This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hMEo0UICNfyVOZgTgEfLDk6lJSs.roa File: hMEo0UICNfyVOZgTgEfLDk6lJSs.roa (raw, json) Hash identifier: ThLj0priZdstKuMxoolkoAg9WS7xXL+abNsxKK+ErFs= Subject key identifier: 84:C1:28:D1:42:02:35:FC:95:39:98:13:80:47:CB:0E:4E:A5:25:2B Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A95B9E03CFF1C14E0506CAFB4BB36AD16 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hMEo0UICNfyVOZgTgEfLDk6lJSs.roa Signing time: Tue 18 Nov 2025 06:49:38 +0000 ROA not before: Tue 18 Nov 2025 06:49:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 49581 IP address blocks: 151.243.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:95:b9:e0:3c:ff:1c:14:e0:50:6c:af:b4:bb:36:ad:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 18 06:49:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=84c128d1420235fc953998138047cb0e4ea5252b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:db:f7:d6:e4:95:98:47:7d:9a:b2:1a:74:86: 49:d7:4a:8a:fe:00:6e:2b:e3:2f:2f:d6:16:f1:40: da:84:09:e3:cc:23:4b:80:56:fe:cd:6a:75:4c:ce: 34:ea:cc:a1:0f:b6:1c:1a:9e:b3:78:2d:e9:02:34: 6f:8f:1f:3c:a1:ca:00:d6:fe:ec:36:62:65:96:ae: a8:b5:7a:29:ad:a5:f0:eb:84:da:4b:b4:43:e9:66: e0:91:d3:85:af:15:c4:e3:19:10:40:23:7c:28:c6: 9b:65:da:35:50:28:db:8a:c8:a1:0b:d8:17:98:03: 2d:88:d0:a7:e9:1a:93:d1:f7:78:5b:3a:02:aa:d9: d0:75:46:9a:28:e0:d8:bd:fd:4c:23:96:72:9c:63: 64:d7:9b:23:f4:d0:95:ae:ec:f8:fe:d0:6a:06:af: 82:1a:0b:2c:16:02:6d:ed:f8:05:70:c4:25:7d:69: 94:65:d3:05:02:81:d8:f9:04:8f:85:af:02:7b:5c: 53:fd:2f:56:c4:95:dc:e1:a4:e2:7f:3d:0c:b7:de: 9a:62:58:07:3f:94:4c:e0:51:b3:25:a0:b3:f8:41: c9:03:a1:29:ec:11:a9:0d:17:95:57:a4:cd:77:c6: 8d:60:d6:cf:08:46:a9:98:c9:1b:ba:ed:17:81:70: 33:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:C1:28:D1:42:02:35:FC:95:39:98:13:80:47:CB:0E:4E:A5:25:2B X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hMEo0UICNfyVOZgTgEfLDk6lJSs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.212.0/24 Signature Algorithm: sha256WithRSAEncryption 22:66:3e:18:44:d3:36:98:ba:7d:0c:a6:4f:8c:76:77:df:e2: 17:6a:fd:e1:3c:60:77:47:1f:14:47:32:68:2f:0b:5d:bf:fc: 1c:1b:7f:1e:53:bf:c5:8d:bd:05:83:b9:ed:08:7f:d6:a0:b3: 20:65:27:30:eb:4e:2e:4f:9c:f5:03:88:9c:e6:c5:73:3a:08: ae:1c:7e:6c:9f:d1:4e:57:03:3e:86:6e:90:d8:c8:7c:1c:12: eb:4b:c1:14:66:0c:40:3f:96:a0:25:18:44:cb:d5:24:04:b1: b2:6a:7f:ea:62:b9:4b:3a:f7:1b:bc:8d:e4:6c:da:e4:3d:eb: f7:30:2c:c3:12:62:00:b9:4d:98:31:39:7b:2c:fc:1f:c3:be: e6:4f:ea:34:40:32:77:f1:35:d4:b4:3e:02:4e:a3:74:01:c4: 82:7a:bf:a9:4c:90:17:c8:98:72:f3:21:15:3c:0b:98:09:fd: bd:b2:86:53:c0:6c:0d:0b:ac:d7:5b:f8:d4:25:f9:be:7d:67: ce:9c:15:0e:d8:0d:79:b0:4f:33:da:06:8e:36:f4:84:11:37: 1a:bf:71:01:cd:ba:9a:b0:6c:12:2c:70:dd:57:75:57:e5:0d: b5:b1:0e:e9:56:e9:5d:ed:47:07:ee:23:6f:c2:86:c7:2e:d3: fe:39:b3:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqVueA8/xwU4FBsr7S7Nq0WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTE4MDY0OTM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGMxMjhkMTQyMDIzNWZjOTUzOTk4MTM4MDQ3Y2IwZTRlYTUyNTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdv31uSVmEd9mrIadIZJ10qK/gBu K+MvL9YW8UDahAnjzCNLgFb+zWp1TM406syhD7YcGp6zeC3pAjRvjx88ocoA1v7s NmJllq6otXopraXw64TaS7RD6WbgkdOFrxXE4xkQQCN8KMabZdo1UCjbisihC9gX mAMtiNCn6RqT0fd4WzoCqtnQdUaaKODYvf1MI5ZynGNk15sj9NCVruz4/tBqBq+C GgssFgJt7fgFcMQlfWmUZdMFAoHY+QSPha8Ce1xT/S9WxJXc4aTifz0Mt96aYlgH P5RM4FGzJaCz+EHJA6Ep7BGpDReVV6TNd8aNYNbPCEapmMkbuu0XgXAz+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFITBKNFCAjX8lTmYE4BHyw5OpSUrMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvaE1FbzBVSUNOZnlWT1pnVGdFZkxEazZsSlNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/PUMA0G CSqGSIb3DQEBCwUAA4IBAQAiZj4YRNM2mLp9DKZPjHZ33+IXav3hPGB3Rx8URzJo Lwtdv/wcG38eU7/Fjb0Fg7ntCH/WoLMgZScw604uT5z1A4ic5sVzOgiuHH5sn9FO VwM+hm6Q2Mh8HBLrS8EUZgxAP5agJRhEy9UkBLGyan/qYrlLOvcbvI3kbNrkPev3 MCzDEmIAuU2YMTl7LPwfw77mT+o0QDJ38TXUtD4CTqN0AcSCer+pTJAXyJhy8yEV PAuYCf29soZTwGwNC6zXW/jUJfm+fWfOnBUO2A15sE8z2gaONvSEETcav3EBzbqa sGwSLHDdV3VX5Q21sQ7pVuld7UcH7iNvwobHLtP+ObMi -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:55 2025 by rpki-client