This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rqpc5174m-bgDN9ChyxyihSr8nk.roa File: rqpc5174m-bgDN9ChyxyihSr8nk.roa (raw, json) Hash identifier: dVH43KsDflVieGhxq2lufIkHGUNrW5BOcTrgK852oAE= Subject key identifier: AE:AA:5C:E7:5E:F8:9B:E6:E0:0C:DF:42:87:2C:72:8A:14:AB:F2:79 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AD93263A749C9B44BB332DF0442186B43 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rqpc5174m-bgDN9ChyxyihSr8nk.roa Signing time: Mon 01 Dec 2025 09:15:49 +0000 ROA not before: Mon 01 Dec 2025 09:15:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 984 IP address blocks: 151.240.74.0/24 maxlen: 24 151.240.146.0/24 maxlen: 24 151.242.54.0/24 maxlen: 24 151.242.134.0/24 maxlen: 24 151.243.107.0/24 maxlen: 24 151.243.108.0/24 maxlen: 24 151.244.16.0/21 maxlen: 24 151.244.34.0/24 maxlen: 24 151.244.168.0/23 maxlen: 24 151.244.216.0/23 maxlen: 24 151.244.218.0/24 maxlen: 24 151.246.48.0/21 maxlen: 24 151.246.56.0/21 maxlen: 24 151.246.80.0/21 maxlen: 24 151.246.88.0/21 maxlen: 24 151.246.96.0/21 maxlen: 24 151.246.112.0/21 maxlen: 24 151.247.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:32:63:a7:49:c9:b4:4b:b3:32:df:04:42:18:6b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 1 09:15:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=aeaa5ce75ef89be6e00cdf42872c728a14abf279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3b:0d:93:4b:af:2b:7c:94:dd:f8:51:51:43: 72:6b:3d:4a:ce:84:9e:9b:e0:7e:2d:77:93:06:15: 4d:b4:6d:a8:d7:3c:c2:64:29:c9:b9:80:8a:ce:1b: 88:e6:c7:65:25:5e:d7:df:ad:51:7e:ee:28:ed:fe: 3b:9b:93:ba:3a:31:23:10:fd:fd:04:e3:75:7f:83: c4:89:5c:ad:b4:53:19:5f:3b:d3:6c:7e:78:fd:fc: b9:66:6a:dd:28:8f:56:82:27:ac:42:b9:e5:1d:9a: 2b:21:f0:04:7c:ff:d9:61:46:df:59:75:2d:6d:01: 41:e1:84:fb:05:8c:d1:b0:40:7a:66:ce:15:61:e1: ac:01:85:24:78:de:77:b7:91:2f:c4:c2:d0:4a:1d: 8e:9d:95:a0:40:d5:e4:d3:54:db:c8:26:76:91:a8: 9a:03:0e:22:e2:ce:30:52:81:97:62:45:c4:44:df: cb:0e:59:5b:02:9d:60:62:d1:04:77:02:66:f1:51: e0:6f:2f:3d:06:84:91:a4:be:ac:a3:ad:10:f9:c6: ed:6e:6e:08:97:65:98:bd:18:a2:24:41:ff:99:83: be:53:a6:12:05:d3:81:35:98:e1:bf:06:23:d2:87: c1:60:ba:73:67:9e:97:c3:b7:42:1b:c6:95:66:9e: c4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:AA:5C:E7:5E:F8:9B:E6:E0:0C:DF:42:87:2C:72:8A:14:AB:F2:79 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rqpc5174m-bgDN9ChyxyihSr8nk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.74.0/24 151.240.146.0/24 151.242.54.0/24 151.242.134.0/24 