This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/omH2Xcw26QkA9rJShh0aqAi5gOM.roa File: omH2Xcw26QkA9rJShh0aqAi5gOM.roa (raw, json) Hash identifier: jkhhaMyvM3SS490JwQtXd8GgZ/ICwzibJMDWAzkI4MQ= Subject key identifier: A2:61:F6:5D:CC:36:E9:09:00:F6:B2:52:86:1D:1A:A8:08:B9:80:E3 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A539940D75C11155A6F398C5A9CD2F900 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/omH2Xcw26QkA9rJShh0aqAi5gOM.roa Signing time: Wed 05 Nov 2025 10:39:03 +0000 ROA not before: Wed 05 Nov 2025 10:39:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212384 IP address blocks: 151.240.167.0/24 maxlen: 24 151.240.175.0/24 maxlen: 24 151.241.4.0/24 maxlen: 24 151.242.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:99:40:d7:5c:11:15:5a:6f:39:8c:5a:9c:d2:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 5 10:39:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a261f65dcc36e90900f6b252861d1aa808b980e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4c:89:ee:50:3a:dd:76:10:dc:d6:ce:d7:81: 0b:52:1b:2c:12:9b:0e:8d:eb:20:60:fc:86:2e:ca: 52:71:d9:7a:ba:14:ba:65:66:d0:41:f6:50:42:bc: 31:4f:05:fd:0a:56:fc:a9:e1:71:72:87:d7:03:35: fb:ff:e5:fe:8a:db:64:87:62:c6:83:d2:1d:26:7a: 2e:c3:8e:94:2b:dd:d2:f1:85:f9:a0:5e:e6:db:ab: 2a:21:00:3d:77:05:82:38:48:cd:df:c8:34:db:36: 3d:52:94:ec:94:8e:da:0d:5d:ac:4f:10:ea:6c:a8: 99:2c:a9:33:60:0a:43:16:fb:c5:63:ac:a5:3f:a0: 35:d1:ae:00:7a:02:be:5a:92:7a:9a:c9:3c:d6:ed: f6:74:d2:38:54:25:d9:b0:1c:75:95:e3:81:2e:35: 9f:fb:9b:4b:30:24:85:c6:85:8e:f1:19:57:35:72: 70:d1:de:0d:d5:d2:24:20:d2:7b:3c:d6:f9:86:b5: 23:49:43:0a:72:b6:69:5d:fb:80:14:38:66:50:cb: 62:7b:d5:1d:4c:46:e7:fb:41:67:a4:fb:2e:fe:50: 32:17:81:26:97:17:e9:20:21:5f:0c:8d:fb:11:e5: c7:c2:36:67:84:53:05:49:b2:fd:3c:a4:c4:e3:e2: 48:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:61:F6:5D:CC:36:E9:09:00:F6:B2:52:86:1D:1A:A8:08:B9:80:E3 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/omH2Xcw26QkA9rJShh0aqAi5gOM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.167.0/24 151.240.175.0/24 151.241.4.0/24 151.242.138.0/24 Signature Algorithm: sha256WithRSAEncryption 38:e6:b0:38:44:86:5e:d2:fe:b3:a8:ea:98:fd:be:7f:fd:33: 4d:d9:fc:28:51:fc:b9:4a:33:80:d3:dd:2a:61:22:49:ff:02: e2:53:9e:e3:6c:e9:6a:76:8c:ef:d6:d9:ac:fe:3a:f7:21:6b: cb:17:6e:46:e0:b6:c5:37:a2:14:00:a7:ad:0c:76:df:4f:f9: fd:15:0c:5c:af:af:d3:0e:52:24:0d:f4:0c:b9:0f:25:56:66: ae:4f:42:31:ee:f6:68:be:f1:39:a6:15:52:77:2b:d9:ef:a0: 94:d1:4d:17:24:b9:9f:47:d4:72:91:b7:16:a3:f5:d6:f3:73: 2c:c4:b9:8f:00:c9:1a:86:c4:c3:5d:ef:19:6b:4c:40:a5:81: 21:9c:10:47:d1:0e:45:73:71:a2:ba:35:81:74:e0:e7:a7:d7: c6:c5:4c:4f:1a:ce:94:a3:a1:0e:bd:a2:69:ba:0d:30:16:1b: 30:5d:bb:c8:bc:e2:9a:97:52:d5:e7:00:6d:4c:3f:64:73:f8: d3:87:50:92:0c:b5:79:be:3e:ae:6d:b5:f3:9e:80:8d:ec:0d: a8:46:21:ac:94:aa:88:94:0d:5d:98:6c:38:a3:d7:82:bd:50: 4a:49:6c:96:6e:ee:36:c7:d1:2d:52:d1:c2:80:e6:ac:93:7b: 3c:df:e0:39 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZpTmUDXXBEVWm85jFqc0vkAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTA1MTAzOTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMjYxZjY1ZGNjMzZlOTA5MDBmNmIyNTI4NjFkMWFhODA4Yjk4MGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEyJ7lA63XYQ3NbO14ELUhssEpsO jesgYPyGLspScdl6uhS6ZWbQQfZQQrwxTwX9Clb8qeFxcofXAzX7/+X+ittkh2LG g9IdJnouw46UK93S8YX5oF7m26sqIQA9dwWCOEjN38g02zY9UpTslI7aDV2sTxDq bKiZLKkzYApDFvvFY6ylP6A10a4AegK+WpJ6msk81u32dNI4VCXZsBx1leOBLjWf +5tLMCSFxoWO8RlXNXJw0d4N1dIkINJ7PNb5hrUjSUMKcrZpXfuAFDhmUMtie9Ud TEbn+0FnpPsu/lAyF4EmlxfpICFfDI37EeXHwjZnhFMFSbL9PKTE4+JIgQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFKJh9l3MNukJAPayUoYdGqgIuYDjMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvb21IMlhjdzI2UWtBOXJKU2hoMGFxQWk1Z09NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/CnAwQA l/CvAwQAl/EEAwQAl/KKMA0GCSqGSIb3DQEBCwUAA4IBAQA45rA4RIZe0v6zqOqY /b5//TNN2fwoUfy5SjOA090qYSJJ/wLiU57jbOlqdozv1tms/jr3IWvLF25G4LbF N6IUAKetDHbfT/n9FQxcr6/TDlIkDfQMuQ8lVmauT0Ix7vZovvE5phVSdyvZ76CU 0U0XJLmfR9RykbcWo/XW83MsxLmPAMkahsTDXe8Za0xApYEhnBBH0Q5Fc3GiujWB dODnp9fGxUxPGs6Uo6EOvaJpug0wFhswXbvIvOKal1LV5wBtTD9kc/jTh1CSDLV5 vj6ubbXznoCN7A2oRiGslKqIlA1dmGw4o9eCvVBKSWyWbu42x9EtUtHCgOask3s8 3+A5 -----END CERTIFICATE-----Generated at Wed Dec 3 09:42:32 2025 by rpki-client