This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_cvMRYAtIeqVxQbLEZElW-6EmlM.roa File: _cvMRYAtIeqVxQbLEZElW-6EmlM.roa (raw, json) Hash identifier: 8jnFLDfQWZLhDJ0Yhb9sSjAk8MmdpKYRJtFPnelkkys= Subject key identifier: FD:CB:CC:45:80:2D:21:EA:95:C5:06:CB:11:91:25:5B:EE:84:9A:53 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AD87EF2FE6B0E47C0CCAF65DEDD85B20F Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_cvMRYAtIeqVxQbLEZElW-6EmlM.roa Signing time: Mon 01 Dec 2025 05:59:49 +0000 ROA not before: Mon 01 Dec 2025 05:59:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205886 IP address blocks: 37.202.201.0/24 maxlen: 24 151.240.28.0/24 maxlen: 24 151.240.152.0/24 maxlen: 24 151.240.153.0/24 maxlen: 24 151.240.226.0/24 maxlen: 24 151.241.11.0/24 maxlen: 24 151.241.12.0/24 maxlen: 24 151.241.25.0/24 maxlen: 24 151.241.27.0/24 maxlen: 24 151.241.29.0/24 maxlen: 24 151.241.94.0/24 maxlen: 24 151.241.104.0/24 maxlen: 24 151.241.138.0/24 maxlen: 24 151.241.149.0/24 maxlen: 24 151.241.150.0/24 maxlen: 24 151.241.152.0/24 maxlen: 24 151.242.79.0/24 maxlen: 24 151.242.128.0/24 maxlen: 24 151.242.236.0/24 maxlen: 24 151.242.237.0/24 maxlen: 24 151.242.239.0/24 maxlen: 24 151.243.16.0/24 maxlen: 24 151.243.189.0/24 maxlen: 24 151.244.12.0/24 maxlen: 24 151.245.0.0/17 maxlen: 24 151.245.29.0/24 maxlen: 24 151.245.108.0/24 maxlen: 24 151.245.145.0/24 maxlen: 24 151.245.182.0/24 maxlen: 24 151.245.220.0/24 maxlen: 24 151.247.138.0/24 maxlen: 24 151.247.145.0/24 maxlen: 24 151.247.149.0/24 maxlen: 24 151.247.238.0/24 maxlen: 24 151.247.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d8:7e:f2:fe:6b:0e:47:c0:cc:af:65:de:dd:85:b2:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 1 05:59:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fdcbcc45802d21ea95c506cb1191255bee849a53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:82:7b:f5:45:90:6f:b6:d3:ab:8a:15:f7:8b: 69:81:cd:a2:65:88:c3:72:a0:a8:8f:55:1f:96:d5: 42:b2:63:43:fd:d2:a2:d2:2c:29:3f:b9:c0:85:ba: 12:29:90:d9:8a:91:ff:97:bb:b0:97:f8:88:a8:3d: f5:26:a0:0f:f9:81:0e:93:89:d6:35:e3:08:db:25: 92:b2:aa:b2:bf:f2:7d:6a:48:73:8d:f8:cd:67:b9: 9b:ca:ed:19:cd:31:74:2b:6c:79:30:ae:40:25:df: 19:74:2c:6f:00:3d:ff:f2:52:be:68:a2:52:d4:14: 7b:af:e4:6a:d8:f1:62:3a:2d:8c:19:74:ef:14:d5: 66:a8:ef:d2:d3:64:a2:a6:b0:25:da:8a:4f:28:d3: 19:f4:d0:8d:63:88:e1:61:59:25:18:61:e4:24:72: 7d:0c:d9:af:2b:1c:dd:98:b3:20:9a:84:f4:cc:d1: 9b:28:93:a8:00:21:9a:4a:b4:f9:16:1f:a5:b9:1a: 42:13:57:9a:66:e2:2c:71:78:6b:04:21:95:27:46: 4e:fd:9c:6e:52:ca:0e:cd:cf:c3:55:da:6f:ee:b8: d0:78:0f:f3:cf:4a:bc:38:ee:2e:33:22:f3:ca:e8: d4:fe:24:af:b6:f5:d6:e0:fc:27:52:bd:21:e3:ab: a4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:CB:CC:45:80:2D:21:EA:95:C5:06:CB:11:91:25:5B:EE:84:9A:53 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_cvMRYAtIeqVxQbLEZElW-6EmlM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.201.0/24 