This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/paZtJ_EAmhYYxizWDauGaXF-eFk.roa File: paZtJ_EAmhYYxizWDauGaXF-eFk.roa (raw, json) Hash identifier: hFUcu2i+IbPei5ImR30qB0JVN++JFKg2PCc5RR21CXo= Subject key identifier: A5:A6:6D:27:F1:00:9A:16:18:C6:2C:D6:0D:AB:86:69:71:7E:78:59 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AE559B97BC3D5D6D0657482C4A324D4FB Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/paZtJ_EAmhYYxizWDauGaXF-eFk.roa Signing time: Wed 03 Dec 2025 17:54:13 +0000 ROA not before: Wed 03 Dec 2025 17:54:13 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 209854 IP address blocks: 151.240.11.0/24 maxlen: 24 151.240.32.0/24 maxlen: 24 151.240.33.0/24 maxlen: 24 151.240.34.0/24 maxlen: 24 151.240.35.0/24 maxlen: 24 151.240.36.0/24 maxlen: 24 151.240.37.0/24 maxlen: 24 151.240.38.0/24 maxlen: 24 151.240.39.0/24 maxlen: 24 151.240.40.0/24 maxlen: 24 151.240.41.0/24 maxlen: 24 151.240.42.0/24 maxlen: 24 151.240.88.0/24 maxlen: 24 151.240.89.0/24 maxlen: 24 151.240.90.0/24 maxlen: 24 151.240.204.0/24 maxlen: 24 151.240.254.0/24 maxlen: 24 151.241.6.0/24 maxlen: 24 151.244.36.0/24 maxlen: 24 151.244.55.0/24 maxlen: 24 151.244.60.0/24 maxlen: 24 151.244.107.0/24 maxlen: 24 151.244.127.0/24 maxlen: 24 151.245.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e5:59:b9:7b:c3:d5:d6:d0:65:74:82:c4:a3:24:d4:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 3 17:54:13 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=a5a66d27f1009a1618c62cd60dab8669717e7859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:54:32:b4:61:8c:1d:b7:84:0c:b2:f1:fc:5b: 9c:ac:b3:0d:c5:9a:55:60:6d:03:9f:d2:ca:e3:7c: 93:17:72:db:f9:a9:5c:29:8e:2e:8a:e5:7c:9b:ed: 10:6d:f9:e0:0c:4a:a3:33:ba:42:2a:54:94:e4:d4: 27:a1:0e:7c:5e:a6:3e:8c:cb:d2:5a:aa:1d:d7:99: be:8a:69:b5:c3:59:c1:75:08:8e:43:3a:60:5d:58: 18:b4:66:20:4f:9d:58:64:4d:7f:94:fd:f8:e3:8b: 15:36:9a:4a:e7:f3:9e:bf:bc:47:d6:81:22:97:92: c8:00:b4:b5:fc:5e:12:97:c1:15:e2:31:4b:6b:5f: 61:16:aa:5e:d3:5d:cc:ea:77:24:c1:b1:34:38:52: 3a:bb:66:cd:58:b2:ce:03:95:04:92:70:12:fd:fd: a8:8a:d7:6f:7a:23:81:47:76:cd:44:3b:72:63:b4: 7f:07:89:4a:0e:cc:82:ca:a0:51:c5:40:2f:60:c7: b5:7e:d2:6c:5c:73:97:6f:cf:4d:93:38:12:36:c0: f3:ac:fe:8a:15:2d:a4:41:c6:cf:26:20:99:4a:b0: 3f:97:ba:bb:48:b7:6d:2a:5f:1d:f3:ab:76:6c:4a: eb:b5:a7:24:f5:14:42:79:e6:9b:3f:84:75:fe:8b: 7e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A6:6D:27:F1:00:9A:16:18:C6:2C:D6:0D:AB:86:69:71:7E:78:59 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/paZtJ_EAmhYYxizWDauGaXF-eFk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.11.0/24 151.240.32.0-151.240.42.255 151.240.88.0-151.240.90.255 151.240.204.0/24 151.240.254.0/24 151.241.6.0/24 151.244.36.0/24 151.244.55.0/24 151.244.60.0/24 151.244.107.0/24 151.244.127.0/24 151.245.116.