This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kaZViyz6mXFl3mWNuhCrrnB0Tts.roa File: kaZViyz6mXFl3mWNuhCrrnB0Tts.roa (raw, json) Hash identifier: x3QC4onjgBcBy5SmVwS3EYNK9SC0GuKXTrJhvLB/vYo= Subject key identifier: 91:A6:55:8B:2C:FA:99:71:65:DE:65:8D:BA:10:AB:AE:70:74:4E:DB Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B06CEC04BBED6A5C230CD999344E9FBA4 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kaZViyz6mXFl3mWNuhCrrnB0Tts.roa Signing time: Wed 10 Dec 2025 05:49:31 +0000 ROA not before: Wed 10 Dec 2025 05:49:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29802 IP address blocks: 37.202.194.0/24 maxlen: 24 151.241.207.0/24 maxlen: 24 151.243.7.0/24 maxlen: 24 151.243.228.0/24 maxlen: 24 151.243.231.0/24 maxlen: 24 151.244.54.0/24 maxlen: 24 151.244.167.0/24 maxlen: 24 151.244.180.0/24 maxlen: 24 151.244.224.0/24 maxlen: 24 151.244.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:06:ce:c0:4b:be:d6:a5:c2:30:cd:99:93:44:e9:fb:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 10 05:49:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=91a6558b2cfa997165de658dba10abae70744edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ae:ab:94:91:4d:a4:e4:55:31:ba:80:39:b8: 6e:e1:e8:08:fa:1c:03:f2:f7:75:1d:66:46:dc:9a: 1f:0d:f1:31:e5:05:7d:8d:6c:26:eb:66:58:bd:a8: 23:1d:15:e4:b0:ff:e5:ca:c8:b7:ab:d2:5b:6d:b6: 58:b1:5a:ad:5b:16:90:40:60:d3:ff:2d:a1:44:b7: a6:bc:7a:ba:e0:33:a5:98:48:57:a9:d2:cc:30:fc: 85:d5:b3:d0:af:d2:55:1f:a7:23:d8:16:a5:4f:cf: d3:21:c8:1a:30:ec:34:5b:fe:d3:f8:15:38:a0:6a: 8a:a9:2f:e5:85:b9:b5:0e:c8:b7:29:74:84:38:f7: 68:8a:a1:f1:a8:67:0e:f9:36:6e:a2:98:29:99:7e: 9c:1b:b2:96:05:1d:80:d6:4b:42:07:de:d3:9a:20: b1:49:f6:14:09:38:25:aa:c2:13:58:5b:a7:89:42: 25:d1:9c:68:67:98:8c:61:84:6e:80:bc:cf:e3:bc: d6:be:65:79:bc:3a:2d:04:d1:85:5d:82:45:4d:b2: 9b:56:26:30:31:50:8f:77:62:94:d9:33:2c:52:06: c3:fe:f4:0e:66:2b:25:04:7d:61:e8:42:d1:4d:61: 3c:ff:83:72:e6:6e:1c:a1:6f:75:d2:fd:eb:0f:22: a4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A6:55:8B:2C:FA:99:71:65:DE:65:8D:BA:10:AB:AE:70:74:4E:DB X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kaZViyz6mXFl3mWNuhCrrnB0Tts.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.194.0/24 151.241.207.0/24 151.243.7.0/24 151.243.228.0/24 151.243.231.0/24 151.244.54.0/24 151.244.167.0/24 151.244.180.0/24 151.244.224.0/24 151.244.235.0/24 Signature Algorithm: sha256WithRSAEncryption 59:d2:6a:3c:62:5b:c2:c5:b2:e8:70:81:7c:72:9f:9a:8d:45: d5:92:2d:05:7c:80:91:55:70:a7:e0:87:c2:3a:ce:7f:c6:8a: bc:09:9b:60:35:66:f5:c2:17:b2:0f:73:18:dd:18:23:5e:0d: de:10:b2:55:38:8b:32:ae:c2:5c:e2:c7:d7:41:51:b0:c3:4f: 62:f2:00:17:17:7a:0c:53:a9:ba:b8:90:35:36:ab:7b:b8:e1: c2:d9:cc:c1:99:ca:ab:9c:1a:d8:04:23:2c:07:9a:1e:c7:c5: 5e:c0:b5:98:83:a8:f7:e1:fa:63:68:e5:cb:ea:c1:40:15:1c: 49:14:c8:2d:c4:54:a3:cd:9a:6c:9e:26:7c:1b:ed:5c:cc:e5: e5:f0:e0:1f:74:f6:d0:9d:3c:ad:4b:a4:88:dd:9b:8d:b1:7d: 6d:ed:7b:02:c5:33:d1:84:91:1f:a7:70:e7:aa:21:4e:38:69: 51:7c:e0:6f:4d:4e:ba:18:11:ec:47:2a:47:b6:3f:1b:28:d1: 5f:99:f2:3f:7c:3b:f0:b4:8a:f6:54:9a:bd:51:de:34:30:0f: a1:15:bf:bb:96:ba:29:b2:a8:d4:0b:21:80:85:98:1e:56:f1: d2:39:e7:96:3c:4f:c5:37:46:fc:0b:78:b3:02:f8:3d:c3:ad: 8c:e8:6d:83 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZsGzsBLvtalwjDNmZNE6fukMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjEwMDU0OTMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWE2NTU4YjJjZmE5OTcxNjVkZTY1OGRiYTEwYWJhZTcwNzQ0ZWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1a6rlJFNpORVMbqAObhu4egI+hwD 8vd1HWZG3JofDfEx5QV9jWwm62ZYvagjHRXksP/lysi3q9JbbbZYsVqtWxaQQGDT /y2hRLemvHq64DOlmEhXqdLMMPyF1bPQr9JVH6cj2BalT8/TIcgaMOw0W/7T+BU4 oGqKqS/lhbm1Dsi3KXSEOPdoiqHxqGcO+TZuopgpmX6cG7KWBR2A1ktCB97TmiCx SfYUCTglqsITWFuniUIl0ZxoZ5iMYYRugLzP47zWvmV5vDotBNGFXYJFTbKbViYw MVCPd2KU2TMsUgbD/vQOZislBH1h6ELRTWE8/4Ny5m4coW910v3rDyKktwIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFJGmVYss+plxZd5ljboQq65wdE7bMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEva2FaVml5ejZtWEZsM21XTnVoQ3JybkIwVHRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQAJcrCAwQA l/HPAwQAl/MHAwQAl/PkAwQAl/PnAwQAl/Q2AwQAl/SnAwQAl/S0AwQAl/TgAwQA l/TrMA0GCSqGSIb3DQEBCwUAA4IBAQBZ0mo8YlvCxbLocIF8cp+ajUXVki0FfICR VXCn4IfCOs5/xoq8CZtgNWb1wheyD3MY3RgjXg3eELJVOIsyrsJc4sfXQVGww09i 8gAXF3oMU6m6uJA1Nqt7uOHC2czBmcqrnBrYBCMsB5oex8VewLWYg6j34fpjaOXL 6sFAFRxJFMgtxFSjzZpsniZ8G+1czOXl8OAfdPbQnTytS6SI3ZuNsX1t7XsCxTPR hJEfp3DnqiFOOGlRfOBvTU66GBHsRypHtj8bKNFfmfI/fDvwtIr2VJq9Ud40MA+h Fb+7lropsqjUCyGAhZgeVvHSOeeWPE/FN0b8C3izAvg9w62M6G2D -----END CERTIFICATE-----Generated at Tue Dec 16 04:03:18 2025 by rpki-client