This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZpCmjRkI1HESHaYGglNULOlMdX4.roa File: ZpCmjRkI1HESHaYGglNULOlMdX4.roa (raw, json) Hash identifier: oo59nSbOh4vs58gx8H48rqu7L/EArRpZgmAIp8G/Ol4= Subject key identifier: 66:90:A6:8D:19:08:D4:71:12:1D:A6:06:82:53:54:2C:E9:4C:75:7E Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A61F59E93B9BF4637EBAEB31396E16342 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZpCmjRkI1HESHaYGglNULOlMdX4.roa Signing time: Sat 08 Nov 2025 05:34:38 +0000 ROA not before: Sat 08 Nov 2025 05:34:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2856 IP address blocks: 151.240.180.0/22 maxlen: 24 151.240.184.0/22 maxlen: 24 151.240.188.0/22 maxlen: 24 151.240.192.0/22 maxlen: 24 151.240.196.0/22 maxlen: 24 151.240.200.0/22 maxlen: 24 151.241.52.0/22 maxlen: 24 151.241.56.0/22 maxlen: 24 151.241.60.0/22 maxlen: 24 151.241.180.0/22 maxlen: 24 151.241.184.0/22 maxlen: 24 151.241.188.0/22 maxlen: 24 151.241.192.0/22 maxlen: 24 151.241.196.0/22 maxlen: 24 151.241.200.0/22 maxlen: 24 151.244.80.0/22 maxlen: 24 151.244.204.0/22 maxlen: 24 151.244.208.0/22 maxlen: 24 151.245.80.0/22 maxlen: 24 151.245.204.0/22 maxlen: 24 151.245.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:61:f5:9e:93:b9:bf:46:37:eb:ae:b3:13:96:e1:63:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 8 05:34:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6690a68d1908d471121da6068253542ce94c757e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:34:6a:65:cd:80:31:bb:f7:d0:19:70:8e:c1: 88:57:98:3b:57:21:a7:d3:5c:fc:a4:77:e1:63:ed: f0:0a:ba:61:3f:d3:27:cd:2e:c5:c6:60:6a:ca:85: d9:a5:df:01:93:b2:0e:e4:e6:51:77:a4:03:be:b0: c1:dc:37:91:f0:99:ae:96:78:00:03:1d:09:33:9d: 38:c0:44:98:2f:69:d8:b6:e7:34:be:6f:bc:c7:db: dc:47:73:7b:22:69:41:95:88:e1:59:6b:98:e3:49: 5a:2c:ec:65:74:1f:8b:14:73:a3:77:a6:b5:89:22: a3:08:f0:33:f1:12:ef:a7:2a:5a:d0:63:dd:85:43: ff:cb:20:32:5d:9a:60:9b:20:b1:38:a4:50:bf:2b: 15:5f:15:65:71:a8:d1:67:7a:1c:61:e9:02:91:f4: f5:35:21:ea:c0:d4:be:0b:6f:ff:ad:96:27:aa:8d: 7b:91:1b:c1:20:5d:7c:b4:5d:15:d3:c7:55:6e:85: b0:79:98:a5:8f:6e:96:cd:d7:ac:f4:2b:1f:e0:94: 15:c9:ac:fc:75:62:24:2c:12:d3:3a:9d:de:06:30: 53:05:b7:96:67:c5:d7:7c:23:da:db:b2:19:c7:12: b3:6a:41:ea:fd:6e:7c:7d:33:9f:f2:fe:b8:c1:0f: 71:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:90:A6:8D:19:08:D4:71:12:1D:A6:06:82:53:54:2C:E9:4C:75:7E X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZpCmjRkI1HESHaYGglNULOlMdX4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.180.0-151.240.203.255 