6d:73:cc:ea:f6:6d:25: 15:ab:35:e5:27:a7:a4:7c:70:25:66:b1:2a:b9:4a: 9a:9e:9b:c5:60:76:bf:a2:4c:d2:56:5d:dc:92:6f: 98:82:ee:cd:71:f7:cf:4d:b2:96:d4:6d:0a:7e:d2: c7:61:be:21:f5:cc:64:e0:e1:19:00:47:ad:40:2b: f1:c4:7b:b3:40:10:d3:6e:20:40:bb:ae:20:3c:2e: ee:4f:15:49:d3:a5:87:9b:22:03:06:25:f5:08:ee: f4:e2:07:2e:a2:05:7f:b2:6c:ee:b2:9f:ed:4a:de: 2d:3b:9b:cf:a8:fc:ae:b3:8f:78:44:3b:aa:28:ec: 93:2d:56:00:7a:79:5c:55:0c:6f:7a:e8:0a:3d:9e: 52:8e:14:fd:b1:89:33:2a:a0:fa:2b:81:ec:ba:1c: 16:98:c8:56:b6:65:af:1c:df:49:7e:a6:f0:8a:78: fb:21:00:64:8c:9e:3d:58:06:4f:3b:85:f8:90:88: 85:2c:b7:55:86:cc:ec:af:af:bf:e9:9b:67:bc:a7: 08:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D1:BA:EA:2F:D5:8C:A2:E5:F6:CC:E2:F5:3D:68:2B:3A:EB:B0:B0 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/U9G66i_VjKLl9szi9T1oKzrrsLA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.246.48.0/20 151.246.80.0-151.246.103.255 151.246.112.0/21 Signature Algorithm: sha256WithRSAEncryption 86:97:b2:f1:2e:f7:7b:36:26:00:df:f0:2b:58:81:88:9f:09: 02:fc:bc:fa:e1:b2:2c:47:4f:44:68:3e:97:1d:22:6d:93:91: 1c:4a:fc:f6:1a:e7:d3:0b:fa:6e:2a:0c:20:6d:a0:0a:e3:b5: f3:a7:fc:4b:ed:f0:b1:63:13:bd:9f:d3:d4:0d:8f:0b:ef:24: 67:e0:75:8e:22:2d:04:a1:2e:74:fd:74:8a:55:dc:a0:30:aa: c8:fa:20:14:12:8f:7d:df:ee:17:d0:9b:dc:da:40:51:f0:06: 93:45:11:90:b5:17:43:ec:df:04:06:16:b6:0d:d4:78:ea:32: ab:41:18:82:c0:53:68:dc:fc:64:a3:48:0c:3a:7e:b7:76:97: 24:fa:4b:b1:cb:8f:64:b0:42:5c:45:e5:d0:37:7b:ff:e2:b8: dc:6a:34:c5:23:d2:ce:6d:bf:bc:84:63:3f:75:50:40:a3:d7: bc:93:01:8b:dc:bc:0f:5f:1f:b4:da:96:15:88:a6:77:3b:c8: 0a:96:7d:b6:b5:9b:e5:af:a7:38:ea:08:73:58:f2:bf:00:a4: 24:0a:3c:e6:ea:52:29:f1:9b:04:94:6f:aa:d7:90:a5:ae:0e: ec:71:c5:b8:c2:6c:7a:e0:13:ae:1e:88:07:80:f7:b5:17:0c: 50:ea:64:95 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZqGDvV+p4LDtADGjB4HIDB0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTE1MDU0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1M2QxYmFlYTJmZDU4Y2EyZTVmNmNjZTJmNTNkNjgyYjNhZWJiMGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuigtq6XI9QBOSPHiHVQeYMdosjTA kaaV8A+Iw/uAoE7IL768petowI3Pze+UdECksDneYG1zzOr2bSUVqzXlJ6ekfHAl ZrEquUqanpvFYHa/okzSVl3ckm+Ygu7NcffPTbKW1G0KftLHYb4h9cxk4OEZAEet QCvxxHuzQBDTbiBAu64gPC7uTxVJ06WHmyIDBiX1CO704gcuogV/smzusp/tSt4t O5vPqPyus494RDuqKOyTLVYAenlcVQxveugKPZ5SjhT9sYkzKqD6K4HsuhwWmMhW tmWvHN9Jfqbwinj7IQBkjJ49WAZPO4X4kIiFLLdVhszsr6+/6ZtnvKcI8wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFFPRuuov1Yyi5fbM4vU9aCs667CwMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvVTlHNjZpX1ZqS0xsOXN6aTlUMW9LenJyc0xBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQEl/YwMAwD BASX9lADBAOX9mADBAOX9nAwDQYJKoZIhvcNAQELBQADggEBAIaXsvEu93s2JgDf 8CtYgYifCQL8vPrhsixHT0RoPpcdIm2TkRxK/PYa59ML+m4qDCBtoArjtfOn/Evt 8LFjE72f09QNjwvvJGfgdY4iLQShLnT9dIpV3KAwqsj6IBQSj33f7hfQm9zaQFHw BpNFEZC1F0Ps3wQGFrYN1HjqMqtBGILAU2jc/GSjSAw6frd2lyT6S7HLj2SwQlxF 5dA3e//iuNxqNMUj0s5tv7yEYz91UECj17yTAYvcvA9fH7TalhWIpnc7yAqWfba1 m+WvpzjqCHNY8r8ApCQKPObqUinxmwSUb6rXkKWuDuxxxbjCbHrgE64eiAeA97UX DFDqZJU= -----END CERTIFICATE-----Generated at Tue Nov 25 17:41:12 2025 by rpki-client