This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cVvd-jvGPNNUzI0usUO2O_ZH4tU.roa File: cVvd-jvGPNNUzI0usUO2O_ZH4tU.roa (raw, json) Hash identifier: NuKoZ1G+AxKTCZtVC1H/9tNZMJXGeOeCCEn5zqM4M20= Subject key identifier: 71:5B:DD:FA:3B:C6:3C:D3:54:CC:8D:2E:B1:43:B6:3B:F6:47:E2:D5 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A95B9E0ACEF981657CA1B1988E803DBCC Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cVvd-jvGPNNUzI0usUO2O_ZH4tU.roa Signing time: Tue 18 Nov 2025 06:49:38 +0000 ROA not before: Tue 18 Nov 2025 06:49:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211484 IP address blocks: 151.240.144.0/24 maxlen: 24 151.246.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:95:b9:e0:ac:ef:98:16:57:ca:1b:19:88:e8:03:db:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 18 06:49:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=715bddfa3bc63cd354cc8d2eb143b63bf647e2d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:15:61:97:4d:63:c9:b0:2a:f7:35:ba:87:c6: 2a:28:af:39:81:02:18:fc:df:80:11:e7:04:ae:df: 0a:0f:d5:2b:b7:4f:9d:c3:71:c1:a1:9a:59:8b:ea: 52:6d:42:83:8d:95:7a:be:69:1b:4d:08:dd:1d:8e: b2:31:91:e5:78:38:b9:61:45:a0:9f:39:35:80:a0: b1:1a:fb:da:e5:d5:1f:81:e3:32:f9:bc:7d:60:7f: 17:a8:38:ec:e2:53:d5:92:7f:87:b0:11:d7:4a:a1: f2:20:e6:f4:eb:02:a3:15:fa:2d:09:ab:89:fa:36: b6:c6:90:e0:5c:9d:c6:19:03:a0:69:10:5b:11:a4: c3:b7:a1:97:b3:c6:b5:b3:e2:ab:0a:fd:94:ec:71: e6:18:69:86:37:1f:cf:60:7c:62:76:17:18:5d:2d: f7:9b:6e:7b:f1:a0:59:7c:80:d3:bb:83:70:25:59: c3:8f:05:82:58:3a:45:ba:96:53:69:3c:a5:e8:37: c3:0d:cf:6c:d1:b7:34:a2:ff:b5:f9:84:c0:8b:85: ba:88:98:e1:ed:0e:1f:96:8f:a4:36:c6:d4:d6:65: ff:de:1c:d1:d1:61:1f:49:89:ba:49:d5:1c:45:16: 4f:63:a9:78:d3:71:5e:6a:b2:27:44:81:78:dc:5f: 0e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:5B:DD:FA:3B:C6:3C:D3:54:CC:8D:2E:B1:43:B6:3B:F6:47:E2:D5 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cVvd-jvGPNNUzI0usUO2O_ZH4tU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.144.0/24 151.246.200.0/23 Signature Algorithm: sha256WithRSAEncryption a8:82:16:d0:9f:28:ca:e4:5d:64:07:6c:50:4a:a7:63:8d:7e: cb:1e:91:a2:3e:31:89:71:a1:e4:dc:6b:00:b7:56:58:23:89: 43:0d:27:0e:54:40:17:f6:e7:60:65:80:87:d6:69:73:26:7d: 51:f3:40:f8:19:e8:ee:a7:71:a3:1d:dc:d4:69:4d:d7:71:4a: 39:48:84:07:6a:9e:e5:c2:a5:7e:f3:8e:35:22:bd:61:e5:91: 19:2f:e8:77:20:3e:e4:2c:8a:c7:7c:26:f9:55:69:3c:15:64: 7c:ba:90:85:9e:19:16:6f:bc:47:73:17:63:ae:c8:92:df:aa: 11:ea:cf:f3:1d:bf:b0:7f:7a:ce:e0:71:05:b2:09:51:af:60: 0b:56:c5:65:67:39:04:64:99:78:b6:e6:97:b4:11:71:19:5a: 61:47:eb:54:7d:d9:29:43:a1:ce:96:67:21:50:3d:7b:c2:f7: c5:bf:34:e6:69:16:a7:01:42:66:b7:49:c8:2c:d1:2a:fd:54: 8c:09:94:aa:b2:6d:00:7d:ff:75:cc:9b:c2:4a:50:4d:45:b3: bc:c0:0e:89:c9:16:95:80:5a:81:dd:f8:5c:3a:a1:78:3a:29: ff:02:34:11:d8:06:5a:eb:6d:51:aa:2e:ca:b8:99:51:97:5b: fd:13:b7:eb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqVueCs75gWV8obGYjoA9vMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTE4MDY0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTViZGRmYTNiYzYzY2QzNTRjYzhkMmViMTQzYjYzYmY2NDdlMmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBVhl01jybAq9zW6h8YqKK85gQIY /N+AEecErt8KD9Urt0+dw3HBoZpZi+pSbUKDjZV6vmkbTQjdHY6yMZHleDi5YUWg nzk1gKCxGvva5dUfgeMy+bx9YH8XqDjs4lPVkn+HsBHXSqHyIOb06wKjFfotCauJ +ja2xpDgXJ3GGQOgaRBbEaTDt6GXs8a1s+KrCv2U7HHmGGmGNx/PYHxidhcYXS33 m2578aBZfIDTu4NwJVnDjwWCWDpFupZTaTyl6DfDDc9s0bc0ov+1+YTAi4W6iJjh 7Q4flo+kNsbU1mX/3hzR0WEfSYm6SdUcRRZPY6l403FearInRIF43F8OAQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHFb3fo7xjzTVMyNLrFDtjv2R+LVMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvY1Z2ZC1qdkdQTk5VekkwdXNVTzJPX1pINHRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/CQAwQB l/bIMA0GCSqGSIb3DQEBCwUAA4IBAQCoghbQnyjK5F1kB2xQSqdjjX7LHpGiPjGJ caHk3GsAt1ZYI4lDDScOVEAX9udgZYCH1mlzJn1R80D4Gejup3GjHdzUaU3XcUo5 SIQHap7lwqV+8441Ir1h5ZEZL+h3ID7kLIrHfCb5VWk8FWR8upCFnhkWb7xHcxdj rsiS36oR6s/zHb+wf3rO4HEFsglRr2ALVsVlZzkEZJl4tuaXtBFxGVphR+tUfdkp Q6HOlmchUD17wvfFvzTmaRanAUJmt0nILNEq/VSMCZSqsm0Aff91zJvCSlBNRbO8 wA6JyRaVgFqB3fhcOqF4Oin/AjQR2AZa621Rqi7KuJlRl1v9E7fr -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:38 2025 by rpki-client