This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kdT41hGsom_x_qGT1JchPg5bXm8.roa File: kdT41hGsom_x_qGT1JchPg5bXm8.roa (raw, json) Hash identifier: wcWN/XJlZQhNL7hM537UBt4fTbOpKgedIjbLR8L9Cdk= Subject key identifier: 91:D4:F8:D6:11:AC:A2:6F:F1:FE:A1:93:D4:97:21:3E:0E:5B:5E:6F Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A3DCE07A6B6D544234FB74BCB5D4965C1 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kdT41hGsom_x_qGT1JchPg5bXm8.roa Signing time: Sat 01 Nov 2025 05:05:03 +0000 ROA not before: Sat 01 Nov 2025 05:05:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 46475 IP address blocks: 151.243.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:3d:ce:07:a6:b6:d5:44:23:4f:b7:4b:cb:5d:49:65:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 1 05:05:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=91d4f8d611aca26ff1fea193d497213e0e5b5e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e3:69:c0:3d:01:30:19:ea:45:4b:ef:fb:ca: 2e:20:41:13:b8:ca:00:fc:ec:b0:70:75:33:43:18: e0:92:8a:f5:cf:34:07:c1:fe:bb:91:90:bf:10:24: a9:c4:e5:95:1e:51:d2:ee:b3:15:e1:3a:96:77:81: 49:1c:a4:94:29:47:1a:37:c2:8c:2b:74:9f:eb:1b: 6a:01:ad:85:b3:22:95:4b:36:a7:fc:29:62:f7:72: 48:51:ea:79:17:22:d8:79:96:95:b1:0a:86:66:20: 4b:cc:7e:69:0d:78:75:09:35:5b:a5:34:53:6f:51: 20:4f:ca:b3:b9:0b:1c:fa:9d:0f:6d:4f:28:0d:9e: c9:70:54:6e:dc:5a:69:1c:7a:1c:b9:c0:aa:7b:ad: 8a:65:96:3a:9b:ac:62:e3:16:11:86:9b:19:2f:34: 11:f0:23:45:9f:8c:33:fb:12:6b:14:10:56:d7:64: ea:62:63:97:33:8e:59:f1:cc:a9:fa:7a:fc:6b:b7: 59:9a:44:cb:66:8f:62:c9:cc:ef:81:04:e5:d9:9e: 31:fb:7c:3f:ba:e7:53:c8:af:23:cc:d4:c1:1f:da: a6:60:ad:93:b4:a8:85:2e:c1:06:d1:a1:71:e7:93: 01:94:29:6f:3c:c3:93:dd:f7:56:f4:d1:13:8d:38: a0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D4:F8:D6:11:AC:A2:6F:F1:FE:A1:93:D4:97:21:3E:0E:5B:5E:6F X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kdT41hGsom_x_qGT1JchPg5bXm8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.116.0/24 Signature Algorithm: sha256WithRSAEncryption 38:a3:77:aa:7b:22:d9:84:f4:00:87:d2:07:c2:75:44:5f:fa: 3c:7d:15:79:9e:f9:86:99:d0:d8:62:1c:5b:7e:8d:60:4d:2a: 73:4d:36:6d:90:04:3e:f7:df:87:87:a4:9a:58:e7:c7:71:c5: 9c:4e:8a:b1:1d:b7:0f:7b:4b:58:86:6e:d5:c2:ee:e8:25:79: b3:b5:3a:4a:a5:c8:42:04:2e:61:57:e7:df:2d:4c:10:ac:c7: 0a:d4:a7:e4:34:14:c6:95:b5:3e:c6:2f:27:5a:dc:6f:ef:7d: 90:e0:3b:43:76:b0:0a:c9:33:fe:1f:f0:8d:00:10:30:b2:f9: 87:81:04:ff:ed:ce:6a:3d:5a:f2:d0:d7:c3:36:fa:c5:ab:45: c7:cc:b0:6a:5e:c4:e2:a1:6b:88:35:ff:2b:f1:53:97:c0:08: 58:73:f8:87:81:4a:4c:8e:5d:a7:00:72:af:09:b1:48:6c:cd: 74:6b:cf:31:5e:6f:0e:68:1b:c8:b5:92:0d:e5:8c:ff:1a:b6: 87:88:40:68:f0:91:87:30:54:e1:e8:1f:ce:f9:15:d6:b7:9c: a7:96:b2:8e:10:0a:e2:ed:78:ea:f3:dd:23:b4:68:75:d6:dc: 3f:00:ac:09:19:7c:2e:46:59:15:29:f0:d6:3b:dd:5e:a5:0d: da:3f:e7:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZo9zgemttVEI0+3S8tdSWXBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTAxMDUwNTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MWQ0ZjhkNjExYWNhMjZmZjFmZWExOTNkNDk3MjEzZTBlNWI1ZTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+NpwD0BMBnqRUvv+8ouIEETuMoA /OywcHUzQxjgkor1zzQHwf67kZC/ECSpxOWVHlHS7rMV4TqWd4FJHKSUKUcaN8KM K3Sf6xtqAa2FsyKVSzan/Cli93JIUep5FyLYeZaVsQqGZiBLzH5pDXh1CTVbpTRT b1EgT8qzuQsc+p0PbU8oDZ7JcFRu3FppHHocucCqe62KZZY6m6xi4xYRhpsZLzQR 8CNFn4wz+xJrFBBW12TqYmOXM45Z8cyp+nr8a7dZmkTLZo9iyczvgQTl2Z4x+3w/ uudTyK8jzNTBH9qmYK2TtKiFLsEG0aFx55MBlClvPMOT3fdW9NETjTigeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJHU+NYRrKJv8f6hk9SXIT4OW15vMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEva2RUNDFoR3NvbV94X3FHVDFKY2hQZzViWG04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/N0MA0G CSqGSIb3DQEBCwUAA4IBAQA4o3eqeyLZhPQAh9IHwnVEX/o8fRV5nvmGmdDYYhxb fo1gTSpzTTZtkAQ+99+Hh6SaWOfHccWcToqxHbcPe0tYhm7Vwu7oJXmztTpKpchC BC5hV+ffLUwQrMcK1KfkNBTGlbU+xi8nWtxv732Q4DtDdrAKyTP+H/CNABAwsvmH gQT/7c5qPVry0NfDNvrFq0XHzLBqXsTioWuINf8r8VOXwAhYc/iHgUpMjl2nAHKv CbFIbM10a88xXm8OaBvItZIN5Yz/GraHiEBo8JGHMFTh6B/O+RXWt5ynlrKOEAri 7Xjq890jtGh11tw/AKwJGXwuRlkVKfDWO91epQ3aP+cX -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:57 2025 by rpki-client