This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/__Gj4G50HgH4iRQI2U30VV2AQsU.roa File: __Gj4G50HgH4iRQI2U30VV2AQsU.roa (raw, json) Hash identifier: nhc+TSpl8szkKkPI3yJq12WncnDezss8ZFb8J8zWSAo= Subject key identifier: FF:F1:A3:E0:6E:74:1E:01:F8:89:14:08:D9:4D:F4:55:5D:80:42:C5 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AD9326436D0E9FAE6D3C2CD5709095E68 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/__Gj4G50HgH4iRQI2U30VV2AQsU.roa Signing time: Mon 01 Dec 2025 09:15:49 +0000 ROA not before: Mon 01 Dec 2025 09:15:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 37.202.202.0/24 maxlen: 24 151.240.1.0/24 maxlen: 24 151.240.9.0/24 maxlen: 24 151.240.17.0/24 maxlen: 24 151.240.24.0/24 maxlen: 24 151.240.149.0/24 maxlen: 24 151.240.227.0/24 maxlen: 24 151.241.1.0/24 maxlen: 24 151.241.8.0/24 maxlen: 24 151.241.68.0/24 maxlen: 24 151.241.92.0/24 maxlen: 24 151.242.67.0/24 maxlen: 24 151.242.103.0/24 maxlen: 24 151.242.117.0/24 maxlen: 24 151.242.118.0/24 maxlen: 24 151.243.6.0/24 maxlen: 24 151.243.120.0/24 maxlen: 24 151.243.160.0/22 maxlen: 22 151.244.78.0/24 maxlen: 24 151.244.192.0/24 maxlen: 24 151.245.54.0/24 maxlen: 24 151.245.144.0/24 maxlen: 24 151.245.238.0/24 maxlen: 24 151.246.177.0/24 maxlen: 24 151.246.190.0/24 maxlen: 24 151.247.158.0/24 maxlen: 24 151.247.192.0/24 maxlen: 24 151.247.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:32:64:36:d0:e9:fa:e6:d3:c2:cd:57:09:09:5e:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 1 09:15:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fff1a3e06e741e01f8891408d94df4555d8042c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e2:f6:1a:e1:c6:41:4a:d6:69:19:ce:a4:d6: 5e:bf:6c:e1:2b:67:ca:fc:3c:c4:51:86:f5:b7:d7: 74:ad:a8:57:ea:12:37:b2:c5:5c:e3:23:0d:09:7b: 34:57:4b:2b:b2:c9:0a:a5:5c:1c:2f:25:15:b3:ac: 89:56:7b:dd:33:51:3b:61:06:ea:a0:12:fe:24:67: e2:30:27:31:57:b7:8d:7d:41:f2:8e:0e:c8:ce:66: ea:42:d7:a3:fe:26:39:c9:67:60:26:25:b3:5b:c3: 0e:4a:63:92:2c:89:9d:09:02:76:f1:1d:81:59:b3: e7:1f:a4:2e:32:27:dc:bd:8d:e6:f1:47:e6:64:25: 72:f7:39:18:a4:f7:7b:10:8e:f8:da:8f:1f:62:82: a4:1c:a2:21:53:4a:30:af:84:c5:d4:41:0a:d8:5b: 58:f8:83:c4:37:71:20:47:b8:ca:cc:87:da:44:25: 1a:4c:de:e2:40:e2:e3:27:15:a2:99:8a:1a:45:2c: af:6e:22:3d:48:f9:7b:b0:5b:47:0c:08:2f:92:c1: dd:94:77:d2:30:b0:38:54:38:a1:49:f6:0c:fe:38: 67:83:ed:45:22:67:c6:72:89:e8:e4:ba:7d:cc:f8: 8c:3c:7e:66:38:81:e8:0e:a3:9c:64:36:cf:c9:23: 79:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F1:A3:E0:6E:74:1E:01:F8:89:14:08:D9:4D:F4:55:5D:80:42:C5 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/__Gj4G50HgH4iRQI2U30VV2AQsU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.202.0/24 151.240.1.0/24 151.240.9.0/24 151.240.17.0/24 151.240.24.0/24 151.240.149.0/24 