151.243.107.0-151.243.108.255 151.244.16.0/21 151.244.34.0/24 151.244.168.0/23 151.244.216.0-151.244.218.255 151.246.48.0/20 151.246.80.0-151.246.103.255 151.246.112.0/21 151.247.171.0/24 Signature Algorithm: sha256WithRSAEncryption 16:6f:3c:ed:00:f0:47:81:17:85:5c:5c:7c:92:ec:f2:a9:32: 06:8b:3d:29:45:1b:94:59:f5:ab:01:0c:e4:ca:4a:53:44:fe: a9:6d:f8:f8:17:a9:69:b0:10:75:1a:cf:d4:9c:c5:a6:70:40: 02:f5:88:b5:ed:58:63:35:e3:d9:5b:28:14:85:02:5e:ac:8c: b2:f0:17:62:2e:00:8b:5e:77:e5:df:23:4f:ef:ff:ec:ec:a0: 5e:b7:24:a7:da:5c:03:57:d3:5b:f0:72:f0:61:96:9c:9d:f1: da:f1:78:2a:ed:40:03:3b:16:4f:de:4b:69:09:60:be:0d:ad: 9a:ce:f9:4a:38:e6:9a:98:ae:2d:b8:b3:66:5f:1e:5a:b4:a0: 9b:b9:f4:7d:ef:96:b6:2b:9b:d2:54:52:c0:f8:9c:0e:53:4a: 49:1f:bd:9b:e0:19:c3:fa:ae:ff:d0:b5:e8:df:62:e6:ca:a7: 1e:04:da:db:62:84:36:08:66:64:a3:2e:c1:40:3d:0b:8c:81: 39:11:bf:ea:71:54:26:34:e3:cc:97:9f:56:42:57:95:85:22: 25:18:7b:bb:77:9f:12:57:76:aa:dd:b1:7f:81:2c:a0:2e:e0: ba:15:b3:14:54:fd:89:90:50:73:ed:ff:83:84:81:fd:64:21: fb:22:25:bc -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZrZMmOnScm0S7My3wRCGGtDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjAxMDkxNTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWFhNWNlNzVlZjg5YmU2ZTAwY2RmNDI4NzJjNzI4YTE0YWJmMjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDsNk0uvK3yU3fhRUUNyaz1KzoSe m+B+LXeTBhVNtG2o1zzCZCnJuYCKzhuI5sdlJV7X361Rfu4o7f47m5O6OjEjEP39 BON1f4PEiVyttFMZXzvTbH54/fy5ZmrdKI9WgiesQrnlHZorIfAEfP/ZYUbfWXUt bQFB4YT7BYzRsEB6Zs4VYeGsAYUkeN53t5EvxMLQSh2OnZWgQNXk01TbyCZ2kaia Aw4i4s4wUoGXYkXERN/LDllbAp1gYtEEdwJm8VHgby89BoSRpL6so60Q+cbtbm4I l2WYvRiiJEH/mYO+U6YSBdOBNZjhvwYj0ofBYLpzZ56Xw7dCG8aVZp7EUQIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFK6qXOde+Jvm4AzfQocscooUq/J5MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvcnFwYzUxNzRtLWJnRE45Q2h5eHlpaFNyOG5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBsBAIAATBmAwQAl/BKAwQA l/CSAwQAl/I2AwQAl/KGMAwDBACX82sDBACX82wDBAOX9BADBACX9CIDBAGX9Kgw DAMEA5f02AMEAJf02gMEBJf2MDAMAwQEl/ZQAwQDl/ZgAwQDl/ZwAwQAl/erMA0G CSqGSIb3DQEBCwUAA4IBAQAWbzztAPBHgReFXFx8kuzyqTIGiz0pRRuUWfWrAQzk ykpTRP6pbfj4F6lpsBB1Gs/UnMWmcEAC9Yi17VhjNePZWygUhQJerIyy8BdiLgCL Xnfl3yNP7//s7KBetySn2lwDV9Nb8HLwYZacnfHa8Xgq7UADOxZP3ktpCWC+Da2a zvlKOOaamK4tuLNmXx5atKCbufR975a2K5vSVFLA+JwOU0pJH72b4BnD+q7/0LXo 32LmyqceBNrbYoQ2CGZkoy7BQD0LjIE5Eb/qcVQmNOPMl59WQleVhSIlGHu7d58S V3aq3bF/gSygLuC6FbMUVP2JkFBz7f+DhIH9ZCH7IiW8 -----END CERTIFICATE-----Generated at Wed Dec 3 09:43:15 2025 by rpki-client