This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/knA7L-bI8S6JFO8G_j6sSq9ghlI.roa File: knA7L-bI8S6JFO8G_j6sSq9ghlI.roa (raw, json) Hash identifier: x9S9Em4WnNW0CKPOZ7ddaHOPDAUZb/5ysqzPHzAbVGo= Subject key identifier: 92:70:3B:2F:E6:C8:F1:2E:89:14:EF:06:FE:3E:AC:4A:AF:60:86:52 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019ADA07B6E8418D5690DE76440625E538C2 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/knA7L-bI8S6JFO8G_j6sSq9ghlI.roa Signing time: Mon 01 Dec 2025 13:08:49 +0000 ROA not before: Mon 01 Dec 2025 13:08:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 401776 IP address blocks: 151.241.137.0/24 maxlen: 24 151.243.189.0/24 maxlen: 24 151.243.191.0/24 maxlen: 24 151.244.109.0/24 maxlen: 24 151.245.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:da:07:b6:e8:41:8d:56:90:de:76:44:06:25:e5:38:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 1 13:08:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=92703b2fe6c8f12e8914ef06fe3eac4aaf608652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7a:e2:86:3c:14:dc:9c:8c:2a:08:d9:36:62: fd:07:7a:1e:f9:ee:9e:51:1f:b5:cc:48:42:17:fd: 90:a5:dc:ae:a1:39:64:96:2b:50:8f:bf:4b:2b:8d: fc:81:e9:0f:5a:a3:e0:1c:17:5a:86:b3:7f:5a:63: 3c:79:c1:09:d0:70:81:d4:83:9f:d3:5f:c6:16:a6: 64:6b:a6:8e:1b:cb:e0:fd:79:25:9a:1d:88:51:45: c2:0c:d7:79:18:11:2d:da:f1:38:be:2e:83:74:42: 2c:7d:28:dc:08:0d:69:5e:17:2f:54:a7:49:8b:c1: 73:be:f5:42:5f:0c:18:ac:74:59:58:31:3b:b1:ec: cb:d9:18:b2:ff:f1:83:b7:a3:38:3c:1a:9c:dc:eb: 43:e5:3d:03:0c:92:68:b0:5f:86:27:29:dc:eb:6e: 70:90:16:dd:62:e8:cd:06:d4:70:79:e5:a8:71:46: 26:7b:89:fb:60:3e:62:95:20:34:91:10:1f:d3:56: 5e:e8:ae:37:da:d7:96:78:95:3c:fa:20:bd:4f:2b: 44:20:74:06:c4:28:25:1e:64:0c:f6:c2:1f:36:c1: a0:de:58:d7:89:59:a5:9b:bf:2e:ed:99:90:51:cd: 1f:10:4a:cd:b3:0d:e2:d0:18:07:ba:cb:51:e9:d1: 73:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:70:3B:2F:E6:C8:F1:2E:89:14:EF:06:FE:3E:AC:4A:AF:60:86:52 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/knA7L-bI8S6JFO8G_j6sSq9ghlI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.137.0/24 151.243.189.0/24 151.243.191.0/24 151.244.109.0/24 151.245.221.0/24 Signature Algorithm: sha256WithRSAEncryption 69:8d:8e:4c:11:14:7b:5e:bf:7c:cb:d1:24:17:98:93:4f:6c: cb:e3:d8:ee:98:c6:af:3b:23:f8:80:20:c2:f9:6b:40:a3:02: d8:e2:70:5b:0d:07:63:e9:84:ce:ca:9b:5f:0c:97:cc:b8:a5: 32:ef:79:68:c1:d8:85:b1:92:a8:73:bf:80:53:13:71:b7:88: 05:15:23:da:4c:af:a8:e3:e4:1e:1c:a7:00:03:60:ba:80:b9: ac:4b:c2:39:32:ce:59:ce:a6:f3:42:69:3e:26:f6:ce:7c:5b: e5:89:c8:b5:5e:06:1c:9a:d5:2b:f9:94:14:10:00:5b:17:7a: 52:21:55:fa:fc:e7:eb:1c:ed:73:0d:b1:6e:1f:2e:17:68:33: 9d:a1:99:f1:ac:80:c9:88:75:12:05:d5:73:b3:84:b6:89:39: 63:7c:68:e0:fb:0d:6a:e1:5f:2a:18:c6:86:1d:71:2b:16:87: 55:8b:74:6a:6f:3d:08:47:ae:06:c6:ab:f7:64:00:72:ba:c2: 77:6b:e9:24:be:22:c1:31:8a:5b:31:da:a5:1a:06:cc:a2:c9: 6d:b0:3d:53:aa:23:ab:35:83:56:27:e4:77:1e:f2:20:5b:a3: 47:12:53:e4:3a:11:be:17:08:b6:23:f9:d7:4a:41:c4:a9:0b: e9:b5:c8:ba -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZraB7boQY1WkN52RAYl5TjCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjAxMTMwODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MjcwM2IyZmU2YzhmMTJlODkxNGVmMDZmZTNlYWM0YWFmNjA4NjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XrihjwU3JyMKgjZNmL9B3oe+e6e UR+1zEhCF/2QpdyuoTlklitQj79LK438gekPWqPgHBdahrN/WmM8ecEJ0HCB1IOf 01/GFqZka6aOG8vg/Xklmh2IUUXCDNd5GBEt2vE4vi6DdEIsfSjcCA1pXhcvVKdJ i8FzvvVCXwwYrHRZWDE7sezL2Riy//GDt6M4PBqc3OtD5T0DDJJosF+GJync625w kBbdYujNBtRweeWocUYme4n7YD5ilSA0kRAf01Ze6K432teWeJU8+iC9TytEIHQG xCglHmQM9sIfNsGg3ljXiVmlm78u7ZmQUc0fEErNsw3i0BgHustR6dFzGQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFJJwOy/myPEuiRTvBv4+rEqvYIZSMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEva25BN0wtYkk4UzZKRk84R19qNnNTcTlnaGxJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAl/GJAwQA l/O9AwQAl/O/AwQAl/RtAwQAl/XdMA0GCSqGSIb3DQEBCwUAA4IBAQBpjY5MERR7 Xr98y9EkF5iTT2zL49jumMavOyP4gCDC+WtAowLY4nBbDQdj6YTOyptfDJfMuKUy 73lowdiFsZKoc7+AUxNxt4gFFSPaTK+o4+QeHKcAA2C6gLmsS8I5Ms5ZzqbzQmk+ JvbOfFvlici1XgYcmtUr+ZQUEABbF3pSIVX6/OfrHO1zDbFuHy4XaDOdoZnxrIDJ iHUSBdVzs4S2iTljfGjg+w1q4V8qGMaGHXErFodVi3Rqbz0IR64Gxqv3ZAByusJ3 a+kkviLBMYpbMdqlGgbMosltsD1TqiOrNYNWJ+R3HvIgW6NHElPkOhG+Fwi2I/nX SkHEqQvptci6 -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:56 2025 by rpki-client