This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VXqsCPQmmOgAfwgN1z1TybbN6EM.roa File: VXqsCPQmmOgAfwgN1z1TybbN6EM.roa (raw, json) Hash identifier: CVLVrDQKxjIS0mnZ4bDCOHZfX90Rh0zIKG800KpK4Nc= Subject key identifier: 55:7A:AC:08:F4:26:98:E8:00:7F:08:0D:D7:3D:53:C9:B6:CD:E8:43 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A61E034C693AE4D9B50234237C98E10C6 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VXqsCPQmmOgAfwgN1z1TybbN6EM.roa Signing time: Sat 08 Nov 2025 05:11:14 +0000 ROA not before: Sat 08 Nov 2025 05:11:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211440 IP address blocks: 151.240.117.0/24 maxlen: 24 151.241.0.0/24 maxlen: 24 151.244.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:61:e0:34:c6:93:ae:4d:9b:50:23:42:37:c9:8e:10:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 8 05:11:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=557aac08f42698e8007f080dd73d53c9b6cde843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5d:25:8b:c5:5f:d6:8b:2d:3c:90:e9:3d:9e: 4e:36:37:0e:31:56:4c:37:c6:bc:bb:0f:31:6c:d9: 6b:33:8e:56:f1:50:56:0a:8b:53:16:c5:80:75:4e: f5:4f:d7:8f:0d:35:1c:29:f3:ce:8d:15:4c:b7:2b: 07:29:6f:5f:1a:d6:31:64:41:0e:d8:55:86:53:9d: 68:62:ec:b3:b6:a8:f5:25:8c:14:e6:aa:7f:2a:79: a8:04:3c:bb:23:0a:d4:99:e7:1a:71:70:60:82:cb: 8d:e9:90:a3:4a:98:b0:84:40:0a:b8:b5:c8:f1:f7: ad:bd:ea:c8:9f:bc:ed:a7:e4:cd:2c:26:0e:50:c5: c0:ce:da:44:c1:bb:65:90:14:c6:3d:44:34:63:87: e2:04:97:9e:96:fd:06:1c:c4:93:22:a5:d9:53:e7: 03:29:68:87:80:20:c8:56:d4:5a:70:0a:85:fe:ee: 07:6b:41:30:0b:e3:92:74:55:c1:56:62:95:a7:56: 35:0d:d8:4e:e8:df:ec:09:61:78:e1:03:90:01:15: 2b:28:2e:ac:60:7d:13:a1:8a:ec:91:50:e4:15:10: 21:8d:9e:d1:52:0a:66:8f:ab:56:c5:db:e1:77:e1: 4c:c9:4b:16:a7:57:3b:3a:24:c6:c0:ac:1f:95:9d: e0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7A:AC:08:F4:26:98:E8:00:7F:08:0D:D7:3D:53:C9:B6:CD:E8:43 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VXqsCPQmmOgAfwgN1z1TybbN6EM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.117.0/24 151.241.0.0/24 151.244.1.0/24 Signature Algorithm: sha256WithRSAEncryption 05:06:b6:cf:8e:77:a5:74:1b:49:b4:7b:c9:fe:df:a8:80:12: f7:67:f1:18:be:11:34:43:5d:35:af:97:93:70:66:8d:cd:8b: f8:5c:6e:8c:4d:26:f9:a0:46:df:25:04:d3:e5:79:23:96:ba: 39:ec:04:05:8a:e1:62:4b:48:79:46:9f:79:e6:3d:1f:b2:13: 80:39:1b:4f:3b:40:1b:4b:1c:03:48:1b:1e:2b:35:94:69:a6: f6:e2:ac:6b:0a:37:b4:a3:cd:45:7a:ef:50:4e:c2:99:9d:1f: df:99:f4:64:b1:74:74:1f:62:63:fa:21:63:8e:17:7c:23:a6: 72:b9:d5:88:d5:50:7e:fd:25:94:80:3f:1e:a9:f5:7b:ed:c9: a5:db:e2:48:e7:e7:cc:50:b1:c8:ee:cb:a6:a3:a8:67:bc:14: 0e:7f:db:f1:21:75:f7:3e:7d:d1:39:9b:da:34:d6:81:a8:d9: 82:5e:9c:37:bb:f6:d5:38:5e:fe:cc:06:f7:d1:2f:89:61:a6: 2c:52:2b:d0:f9:1a:c1:ad:b8:5b:b2:a9:a9:10:c1:58:56:1a: 25:ad:92:0a:db:19:ee:60:49:60:01:54:01:89:d5:b8:17:11: 51:ad:6e:42:f8:dc:71:d2:8a:6f:0a:9a:71:43:7a:2c:7b:30: 30:3b:37:a1 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZph4DTGk65Nm1AjQjfJjhDGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTA4MDUxMTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NTdhYWMwOGY0MjY5OGU4MDA3ZjA4MGRkNzNkNTNjOWI2Y2RlODQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA610li8Vf1ostPJDpPZ5ONjcOMVZM N8a8uw8xbNlrM45W8VBWCotTFsWAdU71T9ePDTUcKfPOjRVMtysHKW9fGtYxZEEO 2FWGU51oYuyztqj1JYwU5qp/KnmoBDy7IwrUmecacXBggsuN6ZCjSpiwhEAKuLXI 8fetverIn7ztp+TNLCYOUMXAztpEwbtlkBTGPUQ0Y4fiBJeelv0GHMSTIqXZU+cD KWiHgCDIVtRacAqF/u4Ha0EwC+OSdFXBVmKVp1Y1DdhO6N/sCWF44QOQARUrKC6s YH0ToYrskVDkFRAhjZ7RUgpmj6tWxdvhd+FMyUsWp1c7OiTGwKwflZ3ghQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFFV6rAj0JpjoAH8IDdc9U8m2zehDMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvVlhxc0NQUW1tT2dBZndnTjF6MVR5YmJONkVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/B1AwQA l/EAAwQAl/QBMA0GCSqGSIb3DQEBCwUAA4IBAQAFBrbPjneldBtJtHvJ/t+ogBL3 Z/EYvhE0Q101r5eTcGaNzYv4XG6MTSb5oEbfJQTT5Xkjlro57AQFiuFiS0h5Rp95 5j0fshOAORtPO0AbSxwDSBseKzWUaab24qxrCje0o81Feu9QTsKZnR/fmfRksXR0 H2Jj+iFjjhd8I6ZyudWI1VB+/SWUgD8eqfV77cml2+JI5+fMULHI7sumo6hnvBQO f9vxIXX3Pn3ROZvaNNaBqNmCXpw3u/bVOF7+zAb30S+JYaYsUivQ+RrBrbhbsqmp EMFYVholrZIK2xnuYElgAVQBidW4FxFRrW5C+Nxx0opvCppxQ3osezAwOzeh -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:37 2025 by rpki-client