This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ftN4fdYdvAUKND8_M8zq5GBIWAg.roa File: ftN4fdYdvAUKND8_M8zq5GBIWAg.roa (raw, json) Hash identifier: 19jrsOkP4owNtnuFGqqHtCmNnzWoEeudKfE3g8ysyaU= Subject key identifier: 7E:D3:78:7D:D6:1D:BC:05:0A:34:3F:3F:33:CC:EA:E4:60:48:58:08 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B0848DA80DDF4F741EEBDFBDFB4A9F1F6 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ftN4fdYdvAUKND8_M8zq5GBIWAg.roa Signing time: Wed 10 Dec 2025 12:42:30 +0000 ROA not before: Wed 10 Dec 2025 12:42:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 37.202.202.0/24 maxlen: 24 151.240.1.0/24 maxlen: 24 151.240.9.0/24 maxlen: 24 151.240.17.0/24 maxlen: 24 151.240.24.0/24 maxlen: 24 151.240.227.0/24 maxlen: 24 151.241.1.0/24 maxlen: 24 151.241.8.0/24 maxlen: 24 151.241.68.0/24 maxlen: 24 151.241.92.0/24 maxlen: 24 151.242.67.0/24 maxlen: 24 151.242.103.0/24 maxlen: 24 151.242.117.0/24 maxlen: 24 151.242.118.0/24 maxlen: 24 151.243.6.0/24 maxlen: 24 151.243.120.0/24 maxlen: 24 151.243.160.0/22 maxlen: 22 151.244.78.0/24 maxlen: 24 151.244.192.0/24 maxlen: 24 151.245.54.0/24 maxlen: 24 151.245.183.0/24 maxlen: 24 151.245.238.0/24 maxlen: 24 151.246.177.0/24 maxlen: 24 151.246.190.0/24 maxlen: 24 151.247.158.0/24 maxlen: 24 151.247.192.0/24 maxlen: 24 151.247.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:08:48:da:80:dd:f4:f7:41:ee:bd:fb:df:b4:a9:f1:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 10 12:42:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7ed3787dd61dbc050a343f3f33cceae460485808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:85:fc:7c:25:b7:61:39:4b:e2:5e:ba:90:65: 87:3c:1f:36:55:64:fa:78:e9:9b:5b:e2:cf:05:df: 58:18:a2:c6:49:1a:97:6b:f7:72:7d:17:16:b7:0f: ae:1f:b9:c2:98:14:e4:50:67:b7:49:c3:d4:41:46: ce:be:05:74:12:9a:33:87:a8:3b:f7:15:59:7d:c2: e4:8c:c9:f0:a3:82:ea:f1:26:66:27:6d:87:50:87: 54:64:48:75:3d:c2:7a:36:70:60:01:c2:b8:26:e4: 24:f8:c9:e0:78:7c:0c:5c:eb:d2:7a:04:58:da:27: 30:50:57:34:26:63:61:ad:a8:00:89:e4:d3:f8:10: 1c:5a:31:06:70:34:95:0c:dd:83:67:b7:75:63:ac: 3d:cf:ed:c7:84:5b:47:e7:40:b6:9e:3e:5c:e5:fb: 08:99:72:e9:e1:ff:ca:97:51:bb:43:52:1f:08:d1: 28:8d:12:15:70:36:8b:37:f6:09:42:bd:51:35:72: 13:45:a4:22:df:6a:5e:b9:d4:20:57:9b:5f:13:ba: ab:68:6b:f1:9f:e9:61:22:0f:02:c7:34:9a:d3:75: 35:29:dd:b5:c8:5a:08:4f:fa:00:77:1c:61:af:6b: 46:0c:4d:7f:dc:a1:5d:30:d9:75:72:fe:df:1c:be: a5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D3:78:7D:D6:1D:BC:05:0A:34:3F:3F:33:CC:EA:E4:60:48:58:08 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ftN4fdYdvAUKND8_M8zq5GBIWAg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.202.0/24 151.240.1.0/24 151.240.9.0/24 151.240.17.0/24 151.240.24.0/24 151.240.227.0/24 