This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rjfpOA6Y7q6TI74iRZZQvcUVw9M.roa File: rjfpOA6Y7q6TI74iRZZQvcUVw9M.roa (raw, json) Hash identifier: /MZlbLdnqg8MDHxGZXTcjMMdoTouSVmOh73E0L+XA50= Subject key identifier: AE:37:E9:38:0E:98:EE:AE:93:23:BE:22:45:96:50:BD:C5:15:C3:D3 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A718F2900DBDD737AA354A938CC6E5891 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rjfpOA6Y7q6TI74iRZZQvcUVw9M.roa Signing time: Tue 11 Nov 2025 06:16:38 +0000 ROA not before: Tue 11 Nov 2025 06:16:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 61317 IP address blocks: 151.242.200.0/23 maxlen: 24 151.242.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Nov 2025 21:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:71:8f:29:00:db:dd:73:7a:a3:54:a9:38:cc:6e:58:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 11 06:16:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ae37e9380e98eeae9323be22459650bdc515c3d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:18:e4:39:82:62:cc:84:8c:a7:98:24:dc:d7: 5f:1b:7b:ef:af:c1:31:dc:98:68:4c:8d:b6:06:84: fe:2c:57:00:b1:2e:95:0d:f4:74:e1:94:7d:5a:24: 3c:5b:ab:90:e9:22:5a:50:9e:57:cb:b3:86:b0:38: 95:8b:91:3c:e4:1e:d1:66:9f:af:d2:ce:77:8e:99: f3:e3:fe:dd:92:67:93:c9:65:2b:9d:5e:6a:7d:86: 9d:5e:16:91:85:12:15:4c:d0:f1:eb:72:c4:30:3e: 09:2c:30:f0:5f:e8:48:b7:03:7a:49:44:07:86:19: 84:11:d6:88:32:28:fc:3e:13:d4:5e:57:54:00:51: 9b:a6:dd:df:66:44:d8:07:0e:7d:94:96:26:6f:ef: 91:43:b6:59:0c:9f:2e:c2:04:d4:81:bc:12:89:c6: 01:01:02:50:b6:da:c0:4d:2c:b6:55:d1:94:c7:f7: ca:d0:1f:2e:9a:43:c1:40:d6:e3:ff:9e:5e:1f:97: 19:da:f4:d9:bd:ed:e8:34:b1:81:f6:78:7c:37:f7: f3:5d:4c:4f:ec:c7:af:08:bf:1c:cf:3b:38:43:05: e4:28:41:d3:55:42:c3:06:45:d8:88:20:dc:77:e7: dc:29:e6:cb:3f:d1:c2:3e:c5:66:48:84:3c:64:c2: 9e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:37:E9:38:0E:98:EE:AE:93:23:BE:22:45:96:50:BD:C5:15:C3:D3 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rjfpOA6Y7q6TI74iRZZQvcUVw9M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.200.0/23 Signature Algorithm: sha256WithRSAEncryption 1f:c7:63:f7:63:ea:0d:ae:28:d1:6b:a1:6a:80:6c:ca:be:2e: 6b:a0:65:c4:0f:67:4f:60:51:eb:89:e6:0a:2a:87:59:f5:7d: d1:e4:df:3b:61:62:86:8d:ab:aa:3a:f1:08:50:d6:49:9c:33: ae:2d:71:26:13:09:26:21:bd:06:c6:9e:44:6c:d6:2b:04:22: 06:21:b5:5e:7d:8e:fa:1a:7f:a5:ba:ad:55:14:1e:dd:ad:32: b2:cb:8c:52:3e:81:5b:b6:ed:a9:78:bc:89:9b:68:ad:a1:53: c4:6d:b7:64:cd:d5:3e:cf:87:f5:de:94:ad:c5:4d:91:f1:89: ef:63:17:49:9b:f5:16:f9:77:ed:dd:c5:85:87:ed:74:2d:3c: fb:aa:05:75:97:f4:46:b8:68:ac:18:c6:65:c3:b8:74:01:a9: 8f:74:b0:fa:9d:f2:ed:2b:4c:da:c1:8a:18:a4:59:5f:c3:6f: b9:38:ba:a4:09:82:6e:38:ea:39:37:5a:fb:3a:cd:ee:03:39: 88:c1:19:7a:9f:0d:c4:79:bf:a8:0e:dd:14:d6:18:a9:97:f3: 20:6e:9a:a2:0f:e1:7f:54:1b:7e:2d:21:1e:fc:89:db:08:4e: 02:cc:db:53:8e:06:85:90:48:8d:7f:59:f2:e5:7a:4f:75:8c: 00:64:97:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpxjykA291zeqNUqTjMbliRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTExMDYxNjM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTM3ZTkzODBlOThlZWFlOTMyM2JlMjI0NTk2NTBiZGM1MTVjM2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3BjkOYJizISMp5gk3NdfG3vvr8Ex 3JhoTI22BoT+LFcAsS6VDfR04ZR9WiQ8W6uQ6SJaUJ5Xy7OGsDiVi5E85B7RZp+v 0s53jpnz4/7dkmeTyWUrnV5qfYadXhaRhRIVTNDx63LEMD4JLDDwX+hItwN6SUQH hhmEEdaIMij8PhPUXldUAFGbpt3fZkTYBw59lJYmb++RQ7ZZDJ8uwgTUgbwSicYB AQJQttrATSy2VdGUx/fK0B8umkPBQNbj/55eH5cZ2vTZve3oNLGB9nh8N/fzXUxP 7MevCL8czzs4QwXkKEHTVULDBkXYiCDcd+fcKebLP9HCPsVmSIQ8ZMKecQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK436TgOmO6ukyO+IkWWUL3FFcPTMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvcmpmcE9BNlk3cTZUSTc0aVJaWlF2Y1VWdzlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl/LIMA0G CSqGSIb3DQEBCwUAA4IBAQAfx2P3Y+oNrijRa6FqgGzKvi5roGXED2dPYFHrieYK KodZ9X3R5N87YWKGjauqOvEIUNZJnDOuLXEmEwkmIb0Gxp5EbNYrBCIGIbVefY76 Gn+luq1VFB7drTKyy4xSPoFbtu2peLyJm2itoVPEbbdkzdU+z4f13pStxU2R8Ynv YxdJm/UW+Xft3cWFh+10LTz7qgV1l/RGuGisGMZlw7h0AamPdLD6nfLtK0zawYoY pFlfw2+5OLqkCYJuOOo5N1r7Os3uAzmIwRl6nw3Eeb+oDt0U1hipl/MgbpqiD+F/ VBt+LSEe/InbCE4CzNtTjgaFkEiNf1ny5XpPdYwAZJdZ -----END CERTIFICATE-----Generated at Sun Nov 23 05:27:20 2025 by rpki-client