This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m8biGwooZCUp18GhwEpND7vaIpI.roa File: m8biGwooZCUp18GhwEpND7vaIpI.roa (raw, json) Hash identifier: RCQGIhHJdmDGpfJLeXnPOBd0eCX1pnTKEu9bx5KEyKA= Subject key identifier: 9B:C6:E2:1B:0A:28:64:25:29:D7:C1:A1:C0:4A:4D:0F:BB:DA:22:92 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019ACF3295DE7C75E8C4C8B339BF0E928ED5 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m8biGwooZCUp18GhwEpND7vaIpI.roa Signing time: Sat 29 Nov 2025 10:39:49 +0000 ROA not before: Sat 29 Nov 2025 10:39:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20326 IP address blocks: 151.241.65.0/24 maxlen: 24 151.241.178.0/24 maxlen: 24 151.241.208.0/22 maxlen: 22 151.243.21.0/24 maxlen: 24 151.243.52.0/23 maxlen: 24 151.243.244.0/24 maxlen: 24 151.244.2.0/24 maxlen: 24 151.244.136.0/22 maxlen: 24 151.244.160.0/22 maxlen: 24 151.244.171.0/24 maxlen: 24 151.244.172.0/22 maxlen: 24 151.244.176.0/22 maxlen: 24 151.245.8.0/21 maxlen: 24 151.245.168.0/21 maxlen: 21 151.247.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cf:32:95:de:7c:75:e8:c4:c8:b3:39:bf:0e:92:8e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 29 10:39:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9bc6e21b0a28642529d7c1a1c04a4d0fbbda2292 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fe:b8:30:ec:d3:95:8e:d8:c8:f3:4a:71:74: 27:1c:97:51:f1:48:eb:a1:41:fd:71:66:b1:02:b0: 68:4e:dd:8d:65:ed:a3:de:d7:79:cb:76:06:cd:0c: 54:7b:c5:22:60:b0:a9:96:94:08:22:10:d4:45:f0: 49:91:0d:7d:f9:60:51:d1:3b:6c:49:d1:ef:d7:94: eb:fe:78:77:99:8e:ba:56:91:fb:37:4b:ad:84:f1: a3:1d:c0:27:be:3b:c7:65:69:ad:58:4b:9b:04:1b: 22:51:00:41:da:f7:97:e1:67:df:11:c8:b9:5f:6e: d8:7b:7e:46:40:5c:07:ca:d6:a2:0e:17:cd:66:c2: d4:57:a6:65:98:84:fc:a5:89:2b:b2:a6:bd:66:05: 16:d2:e1:44:ca:29:32:37:ec:45:68:33:91:a2:c3: 37:48:3e:cc:aa:39:c4:0e:9c:0f:77:ec:46:41:0c: 67:d5:4a:1c:bb:cd:0c:4e:75:de:65:ff:0d:3e:56: 43:28:8b:59:ac:bd:55:04:72:eb:f8:65:08:2b:c8: 8a:f0:c3:2b:3e:ce:6e:da:30:74:73:aa:a7:17:55: 1a:87:d3:aa:a0:3e:0d:57:7f:8a:08:ee:6f:d7:4e: 7b:90:fc:13:9d:68:12:36:16:a6:65:a8:d6:7f:f8: 75:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:C6:E2:1B:0A:28:64:25:29:D7:C1:A1:C0:4A:4D:0F:BB:DA:22:92 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m8biGwooZCUp18GhwEpND7vaIpI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.65.0/24 151.241.178.0/24 151.241.208.0/22 151.243.21.0/24 