151.240.28.0/24 151.240.152.0/23 151.240.226.0/24 151.241.11.0-151.241.12.255 151.241.25.0/24 151.241.27.0/24 151.241.29.0/24 151.241.94.0/24 151.241.104.0/24 151.241.138.0/24 151.241.149.0-151.241.150.255 151.241.152.0/24 151.242.79.0/24 151.242.128.0/24 151.242.236.0/23 151.242.239.0/24 151.243.16.0/24 151.243.189.0/24 151.244.12.0/24 151.245.0.0/17 151.245.145.0/24 151.245.182.0/24 151.245.220.0/24 151.247.138.0/24 151.247.145.0/24 151.247.149.0/24 151.247.238.0/24 151.247.242.0/24 Signature Algorithm: sha256WithRSAEncryption 09:08:3a:0d:57:66:ff:5f:96:f9:ea:f5:fa:91:f2:21:ed:2b: 98:f1:ad:d6:1d:ae:04:39:30:51:d8:04:a6:a0:ea:2f:ea:10: b3:3f:1b:92:05:e4:85:33:b8:45:d5:6f:18:99:1e:c3:25:7d: 3c:fa:85:a0:ef:0c:74:75:d5:91:c0:59:40:94:f9:5d:57:66: 8a:db:80:43:7c:c5:06:e5:f1:85:38:27:1a:0c:3a:bf:73:72: b8:2c:57:5c:d6:95:e3:d8:6b:37:6d:ec:83:ff:79:e8:78:ce: d7:ad:f5:e4:a5:b2:f3:b2:59:9e:b8:43:05:cb:2f:17:7f:34: 5f:a4:18:e8:4e:a0:1f:e3:e9:eb:bd:ec:d0:eb:02:d0:f5:cd: f8:2c:33:b9:54:9b:64:29:2c:b5:ea:0a:ad:d3:ce:40:e4:8f: 01:fb:12:b3:2c:83:d7:01:98:dd:e1:12:21:b5:42:6b:d4:e3: 37:a5:91:e2:74:b1:43:c4:e4:64:e5:ea:7b:b1:a4:e7:c7:84: 96:df:86:26:39:cd:b6:1b:12:d5:71:cd:c0:8a:1d:41:fe:30: bc:b7:91:ce:62:aa:88:18:03:58:47:1d:28:03:2a:69:61:75: 74:99:30:6e:f1:71:fb:bd:46:da:84:2c:3a:0d:36:e5:dc:0c: 3c:f4:5e:f2 -----BEGIN CERTIFICATE----- MIIFujCCBKKgAwIBAgISAZrYfvL+aw5HwMyvZd7dhbIPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjAxMDU1OTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGNiY2M0NTgwMmQyMWVhOTVjNTA2Y2IxMTkxMjU1YmVlODQ5YTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYJ79UWQb7bTq4oV94tpgc2iZYjD cqCoj1UfltVCsmND/dKi0iwpP7nAhboSKZDZipH/l7uwl/iIqD31JqAP+YEOk4nW NeMI2yWSsqqyv/J9akhzjfjNZ7mbyu0ZzTF0K2x5MK5AJd8ZdCxvAD3/8lK+aKJS 1BR7r+Rq2PFiOi2MGXTvFNVmqO/S02SiprAl2opPKNMZ9NCNY4jhYVklGGHkJHJ9 DNmvKxzdmLMgmoT0zNGbKJOoACGaSrT5Fh+luRpCE1eaZuIscXhrBCGVJ0ZO/Zxu UsoOzc/DVdpv7rjQeA/zz0q8OO4uMyLzyujU/iSvtvXW4PwnUr0h46uk/QIDAQAB o4ICxjCCAsIwHQYDVR0OBBYEFP3LzEWALSHqlcUGyxGRJVvuhJpTMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvX2N2TVJZQXRJZXFWeFFiTEVaRWxXLTZFbWxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHbBggrBgEFBQcBBwEB/wSByzCByDCBxQQCAAEwgb4DBAAl yskDBACX8BwDBAGX8JgDBACX8OIwDAMEAJfxCwMEAJfxDAMEAJfxGQMEAJfxGwME AJfxHQMEAJfxXgMEAJfxaAMEAJfxijAMAwQAl/GVAwQAl/GWAwQAl/GYAwQAl/JP AwQAl/KAAwQBl/LsAwQAl/LvAwQAl/MQAwQAl/O9AwQAl/QMAwQHl/UAAwQAl/WR AwQAl/W2AwQAl/XcAwQAl/eKAwQAl/eRAwQAl/eVAwQAl/fuAwQAl/fyMA0GCSqG SIb3DQEBCwUAA4IBAQAJCDoNV2b/X5b56vX6kfIh7SuY8a3WHa4EOTBR2ASmoOov 6hCzPxuSBeSFM7hF1W8YmR7DJX08+oWg7wx0ddWRwFlAlPldV2aK24BDfMUG5fGF OCcaDDq/c3K4LFdc1pXj2Gs3beyD/3noeM7XrfXkpbLzslmeuEMFyy8XfzRfpBjo TqAf4+nrvezQ6wLQ9c34LDO5VJtkKSy16gqt085A5I8B+xKzLIPXAZjd4RIhtUJr 1OM3pZHidLFDxORk5ep7saTnx4SW34YmOc22GxLVcc3Aih1B/jC8t5HOYqqIGANY Rx0oAyppYXV0mTBu8XH7vUbahCw6DTbl3Aw89F7y -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:57 2025 by rpki-client