This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hO6IuZzWBsb6sqkgDAEK_JmMxuo.roa File: hO6IuZzWBsb6sqkgDAEK_JmMxuo.roa (raw, json) Hash identifier: SLcAn7SLtMpSOVa6/OXDor5IsrQAuHtFIEeRv5ap5RM= Subject key identifier: 84:EE:88:B9:9C:D6:06:C6:FA:B2:A9:20:0C:01:0A:FC:99:8C:C6:EA Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AA64ED8E27EF49C9337C802F8911B2786 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hO6IuZzWBsb6sqkgDAEK_JmMxuo.roa Signing time: Fri 21 Nov 2025 12:06:16 +0000 ROA not before: Fri 21 Nov 2025 12:06:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199058 IP address blocks: 151.241.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:4e:d8:e2:7e:f4:9c:93:37:c8:02:f8:91:1b:27:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 21 12:06:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=84ee88b99cd606c6fab2a9200c010afc998cc6ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4d:0c:4f:9f:aa:46:7d:40:2c:cb:72:31:b5: eb:1b:83:f5:aa:75:a2:e0:cc:f4:8a:db:ef:22:b5: c2:b1:6c:37:9c:d6:19:62:7d:1b:49:40:fc:d8:a0: 99:f8:72:6d:15:2e:22:e6:27:74:de:cd:90:07:58: e3:11:4b:a4:76:b5:af:39:19:07:9c:56:69:d1:be: 62:19:5d:84:1a:b6:08:b6:4a:fe:9e:ad:df:35:18: 3c:d6:0c:f0:1a:f2:ac:61:fc:32:97:f4:d0:60:63: 4a:94:14:5d:8c:6a:ea:36:ae:2c:b5:9c:1e:24:54: 75:7b:f6:70:92:62:71:0f:ec:65:8f:87:93:8d:d2: 4d:ac:15:54:62:e3:7b:d0:17:ef:05:63:b7:08:34: 34:ed:4c:ac:ad:a8:97:e1:99:a6:85:91:6d:31:4f: 0d:ae:fc:49:bb:f4:ed:c7:91:bf:ba:4f:72:2b:c1: 9e:56:a9:a7:62:48:87:08:48:f8:52:22:30:cf:90: c0:7b:7c:86:08:2b:7a:24:a3:e9:f6:02:a6:74:82: d0:53:8a:55:ac:60:ec:6d:9a:ae:f1:bc:3b:49:69: 2f:da:ac:c5:ff:9e:ce:08:17:a1:cb:7a:a9:ae:d6: 8b:53:50:06:8d:b5:d1:b6:6b:d3:3e:05:ee:b1:90: 04:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:EE:88:B9:9C:D6:06:C6:FA:B2:A9:20:0C:01:0A:FC:99:8C:C6:EA X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hO6IuZzWBsb6sqkgDAEK_JmMxuo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.173.0/24 Signature Algorithm: sha256WithRSAEncryption 64:49:bd:2c:f9:dd:b1:b2:40:ca:ba:0e:e9:01:b0:06:99:be: 0d:1a:98:c5:c4:22:c0:da:d6:d2:29:fa:79:a8:78:8b:cb:e2: da:9f:75:33:41:fb:7f:76:c5:3a:58:ea:2b:23:a4:6e:e9:85: 31:18:0e:06:64:77:ef:4c:94:06:d2:cf:eb:2f:3e:02:ba:2e: 54:17:9f:16:01:ff:e9:04:a9:cf:ae:98:a1:ac:b0:b7:3e:a6: 3a:4f:e9:26:9f:f4:18:7b:66:51:a6:12:f5:3a:93:89:ca:81: 0a:fd:12:77:38:92:9d:6a:04:39:56:19:b5:9e:56:a5:50:47: 02:96:b1:a7:7f:6a:6c:63:24:dc:bf:49:b1:93:1b:11:41:85: b8:40:8e:5a:b7:94:43:33:7d:b8:63:c7:24:8f:4a:83:73:b2: a3:c5:2b:5b:73:0a:b0:05:09:c5:b0:aa:90:96:67:44:88:c5: 9f:d4:15:db:48:31:e2:fa:b4:ac:fb:93:e3:42:e2:03:c5:8d: ec:ea:8d:84:56:e3:be:02:f3:8b:6c:dc:d2:08:71:17:36:44: 55:bc:6b:e0:8a:9c:7a:08:82:8d:a9:82:2c:f0:d0:38:37:07: c0:28:dc:b8:f7:20:68:a0:db:62:38:c5:3a:b2:bc:fe:ca:17: 3f:fe:c1:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqmTtjifvSckzfIAviRGyeGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTIxMTIwNjE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGVlODhiOTljZDYwNmM2ZmFiMmE5MjAwYzAxMGFmYzk5OGNjNmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt00MT5+qRn1ALMtyMbXrG4P1qnWi 4Mz0itvvIrXCsWw3nNYZYn0bSUD82KCZ+HJtFS4i5id03s2QB1jjEUukdrWvORkH nFZp0b5iGV2EGrYItkr+nq3fNRg81gzwGvKsYfwyl/TQYGNKlBRdjGrqNq4stZwe JFR1e/ZwkmJxD+xlj4eTjdJNrBVUYuN70BfvBWO3CDQ07UysraiX4ZmmhZFtMU8N rvxJu/Ttx5G/uk9yK8GeVqmnYkiHCEj4UiIwz5DAe3yGCCt6JKPp9gKmdILQU4pV rGDsbZqu8bw7SWkv2qzF/57OCBehy3qprtaLU1AGjbXRtmvTPgXusZAELQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFITuiLmc1gbG+rKpIAwBCvyZjMbqMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvaE82SXVaeldCc2I2c3FrZ0RBRUtfSm1NeHVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/GtMA0G CSqGSIb3DQEBCwUAA4IBAQBkSb0s+d2xskDKug7pAbAGmb4NGpjFxCLA2tbSKfp5 qHiLy+Lan3UzQft/dsU6WOorI6Ru6YUxGA4GZHfvTJQG0s/rLz4Cui5UF58WAf/p BKnPrpihrLC3PqY6T+kmn/QYe2ZRphL1OpOJyoEK/RJ3OJKdagQ5Vhm1nlalUEcC lrGnf2psYyTcv0mxkxsRQYW4QI5at5RDM324Y8ckj0qDc7KjxStbcwqwBQnFsKqQ lmdEiMWf1BXbSDHi+rSs+5PjQuIDxY3s6o2EVuO+AvOLbNzSCHEXNkRVvGvgipx6 CIKNqYIs8NA4NwfAKNy49yBooNtiOMU6srz+yhc//sGS -----END CERTIFICATE-----Generated at Wed Dec 3 09:42:32 2025 by rpki-client