This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cm73iY6CH_vuJl9iHvi_Z_EaYFQ.roa File: cm73iY6CH_vuJl9iHvi_Z_EaYFQ.roa (raw, json) Hash identifier: Lcl4/4u+CfTEYYu3qXOiTZDWzZCyro8yBFKObxsediQ= Subject key identifier: 72:6E:F7:89:8E:82:1F:FB:EE:26:5F:62:1E:F8:BF:67:F1:1A:60:54 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A61E611515F9107A36713533448869487 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cm73iY6CH_vuJl9iHvi_Z_EaYFQ.roa Signing time: Sat 08 Nov 2025 05:17:38 +0000 ROA not before: Sat 08 Nov 2025 05:17:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 397630 IP address blocks: 151.240.2.0/24 maxlen: 24 151.240.169.0/24 maxlen: 24 151.241.33.0/24 maxlen: 24 151.241.43.0/24 maxlen: 24 151.241.48.0/24 maxlen: 24 151.242.26.0/24 maxlen: 24 151.243.26.0/24 maxlen: 24 151.244.42.0/24 maxlen: 24 151.245.69.0/24 maxlen: 24 151.245.162.0/24 maxlen: 24 151.245.166.0/24 maxlen: 24 151.245.177.0/24 maxlen: 24 151.245.199.0/24 maxlen: 24 151.247.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:61:e6:11:51:5f:91:07:a3:67:13:53:34:48:86:94:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 8 05:17:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=726ef7898e821ffbee265f621ef8bf67f11a6054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dd:91:4b:32:e3:0a:85:30:44:b1:96:47:c4: b1:ef:6e:7a:df:1c:ed:21:a7:28:95:dd:ee:79:2c: 19:a5:6b:18:2f:67:88:18:15:83:ba:5b:07:9e:cf: 06:50:2b:a3:c6:61:dc:4d:ca:55:23:71:73:98:92: e6:1e:49:4c:dc:03:c9:5a:60:42:3e:c2:b8:99:9b: 85:35:c9:27:ad:47:bd:b5:61:7a:08:0c:c8:df:62: 81:56:d7:e9:36:19:45:e5:c3:51:8e:74:b2:8e:4a: d0:9b:bf:6d:9c:bc:44:21:01:fd:ad:04:72:fb:83: 09:45:44:ac:63:f5:4a:ab:69:18:a9:33:39:b0:12: a0:66:f2:5f:a6:4e:36:d8:2b:18:e3:a3:b1:fe:b4: 5d:6f:5a:08:06:4e:e5:79:de:31:42:31:ef:3a:7f: 74:48:db:cd:4a:a5:1d:6d:2c:34:70:00:be:a1:84: 0b:97:64:94:38:5e:f0:19:e9:9d:e1:dc:4d:37:3c: ff:74:e1:45:1a:a5:eb:f6:d0:4a:ff:be:c7:b6:82: 63:36:67:be:68:10:12:44:bc:85:c3:79:b0:b8:68: a5:00:f5:f2:f9:57:6f:c8:59:f8:41:35:77:3b:db: 51:84:50:e2:da:c8:68:46:ee:10:99:d6:0b:85:5e: 9c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:6E:F7:89:8E:82:1F:FB:EE:26:5F:62:1E:F8:BF:67:F1:1A:60:54 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cm73iY6CH_vuJl9iHvi_Z_EaYFQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.2.0/24 151.240.169.0/24 151.241.33.0/24 151.241.43.0/24 151.241.48.0/24 151.242.26.0/24 