This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_RDqu_bckLv1YwPmtRGF30R3Ffg.roa File: _RDqu_bckLv1YwPmtRGF30R3Ffg.roa (raw, json) Hash identifier: 4Ec6wXEXUsSJt8lSqWhm1J+sHKq8bOxCJuHXJ6J0fxs= Subject key identifier: FD:10:EA:BB:F6:DC:90:BB:F5:63:03:E6:B5:11:85:DF:44:77:15:F8 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AD87EF2C2698652224244EEECE87F52FD Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_RDqu_bckLv1YwPmtRGF30R3Ffg.roa Signing time: Mon 01 Dec 2025 05:59:49 +0000 ROA not before: Mon 01 Dec 2025 05:59:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 36530 IP address blocks: 151.240.14.0/24 maxlen: 24 151.241.128.0/22 maxlen: 24 151.241.218.0/24 maxlen: 24 151.242.4.0/24 maxlen: 24 151.242.14.0/24 maxlen: 24 151.242.32.0/24 maxlen: 24 151.242.139.0/24 maxlen: 24 151.243.44.0/24 maxlen: 24 151.243.115.0/24 maxlen: 24 151.243.181.0/24 maxlen: 24 151.244.128.0/24 maxlen: 24 151.244.130.0/24 maxlen: 24 151.244.236.0/24 maxlen: 24 151.245.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d8:7e:f2:c2:69:86:52:22:42:44:ee:ec:e8:7f:52:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 1 05:59:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fd10eabbf6dc90bbf56303e6b51185df447715f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:c0:02:4b:64:20:d3:77:dc:4d:75:9d:51:ba: 2b:18:e8:72:7b:dc:e1:c8:4f:5f:76:cc:4e:d5:fe: 08:43:04:fe:f6:c8:19:83:a0:26:ce:68:1a:75:40: a6:86:71:f0:c4:dd:b7:7c:3a:08:a5:36:37:9b:3c: b9:81:9c:09:9c:30:b1:9c:97:ce:36:cf:ee:7a:9c: dd:fa:52:9a:01:e1:13:98:de:56:0f:1d:50:80:87: 7d:69:ab:5d:15:43:34:89:84:41:ed:d4:d3:2b:28: 3b:5e:05:3a:9b:39:4d:f0:64:1e:30:fb:5a:bd:c5: ce:1f:a4:e9:fd:38:ca:b5:ac:c4:d6:46:cc:d9:60: 2d:2b:7b:21:e1:0b:79:b5:bb:91:34:24:3d:1f:60: 0e:4c:72:bd:c9:3f:45:a5:d1:f0:11:4e:48:ad:8e: 09:77:15:46:40:96:91:b3:86:cf:94:98:d0:44:3c: c3:a4:22:d0:62:d3:20:cb:e5:50:fd:65:f3:f6:d8: 2e:56:dd:8d:95:d0:42:02:4c:dc:be:de:f8:80:82: 76:30:40:1c:2b:e7:f4:fe:15:4f:40:1c:13:f9:18: dc:45:1e:a3:b3:13:e8:da:b0:b5:a3:b4:19:4a:00: 6a:2b:a8:e9:88:83:7c:e9:94:2e:c7:16:05:d3:bd: 33:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:10:EA:BB:F6:DC:90:BB:F5:63:03:E6:B5:11:85:DF:44:77:15:F8 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_RDqu_bckLv1YwPmtRGF30R3Ffg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.14.0/24 151.241.128.0/22 151.241.218.0/24 151.242.4.0/24 151.242.14.0/24 151.242.32.0/24 