This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oP5xIh84D3ojKQqLpRqjjfpTgRM.roa File: oP5xIh84D3ojKQqLpRqjjfpTgRM.roa (raw, json) Hash identifier: p4TOkwqWt680U0+J7QyzVHaMIFz8sTiHtFKY/pcN9a8= Subject key identifier: A0:FE:71:22:1F:38:0F:7A:23:29:0A:8B:A5:1A:A3:8D:FA:53:81:13 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AE559BC218CE99BF14986C21779A4CC56 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oP5xIh84D3ojKQqLpRqjjfpTgRM.roa Signing time: Wed 03 Dec 2025 17:54:14 +0000 ROA not before: Wed 03 Dec 2025 17:54:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215304 IP address blocks: 151.241.128.0/22 maxlen: 24 151.243.44.0/24 maxlen: 24 151.243.115.0/24 maxlen: 24 151.244.128.0/24 maxlen: 24 151.244.130.0/24 maxlen: 24 151.244.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e5:59:bc:21:8c:e9:9b:f1:49:86:c2:17:79:a4:cc:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 3 17:54:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a0fe71221f380f7a23290a8ba51aa38dfa538113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:98:ee:50:a1:e1:75:7e:97:12:e1:7b:9e:30: 87:dd:b3:48:67:bc:e9:03:65:61:63:36:e6:48:5b: c4:f8:a4:41:36:cb:be:d3:f2:de:fd:f9:16:b5:5f: 33:98:21:9b:66:3b:1f:5f:74:0d:26:f7:d1:16:2d: 04:c2:9a:73:a8:96:73:68:29:a0:66:43:4a:86:7c: 1c:90:87:d1:84:c0:2f:00:a8:2d:77:e1:f7:6b:74: b2:5b:a4:18:37:c3:93:fe:46:68:b0:c3:2f:7b:fc: 6b:a2:8d:a3:26:54:82:04:3a:db:82:ed:f3:3f:e9: 21:3f:86:c1:9b:6a:33:8b:be:3c:3d:90:f9:3a:b2: 86:1a:9f:2a:d0:ed:1b:09:09:02:7f:c0:6e:fb:91: d9:83:3a:8e:b8:c7:e0:b9:2b:65:b6:53:83:4e:87: a6:93:35:f8:5e:39:35:c7:0e:d7:fc:04:a0:95:be: f2:ea:9e:b0:c9:54:8a:2c:b9:c7:dc:41:fc:b1:7c: 6f:0e:b0:c6:17:f8:d1:5f:9d:d2:93:2a:39:37:aa: 9e:c8:83:a7:5c:79:78:18:ab:28:5c:b8:45:53:47: 7e:32:64:58:41:bd:d5:e1:01:75:84:0e:98:c0:2d: 74:ab:32:ff:92:70:b3:1d:0f:0d:8d:5c:b6:99:e0: 52:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:FE:71:22:1F:38:0F:7A:23:29:0A:8B:A5:1A:A3:8D:FA:53:81:13 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oP5xIh84D3ojKQqLpRqjjfpTgRM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.128.0/22 151.243.44.0/24 151.243.115.0/24 151.244.128.0/24 151.244.130.0/24 151.244.236.0/24 Signature Algorithm: sha256WithRSAEncryption 44:a2:91:3c:13:13:26:6c:c7:7d:20:f3:e2:33:ee:f5:f5:6a: a9:01:74:cd:d2:17:9b:14:94:6f:f0:43:11:46:1e:05:1d:1b: 73:d1:98:94:a3:21:6d:3b:8d:ca:4d:dc:1a:d5:3b:6d:33:d8: c9:f9:2f:9e:7b:95:ca:8b:e1:cf:eb:37:17:af:73:69:ae:53: 77:b9:64:5f:98:44:3f:68:7d:ff:16:bb:b1:8e:5e:2e:db:49: 82:49:05:bc:ab:6c:af:ac:33:22:6c:15:ca:24:34:81:2b:a1: 87:23:ff:4e:76:96:c6:85:69:a7:a5:a6:8a:24:2b:5e:97:ab: 21:b0:19:36:2b:94:b1:99:25:18:6f:38:74:cb:45:4a:4a:c6: 20:3f:f1:ca:1a:de:da:d8:82:de:60:b8:78:62:6b:85:86:b0: 61:31:6d:ea:28:90:aa:9e:6e:2d:09:fd:b8:86:29:84:6e:87: 4b:5c:e9:f3:6d:5c:1b:33:93:20:90:ed:59:b6:41:56:f8:4d: 0d:2a:a1:7a:ee:85:7e:db:a5:7e:6f:7d:2c:5e:9d:fc:94:de: a5:1e:8f:8e:29:5d:13:e7:17:be:0c:2c:e6:41:3d:8b:a1:b7: cd:b7:75:90:b3:db:a0:a7:49:2d:21:0f:16:1e:08:be:f8:c4: 3d:3f:94:79 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZrlWbwhjOmb8UmGwhd5pMxWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjAzMTc1NDE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMGZlNzEyMjFmMzgwZjdhMjMyOTBhOGJhNTFhYTM4ZGZhNTM4MTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpjuUKHhdX6XEuF7njCH3bNIZ7zp A2VhYzbmSFvE+KRBNsu+0/Le/fkWtV8zmCGbZjsfX3QNJvfRFi0EwppzqJZzaCmg ZkNKhnwckIfRhMAvAKgtd+H3a3SyW6QYN8OT/kZosMMve/xroo2jJlSCBDrbgu3z P+khP4bBm2ozi748PZD5OrKGGp8q0O0bCQkCf8Bu+5HZgzqOuMfguStltlODToem kzX4Xjk1xw7X/ASglb7y6p6wyVSKLLnH3EH8sXxvDrDGF/jRX53Skyo5N6qeyIOn XHl4GKsoXLhFU0d+MmRYQb3V4QF1hA6YwC10qzL/knCzHQ8NjVy2meBS2QIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFKD+cSIfOA96IykKi6Uao436U4ETMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvb1A1eEloODREM29qS1FxTHBScWpqZnBUZ1JNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCl/GAAwQA l/MsAwQAl/NzAwQAl/SAAwQAl/SCAwQAl/TsMA0GCSqGSIb3DQEBCwUAA4IBAQBE opE8ExMmbMd9IPPiM+719WqpAXTN0hebFJRv8EMRRh4FHRtz0ZiUoyFtO43KTdwa 1TttM9jJ+S+ee5XKi+HP6zcXr3NprlN3uWRfmEQ/aH3/Fruxjl4u20mCSQW8q2yv rDMibBXKJDSBK6GHI/9OdpbGhWmnpaaKJCtel6shsBk2K5SxmSUYbzh0y0VKSsYg P/HKGt7a2ILeYLh4YmuFhrBhMW3qKJCqnm4tCf24himEbodLXOnzbVwbM5MgkO1Z tkFW+E0NKqF67oV+26V+b30sXp38lN6lHo+OKV0T5xe+DCzmQT2LobfNt3WQs9ug p0ktIQ8WHgi++MQ9P5R5 -----END CERTIFICATE-----Generated at Sat Dec 6 06:14:05 2025 by rpki-client