This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/s6MzEySZSwXAT1O8XEATCwQWzJs.roa File: s6MzEySZSwXAT1O8XEATCwQWzJs.roa (raw, json) Hash identifier: yRL2nuWXpMDuVn8a2aZiBixaq7TI24i8bmdfleNo5fU= Subject key identifier: B3:A3:33:13:24:99:4B:05:C0:4F:53:BC:5C:40:13:0B:04:16:CC:9B Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AA9FFAE0AAF2AF7DD22C85CBF903D32F2 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/s6MzEySZSwXAT1O8XEATCwQWzJs.roa Signing time: Sat 22 Nov 2025 05:18:16 +0000 ROA not before: Sat 22 Nov 2025 05:18:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56913 IP address blocks: 151.240.15.0/24 maxlen: 24 151.244.112.0/24 maxlen: 24 151.244.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a9:ff:ae:0a:af:2a:f7:dd:22:c8:5c:bf:90:3d:32:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 22 05:18:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b3a3331324994b05c04f53bc5c40130b0416cc9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:89:84:7f:5f:b9:b3:28:e4:55:c6:64:d6:a4: b0:35:57:a8:c9:fa:73:78:be:22:27:93:a7:30:26: 56:1b:84:ff:29:9e:f4:b6:d0:c1:b9:da:8c:8f:f2: 10:40:f8:a4:14:5d:fd:0d:52:fa:f9:a4:6e:e3:c4: 0f:8f:2d:3a:15:f1:bf:e6:4e:17:c4:b3:68:00:3d: 3e:f6:20:7d:b8:2c:85:f7:b7:28:98:a1:b2:84:dd: 88:40:cd:38:bc:9c:a5:90:0a:1e:3a:35:05:b8:4d: 75:42:cd:de:2d:eb:35:16:d1:07:7c:cb:ba:a3:e1: b0:cf:e5:1b:f9:c1:47:4a:16:1f:09:be:9c:f5:7d: 1b:fc:6f:be:44:e9:ce:b7:fd:66:b8:c9:03:e8:d5: 4a:fb:b7:a0:c8:9a:d7:20:bb:62:7c:79:fe:70:0c: 48:b0:c7:d1:1d:05:59:69:39:1a:42:52:64:2b:de: be:6e:a1:5e:20:79:52:6b:df:fd:01:f0:d6:b5:74: 8e:24:83:7f:70:ea:7f:d0:5c:55:e0:2c:01:96:d2: 5f:e8:b7:8d:56:e8:b2:a7:6b:ae:12:61:79:a0:13: 46:1c:38:48:08:69:37:f3:8f:3f:fd:73:76:cd:9e: cd:5c:68:0e:c8:b5:f0:6d:1a:b2:20:c7:76:89:57: 13:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:A3:33:13:24:99:4B:05:C0:4F:53:BC:5C:40:13:0B:04:16:CC:9B X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/s6MzEySZSwXAT1O8XEATCwQWzJs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.15.0/24 151.244.112.0/24 151.244.116.0/24 Signature Algorithm: sha256WithRSAEncryption 55:2f:1a:9b:af:ca:e5:7d:ea:47:43:68:d3:6c:c9:7e:a0:8d: 06:fc:24:f0:b6:a7:ea:4a:b6:23:40:07:ac:09:32:b8:bc:13: fd:6f:a6:e6:0a:cf:e7:15:6c:cf:40:35:d0:df:b5:fd:00:38: 68:e5:02:94:12:0e:65:6e:e9:ef:1b:9a:bd:da:70:d0:5d:d0: ed:3f:57:76:3e:59:4a:ad:27:db:df:04:0a:1e:dc:5b:10:be: ca:c8:1d:8c:43:70:05:ac:82:52:b7:c7:70:b7:59:fa:a5:ff: 18:23:a1:35:67:ab:3a:f4:84:97:c4:d4:42:7a:3b:87:c0:09: cd:5c:76:40:98:fc:d3:fe:3e:e3:2c:3b:d2:ba:15:09:c3:ec: 18:a1:17:1e:be:ed:14:21:0f:f8:93:bc:65:bf:18:6f:d3:da: 2f:49:13:bd:78:5c:1d:98:b8:b6:ab:87:a4:6b:03:84:d0:58: 44:2e:e7:59:74:36:13:f1:90:cb:dc:e7:80:c5:56:ba:43:3b: f7:7d:2b:82:ae:53:16:e9:92:ee:c2:7b:8d:cc:20:9d:d7:41: ca:b3:38:ff:5c:f2:3c:bb:d6:8a:61:0a:08:01:3d:59:df:f7: 4c:90:56:a6:a1:7c:77:ed:07:29:77:c3:fa:3d:38:6e:06:66: 7d:15:d6:8f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqp/64Kryr33SLIXL+QPTLyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTIyMDUxODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2EzMzMxMzI0OTk0YjA1YzA0ZjUzYmM1YzQwMTMwYjA0MTZjYzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYmEf1+5syjkVcZk1qSwNVeoyfpz eL4iJ5OnMCZWG4T/KZ70ttDBudqMj/IQQPikFF39DVL6+aRu48QPjy06FfG/5k4X xLNoAD0+9iB9uCyF97comKGyhN2IQM04vJylkAoeOjUFuE11Qs3eLes1FtEHfMu6 o+Gwz+Ub+cFHShYfCb6c9X0b/G++ROnOt/1muMkD6NVK+7egyJrXILtifHn+cAxI sMfRHQVZaTkaQlJkK96+bqFeIHlSa9/9AfDWtXSOJIN/cOp/0FxV4CwBltJf6LeN Vuiyp2uuEmF5oBNGHDhICGk3848//XN2zZ7NXGgOyLXwbRqyIMd2iVcTrQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLOjMxMkmUsFwE9TvFxAEwsEFsybMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvczZNekV5U1pTd1hBVDFPOFhFQVRDd1FXekpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/APAwQA l/RwAwQAl/R0MA0GCSqGSIb3DQEBCwUAA4IBAQBVLxqbr8rlfepHQ2jTbMl+oI0G /CTwtqfqSrYjQAesCTK4vBP9b6bmCs/nFWzPQDXQ37X9ADho5QKUEg5lbunvG5q9 2nDQXdDtP1d2PllKrSfb3wQKHtxbEL7KyB2MQ3AFrIJSt8dwt1n6pf8YI6E1Z6s6 9ISXxNRCejuHwAnNXHZAmPzT/j7jLDvSuhUJw+wYoRcevu0UIQ/4k7xlvxhv09ov SRO9eFwdmLi2q4ekawOE0FhELudZdDYT8ZDL3OeAxVa6Qzv3fSuCrlMW6ZLuwnuN zCCd10HKszj/XPI8u9aKYQoIAT1Z3/dMkFamoXx37Qcpd8P6PThuBmZ9FdaP -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:07 2025 by rpki-client