151.243.52.0/23 151.243.244.0/24 151.244.2.0/24 151.244.136.0/22 151.244.160.0/22 151.244.171.0-151.244.179.255 151.245.8.0/21 151.245.168.0/21 151.247.132.0/24 Signature Algorithm: sha256WithRSAEncryption 50:87:87:91:2b:6f:c7:c8:1f:08:b1:19:9c:48:b8:a5:0c:b1: 4e:70:5d:55:34:7b:03:67:d1:9d:29:34:8d:92:4c:e4:ed:bb: e8:f5:42:49:a5:d5:9e:09:45:c0:7d:a3:14:31:c9:e6:43:8c: 59:de:ff:58:1f:53:17:3b:1d:c2:9b:14:fd:90:bb:74:40:3e: 26:dc:ee:51:27:c8:27:fa:0e:9b:d7:eb:e5:80:33:2f:25:f9: eb:6e:fe:46:c6:00:1c:52:9a:04:ba:d3:6c:85:f3:95:60:e5: fd:f6:d5:9d:ac:74:a6:4b:ad:06:b6:d5:b0:40:85:6a:32:bc: 0d:ac:5b:ae:64:99:26:6c:bf:4f:97:d8:06:18:7d:52:80:a0: 49:4a:11:04:03:fa:2d:00:84:2b:d0:a8:29:8a:8c:b3:5c:fd: 95:6d:98:0d:cc:cf:46:bd:83:eb:ff:95:a6:72:ee:06:4b:fa: b1:11:1e:b4:0a:29:b8:0f:d1:cb:40:60:13:13:c8:d1:15:09: 27:c0:98:8c:af:44:7e:16:df:71:bc:44:e1:c0:e4:43:01:ce: 22:f9:65:47:be:a4:31:c1:55:e0:24:d6:a2:66:fd:14:58:58: f2:11:7a:8c:ee:89:e8:2b:63:69:35:2c:e9:12:6b:67:15:9e: 60:7d:c3:70 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgISAZrPMpXefHXoxMizOb8Oko7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTI5MTAzOTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YmM2ZTIxYjBhMjg2NDI1MjlkN2MxYTFjMDRhNGQwZmJiZGEyMjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP64MOzTlY7YyPNKcXQnHJdR8Ujr oUH9cWaxArBoTt2NZe2j3td5y3YGzQxUe8UiYLCplpQIIhDURfBJkQ19+WBR0Tts SdHv15Tr/nh3mY66VpH7N0uthPGjHcAnvjvHZWmtWEubBBsiUQBB2veX4WffEci5 X27Ye35GQFwHytaiDhfNZsLUV6ZlmIT8pYkrsqa9ZgUW0uFEyikyN+xFaDORosM3 SD7MqjnEDpwPd+xGQQxn1Uocu80MTnXeZf8NPlZDKItZrL1VBHLr+GUIK8iK8MMr Ps5u2jB0c6qnF1Uah9OqoD4NV3+KCO5v1057kPwTnWgSNhamZajWf/h1qQIDAQAB o4ICWTCCAlUwHQYDVR0OBBYEFJvG4hsKKGQlKdfBocBKTQ+72iKSMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvbThiaUd3b29aQ1VwMThHaHdFcE5EN3ZhSXBJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQAl/FBAwQA l/GyAwQCl/HQAwQAl/MVAwQBl/M0AwQAl/P0AwQAl/QCAwQCl/SIAwQCl/SgMAwD BACX9KsDBAKX9LADBAOX9QgDBAOX9agDBACX94QwDQYJKoZIhvcNAQELBQADggEB AFCHh5Erb8fIHwixGZxIuKUMsU5wXVU0ewNn0Z0pNI2STOTtu+j1Qkml1Z4JRcB9 oxQxyeZDjFne/1gfUxc7HcKbFP2Qu3RAPibc7lEnyCf6DpvX6+WAMy8l+etu/kbG ABxSmgS602yF85Vg5f321Z2sdKZLrQa21bBAhWoyvA2sW65kmSZsv0+X2AYYfVKA oElKEQQD+i0AhCvQqCmKjLNc/ZVtmA3Mz0a9g+v/laZy7gZL+rERHrQKKbgP0ctA YBMTyNEVCSfAmIyvRH4W33G8ROHA5EMBziL5ZUe+pDHBVeAk1qJm/RRYWPIReozu iegrY2k1LOkSa2cVnmB9w3A= -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:57 2025 by rpki-client