This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WhEN1WBKIcGWNgD7EA4JQkZKF08.roa File: WhEN1WBKIcGWNgD7EA4JQkZKF08.roa (raw, json) Hash identifier: fnlvCo9fJWlrppsmot6QSQ6jJ1lwHpALuF6IWbFBcro= Subject key identifier: 5A:11:0D:D5:60:4A:21:C1:96:36:00:FB:10:0E:09:42:46:4A:17:4F Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A539940970DAD66878302677ADDD65004 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WhEN1WBKIcGWNgD7EA4JQkZKF08.roa Signing time: Wed 05 Nov 2025 10:39:03 +0000 ROA not before: Wed 05 Nov 2025 10:39:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 204613 IP address blocks: 151.247.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:99:40:97:0d:ad:66:87:83:02:67:7a:dd:d6:50:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 5 10:39:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5a110dd5604a21c1963600fb100e0942464a174f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5e:7d:c2:11:e6:06:54:7a:ca:80:f0:72:35: c4:34:7c:79:c3:14:fe:cc:95:47:80:dc:e9:a5:d8: ae:b7:73:01:64:36:7f:47:99:a6:c4:d4:1b:01:bb: 13:1e:ea:c5:68:67:72:84:be:f5:7f:9d:e1:77:3f: 39:c1:06:95:17:7e:75:92:79:11:2e:64:8e:ef:b7: 8d:b8:3e:33:d8:03:7b:28:83:5f:5a:fc:3c:65:77: da:45:48:cb:0c:a7:d1:a5:df:9a:eb:b1:86:5f:c0: 7f:c0:d4:c8:a9:a7:41:f3:2b:17:07:02:4d:4b:e4: 6c:89:d5:ad:f4:fb:94:15:3f:af:72:47:5f:18:8b: 9e:50:c1:8f:13:6c:5e:b5:7a:0a:70:03:b1:9a:b6: 03:2a:42:b9:3c:d7:82:83:89:6a:6f:d8:eb:47:11: e1:a3:06:a7:29:03:1e:aa:01:b5:b9:ea:5c:cb:43: c2:f0:b7:36:ea:19:7d:e1:39:c6:db:92:94:6f:81: ad:76:50:57:67:4c:80:6f:db:50:fd:e0:fd:dd:59: 19:14:1e:e8:4b:12:7d:0c:57:2c:c4:c4:64:08:f7: 8b:0e:75:ae:77:43:fd:c7:ef:b9:49:f2:ab:17:c1: 93:94:82:9b:ba:e5:d8:ec:8c:1d:9b:4e:7d:8b:18: 54:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:11:0D:D5:60:4A:21:C1:96:36:00:FB:10:0E:09:42:46:4A:17:4F X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WhEN1WBKIcGWNgD7EA4JQkZKF08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.247.191.0/24 Signature Algorithm: sha256WithRSAEncryption 65:2a:92:93:09:65:c1:b7:cc:2e:85:d4:e2:3a:a6:aa:80:21: 13:f7:2e:35:03:ed:c9:a6:5b:0d:96:75:6c:54:99:36:44:43: ca:0d:fe:95:d9:e9:48:68:93:d9:a3:80:5e:10:df:02:58:0e: c2:4e:3f:bd:bb:9c:9f:ce:74:7b:2f:92:e6:9a:c7:b5:c6:2f: 18:27:21:8c:cf:bc:3e:56:ef:86:b8:b6:83:dc:32:3c:69:e8: 59:22:8f:7f:94:f0:e8:bb:37:26:79:2f:82:3a:a3:a6:2f:ae: a1:01:ea:90:4b:3f:9d:28:0e:f0:51:19:58:98:92:93:54:49: 06:cf:e9:a2:d0:25:13:e8:17:52:28:41:f2:40:cb:b4:cc:3b: 3f:db:f5:cf:71:ca:0f:ca:ea:dc:1e:b8:9d:bf:46:18:b4:95: 30:06:17:80:52:48:1e:c0:3e:14:5e:44:ec:63:ad:79:6c:5d: 8e:11:17:a7:14:35:4a:43:2e:5e:87:5e:a4:03:74:ec:e0:7f: 19:9a:a9:1b:bb:9c:01:32:e6:2b:3a:ff:de:05:5e:52:f8:01: db:93:78:ff:2e:60:57:5e:9e:1e:c1:a3:96:cb:5c:04:d5:46: fa:aa:c3:c5:00:1d:39:f3:88:83:84:4c:b7:a2:29:56:1e:2b: f9:7f:8b:bc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpTmUCXDa1mh4MCZ3rd1lAEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTA1MTAzOTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTExMGRkNTYwNGEyMWMxOTYzNjAwZmIxMDBlMDk0MjQ2NGExNzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF59whHmBlR6yoDwcjXENHx5wxT+ zJVHgNzppdiut3MBZDZ/R5mmxNQbAbsTHurFaGdyhL71f53hdz85wQaVF351knkR LmSO77eNuD4z2AN7KINfWvw8ZXfaRUjLDKfRpd+a67GGX8B/wNTIqadB8ysXBwJN S+RsidWt9PuUFT+vckdfGIueUMGPE2xetXoKcAOxmrYDKkK5PNeCg4lqb9jrRxHh owanKQMeqgG1uepcy0PC8Lc26hl94TnG25KUb4GtdlBXZ0yAb9tQ/eD93VkZFB7o SxJ9DFcsxMRkCPeLDnWud0P9x++5SfKrF8GTlIKbuuXY7Iwdm059ixhU4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFoRDdVgSiHBljYA+xAOCUJGShdPMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvV2hFTjFXQktJY0dXTmdEN0VBNEpRa1pLRjA4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/e/MA0G CSqGSIb3DQEBCwUAA4IBAQBlKpKTCWXBt8wuhdTiOqaqgCET9y41A+3JplsNlnVs VJk2REPKDf6V2elIaJPZo4BeEN8CWA7CTj+9u5yfznR7L5Lmmse1xi8YJyGMz7w+ Vu+GuLaD3DI8aehZIo9/lPDouzcmeS+COqOmL66hAeqQSz+dKA7wURlYmJKTVEkG z+mi0CUT6BdSKEHyQMu0zDs/2/XPccoPyurcHridv0YYtJUwBheAUkgewD4UXkTs Y615bF2OERenFDVKQy5eh16kA3Ts4H8Zmqkbu5wBMuYrOv/eBV5S+AHbk3j/LmBX Xp4ewaOWy1wE1Ub6qsPFAB0584iDhEy3oilWHiv5f4u8 -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:01 2025 by rpki-client