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:11:83:81:e4:59:50:68:c8:cf:6d:8d:0a:17:f8:d3:5f:c2: 6f:4a:7d:61:67:75:76:ea:13:bc:24:9f:92:de:8c:74:d8:07: 92:72:b1:b9:dd:c6:18:cc:02:ad:fb:2a:2c:39:40:7b:2f:d7: 54:e4:c3:67:58:13:c5:f3:45:df:58:77:25:46:d4:52:99:25: b7:1e:7b:d6:48:4d:c5:88:4f:a2:23:17:ca:fc:0e:b5:7b:58: d5:27:51:4c:4c:00:6d:b5:2e:e8:4c:db:2d:8a:23:87:03:97: 0a:0d:0a:db:25:59:bb:ba:ab:dc:b3:57:cf:b4:8d:d7:65:40: f7:37:52:61:59:fb:e0:61:ae:c9:e1:0c:42:31:0f:c6:1c:5b: a3:ed:7f:f9:82:2b:79:72:cb:82:62:27:ff:e3:5e:6b:19:6d: c1:55:54:10:b4:c7:0f:9a:25:9b:48:d7:31:4f:5e:5c:33:dc: fc:cb:c5:42:0d:f7:4d:66:cb:fb:c4:1a:1d:d7:85:2f:76:23: 03:34:5f:2c:4c:ce:08:75:57:60:b5:e5:fa:bc:6d:ef:9c:36: 6d:c8:b3:5d:7e:4d:9a:e4:20:54:e6:09:db:18:60:93:ed:95: 74:8a:28:b3:89:19:3b:0d:62:7f:84:b5:68:43:98:96:9c:88: 2b:0c:a6:fa -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgISAZrlWbl7w9XW0GV0gsSjJNT7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjAzMTc1NDEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWE2NmQyN2YxMDA5YTE2MThjNjJjZDYwZGFiODY2OTcxN2U3ODU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlQytGGMHbeEDLLx/FucrLMNxZpV YG0Dn9LK43yTF3Lb+alcKY4uiuV8m+0QbfngDEqjM7pCKlSU5NQnoQ58XqY+jMvS Wqod15m+imm1w1nBdQiOQzpgXVgYtGYgT51YZE1/lP3444sVNppK5/Oev7xH1oEi l5LIALS1/F4Sl8EV4jFLa19hFqpe013M6nckwbE0OFI6u2bNWLLOA5UEknAS/f2o itdveiOBR3bNRDtyY7R/B4lKDsyCyqBRxUAvYMe1ftJsXHOXb89NkzgSNsDzrP6K FS2kQcbPJiCZSrA/l7q7SLdtKl8d86t2bErrtack9RRCeeabP4R1/ot+wwIDAQAB o4ICWzCCAlcwHQYDVR0OBBYEFKWmbSfxAJoWGMYs1g2rhmlxfnhZMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvcGFadEpfRUFtaFlZeGl6V0RhdUdhWEYtZUZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBeBAIAATBYAwQAl/ALMAwD BAWX8CADBACX8CowDAMEA5fwWAMEAJfwWgMEAJfwzAMEAJfw/gMEAJfxBgMEAJf0 JAMEAJf0NwMEAJf0PAMEAJf0awMEAJf0fwMEAJf1dDANBgkqhkiG9w0BAQsFAAOC AQEAixGDgeRZUGjIz22NChf401/Cb0p9YWd1duoTvCSfkt6MdNgHknKxud3GGMwC rfsqLDlAey/XVOTDZ1gTxfNF31h3JUbUUpkltx571khNxYhPoiMXyvwOtXtY1SdR TEwAbbUu6EzbLYojhwOXCg0K2yVZu7qr3LNXz7SN12VA9zdSYVn74GGuyeEMQjEP xhxbo+1/+YIreXLLgmIn/+NeaxltwVVUELTHD5olm0jXMU9eXDPc/MvFQg33TWbL +8QaHdeFL3YjAzRfLEzOCHVXYLXl+rxt75w2bcizXX5NmuQgVOYJ2xhgk+2VdIoo s4kZOw1if4S1aEOYlpyIKwym+g== -----END CERTIFICATE-----Generated at Fri Dec 5 15:05:18 2025 by rpki-client