151.243.26.0/24 151.244.42.0/24 151.245.69.0/24 151.245.162.0/24 151.245.166.0/24 151.245.177.0/24 151.245.199.0/24 151.247.246.0/24 Signature Algorithm: sha256WithRSAEncryption 57:74:96:2c:76:f8:84:27:ae:a0:06:be:94:4a:ad:f8:7b:59: 67:17:bd:b1:3d:b1:70:31:af:e5:79:ec:40:3f:50:64:8c:af: 56:51:2b:b5:8b:31:6e:0b:dd:03:b4:f1:9a:cc:3d:39:63:77: 07:9a:c4:6f:d0:86:15:e4:95:1a:d1:0d:73:a7:f1:6d:dd:04: ed:d0:27:df:c7:4a:90:64:55:ae:cd:a1:dd:38:e9:4c:fc:0d: 34:ec:60:b3:aa:1b:f2:5d:06:cb:05:84:91:4f:c2:33:d9:a0: 17:b2:44:fc:4b:19:5a:b7:e5:f1:85:a7:63:2c:79:1b:df:5a: c0:de:f7:0d:b2:29:bb:e3:b8:01:ca:74:7f:db:5d:56:6e:18: ff:a9:23:11:26:8b:f6:b1:83:e1:8c:10:7d:3e:68:fe:dc:6f: 50:d1:20:54:c0:f3:70:d4:dd:3f:c6:09:77:7e:ac:a3:ca:a2: 1c:07:8b:08:2a:ad:b8:34:1d:72:cf:ea:a8:58:be:17:cb:ac: 70:d7:a9:ff:ec:36:ee:cc:39:ed:3d:9a:d0:02:44:1d:17:d0: c1:04:6d:f7:92:e2:14:52:b7:c8:10:ac:52:ff:ff:01:d3:9b: e2:5d:69:5e:11:d6:b7:85:a9:ce:0d:d9:20:a1:79:09:b4:39: 04:15:7d:58 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZph5hFRX5EHo2cTUzRIhpSHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTA4MDUxNzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjZlZjc4OThlODIxZmZiZWUyNjVmNjIxZWY4YmY2N2YxMWE2MDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd2RSzLjCoUwRLGWR8Sx72563xzt Iacold3ueSwZpWsYL2eIGBWDulsHns8GUCujxmHcTcpVI3FzmJLmHklM3APJWmBC PsK4mZuFNcknrUe9tWF6CAzI32KBVtfpNhlF5cNRjnSyjkrQm79tnLxEIQH9rQRy +4MJRUSsY/VKq2kYqTM5sBKgZvJfpk422CsY46Ox/rRdb1oIBk7led4xQjHvOn90 SNvNSqUdbSw0cAC+oYQLl2SUOF7wGemd4dxNNzz/dOFFGqXr9tBK/77HtoJjNme+ aBASRLyFw3mwuGilAPXy+VdvyFn4QTV3O9tRhFDi2shoRu4QmdYLhV6cWQIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFHJu94mOgh/77iZfYh74v2fxGmBUMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvY203M2lZNkNIX3Z1Smw5aUh2aV9aX0VhWUZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAl/ACAwQA l/CpAwQAl/EhAwQAl/ErAwQAl/EwAwQAl/IaAwQAl/MaAwQAl/QqAwQAl/VFAwQA l/WiAwQAl/WmAwQAl/WxAwQAl/XHAwQAl/f2MA0GCSqGSIb3DQEBCwUAA4IBAQBX dJYsdviEJ66gBr6USq34e1lnF72xPbFwMa/leexAP1BkjK9WUSu1izFuC90DtPGa zD05Y3cHmsRv0IYV5JUa0Q1zp/Ft3QTt0Cffx0qQZFWuzaHdOOlM/A007GCzqhvy XQbLBYSRT8Iz2aAXskT8Sxlat+XxhadjLHkb31rA3vcNsim747gBynR/211Wbhj/ qSMRJov2sYPhjBB9Pmj+3G9Q0SBUwPNw1N0/xgl3fqyjyqIcB4sIKq24NB1yz+qo WL4Xy6xw16n/7DbuzDntPZrQAkQdF9DBBG33kuIUUrfIEKxS//8B05viXWleEda3 hanODdkgoXkJtDkEFX1Y -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:55 2025 by rpki-client