This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fjXJkPLicLbv52694MRS9uxBqAk.roa File: fjXJkPLicLbv52694MRS9uxBqAk.roa (raw, json) Hash identifier: wE2mjMYDlBzE7gbdy1eDQRK5sSEfMl/BHeo4qoE6YeA= Subject key identifier: 7E:35:C9:90:F2:E2:70:B6:EF:E7:6E:BD:E0:C4:52:F6:EC:41:A8:09 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A8126D8BD3C941778820EA9E627874310 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fjXJkPLicLbv52694MRS9uxBqAk.roa Signing time: Fri 14 Nov 2025 06:56:38 +0000 ROA not before: Fri 14 Nov 2025 06:56:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 13335 IP address blocks: 151.240.3.0/24 maxlen: 24 151.241.161.0/24 maxlen: 24 151.242.227.0/24 maxlen: 24 151.243.113.0/24 maxlen: 24 151.243.133.0/24 maxlen: 24 151.245.160.0/24 maxlen: 24 151.246.216.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:81:26:d8:bd:3c:94:17:78:82:0e:a9:e6:27:87:43:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 14 06:56:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7e35c990f2e270b6efe76ebde0c452f6ec41a809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c7:81:c6:d2:73:8a:66:0d:e6:db:ca:f8:16: 57:e7:da:41:bc:bb:7b:ec:1c:17:ab:11:39:57:c2: 4d:2e:aa:6b:e5:23:66:5b:63:03:b3:d1:8e:44:38: f2:8c:31:1d:5d:d6:fe:e9:a0:a8:25:38:c5:d6:d7: d9:7a:b4:c1:95:e3:97:79:4e:57:0b:56:1b:f1:57: 9f:0c:79:ec:07:b3:2e:5a:2e:10:57:a8:4f:bb:37: 0c:da:62:54:02:9e:50:05:67:e5:96:20:85:70:ca: b3:2c:a7:ef:04:5c:4e:b2:c2:5b:40:e0:f4:a3:35: 96:9d:fb:1c:15:fe:97:cf:41:b8:db:e0:4d:e1:83: 30:9a:a5:56:ad:98:a1:39:a0:c8:f4:29:e9:4f:7e: 26:fe:16:af:d1:45:c5:ea:87:f2:ef:56:b6:33:51: 5e:04:f1:af:a6:b1:07:a6:21:b1:8f:8b:6d:1a:41: 7f:d0:88:97:f4:d4:ab:68:19:71:b8:52:c1:da:50: 95:37:00:16:33:ca:4c:8c:2a:9d:0b:98:bc:5a:3d: 59:f0:bd:4b:f7:f6:dd:46:2e:c1:6a:1b:ba:9c:c1: d5:d9:e5:d7:d2:6a:92:24:ac:5d:3f:78:d9:df:e0: a9:46:fd:07:1c:51:44:d5:90:f5:91:30:48:69:9c: f9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:35:C9:90:F2:E2:70:B6:EF:E7:6E:BD:E0:C4:52:F6:EC:41:A8:09 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fjXJkPLicLbv52694MRS9uxBqAk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.3.0/24 151.241.161.0/24 151.242.227.0/24 151.243.113.0/24 151.243.133.0/24 151.245.160.0/24 151.246.216.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:95:39:91:4f:21:b5:5d:c5:1d:f2:df:c8:33:db:f8:f4:d0: dd:08:09:86:58:78:bb:60:2b:23:14:9c:16:ae:d3:75:74:b6: eb:39:94:c9:70:b5:01:ee:30:02:b2:bd:95:49:76:40:05:23: 1d:9d:bb:46:5b:7a:1c:a8:d3:41:67:81:13:26:05:04:a0:15: 91:9a:c3:8c:81:3d:fa:8b:2b:d7:bd:39:94:e3:df:c8:5b:5d: 8b:b1:0e:04:00:33:b9:1f:5c:6f:ab:b6:14:89:4d:b4:c7:d2: b7:07:61:b0:ae:db:38:00:e9:9f:77:4c:bb:6b:42:b5:ca:32: 2c:eb:eb:45:ac:ff:07:fe:0c:d9:76:59:0a:ca:3e:fb:d6:e7: 80:b0:6a:38:97:df:11:1b:06:39:58:6c:d1:67:51:78:e0:01: 55:8a:0d:51:76:77:7c:3e:17:18:c8:ab:3a:c1:85:a9:d4:e4: ad:00:55:c9:fe:dd:3d:93:77:4d:9f:0b:17:23:da:92:fe:f5: 5f:2d:70:e8:e1:05:f6:1f:bb:30:3f:79:cd:67:15:53:81:45: d1:a1:85:36:24:12:c2:e8:2b:b0:69:d3:67:0b:c7:df:fb:ae: 93:37:54:1e:88:05:ae:9b:f5:e4:c2:f5:bc:b6:e5:04:12:d2: f4:fa:89:69 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZqBJti9PJQXeIIOqeYnh0MQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTE0MDY1NjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTM1Yzk5MGYyZTI3MGI2ZWZlNzZlYmRlMGM0NTJmNmVjNDFhODA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8eBxtJzimYN5tvK+BZX59pBvLt7 7BwXqxE5V8JNLqpr5SNmW2MDs9GORDjyjDEdXdb+6aCoJTjF1tfZerTBleOXeU5X C1Yb8VefDHnsB7MuWi4QV6hPuzcM2mJUAp5QBWflliCFcMqzLKfvBFxOssJbQOD0 ozWWnfscFf6Xz0G42+BN4YMwmqVWrZihOaDI9CnpT34m/hav0UXF6ofy71a2M1Fe BPGvprEHpiGxj4ttGkF/0IiX9NSraBlxuFLB2lCVNwAWM8pMjCqdC5i8Wj1Z8L1L 9/bdRi7Bahu6nMHV2eXX0mqSJKxdP3jZ3+CpRv0HHFFE1ZD1kTBIaZz5pwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFH41yZDy4nC27+duveDEUvbsQagJMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvZmpYSmtQTGljTGJ2NTI2OTRNUlM5dXhCcUFrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAl/ADAwQA l/GhAwQAl/LjAwQAl/NxAwQAl/OFAwQAl/WgAwQBl/bYMA0GCSqGSIb3DQEBCwUA A4IBAQCelTmRTyG1XcUd8t/IM9v49NDdCAmGWHi7YCsjFJwWrtN1dLbrOZTJcLUB 7jACsr2VSXZABSMdnbtGW3ocqNNBZ4ETJgUEoBWRmsOMgT36iyvXvTmU49/IW12L sQ4EADO5H1xvq7YUiU20x9K3B2Gwrts4AOmfd0y7a0K1yjIs6+tFrP8H/gzZdlkK yj771ueAsGo4l98RGwY5WGzRZ1F44AFVig1Rdnd8PhcYyKs6wYWp1OStAFXJ/t09 k3dNnwsXI9qS/vVfLXDo4QX2H7swP3nNZxVTgUXRoYU2JBLC6CuwadNnC8ff+66T N1QeiAWum/XkwvW8tuUEEtL0+olp -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:35 2025 by rpki-client