151.242.139.0/24 151.243.44.0/24 151.243.115.0/24 151.243.181.0/24 151.244.128.0/24 151.244.130.0/24 151.244.236.0/24 151.245.86.0/24 Signature Algorithm: sha256WithRSAEncryption 57:06:e5:56:fa:93:56:79:23:38:7d:7b:aa:27:8f:a8:64:27: 93:d6:90:2b:45:68:6a:75:85:f9:fb:9f:0d:28:a6:3a:8f:f0: 9e:5c:e6:0d:8b:0c:79:c6:2d:d6:6c:88:ba:83:d5:7b:33:ee: af:e4:54:06:22:9a:6c:b6:20:7c:71:42:1a:73:d7:ab:12:43: 7c:39:6f:28:5c:7f:3d:53:66:07:c6:d7:b3:7d:08:07:2d:2c: b8:45:ab:61:4e:29:d6:f0:48:27:9f:e9:6d:05:e1:af:2e:1e: 5e:45:6f:cc:dd:b4:65:17:d8:dd:b7:d2:b3:0e:19:18:a7:ac: cf:92:bc:2d:4d:66:26:0b:55:88:2b:02:46:0b:75:b2:e3:70: b0:41:96:75:6d:8d:a4:2b:f5:0d:d1:be:3f:a4:8c:3b:51:8c: 1b:f2:48:64:75:5a:9e:36:54:53:bf:f2:b1:99:4c:33:66:d1: e3:47:7d:ef:60:b3:57:b8:8c:8e:5e:51:22:d2:90:1f:cb:38: c3:ef:da:61:05:bd:6d:de:64:f7:c1:e7:b6:4d:a7:ea:28:6b: b5:f5:f0:06:7f:a3:07:f9:33:cf:34:de:e3:3e:87:04:c3:4b: c7:2a:6e:75:8c:f2:59:f8:6a:46:ee:38:20:4d:d3:9c:b8:6d: e9:ff:c5:76 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZrYfvLCaYZSIkJE7uzof1L9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjAxMDU1OTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDEwZWFiYmY2ZGM5MGJiZjU2MzAzZTZiNTExODVkZjQ0NzcxNWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58ACS2Qg03fcTXWdUborGOhye9zh yE9fdsxO1f4IQwT+9sgZg6AmzmgadUCmhnHwxN23fDoIpTY3mzy5gZwJnDCxnJfO Ns/uepzd+lKaAeETmN5WDx1QgId9aatdFUM0iYRB7dTTKyg7XgU6mzlN8GQeMPta vcXOH6Tp/TjKtazE1kbM2WAtK3sh4Qt5tbuRNCQ9H2AOTHK9yT9FpdHwEU5IrY4J dxVGQJaRs4bPlJjQRDzDpCLQYtMgy+VQ/WXz9tguVt2NldBCAkzcvt74gIJ2MEAc K+f0/hVPQBwT+RjcRR6jsxPo2rC1o7QZSgBqK6jpiIN86ZQuxxYF070zHQIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFP0Q6rv23JC79WMD5rURhd9EdxX4MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvX1JEcXVfYmNrTHYxWXdQbXRSR0YzMFIzRmZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAl/AOAwQC l/GAAwQAl/HaAwQAl/IEAwQAl/IOAwQAl/IgAwQAl/KLAwQAl/MsAwQAl/NzAwQA l/O1AwQAl/SAAwQAl/SCAwQAl/TsAwQAl/VWMA0GCSqGSIb3DQEBCwUAA4IBAQBX BuVW+pNWeSM4fXuqJ4+oZCeT1pArRWhqdYX5+58NKKY6j/CeXOYNiwx5xi3WbIi6 g9V7M+6v5FQGIppstiB8cUIac9erEkN8OW8oXH89U2YHxtezfQgHLSy4RathTinW 8Egnn+ltBeGvLh5eRW/M3bRlF9jdt9KzDhkYp6zPkrwtTWYmC1WIKwJGC3Wy43Cw QZZ1bY2kK/UN0b4/pIw7UYwb8khkdVqeNlRTv/KxmUwzZtHjR33vYLNXuIyOXlEi 0pAfyzjD79phBb1t3mT3wee2TafqKGu19fAGf6MH+TPPNN7jPocEw0vHKm51jPJZ +GpG7jggTdOcuG3p/8V2 -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:36 2025 by rpki-client