This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gRpFNnRc6L8hQ9dnRU19NEqYIr0.roa File: gRpFNnRc6L8hQ9dnRU19NEqYIr0.roa (raw, json) Hash identifier: 35MS63XHoXqEq6IYa10hK6UeR6v/zwGYILrugnI4MIo= Subject key identifier: 81:1A:45:36:74:5C:E8:BF:21:43:D7:67:45:4D:7D:34:4A:98:22:BD Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A2414A67F0311131998E776D4BB8695A0 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gRpFNnRc6L8hQ9dnRU19NEqYIr0.roa Signing time: Mon 27 Oct 2025 05:12:04 +0000 ROA not before: Mon 27 Oct 2025 05:12:04 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 198825 IP address blocks: 151.242.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:24:14:a6:7f:03:11:13:19:98:e7:76:d4:bb:86:95:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Oct 27 05:12:04 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=811a4536745ce8bf2143d767454d7d344a9822bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d2:64:0e:2d:e3:30:93:e2:32:4d:ba:a0:4b: 5f:4a:5f:bc:da:e3:d4:34:df:d2:73:a7:c8:a9:b9: b9:7e:0f:23:21:94:69:ce:91:9d:d0:bf:f9:10:98: a7:0c:2f:20:fe:a6:37:fc:7e:6c:2c:6a:97:b9:b2: 18:25:40:38:c9:73:b0:e0:db:37:9a:2c:b7:d1:f6: 5c:16:ff:e5:ed:bd:23:68:4b:23:ff:37:36:06:f4: 40:e9:1c:21:1d:93:ba:38:f1:46:5e:76:7d:9d:fd: 1b:ca:87:39:b8:2f:1c:f0:24:54:78:8d:04:74:e2: e1:66:d9:c4:0f:fd:14:9e:2d:2e:fa:a2:42:69:1a: 31:7f:c7:0f:48:75:a6:55:dc:88:02:15:bb:bd:e0: 19:f7:ae:e3:fc:bb:6d:c1:49:a5:ba:07:73:5c:ec: 3c:3e:41:13:8e:ad:51:e2:44:bf:8e:80:24:53:6b: 0c:e1:07:99:45:ed:46:23:1c:d2:5c:bf:10:9b:6b: c2:7e:f1:ed:ed:71:94:b1:3a:ba:cc:e0:bf:ec:df: dc:12:2c:2f:96:1e:62:48:5b:b1:0a:40:81:fc:d8: 5e:e0:9e:4b:7a:ce:47:8d:f8:54:8d:2d:70:12:3a: d0:64:c7:f1:96:58:d4:66:b4:5e:1a:e9:1c:54:12: 22:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:1A:45:36:74:5C:E8:BF:21:43:D7:67:45:4D:7D:34:4A:98:22:BD X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gRpFNnRc6L8hQ9dnRU19NEqYIr0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.39.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:cf:20:89:d8:ef:6c:c5:e0:59:9b:92:51:e6:8b:bf:60:4c: 25:b9:e7:99:f2:96:c7:42:76:55:d7:65:1c:fd:76:73:9b:96: 93:2c:d0:8c:c4:6b:ed:8d:eb:94:35:60:bf:07:28:6e:5f:83: 26:e6:d9:7a:a9:07:fd:9a:94:01:a2:dd:51:c8:49:63:0e:82: dc:b0:42:63:09:64:a2:8e:2f:13:98:b7:87:b6:1d:62:2b:46: 37:5f:c8:88:a2:0b:57:99:b8:eb:85:fa:62:ec:cc:ff:e8:08: 0c:70:ed:68:c9:d1:05:f5:a8:81:4b:6b:94:8a:7c:85:c2:a5: 66:6a:97:a4:f9:91:03:62:90:da:66:d5:b6:22:3a:aa:2c:03: 09:63:40:48:97:d4:f5:ff:09:68:31:b0:ea:6f:18:84:38:11: 0d:bc:cd:99:ee:45:99:7d:e5:6a:81:2e:4e:7b:03:50:b0:a0: c9:75:b3:52:1f:7b:70:97:e8:1c:a2:ea:f6:22:86:76:b1:85: eb:80:2f:ed:90:ae:3b:4a:f9:cd:a5:e1:d4:a0:5c:a4:c8:06: 2f:3a:c9:32:04:6b:ad:59:13:27:f0:4d:4a:f7:ff:a9:ff:6d: 66:c9:9f:50:fd:91:9c:a1:6d:e3:c7:8c:4b:61:dc:77:c7:1f: 11:bb:cc:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZokFKZ/AxETGZjndtS7hpWgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMDI3MDUxMjA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTFhNDUzNjc0NWNlOGJmMjE0M2Q3Njc0NTRkN2QzNDRhOTgyMmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tJkDi3jMJPiMk26oEtfSl+82uPU NN/Sc6fIqbm5fg8jIZRpzpGd0L/5EJinDC8g/qY3/H5sLGqXubIYJUA4yXOw4Ns3 miy30fZcFv/l7b0jaEsj/zc2BvRA6RwhHZO6OPFGXnZ9nf0byoc5uC8c8CRUeI0E dOLhZtnED/0Uni0u+qJCaRoxf8cPSHWmVdyIAhW7veAZ967j/LttwUmlugdzXOw8 PkETjq1R4kS/joAkU2sM4QeZRe1GIxzSXL8Qm2vCfvHt7XGUsTq6zOC/7N/cEiwv lh5iSFuxCkCB/Nhe4J5Les5HjfhUjS1wEjrQZMfxlljUZrReGukcVBIibQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIEaRTZ0XOi/IUPXZ0VNfTRKmCK9MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvZ1JwRk5uUmM2TDhoUTlkblJVMTlORXFZSXIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/InMA0G CSqGSIb3DQEBCwUAA4IBAQBrzyCJ2O9sxeBZm5JR5ou/YEwlueeZ8pbHQnZV12Uc /XZzm5aTLNCMxGvtjeuUNWC/ByhuX4Mm5tl6qQf9mpQBot1RyEljDoLcsEJjCWSi ji8TmLeHth1iK0Y3X8iIogtXmbjrhfpi7Mz/6AgMcO1oydEF9aiBS2uUinyFwqVm apek+ZEDYpDaZtW2IjqqLAMJY0BIl9T1/wloMbDqbxiEOBENvM2Z7kWZfeVqgS5O ewNQsKDJdbNSH3twl+gcour2IoZ2sYXrgC/tkK47SvnNpeHUoFykyAYvOskyBGut WRMn8E1K9/+p/21myZ9Q/ZGcoW3jx4xLYdx3xx8Ru8zx -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:07 2025 by rpki-client