151.241.52.0-151.241.63.255 151.241.180.0-151.241.203.255 151.244.80.0/22 151.244.204.0-151.244.211.255 151.245.80.0/22 151.245.204.0-151.245.211.255 Signature Algorithm: sha256WithRSAEncryption a1:f6:73:a3:ee:bb:d3:ee:df:75:27:23:9e:81:b3:d0:f1:ff: d6:bd:a8:63:2c:5d:9e:d4:9d:d9:c7:9e:0e:7d:9b:d7:16:d9: d3:1f:c6:2f:5b:04:c8:03:7b:7d:df:a5:55:c1:8a:1b:8c:1b: 5a:30:a9:fa:6e:e2:1d:e5:85:9b:67:9c:c2:6f:36:cb:e5:e5: fb:06:1f:02:4c:2d:c3:cf:f0:11:db:ff:eb:21:85:83:9c:7b: ba:dd:64:4d:11:32:2c:f9:93:c3:40:07:26:d8:e7:a2:85:ef: bd:e8:5c:c4:25:d4:cf:d0:d2:58:fb:7a:84:b1:28:85:27:52: 83:cf:ba:2b:87:51:cf:27:07:0a:3f:64:60:33:62:34:61:09: d0:06:1d:17:be:3e:65:3b:5e:ca:2c:b6:43:fc:7a:75:8a:52: 6d:0f:9f:ad:64:5c:cb:b8:5d:20:cf:60:42:32:d2:09:4e:df: 79:40:3f:13:50:d4:b7:42:7c:9b:69:58:cb:1f:b5:9b:44:9c: d9:16:f9:03:cb:a6:9f:4e:b0:6f:7c:41:3a:07:91:ae:5f:2b: e0:8d:e4:7d:fc:d6:01:9f:35:81:8e:06:fa:76:44:ce:a1:eb: d0:16:01:e2:5d:0b:bf:8f:11:28:e0:ef:a8:bc:85:6d:87:66: b7:de:21:07 -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgISAZph9Z6Tub9GN+uusxOW4WNCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTA4MDUzNDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjkwYTY4ZDE5MDhkNDcxMTIxZGE2MDY4MjUzNTQyY2U5NGM3NTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjRqZc2AMbv30BlwjsGIV5g7VyGn 01z8pHfhY+3wCrphP9MnzS7FxmBqyoXZpd8Bk7IO5OZRd6QDvrDB3DeR8JmulngA Ax0JM504wESYL2nYtuc0vm+8x9vcR3N7ImlBlYjhWWuY40laLOxldB+LFHOjd6a1 iSKjCPAz8RLvpypa0GPdhUP/yyAyXZpgmyCxOKRQvysVXxVlcajRZ3ocYekCkfT1 NSHqwNS+C2//rZYnqo17kRvBIF18tF0V08dVboWweZilj26Wzdes9Csf4JQVyaz8 dWIkLBLTOp3eBjBTBbeWZ8XXfCPa27IZxxKzakHq/W58fTOf8v64wQ9x/QIDAQAB o4ICVTCCAlEwHQYDVR0OBBYEFGaQpo0ZCNRxEh2mBoJTVCzpTHV+MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvWnBDbWpSa0kxSEVTSGFZR2dsTlVMT2xNZFg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSMAwDBAKX8LQD BAKX8MgwDAMEApfxNAMEBpfxADAMAwQCl/G0AwQCl/HIAwQCl/RQMAwDBAKX9MwD BAKX9NADBAKX9VAwDAMEApf1zAMEApf10DANBgkqhkiG9w0BAQsFAAOCAQEAofZz o+670+7fdScjnoGz0PH/1r2oYyxdntSd2ceeDn2b1xbZ0x/GL1sEyAN7fd+lVcGK G4wbWjCp+m7iHeWFm2ecwm82y+Xl+wYfAkwtw8/wEdv/6yGFg5x7ut1kTREyLPmT w0AHJtjnooXvvehcxCXUz9DSWPt6hLEohSdSg8+6K4dRzycHCj9kYDNiNGEJ0AYd F74+ZTteyiy2Q/x6dYpSbQ+frWRcy7hdIM9gQjLSCU7feUA/E1DUt0J8m2lYyx+1 m0Sc2Rb5A8umn06wb3xBOgeRrl8r4I3kffzWAZ81gY4G+nZEzqHr0BYB4l0Lv48R KODvqLyFbYdmt94hBw== -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:58 2025 by rpki-client