This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/quIvyWHxI0FNeIk2W3yySlerPlg.roa File: quIvyWHxI0FNeIk2W3yySlerPlg.roa (raw, json) Hash identifier: 7XZJA/UDqA5gBs+e1V9Qn00jfykKoQuosUjmdaTihpA= Subject key identifier: AA:E2:2F:C9:61:F1:23:41:4D:78:89:36:5B:7C:B2:4A:57:AB:3E:58 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A5277F1A664E450FAC0E2A9EEF3855C85 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/quIvyWHxI0FNeIk2W3yySlerPlg.roa Signing time: Wed 05 Nov 2025 05:23:03 +0000 ROA not before: Wed 05 Nov 2025 05:23:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 57043 IP address blocks: 151.240.97.0/24 maxlen: 24 151.241.146.0/24 maxlen: 24 151.241.155.0/24 maxlen: 24 151.241.215.0/24 maxlen: 24 151.241.216.0/24 maxlen: 24 151.241.217.0/24 maxlen: 24 151.241.221.0/24 maxlen: 24 151.241.226.0/24 maxlen: 24 151.241.227.0/24 maxlen: 24 151.241.228.0/24 maxlen: 24 151.241.229.0/24 maxlen: 24 151.241.234.0/24 maxlen: 24 151.243.169.0/24 maxlen: 24 151.243.171.0/24 maxlen: 24 151.245.136.0/24 maxlen: 24 151.245.137.0/24 maxlen: 24 151.245.139.0/24 maxlen: 24 151.245.140.0/24 maxlen: 24 151.245.216.0/24 maxlen: 24 151.245.217.0/24 maxlen: 24 151.245.218.0/23 maxlen: 24 151.247.196.0/24 maxlen: 24 151.247.197.0/24 maxlen: 24 151.247.208.0/24 maxlen: 24 151.247.209.0/24 maxlen: 24 151.247.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:52:77:f1:a6:64:e4:50:fa:c0:e2:a9:ee:f3:85:5c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 5 05:23:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=aae22fc961f123414d7889365b7cb24a57ab3e58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:77:88:80:db:cf:80:6a:56:1b:b5:7c:2d:47: c0:b6:3f:70:ee:ef:99:1d:6f:14:e0:18:49:fa:df: 77:86:9c:b1:cd:f2:1b:ec:93:a2:e0:e3:f6:40:f3: 6c:7b:17:03:78:71:36:65:45:2b:7e:8c:3d:b3:14: 1b:1b:be:4f:c1:ea:6d:0f:8d:4a:13:6b:55:3e:8c: 3b:5f:df:8f:0d:80:62:d9:fd:37:15:e2:6f:53:d4: d1:b6:79:7b:8a:9e:84:1c:07:9e:89:98:38:96:fc: ac:6d:85:c3:ef:d3:2f:c6:51:7e:e8:dd:18:13:7b: e3:51:6b:02:4d:a9:65:07:7b:70:a7:8d:fe:6c:0a: 32:4d:6f:9a:76:5e:cd:87:25:c7:90:05:ac:69:f3: 52:1f:92:dc:65:9b:11:9e:8c:ae:cb:1e:ad:f5:02: 5f:96:ea:aa:1d:58:4a:c4:1a:a6:4b:50:cf:74:b1: e9:9d:02:ed:40:48:36:22:b4:52:84:c8:71:c9:b0: 6b:68:37:e4:75:be:d7:2b:29:be:af:15:32:65:07: d1:c9:c8:28:11:64:cc:7e:ff:dc:6e:9e:aa:8b:ed: e0:91:f0:b3:6d:6b:f8:86:87:ac:a7:13:b8:7c:cc: ee:f4:3d:c3:10:49:89:28:57:dd:7b:30:46:5c:78: 27:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E2:2F:C9:61:F1:23:41:4D:78:89:36:5B:7C:B2:4A:57:AB:3E:58 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/quIvyWHxI0FNeIk2W3yySlerPlg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.97.0/24 