151.241.1.0/24 151.241.8.0/24 151.241.68.0/24 151.241.92.0/24 151.242.67.0/24 151.242.103.0/24 151.242.117.0-151.242.118.255 151.243.6.0/24 151.243.120.0/24 151.243.160.0/22 151.244.78.0/24 151.244.192.0/24 151.245.54.0/24 151.245.183.0/24 151.245.238.0/24 151.246.177.0/24 151.246.190.0/24 151.247.158.0/24 151.247.192.0/24 151.247.217.0/24 Signature Algorithm: sha256WithRSAEncryption 38:6e:a3:68:d8:83:85:be:bc:a9:d8:5b:5a:49:d8:5e:da:65: 6b:97:ad:12:ae:4c:b5:56:9f:b3:8d:15:1c:8e:b0:27:3c:6e: 3f:a1:cb:d6:93:ce:fb:cb:e0:0f:42:49:9c:45:6c:c6:a8:bc: d4:aa:44:4d:13:91:18:0e:27:84:bb:79:db:97:3a:31:55:d2: 3e:31:cd:51:41:ea:93:14:ee:ed:fb:23:ca:13:f6:e3:38:a7: ad:de:85:52:bd:d8:6c:96:a9:4b:58:dc:9a:4a:e4:cf:18:c3: 2e:bf:c3:38:a5:23:ca:86:55:64:c2:9b:44:5f:d8:0b:c4:80: 16:2c:ea:5b:a8:a6:a6:24:1a:aa:8b:d0:c3:c1:17:d1:aa:65: 2e:b8:c2:46:93:13:90:a8:c0:2c:6d:2f:cc:e6:5e:52:fe:26: 9d:7b:df:52:48:57:ac:7e:82:c4:25:f1:f8:f5:7a:b7:92:c7: 28:83:e3:57:f0:ae:52:c6:94:40:c9:ee:c8:2d:c0:68:ed:84: 6b:e3:4e:a5:6a:1e:e5:1a:82:87:2b:46:0e:b6:87:40:ec:0e: 6a:e2:55:a6:de:d4:de:ff:be:03:69:30:73:fd:10:43:3a:12: 02:fb:15:cd:40:c7:c2:95:83:f2:49:e8:88:af:4d:4d:fb:15: b3:9f:50:0b -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgISAZsISNqA3fT3Qe69+9+0qfH2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjEwMTI0MjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZWQzNzg3ZGQ2MWRiYzA1MGEzNDNmM2YzM2NjZWFlNDYwNDg1ODA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYX8fCW3YTlL4l66kGWHPB82VWT6 eOmbW+LPBd9YGKLGSRqXa/dyfRcWtw+uH7nCmBTkUGe3ScPUQUbOvgV0Epozh6g7 9xVZfcLkjMnwo4Lq8SZmJ22HUIdUZEh1PcJ6NnBgAcK4JuQk+MngeHwMXOvSegRY 2icwUFc0JmNhragAieTT+BAcWjEGcDSVDN2DZ7d1Y6w9z+3HhFtH50C2nj5c5fsI mXLp4f/Kl1G7Q1IfCNEojRIVcDaLN/YJQr1RNXITRaQi32peudQgV5tfE7qraGvx n+lhIg8CxzSa03U1Kd21yFoIT/oAdxxhr2tGDE1/3KFdMNl1cv7fHL6lrQIDAQAB o4ICrDCCAqgwHQYDVR0OBBYEFH7TeH3WHbwFCjQ/PzPM6uRgSFgIMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvZnRONGZkWWR2QVVLTkQ4X004enE1R0JJV0FnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHBBggrBgEFBQcBBwEB/wSBsTCBrjCBqwQCAAEwgaQDBAAl ysoDBACX8AEDBACX8AkDBACX8BEDBACX8BgDBACX8OMDBACX8QEDBACX8QgDBACX 8UQDBACX8VwDBACX8kMDBACX8mcwDAMEAJfydQMEAJfydgMEAJfzBgMEAJfzeAME ApfzoAMEAJf0TgMEAJf0wAMEAJf1NgMEAJf1twMEAJf17gMEAJf2sQMEAJf2vgME AJf3ngMEAJf3wAMEAJf32TANBgkqhkiG9w0BAQsFAAOCAQEAOG6jaNiDhb68qdhb WknYXtpla5etEq5MtVafs40VHI6wJzxuP6HL1pPO+8vgD0JJnEVsxqi81KpETROR GA4nhLt525c6MVXSPjHNUUHqkxTu7fsjyhP24zinrd6FUr3YbJapS1jcmkrkzxjD Lr/DOKUjyoZVZMKbRF/YC8SAFizqW6impiQaqovQw8EX0aplLrjCRpMTkKjALG0v zOZeUv4mnXvfUkhXrH6CxCXx+PV6t5LHKIPjV/CuUsaUQMnuyC3AaO2Ea+NOpWoe 5RqChytGDraHQOwOauJVpt7U3v++A2kwc/0QQzoSAvsVzUDHwpWD8knoiK9NTfsV s59QCw== -----END CERTIFICATE-----Generated at Sun Dec 14 03:40:02 2025 by rpki-client