This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/alyE9wm-0KtP_2v4nQK9E3JHq4g.roa File: alyE9wm-0KtP_2v4nQK9E3JHq4g.roa (raw, json) Hash identifier: iMnsgvRnwREZPfBygCdXyLAjYpLJyyBIWX9zGJlqlpQ= Subject key identifier: 6A:5C:84:F7:09:BE:D0:AB:4F:FF:6B:F8:9D:02:BD:13:72:47:AB:88 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A8798A2E63E2A18C3D8FEA7195D62C2A1 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/alyE9wm-0KtP_2v4nQK9E3JHq4g.roa Signing time: Sat 15 Nov 2025 12:58:38 +0000 ROA not before: Sat 15 Nov 2025 12:58:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215228 IP address blocks: 151.243.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:87:98:a2:e6:3e:2a:18:c3:d8:fe:a7:19:5d:62:c2:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 15 12:58:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6a5c84f709bed0ab4fff6bf89d02bd137247ab88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d7:74:8a:7e:15:d7:b3:05:57:d4:c6:2c:67: 60:47:f9:91:23:6e:21:f2:7f:9d:b1:83:d6:a5:5c: a7:27:2b:61:dd:97:a7:b1:74:ca:55:58:38:df:b9: db:c0:bb:9d:d0:40:aa:84:b4:d9:4c:31:9e:59:01: d4:f7:22:4c:7b:b5:3f:ba:47:ed:2f:a2:ff:95:91: d5:fd:4b:c2:fc:d0:de:22:eb:67:dd:e3:12:a5:25: 4c:07:e4:5a:34:cb:65:66:2d:35:ec:a0:7b:b3:35: 28:c7:3c:e8:61:e4:fb:5e:7a:b3:aa:50:5e:59:95: 4a:c4:14:c7:dc:a4:48:d9:68:1b:e0:07:f7:a2:d3: 07:c5:29:82:6a:81:ac:33:75:df:08:29:d8:b3:15: 72:55:d9:8a:11:44:9f:c6:9b:ad:aa:a9:8e:a1:8d: 0c:2e:ca:0c:c7:db:77:34:05:d0:e2:9e:85:03:17: 3c:f4:4c:03:d4:57:51:eb:a8:87:8d:ed:b9:08:44: a0:7c:20:61:80:1b:d2:f0:e0:70:0b:91:c1:fa:33: 06:36:42:9b:27:fb:15:d2:a8:fd:f3:27:42:75:37: 49:8b:27:90:af:07:85:ca:9e:88:4d:24:63:c6:88: ae:b9:5f:97:b7:7c:a1:f8:fd:d1:ac:cd:f6:ac:b3: 5b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:5C:84:F7:09:BE:D0:AB:4F:FF:6B:F8:9D:02:BD:13:72:47:AB:88 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/alyE9wm-0KtP_2v4nQK9E3JHq4g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.146.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:2f:78:04:51:1b:85:8f:75:98:24:ee:a3:a8:56:0d:40:87: 44:8f:7d:e5:23:84:5f:a6:14:d3:82:6b:b4:e8:4c:92:61:3d: a3:66:5d:ec:23:3f:38:21:02:0c:29:af:3b:b7:f2:c0:2d:61: c0:5c:27:d2:b8:0f:36:b7:b5:08:78:2a:5e:3b:5e:9d:64:57: 8c:b2:5c:f9:72:a4:c2:c9:77:7f:81:6a:df:94:c3:b8:b9:a0: 42:64:91:5f:1a:2a:7c:59:54:59:57:58:e2:16:bb:d0:73:ae: 77:bb:98:88:a8:9d:d2:10:97:c9:df:ef:2f:28:dd:da:39:3d: 5c:dc:51:de:6f:35:08:9a:de:aa:7c:72:29:a5:e8:98:fb:4b: 55:0b:2a:fd:5d:a9:d5:18:e3:65:c8:1a:91:b3:3d:30:11:0e: 2b:36:f4:4f:9e:b1:df:bd:07:03:f0:0b:bc:6e:e3:66:15:d4: 5c:ce:7e:ae:25:96:68:fb:58:98:fa:5e:80:42:c5:ee:bb:60: 5d:36:fa:21:48:2e:b1:7e:d2:9b:e6:c8:2f:90:0b:89:59:6b: ff:18:73:d3:6e:02:2d:bd:07:c2:84:cc:e4:74:f9:7d:61:30: 18:48:6f:a6:c4:4b:8f:ed:cd:cd:1c:45:a5:69:e0:d3:7a:97: ca:30:5e:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqHmKLmPioYw9j+pxldYsKhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTE1MTI1ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YTVjODRmNzA5YmVkMGFiNGZmZjZiZjg5ZDAyYmQxMzcyNDdhYjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNd0in4V17MFV9TGLGdgR/mRI24h 8n+dsYPWpVynJyth3ZensXTKVVg437nbwLud0ECqhLTZTDGeWQHU9yJMe7U/ukft L6L/lZHV/UvC/NDeIutn3eMSpSVMB+RaNMtlZi017KB7szUoxzzoYeT7XnqzqlBe WZVKxBTH3KRI2Wgb4Af3otMHxSmCaoGsM3XfCCnYsxVyVdmKEUSfxputqqmOoY0M LsoMx9t3NAXQ4p6FAxc89EwD1FdR66iHje25CESgfCBhgBvS8OBwC5HB+jMGNkKb J/sV0qj98ydCdTdJiyeQrweFyp6ITSRjxoiuuV+Xt3yh+P3RrM32rLNbTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGpchPcJvtCrT/9r+J0CvRNyR6uIMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvYWx5RTl3bS0wS3RQXzJ2NG5RSzlFM0pIcTRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/OSMA0G CSqGSIb3DQEBCwUAA4IBAQAeL3gEURuFj3WYJO6jqFYNQIdEj33lI4RfphTTgmu0 6EySYT2jZl3sIz84IQIMKa87t/LALWHAXCfSuA82t7UIeCpeO16dZFeMslz5cqTC yXd/gWrflMO4uaBCZJFfGip8WVRZV1jiFrvQc653u5iIqJ3SEJfJ3+8vKN3aOT1c 3FHebzUImt6qfHIppeiY+0tVCyr9XanVGONlyBqRsz0wEQ4rNvRPnrHfvQcD8Au8 buNmFdRczn6uJZZo+1iY+l6AQsXuu2BdNvohSC6xftKb5sgvkAuJWWv/GHPTbgIt vQfChMzkdPl9YTAYSG+mxEuP7c3NHEWlaeDTepfKMF7x -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:04 2025 by rpki-client