151.241.146.0/24 151.241.155.0/24 151.241.215.0-151.241.217.255 151.241.221.0/24 151.241.226.0-151.241.229.255 151.241.234.0/24 151.243.169.0/24 151.243.171.0/24 151.245.136.0/23 151.245.139.0-151.245.140.255 151.245.216.0/22 151.247.196.0/23 151.247.208.0/23 151.247.219.0/24 Signature Algorithm: sha256WithRSAEncryption a6:b5:b1:6e:45:91:b2:dd:3d:f5:f5:bd:1c:82:74:48:8f:ed: fe:f3:ee:d1:24:ac:c6:5c:84:84:85:60:73:4d:aa:52:79:e0: 3c:1c:d2:74:3d:05:09:71:95:22:ce:f9:cd:86:b3:57:39:1f: 45:75:75:f4:84:3b:05:a2:f0:0c:86:d1:be:e0:6e:c2:22:92: db:59:23:e6:35:8e:d3:bb:a5:fa:9f:43:35:8c:6c:46:51:fc: 7e:4a:4a:26:cc:93:5e:35:63:15:2e:ac:13:72:8e:3d:a8:86: 23:2d:07:c8:63:41:21:fb:e9:c6:5c:35:d0:4a:3b:ec:5b:3b: 15:20:d8:ba:cb:5e:dd:50:b1:9d:84:fe:0c:d3:7c:5e:d9:70: ac:e4:6e:f8:25:40:9c:b0:bb:d4:7c:c8:e5:52:50:09:2d:a8: 17:fc:85:26:ca:51:59:d4:d5:d0:e5:19:7d:b9:58:da:98:d4: ab:2e:aa:b5:0e:5a:b1:c1:85:2b:a3:68:81:21:f1:60:49:58: b4:f5:46:ce:f1:5b:09:93:f6:33:ad:5c:c8:97:2a:3b:17:f2: 70:10:9c:77:18:2f:a7:3e:be:2b:ef:de:45:7b:13:05:e9:52: 58:69:3a:82:61:f7:88:03:61:a5:b1:4a:93:ae:0d:7a:67:4a: dd:57:d9:8b -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgISAZpSd/GmZORQ+sDiqe7zhVyFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTA1MDUyMzAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYWUyMmZjOTYxZjEyMzQxNGQ3ODg5MzY1YjdjYjI0YTU3YWIzZTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHeIgNvPgGpWG7V8LUfAtj9w7u+Z HW8U4BhJ+t93hpyxzfIb7JOi4OP2QPNsexcDeHE2ZUUrfow9sxQbG75PweptD41K E2tVPow7X9+PDYBi2f03FeJvU9TRtnl7ip6EHAeeiZg4lvysbYXD79MvxlF+6N0Y E3vjUWsCTallB3twp43+bAoyTW+adl7NhyXHkAWsafNSH5LcZZsRnoyuyx6t9QJf luqqHVhKxBqmS1DPdLHpnQLtQEg2IrRShMhxybBraDfkdb7XKym+rxUyZQfRycgo EWTMfv/cbp6qi+3gkfCzbWv4hoespxO4fMzu9D3DEEmJKFfdezBGXHgneQIDAQAB o4ICdjCCAnIwHQYDVR0OBBYEFKriL8lh8SNBTXiJNlt8skpXqz5YMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvcXVJdnlXSHhJMEZOZUlrMlczeXlTbGVyUGxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMEAJfwYQME AJfxkgMEAJfxmzAMAwQAl/HXAwQBl/HYAwQAl/HdMAwDBAGX8eIDBAGX8eQDBACX 8eoDBACX86kDBACX86sDBAGX9YgwDAMEAJf1iwMEAJf1jAMEApf12AMEAZf3xAME AZf30AMEAJf32zANBgkqhkiG9w0BAQsFAAOCAQEAprWxbkWRst099fW9HIJ0SI/t /vPu0SSsxlyEhIVgc02qUnngPBzSdD0FCXGVIs75zYazVzkfRXV19IQ7BaLwDIbR vuBuwiKS21kj5jWO07ul+p9DNYxsRlH8fkpKJsyTXjVjFS6sE3KOPaiGIy0HyGNB Ifvpxlw10Eo77Fs7FSDYuste3VCxnYT+DNN8XtlwrORu+CVAnLC71HzI5VJQCS2o F/yFJspRWdTV0OUZfblY2pjUqy6qtQ5ascGFK6NogSHxYElYtPVGzvFbCZP2M61c yJcqOxfycBCcdxgvpz6+K+/eRXsTBelSWGk6gmH3iANhpbFKk64NemdK3VfZiw== -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:57 2025 by rpki-client