151.240.227.0/24 151.241.1.0/24 151.241.8.0/24 151.241.68.0/24 151.241.92.0/24 151.242.67.0/24 151.242.103.0/24 151.242.117.0-151.242.118.255 151.243.6.0/24 151.243.120.0/24 151.243.160.0/22 151.244.78.0/24 151.244.192.0/24 151.245.54.0/24 151.245.144.0/24 151.245.238.0/24 151.246.177.0/24 151.246.190.0/24 151.247.158.0/24 151.247.192.0/24 151.247.217.0/24 Signature Algorithm: sha256WithRSAEncryption 09:d0:f8:37:e4:0a:57:3a:01:9c:79:bf:66:68:18:cc:54:1d: 7c:c3:1d:de:49:38:b9:57:65:af:23:65:12:f5:8f:2e:66:92: 73:02:91:97:4d:6c:a4:52:b4:02:cd:39:38:43:68:95:98:7a: c2:cb:e6:49:c6:60:75:86:59:4b:a9:91:57:9b:6e:d3:cd:c1: dd:31:e5:66:47:20:1d:00:55:ca:ed:0d:77:58:60:7c:b0:f5: c3:80:82:4c:cd:e7:82:1c:ed:9c:b1:3a:4f:4c:05:be:72:47: 80:e2:a3:5b:11:72:1e:8e:54:43:e4:d5:bb:47:53:9e:2e:22: 1f:65:60:85:65:7a:ff:58:f4:45:ed:7d:4c:cd:2f:3f:4b:b0: 2f:cd:5c:da:3e:7d:0a:0c:f5:eb:6a:07:a2:56:f6:bb:4e:a7: 2d:dc:46:13:b4:60:a3:bd:24:f6:35:f5:6b:e3:7e:92:7f:0f: 40:18:93:0f:30:df:69:08:9f:2c:5f:ae:f1:2d:a7:95:c3:5f: 86:a4:4f:6e:e5:d6:86:84:02:36:48:15:9d:c6:95:ab:0b:7f: 5a:56:b4:96:c6:1c:cc:61:88:75:f0:42:20:62:f2:95:30:b0: ad:08:d9:48:b7:65:cd:95:0f:c4:f5:4d:d5:72:b1:27:6d:56: c9:dc:64:9c -----BEGIN CERTIFICATE----- MIIFpjCCBI6gAwIBAgISAZrZMmQ20On65tPCzVcJCV5oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjAxMDkxNTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmYxYTNlMDZlNzQxZTAxZjg4OTE0MDhkOTRkZjQ1NTVkODA0MmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOL2GuHGQUrWaRnOpNZev2zhK2fK /DzEUYb1t9d0rahX6hI3ssVc4yMNCXs0V0srsskKpVwcLyUVs6yJVnvdM1E7YQbq oBL+JGfiMCcxV7eNfUHyjg7IzmbqQtej/iY5yWdgJiWzW8MOSmOSLImdCQJ28R2B WbPnH6QuMifcvY3m8UfmZCVy9zkYpPd7EI742o8fYoKkHKIhU0owr4TF1EEK2FtY +IPEN3EgR7jKzIfaRCUaTN7iQOLjJxWimYoaRSyvbiI9SPl7sFtHDAgvksHdlHfS MLA4VDihSfYM/jhng+1FImfGcono5Lp9zPiMPH5mOIHoDqOcZDbPySN5AQIDAQAB o4ICsjCCAq4wHQYDVR0OBBYEFP/xo+BudB4B+IkUCNlN9FVdgELFMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvX19HajRHNTBIZ0g0aVJRSTJVMzBWVjJBUXNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHHBggrBgEFBQcBBwEB/wSBtzCBtDCBsQQCAAEwgaoDBAAl ysoDBACX8AEDBACX8AkDBACX8BEDBACX8BgDBACX8JUDBACX8OMDBACX8QEDBACX 8QgDBACX8UQDBACX8VwDBACX8kMDBACX8mcwDAMEAJfydQMEAJfydgMEAJfzBgME AJfzeAMEApfzoAMEAJf0TgMEAJf0wAMEAJf1NgMEAJf1kAMEAJf17gMEAJf2sQME AJf2vgMEAJf3ngMEAJf3wAMEAJf32TANBgkqhkiG9w0BAQsFAAOCAQEACdD4N+QK VzoBnHm/ZmgYzFQdfMMd3kk4uVdlryNlEvWPLmaScwKRl01spFK0As05OENolZh6 wsvmScZgdYZZS6mRV5tu083B3THlZkcgHQBVyu0Nd1hgfLD1w4CCTM3nghztnLE6 T0wFvnJHgOKjWxFyHo5UQ+TVu0dTni4iH2VghWV6/1j0Re19TM0vP0uwL81c2j59 Cgz162oHolb2u06nLdxGE7Rgo70k9jX1a+N+kn8PQBiTDzDfaQifLF+u8S2nlcNf hqRPbuXWhoQCNkgVncaVqwt/Wla0lsYczGGIdfBCIGLylTCwrQjZSLdlzZUPxPVN 1XKxJ21WydxknA== -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:58 2025 by rpki-client