This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bimyv1ycvWuCGWA0hnv4zXj9znA.roa File: bimyv1ycvWuCGWA0hnv4zXj9znA.roa (raw, json) Hash identifier: 0tDFAiox13s0SZbMAevOa79bgzu/D7GkFskvMuk77WI= Subject key identifier: 6E:29:B2:BF:5C:9C:BD:6B:82:19:60:34:86:7B:F8:CD:78:FD:CE:70 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B1CDF8DCA192D7BCE20DD16C018FEC5DE Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bimyv1ycvWuCGWA0hnv4zXj9znA.roa Signing time: Sun 14 Dec 2025 12:39:31 +0000 ROA not before: Sun 14 Dec 2025 12:39:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 397006 IP address blocks: 151.246.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:df:8d:ca:19:2d:7b:ce:20:dd:16:c0:18:fe:c5:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 14 12:39:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6e29b2bf5c9cbd6b82196034867bf8cd78fdce70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6d:ff:e5:15:b2:cb:bb:e6:7d:3f:41:6d:f1: c5:5d:c5:d6:0d:48:fd:09:15:19:80:8f:c1:9a:93: 7f:da:4b:b8:c4:1b:9b:1b:92:6e:37:d3:05:59:64: 67:02:73:d1:c5:23:79:96:48:bf:1b:05:9e:df:b9: 25:0a:a6:d0:5a:86:c2:e9:66:fc:c2:dc:cf:fe:6e: fd:e7:3b:9d:ba:cd:a7:15:a7:02:fc:0f:24:ad:c4: fd:b3:2f:04:dd:03:89:51:e0:c0:41:58:13:42:ea: dd:4b:6e:a3:8f:04:b9:1e:65:d4:61:a6:2d:b3:dd: ec:ce:b1:37:f9:80:2c:70:9f:60:d5:b6:bd:a1:c7: 9e:b0:49:01:be:83:b7:7d:92:39:77:c7:de:13:9b: df:21:18:31:e1:b6:5b:d8:42:35:48:fe:36:c6:d9: 18:f4:a1:50:62:70:a2:3e:6c:bc:f2:16:bf:3f:4b: 23:d6:24:57:4d:a4:c4:0b:6c:f4:e8:68:86:7a:07: 2d:3c:fa:84:20:ea:5f:33:49:f6:fd:61:54:46:69: b4:dd:64:60:d4:6b:82:bd:71:76:89:0c:63:5c:46: b3:aa:93:50:93:4e:f4:d2:e1:81:58:df:c3:cb:60: ae:36:8a:15:bf:e8:48:7f:6b:63:05:ef:50:8b:06: 30:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:29:B2:BF:5C:9C:BD:6B:82:19:60:34:86:7B:F8:CD:78:FD:CE:70 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bimyv1ycvWuCGWA0hnv4zXj9znA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.246.16.0/21 Signature Algorithm: sha256WithRSAEncryption 25:25:df:cc:19:47:8d:31:e3:49:e3:56:8d:8f:de:61:98:f1: bb:a6:df:23:e9:ea:fc:66:0e:05:ee:75:b9:a7:58:8c:10:3e: 59:e5:23:57:31:a8:bc:41:c8:32:1d:c4:0f:44:9c:ee:14:13: 79:5f:87:2e:5d:a3:07:b3:69:a2:2d:b5:46:5c:ab:bd:05:e5: 65:9b:b5:62:8b:73:0c:f7:f3:ba:16:4f:e5:36:31:d7:ab:61: f8:c1:73:30:b5:0b:97:ed:29:53:3e:e9:8d:e5:6c:32:66:fc: 8f:0a:5d:b9:25:75:7e:41:e9:24:62:3a:74:81:2f:31:7c:a7: 17:f6:2a:0b:be:32:3b:2e:94:0c:eb:c9:4b:13:63:de:06:1b: 7b:bb:fb:1c:3a:2c:5f:0c:44:a9:2a:71:58:d9:61:1b:39:99: 6a:6f:a9:3c:00:c8:f5:43:70:a4:67:70:f0:51:9a:fd:a7:9f: 86:9e:8b:e3:fc:6f:d9:9b:64:53:1e:1d:d0:48:09:fd:d2:86: 96:7c:5c:d0:2a:e0:50:0b:d8:0a:4e:6b:df:b3:aa:d7:da:f6: 18:54:69:7c:8b:f1:14:8c:97:93:4f:3c:44:0b:2a:67:ba:ad: 3b:f8:06:4c:60:c7:5b:95:4a:6f:e5:47:e3:1c:72:4c:17:6d: 0f:6d:b2:2d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsc343KGS17ziDdFsAY/sXeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjE0MTIzOTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZTI5YjJiZjVjOWNiZDZiODIxOTYwMzQ4NjdiZjhjZDc4ZmRjZTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm23/5RWyy7vmfT9BbfHFXcXWDUj9 CRUZgI/BmpN/2ku4xBubG5JuN9MFWWRnAnPRxSN5lki/GwWe37klCqbQWobC6Wb8 wtzP/m795zudus2nFacC/A8krcT9sy8E3QOJUeDAQVgTQurdS26jjwS5HmXUYaYt s93szrE3+YAscJ9g1ba9oceesEkBvoO3fZI5d8feE5vfIRgx4bZb2EI1SP42xtkY 9KFQYnCiPmy88ha/P0sj1iRXTaTEC2z06GiGegctPPqEIOpfM0n2/WFURmm03WRg 1GuCvXF2iQxjXEazqpNQk0700uGBWN/Dy2CuNooVv+hIf2tjBe9QiwYw8QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG4psr9cnL1rghlgNIZ7+M14/c5wMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvYmlteXYxeWN2V3VDR1dBMGhudjR6WGo5em5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDl/YQMA0G CSqGSIb3DQEBCwUAA4IBAQAlJd/MGUeNMeNJ41aNj95hmPG7pt8j6er8Zg4F7nW5 p1iMED5Z5SNXMai8QcgyHcQPRJzuFBN5X4cuXaMHs2miLbVGXKu9BeVlm7Vii3MM 9/O6Fk/lNjHXq2H4wXMwtQuX7SlTPumN5WwyZvyPCl25JXV+QekkYjp0gS8xfKcX 9ioLvjI7LpQM68lLE2PeBht7u/scOixfDESpKnFY2WEbOZlqb6k8AMj1Q3CkZ3Dw UZr9p5+Gnovj/G/Zm2RTHh3QSAn90oaWfFzQKuBQC9gKTmvfs6rX2vYYVGl8i/EU jJeTTzxECypnuq07+AZMYMdblUpv5UfjHHJMF20PbbIt -----END CERTIFICATE-----Generated at Fri Dec 19 13:45:49 2025 by rpki-client