This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jb5Xg-n_sWLGhIthHBOpzR-3gsk.roa File: jb5Xg-n_sWLGhIthHBOpzR-3gsk.roa (raw, json) Hash identifier: Hhwsd3DnBlFxBs+RBJtDNSEq/gC3dkLC1ghwW6M8xzw= Subject key identifier: 8D:BE:57:83:E9:FF:B1:62:C6:84:8B:61:1C:13:A9:CD:1F:B7:82:C9 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A67E738CEE49E56394AA975246A21665F Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jb5Xg-n_sWLGhIthHBOpzR-3gsk.roa Signing time: Sun 09 Nov 2025 09:16:37 +0000 ROA not before: Sun 09 Nov 2025 09:16:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 398465 IP address blocks: 151.242.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 21:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:67:e7:38:ce:e4:9e:56:39:4a:a9:75:24:6a:21:66:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 9 09:16:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8dbe5783e9ffb162c6848b611c13a9cd1fb782c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:82:ad:bb:39:03:16:00:c7:ce:89:6f:de:05: bf:3b:be:5d:f4:eb:8c:d2:28:4f:d8:cc:64:7e:15: 44:92:65:c2:37:77:91:ef:b4:6a:23:33:95:d7:81: 28:a2:ee:94:80:1f:dc:87:d3:fa:f8:cb:e0:12:fa: 6b:11:d1:41:36:ee:22:ea:cf:73:ff:f2:22:f2:01: bf:88:19:2d:ab:f0:bb:22:5e:61:87:d0:cd:15:f6: ae:39:3f:a0:33:32:88:cf:23:28:9a:2d:d9:b5:a8: 49:81:a5:36:67:f4:7a:41:29:0f:15:ad:7d:84:ec: 7b:5b:9a:39:2d:44:9e:57:12:42:58:85:f7:d2:18: 66:ff:70:33:fa:83:62:dc:4b:4d:9b:63:31:bb:3d: c0:cb:27:86:7e:b3:44:e6:98:55:f7:62:a3:72:84: e0:a6:9f:02:0f:50:12:b8:76:5a:36:38:22:3a:22: 42:1e:95:ed:80:d4:31:23:8e:12:b9:a4:d5:3e:6d: df:68:d8:14:7d:1b:ec:af:26:78:f4:7c:19:2b:93: 94:d8:d5:9b:75:28:2d:75:82:09:50:11:18:1d:5d: 8e:6d:5a:95:6b:dd:97:d1:d5:09:3b:73:76:d4:6a: d9:61:c4:13:2a:68:4f:db:28:60:be:c5:24:56:8a: 1a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:BE:57:83:E9:FF:B1:62:C6:84:8B:61:1C:13:A9:CD:1F:B7:82:C9 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jb5Xg-n_sWLGhIthHBOpzR-3gsk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.6.0/24 Signature Algorithm: sha256WithRSAEncryption 39:a9:ea:1c:35:57:6b:e2:f1:b1:cd:f4:6e:8e:09:10:9b:61: 51:ae:9a:88:84:b7:45:76:ef:5e:31:5a:55:a8:8a:79:46:29: 44:7f:b5:74:1e:42:60:c5:1d:ac:03:10:37:9c:f6:48:7d:00: 6a:3a:1c:79:d5:61:cc:d8:c6:07:31:25:af:b0:b6:75:21:61: 14:5e:95:b1:7a:71:f9:c6:c6:f6:5c:a2:d7:68:b7:79:2d:34: c5:0a:14:bf:8b:29:64:65:12:4a:4b:7b:0d:e0:e9:9c:20:90: 31:ab:26:e5:6c:19:55:a4:99:67:f8:c7:4e:26:d0:36:cd:ed: 9b:84:43:b6:cb:22:0d:23:16:a4:e5:a9:c6:33:cd:db:8d:5b: ab:69:7c:09:b1:55:05:a0:05:10:38:eb:9c:06:b1:3e:b7:86: 7e:d3:d0:90:50:5c:2b:4a:67:ca:07:5d:92:e3:05:db:89:f3: e8:45:31:78:be:90:8b:13:ef:ae:20:55:85:f6:76:9c:e2:03: 48:2f:05:5b:03:c1:35:33:74:38:2f:27:0a:a0:f1:72:44:18: c6:99:3a:7d:c0:24:d8:77:fd:14:de:5a:4d:8d:8f:db:0d:68: 9f:38:de:50:3d:e7:c3:40:ac:81:0e:7b:21:6c:e2:9e:6a:c9: cb:32:86:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpn5zjO5J5WOUqpdSRqIWZfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTA5MDkxNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZGJlNTc4M2U5ZmZiMTYyYzY4NDhiNjExYzEzYTljZDFmYjc4MmM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYKtuzkDFgDHzolv3gW/O75d9OuM 0ihP2MxkfhVEkmXCN3eR77RqIzOV14Eoou6UgB/ch9P6+MvgEvprEdFBNu4i6s9z //Ii8gG/iBktq/C7Il5hh9DNFfauOT+gMzKIzyMomi3ZtahJgaU2Z/R6QSkPFa19 hOx7W5o5LUSeVxJCWIX30hhm/3Az+oNi3EtNm2Mxuz3AyyeGfrNE5phV92KjcoTg pp8CD1ASuHZaNjgiOiJCHpXtgNQxI44SuaTVPm3faNgUfRvsryZ49HwZK5OU2NWb dSgtdYIJUBEYHV2ObVqVa92X0dUJO3N21GrZYcQTKmhP2yhgvsUkVooajQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI2+V4Pp/7FixoSLYRwTqc0ft4LJMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvamI1WGctbl9zV0xHaEl0aEhCT3B6Ui0zZ3NrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/IGMA0G CSqGSIb3DQEBCwUAA4IBAQA5qeocNVdr4vGxzfRujgkQm2FRrpqIhLdFdu9eMVpV qIp5RilEf7V0HkJgxR2sAxA3nPZIfQBqOhx51WHM2MYHMSWvsLZ1IWEUXpWxenH5 xsb2XKLXaLd5LTTFChS/iylkZRJKS3sN4OmcIJAxqyblbBlVpJln+MdOJtA2ze2b hEO2yyINIxak5anGM83bjVuraXwJsVUFoAUQOOucBrE+t4Z+09CQUFwrSmfKB12S 4wXbifPoRTF4vpCLE++uIFWF9nac4gNILwVbA8E1M3Q4LycKoPFyRBjGmTp9wCTY d/0U3lpNjY/bDWifON5QPefDQKyBDnshbOKeasnLMoYc -----END CERTIFICATE-----Generated at Sun Nov 23 05:21:06 2025 by rpki-client