This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VLW6mbpaBc7iUsBXVkBVV3Slr2g.roa File: VLW6mbpaBc7iUsBXVkBVV3Slr2g.roa (raw, json) Hash identifier: 9JcGQdN0PO9gUvgTGQR9XrW1KIVoJwU0MXSFkHofdFA= Subject key identifier: 54:B5:BA:99:BA:5A:05:CE:E2:52:C0:57:56:40:55:57:74:A5:AF:68 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A671B0F217EEA7F0B3F04978529467016 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VLW6mbpaBc7iUsBXVkBVV3Slr2g.roa Signing time: Sun 09 Nov 2025 05:33:37 +0000 ROA not before: Sun 09 Nov 2025 05:33:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212053 IP address blocks: 151.244.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:67:1b:0f:21:7e:ea:7f:0b:3f:04:97:85:29:46:70:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 9 05:33:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=54b5ba99ba5a05cee252c0575640555774a5af68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7f:fa:56:f9:6b:b4:92:1b:27:19:65:0a:55: 6b:b5:27:ea:d6:90:98:90:47:6c:b6:5f:ac:08:b5: 9b:49:91:1d:09:ca:7a:62:3b:ff:b1:e5:f6:43:1b: c8:cf:f6:d6:7f:88:34:db:2c:d1:ab:dc:3a:41:5b: 48:1a:71:8d:37:66:71:59:36:a2:77:aa:5e:35:af: ae:da:b8:9e:e5:7d:79:45:e3:e1:a7:f4:3f:29:2c: 86:8c:11:e2:7f:cb:5b:2c:c7:b3:f6:0c:0c:c2:8c: c3:a8:ba:4a:b9:20:d9:a0:8c:7b:e8:70:51:c7:53: a0:ea:fd:e8:9e:f3:3f:bf:48:91:4f:77:47:cd:c6: 83:8a:73:ca:6e:3b:00:e1:63:72:24:98:65:50:46: 98:a5:28:47:7b:16:6d:e4:47:b7:dc:73:79:a6:2f: 8f:d8:94:79:31:3c:0a:d3:98:68:ba:33:4c:7c:7f: 83:74:c1:39:52:a8:a7:fe:83:29:87:3b:5f:b6:85: c8:28:c5:9b:86:fa:53:eb:b2:af:13:9a:fc:9e:41: e9:b1:7e:dc:bc:92:80:99:0b:e6:77:52:79:4b:6a: 4a:bb:e0:43:45:04:22:c1:04:12:38:69:7d:6d:ea: 56:7f:26:0e:f8:1f:20:67:48:04:81:79:bd:f8:d8: 79:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:B5:BA:99:BA:5A:05:CE:E2:52:C0:57:56:40:55:57:74:A5:AF:68 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VLW6mbpaBc7iUsBXVkBVV3Slr2g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.254.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:be:4c:60:2f:34:a1:3d:67:46:0b:71:89:e3:78:a9:29:04: a8:1f:65:a1:fa:4b:a6:2c:6a:00:f6:6c:c9:67:02:5d:43:93: dc:f4:e7:3d:9b:f0:23:66:0b:e7:a4:c2:a3:16:82:20:e6:57: bb:57:2d:0a:c7:52:e8:e3:76:b5:66:57:ab:39:14:36:1f:6b: 28:d8:81:43:9e:c0:24:ac:1b:94:8b:61:7d:e2:31:70:0a:15: 7c:e1:36:fc:b6:54:1c:05:43:fe:a4:a4:52:5a:6a:78:b0:62: 04:10:af:09:a4:b6:17:00:f3:9a:2d:44:5c:94:e1:79:37:c3: 5b:5e:c3:c4:ea:43:a8:32:cc:86:83:4b:24:40:fb:52:0a:ff: 1a:7d:d5:1f:92:1c:d9:c0:c2:54:c7:4d:b4:d2:7e:65:ec:64: b3:18:87:3d:85:5f:06:91:f3:38:af:d5:22:8b:6d:63:be:49: 93:6c:83:34:9a:51:55:b7:d1:10:d2:55:76:9a:a5:ac:0a:73: 1c:86:55:4e:96:8f:9a:2d:9b:df:17:c5:cc:c2:79:67:bc:58: fa:e6:c4:91:82:34:a5:6e:33:ef:1b:ad:40:68:9c:dc:03:5c: ef:44:73:65:52:7a:aa:cc:a2:b6:0a:8f:37:22:0b:61:c8:22: 78:3c:b7:5a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpnGw8hfup/Cz8El4UpRnAWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTA5MDUzMzM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NGI1YmE5OWJhNWEwNWNlZTI1MmMwNTc1NjQwNTU1Nzc0YTVhZjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX/6VvlrtJIbJxllClVrtSfq1pCY kEdstl+sCLWbSZEdCcp6Yjv/seX2QxvIz/bWf4g02yzRq9w6QVtIGnGNN2ZxWTai d6peNa+u2rie5X15RePhp/Q/KSyGjBHif8tbLMez9gwMwozDqLpKuSDZoIx76HBR x1Og6v3onvM/v0iRT3dHzcaDinPKbjsA4WNyJJhlUEaYpShHexZt5Ee33HN5pi+P 2JR5MTwK05houjNMfH+DdME5Uqin/oMphztftoXIKMWbhvpT67KvE5r8nkHpsX7c vJKAmQvmd1J5S2pKu+BDRQQiwQQSOGl9bepWfyYO+B8gZ0gEgXm9+Nh5kwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFS1upm6WgXO4lLAV1ZAVVd0pa9oMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvVkxXNm1icGFCYzdpVXNCWFZrQlZWM1NscjJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/T+MA0G CSqGSIb3DQEBCwUAA4IBAQA8vkxgLzShPWdGC3GJ43ipKQSoH2Wh+kumLGoA9mzJ ZwJdQ5Pc9Oc9m/AjZgvnpMKjFoIg5le7Vy0Kx1Lo43a1ZlerORQ2H2so2IFDnsAk rBuUi2F94jFwChV84Tb8tlQcBUP+pKRSWmp4sGIEEK8JpLYXAPOaLURclOF5N8Nb XsPE6kOoMsyGg0skQPtSCv8afdUfkhzZwMJUx0200n5l7GSzGIc9hV8GkfM4r9Ui i21jvkmTbIM0mlFVt9EQ0lV2mqWsCnMchlVOlo+aLZvfF8XMwnlnvFj65sSRgjSl bjPvG61AaJzcA1zvRHNlUnqqzKK2Co83IgthyCJ4PLda -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:02 2025 by rpki-client