This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lqdPNkkO5gEFDTcKLSAl0U5fQ_k.roa File: lqdPNkkO5gEFDTcKLSAl0U5fQ_k.roa (raw, json) Hash identifier: KZBgIAR6WD7Q/KDitLDtNCBjxs+h8WlkgjZZ8dJW3nI= Subject key identifier: 96:A7:4F:36:49:0E:E6:01:05:0D:37:0A:2D:20:25:D1:4E:5F:43:F9 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AE559BAF8A6B9B21355480655FE6461A9 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lqdPNkkO5gEFDTcKLSAl0U5fQ_k.roa Signing time: Wed 03 Dec 2025 17:54:14 +0000 ROA not before: Wed 03 Dec 2025 17:54:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214654 IP address blocks: 151.244.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e5:59:ba:f8:a6:b9:b2:13:55:48:06:55:fe:64:61:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 3 17:54:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=96a74f36490ee601050d370a2d2025d14e5f43f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:21:37:0d:20:7b:d6:34:c8:9d:ba:bf:5e:31: bf:44:f3:33:fb:fa:2a:e9:4a:3f:b8:05:6a:8f:65: 14:18:be:40:42:51:dc:e1:4d:68:81:a6:54:7b:4d: ed:04:5b:69:a7:e0:42:f5:d3:34:ab:8b:6f:62:57: 42:b9:5c:a3:51:12:0b:91:8d:b4:35:ee:2f:eb:31: 46:2f:8d:fa:20:c3:c7:15:9b:ef:45:07:a4:8d:96: bc:fb:d0:5a:7d:1b:f7:ca:55:d5:64:c4:87:64:e9: 0a:23:f7:05:25:5f:84:8c:bf:f7:5b:1d:03:3e:2a: eb:03:06:6b:b0:b7:21:31:0e:8a:92:ea:7c:63:46: c7:4c:d9:13:d1:15:79:7f:a8:d6:d6:c2:14:6e:5f: 61:f6:4e:df:f2:ee:b5:93:4d:4e:0a:ce:2a:cc:b6: 66:ef:f9:56:79:4e:4f:7b:35:53:81:9d:fa:60:68: 4e:8d:ec:d8:40:02:a3:80:52:b6:aa:b5:7b:cf:22: b3:5a:b3:cd:a5:d6:5a:11:5b:df:96:57:d0:de:51: b1:d4:ba:a0:0d:f5:7e:05:e8:50:a6:26:8a:93:06: 4b:bd:a0:90:c9:34:75:f3:08:b3:eb:12:a9:96:95: c4:84:8c:e2:55:d9:d2:f3:7b:d8:db:20:e1:7d:d2: c0:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A7:4F:36:49:0E:E6:01:05:0D:37:0A:2D:20:25:D1:4E:5F:43:F9 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lqdPNkkO5gEFDTcKLSAl0U5fQ_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.236.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:31:10:77:43:cc:2a:23:ca:89:7b:10:27:de:f4:ab:22:5f: 9b:f2:b1:1b:8b:66:25:42:e0:f1:b1:8b:c3:13:b1:41:29:51: 42:5a:81:05:d9:ea:b8:b0:27:34:07:5c:e9:73:ff:f3:d7:48: 91:69:2a:11:0d:85:5d:16:de:5e:04:50:9a:d1:b1:e6:ce:09: eb:bc:54:7a:81:63:de:d0:c4:aa:c3:f4:17:ae:58:07:de:93: ca:d5:ce:d7:a2:72:c4:7c:a9:1d:36:c3:ab:43:15:1b:57:d4: 0b:3e:ee:65:8d:93:5c:bd:d2:9b:58:e3:d4:1c:c5:72:13:3e: 85:e9:ca:0b:d9:e7:5d:2b:aa:be:73:f3:bc:df:73:46:45:49: 29:24:ba:75:67:24:6e:63:d6:c5:0a:66:31:08:8f:83:5e:ae: ae:d6:6e:e3:21:b0:bc:d6:f5:45:50:c1:47:67:ee:76:b5:1f: 49:2c:37:94:b8:a2:bf:32:a4:74:b8:05:77:d4:a3:8e:6d:d5: f5:db:5e:40:b5:bc:b4:a1:b5:ec:ea:18:76:6a:8c:df:9a:71: 26:a9:f2:ef:1a:3d:a5:8d:6e:79:83:77:99:51:b5:7d:7d:fa: 82:cf:36:ce:c0:66:d6:ab:b1:92:57:98:51:af:0a:47:f6:d6: 5e:7d:30:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrlWbr4prmyE1VIBlX+ZGGpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjAzMTc1NDE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmE3NGYzNjQ5MGVlNjAxMDUwZDM3MGEyZDIwMjVkMTRlNWY0M2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yE3DSB71jTInbq/XjG/RPMz+/oq 6Uo/uAVqj2UUGL5AQlHc4U1ogaZUe03tBFtpp+BC9dM0q4tvYldCuVyjURILkY20 Ne4v6zFGL436IMPHFZvvRQekjZa8+9BafRv3ylXVZMSHZOkKI/cFJV+EjL/3Wx0D PirrAwZrsLchMQ6Kkup8Y0bHTNkT0RV5f6jW1sIUbl9h9k7f8u61k01OCs4qzLZm 7/lWeU5PezVTgZ36YGhOjezYQAKjgFK2qrV7zyKzWrPNpdZaEVvfllfQ3lGx1Lqg DfV+BehQpiaKkwZLvaCQyTR18wiz6xKplpXEhIziVdnS83vY2yDhfdLA1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJanTzZJDuYBBQ03Ci0gJdFOX0P5MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvbHFkUE5ra081Z0VGRFRjS0xTQWwwVTVmUV9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/TsMA0G CSqGSIb3DQEBCwUAA4IBAQBNMRB3Q8wqI8qJexAn3vSrIl+b8rEbi2YlQuDxsYvD E7FBKVFCWoEF2eq4sCc0B1zpc//z10iRaSoRDYVdFt5eBFCa0bHmzgnrvFR6gWPe 0MSqw/QXrlgH3pPK1c7XonLEfKkdNsOrQxUbV9QLPu5ljZNcvdKbWOPUHMVyEz6F 6coL2eddK6q+c/O833NGRUkpJLp1ZyRuY9bFCmYxCI+DXq6u1m7jIbC81vVFUMFH Z+52tR9JLDeUuKK/MqR0uAV31KOObdX1215Atby0obXs6hh2aozfmnEmqfLvGj2l jW55g3eZUbV9ffqCzzbOwGbWq7GSV5hRrwpH9tZefTCt -----END CERTIFICATE-----Generated at Fri Dec 5 18:50:36 2025 by rpki-client