This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lt8Mls3FCm7zpZVi3NgzKNA4BAA.roa File: lt8Mls3FCm7zpZVi3NgzKNA4BAA.roa (raw, json) Hash identifier: WXHg0MYCUeIPMdrSWYgpCBG1ykeCvvRi0duKIYOpbiw= Subject key identifier: 96:DF:0C:96:CD:C5:0A:6E:F3:A5:95:62:DC:D8:33:28:D0:38:04:00 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A860EF48E08D5D098CD3610F82BC8120B Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lt8Mls3FCm7zpZVi3NgzKNA4BAA.roa Signing time: Sat 15 Nov 2025 05:48:38 +0000 ROA not before: Sat 15 Nov 2025 05:48:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 32132 IP address blocks: 151.241.170.0/24 maxlen: 24 151.241.172.0/24 maxlen: 24 151.241.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:86:0e:f4:8e:08:d5:d0:98:cd:36:10:f8:2b:c8:12:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 15 05:48:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=96df0c96cdc50a6ef3a59562dcd83328d0380400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3e:8c:bc:a3:ac:d3:58:61:14:85:ab:13:52: f9:85:b9:91:24:69:68:61:0a:0f:ef:79:38:c8:b1: 36:e2:1e:df:46:97:12:f7:28:8a:c0:83:db:23:f4: 97:ab:78:5d:92:b2:eb:a2:5e:40:c4:11:21:fc:d4: 83:87:9c:11:d2:7a:93:2f:b0:69:87:2b:f5:66:dc: 22:ac:6c:66:61:47:64:f6:1a:53:d7:15:ea:35:89: 0f:95:6b:93:e0:22:24:5c:bb:1e:f2:42:07:44:e5: 81:ce:89:f2:48:1c:5d:5c:f2:0e:34:5f:4f:d4:27: b0:66:68:aa:9d:36:a6:46:84:d1:cb:32:04:4d:1c: 59:50:a7:f0:79:94:e7:cd:77:38:9e:b2:99:b6:c3: 14:1e:d5:73:ed:09:68:19:2d:8b:c0:cb:94:4e:5e: 65:48:d4:64:e1:b6:66:bf:72:dc:0b:e7:8e:91:41: 4e:e1:50:4c:e2:9e:e4:21:e7:87:14:74:2d:17:21: 58:0a:25:2c:3d:a2:24:04:0b:91:3d:a2:05:90:23: 1e:d7:1f:3b:b3:51:8a:fb:fe:9b:f9:9b:fd:03:57: d6:17:32:ea:7b:4f:d6:4c:69:8b:cf:d5:72:e0:57: e7:7e:01:f5:59:29:c0:1a:13:d6:e5:d9:3d:ee:85: 11:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:DF:0C:96:CD:C5:0A:6E:F3:A5:95:62:DC:D8:33:28:D0:38:04:00 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lt8Mls3FCm7zpZVi3NgzKNA4BAA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.170.0/24 151.241.172.0/24 151.241.175.0/24 Signature Algorithm: sha256WithRSAEncryption 66:a5:38:ea:b5:a5:f4:c1:e0:f1:14:3c:bd:46:72:fb:8e:84: fa:67:d9:27:96:fb:cc:e3:58:49:5e:22:be:fe:14:30:16:24: 59:b6:53:77:80:7e:3c:1b:14:eb:c0:83:9e:44:8a:c9:42:33: bd:aa:ca:e0:89:aa:bc:74:71:98:87:bc:e8:73:96:9a:8d:2d: 57:ee:f8:92:ae:ad:16:27:01:53:72:80:4f:6a:ff:de:57:6f: d5:ea:8b:20:8d:e6:d2:97:77:a1:53:8f:21:9e:8b:0c:e5:d3: 39:e7:0f:a6:55:83:cd:a0:6b:26:18:cb:85:90:5a:0f:98:ef: 92:e8:60:5f:22:d0:a5:17:42:2c:46:c9:9c:c6:1d:48:da:82: 48:56:ce:eb:03:84:84:08:19:76:f4:c6:97:4e:c9:08:7f:48: bb:e3:39:e6:a1:f8:36:b2:7d:22:91:89:7d:2c:38:b0:6c:aa: 28:f9:f5:38:07:72:ec:8a:bd:c4:91:e2:ef:43:e6:d6:df:ec: b0:9b:cd:8f:c0:a4:ed:70:86:2d:4e:48:e4:c2:78:93:d8:1f: 4a:89:af:e2:26:64:43:f8:7a:ce:be:0d:1c:6a:c2:59:3b:13: d3:36:37:a4:40:3f:02:bd:ad:5d:e2:af:dc:05:33:0c:63:c7: 15:2e:04:07 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqGDvSOCNXQmM02EPgryBILMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTE1MDU0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NmRmMGM5NmNkYzUwYTZlZjNhNTk1NjJkY2Q4MzMyOGQwMzgwNDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6D6MvKOs01hhFIWrE1L5hbmRJGlo YQoP73k4yLE24h7fRpcS9yiKwIPbI/SXq3hdkrLrol5AxBEh/NSDh5wR0nqTL7Bp hyv1ZtwirGxmYUdk9hpT1xXqNYkPlWuT4CIkXLse8kIHROWBzonySBxdXPIONF9P 1CewZmiqnTamRoTRyzIETRxZUKfweZTnzXc4nrKZtsMUHtVz7QloGS2LwMuUTl5l SNRk4bZmv3LcC+eOkUFO4VBM4p7kIeeHFHQtFyFYCiUsPaIkBAuRPaIFkCMe1x87 s1GK+/6b+Zv9A1fWFzLqe0/WTGmLz9Vy4FfnfgH1WSnAGhPW5dk97oUROQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJbfDJbNxQpu86WVYtzYMyjQOAQAMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvbHQ4TWxzM0ZDbTd6cFpWaTNOZ3pLTkE0QkFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/GqAwQA l/GsAwQAl/GvMA0GCSqGSIb3DQEBCwUAA4IBAQBmpTjqtaX0weDxFDy9RnL7joT6 Z9knlvvM41hJXiK+/hQwFiRZtlN3gH48GxTrwIOeRIrJQjO9qsrgiaq8dHGYh7zo c5aajS1X7viSrq0WJwFTcoBPav/eV2/V6osgjebSl3ehU48hnosM5dM55w+mVYPN oGsmGMuFkFoPmO+S6GBfItClF0IsRsmcxh1I2oJIVs7rA4SECBl29MaXTskIf0i7 4znmofg2sn0ikYl9LDiwbKoo+fU4B3Lsir3EkeLvQ+bW3+ywm82PwKTtcIYtTkjk wniT2B9Kia/iJmRD+HrOvg0casJZOxPTNjekQD8Cva1d4q/cBTMMY8cVLgQH -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:03 2025 by rpki-client