This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/h2kAn7cU31v_AeLjymHiM0lFgN4.roa File: h2kAn7cU31v_AeLjymHiM0lFgN4.roa (raw, json) Hash identifier: xMu3KZ3m0m6uelXZP3Vs42iRvJ++CK4DFcZDbzyuEPs= Subject key identifier: 87:69:00:9F:B7:14:DF:5B:FF:01:E2:E3:CA:61:E2:33:49:45:80:DE Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019ACF3297C07B7348B3B550E99B0BD8677D Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/h2kAn7cU31v_AeLjymHiM0lFgN4.roa Signing time: Sat 29 Nov 2025 10:39:50 +0000 ROA not before: Sat 29 Nov 2025 10:39:50 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 213690 IP address blocks: 151.245.94.0/24 maxlen: 24 151.245.113.0/24 maxlen: 24 151.245.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cf:32:97:c0:7b:73:48:b3:b5:50:e9:9b:0b:d8:67:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 29 10:39:50 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8769009fb714df5bff01e2e3ca61e233494580de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fa:49:f7:2d:b1:67:bc:7b:70:68:3e:ea:71: cd:bb:3c:d6:26:1b:05:16:c0:ff:04:d7:8c:99:ef: 9a:30:4b:b0:48:99:bf:08:bc:da:a8:1a:5d:a6:64: 4a:fd:1b:3a:c5:55:40:24:f1:56:7d:36:8e:b2:bf: 45:49:6d:b5:49:f4:40:e5:84:46:36:0d:6d:68:8e: f5:1f:ca:c4:24:4b:56:ae:c6:a3:67:60:5c:87:f3: e3:23:22:9d:30:e1:fe:29:41:9e:d5:63:bd:90:1c: 00:c0:13:9c:20:ce:7d:e3:80:48:ec:ec:f6:15:08: 9c:05:f5:07:50:ef:4e:80:9d:7b:96:be:24:7a:50: 7b:01:3b:30:76:33:6d:18:9c:30:87:8c:b1:65:39: b1:6e:e9:14:01:06:7d:f9:81:49:cf:b3:ac:a8:dd: 5e:0c:36:59:f4:25:f9:ce:84:db:04:e4:99:dc:24: bd:6f:32:9d:26:3c:5c:c3:6f:0d:e8:21:a1:e5:59: 52:e0:f4:86:85:a6:05:c8:e8:b5:27:c4:a4:20:92: 4f:e6:e4:5f:e3:72:6b:a6:12:51:ec:fe:21:49:c2: 82:b7:89:2c:cb:55:1c:8f:a3:f3:fe:2a:5b:bb:06: d5:4b:49:a0:d1:a0:24:25:9e:5c:a6:42:66:8b:de: 8b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:69:00:9F:B7:14:DF:5B:FF:01:E2:E3:CA:61:E2:33:49:45:80:DE X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/h2kAn7cU31v_AeLjymHiM0lFgN4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.245.94.0/24 151.245.113.0-151.245.114.255 Signature Algorithm: sha256WithRSAEncryption 13:f6:d2:1c:4e:e4:ad:80:73:a8:fb:1c:13:dd:05:0d:29:a1: 77:55:4d:11:b7:b1:3c:12:ee:c0:7e:bc:73:ec:0b:d9:a6:c6: d9:1b:ac:af:b0:f1:fa:96:fd:ee:ca:ab:a6:0f:70:89:95:8f: 28:df:f6:76:34:d2:a9:97:3f:97:c7:48:4f:2d:68:c8:4f:32: 2a:59:21:6e:b9:55:f6:52:9d:58:9e:c7:c1:ad:c3:30:9a:c1: 9f:28:9e:3c:58:d9:e1:bd:67:97:3d:26:5b:08:ec:c9:a0:7e: a1:33:4e:33:c5:c0:3e:b4:ec:3f:30:24:2c:1a:dd:97:8b:22: dd:78:b9:1e:fb:a1:24:ad:8c:1a:06:a1:da:19:94:81:ac:da: 41:e2:45:c0:8d:a8:f3:c2:34:34:f1:a7:5d:f1:00:57:0e:cf: dd:da:9e:2e:2b:34:c1:93:8e:ae:7c:60:4d:62:f3:03:17:4b: 64:cf:ad:3a:58:32:d3:b3:62:12:d3:b7:e9:d6:05:32:f4:d9: 1d:ef:0a:d1:4a:49:00:fc:e1:55:8c:b1:d8:fd:69:20:2b:10: ad:9d:45:cf:c6:1d:71:0c:a2:fa:38:9a:37:62:32:5d:de:24: c2:1b:e0:ea:ce:db:b9:d1:b7:00:00:96:27:85:06:91:4c:53: c2:49:9a:31 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZrPMpfAe3NIs7VQ6ZsL2Gd9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTI5MTAzOTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzY5MDA5ZmI3MTRkZjViZmYwMWUyZTNjYTYxZTIzMzQ5NDU4MGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/pJ9y2xZ7x7cGg+6nHNuzzWJhsF FsD/BNeMme+aMEuwSJm/CLzaqBpdpmRK/Rs6xVVAJPFWfTaOsr9FSW21SfRA5YRG Ng1taI71H8rEJEtWrsajZ2Bch/PjIyKdMOH+KUGe1WO9kBwAwBOcIM5944BI7Oz2 FQicBfUHUO9OgJ17lr4kelB7ATswdjNtGJwwh4yxZTmxbukUAQZ9+YFJz7OsqN1e DDZZ9CX5zoTbBOSZ3CS9bzKdJjxcw28N6CGh5VlS4PSGhaYFyOi1J8SkIJJP5uRf 43JrphJR7P4hScKCt4ksy1Ucj6Pz/ipbuwbVS0mg0aAkJZ5cpkJmi96LpQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFIdpAJ+3FN9b/wHi48ph4jNJRYDeMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvaDJrQW43Y1UzMXZfQWVManltSGlNMGxGZ040LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAl/VeMAwD BACX9XEDBACX9XIwDQYJKoZIhvcNAQELBQADggEBABP20hxO5K2Ac6j7HBPdBQ0p oXdVTRG3sTwS7sB+vHPsC9mmxtkbrK+w8fqW/e7Kq6YPcImVjyjf9nY00qmXP5fH SE8taMhPMipZIW65VfZSnViex8GtwzCawZ8onjxY2eG9Z5c9JlsI7MmgfqEzTjPF wD607D8wJCwa3ZeLIt14uR77oSStjBoGodoZlIGs2kHiRcCNqPPCNDTxp13xAFcO z93ani4rNMGTjq58YE1i8wMXS2TPrTpYMtOzYhLTt+nWBTL02R3vCtFKSQD84VWM sdj9aSArEK2dRc/GHXEMovo4mjdiMl3eJMIb4OrO27nRtwAAlieFBpFMU8JJmjE= -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:05 2025 by rpki-client