This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sJydvgnmykl2QVAf4QV08cPt2IE.roa File: sJydvgnmykl2QVAf4QV08cPt2IE.roa (raw, json) Hash identifier: pKvmoNBnTQS8yJmE2aamqCAvJSYzoq0p4rm4pwaLnhw= Subject key identifier: B0:9C:9D:BE:09:E6:CA:49:76:41:50:1F:E1:05:74:F1:C3:ED:D8:81 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AA6469AE9619C85D401B7BC5C8EBDD689 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sJydvgnmykl2QVAf4QV08cPt2IE.roa Signing time: Fri 21 Nov 2025 11:57:16 +0000 ROA not before: Fri 21 Nov 2025 11:57:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 63023 IP address blocks: 151.241.169.0/24 maxlen: 24 151.244.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a6:46:9a:e9:61:9c:85:d4:01:b7:bc:5c:8e:bd:d6:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 21 11:57:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b09c9dbe09e6ca497641501fe10574f1c3edd881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e5:9f:d9:00:cc:39:66:3e:54:fd:00:8e:5c: 05:ba:40:b2:b5:e0:71:ad:bc:dc:bd:44:4e:3a:1c: 39:4a:98:43:8d:28:1b:65:65:1c:6b:5e:43:75:4d: 4b:3c:7c:2a:1a:bd:64:1f:c8:39:4e:26:b6:30:26: 34:c2:5b:b2:85:0a:56:7b:f5:d0:fe:f0:94:40:fc: 3b:b6:a8:c6:07:fb:e6:8b:71:56:06:4b:d3:f2:8b: 1e:4d:5f:77:64:f2:a9:d3:17:06:89:15:43:ca:48: 17:bf:37:96:a7:8a:48:c9:92:e1:f4:06:87:38:f1: 3e:48:4b:58:a9:79:d7:16:21:79:01:a2:9b:71:0f: 5e:69:80:3f:f5:d0:4f:99:c8:82:32:9b:35:1f:2c: 0e:dd:ba:26:e6:b8:f0:d8:67:b4:67:e7:a3:15:a7: b0:d0:e0:ba:1d:ba:93:24:33:eb:b4:43:ee:33:3e: 15:09:cd:fa:91:e2:30:a5:f9:3a:f5:2a:09:df:23: a1:d9:d0:ef:71:86:71:fe:eb:05:d5:0c:5f:1b:da: 29:9c:6a:8c:2d:79:92:96:7d:0a:6f:43:0c:28:ad: c6:14:a4:e3:9a:b6:99:e6:12:b1:3a:99:cd:92:eb: 15:19:84:04:4e:4e:9a:00:76:9d:7a:e8:50:e7:96: 61:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:9C:9D:BE:09:E6:CA:49:76:41:50:1F:E1:05:74:F1:C3:ED:D8:81 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sJydvgnmykl2QVAf4QV08cPt2IE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.169.0/24 151.244.28.0/24 Signature Algorithm: sha256WithRSAEncryption 81:5c:1b:80:0a:8d:93:42:15:85:ba:9b:85:bc:cc:a9:d7:91: c0:77:3a:46:05:b2:96:8b:bc:8d:3a:7c:d0:b1:54:50:cd:1e: 28:e9:16:45:e5:ab:9a:04:da:b5:35:ac:3c:96:55:dd:2b:e1: c0:1c:a1:02:b8:67:ba:a5:2c:35:ea:46:07:76:80:1c:b2:00: e1:3d:8e:7c:ce:c2:2a:70:36:ea:64:20:3c:1f:51:29:fa:d3: 89:0e:e4:9a:fa:09:20:28:8f:4c:00:df:31:81:e1:b9:b4:98: 70:d1:53:3f:88:27:7c:1f:18:19:e5:bd:28:99:b0:e4:2b:fb: f2:0b:2b:ec:f8:1c:60:72:d9:ea:47:1d:c4:3f:9b:76:41:38: 47:a8:73:6a:eb:ca:6f:d8:8f:5f:c1:6d:b4:75:39:fe:e2:43: 80:da:a1:de:fb:22:c9:9d:d8:eb:bf:f1:66:c7:ba:37:27:a2: 04:2f:54:a1:c5:1e:be:a1:8a:79:51:52:5d:68:7a:2e:69:81: ed:8a:7c:7f:d7:55:16:32:aa:74:cf:04:a3:e2:4e:af:8e:0a: 11:f4:22:5d:b4:b7:52:b4:3b:6e:38:f4:3e:6b:de:c0:ec:da: b3:ef:dd:40:f3:95:f5:13:d1:e9:f5:b7:0e:ab:47:6f:59:c2: 5a:92:17:32 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZqmRprpYZyF1AG3vFyOvdaJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTIxMTE1NzE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDljOWRiZTA5ZTZjYTQ5NzY0MTUwMWZlMTA1NzRmMWMzZWRkODgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uWf2QDMOWY+VP0AjlwFukCyteBx rbzcvUROOhw5SphDjSgbZWUca15DdU1LPHwqGr1kH8g5Tia2MCY0wluyhQpWe/XQ /vCUQPw7tqjGB/vmi3FWBkvT8oseTV93ZPKp0xcGiRVDykgXvzeWp4pIyZLh9AaH OPE+SEtYqXnXFiF5AaKbcQ9eaYA/9dBPmciCMps1HywO3bom5rjw2Ge0Z+ejFaew 0OC6HbqTJDPrtEPuMz4VCc36keIwpfk69SoJ3yOh2dDvcYZx/usF1QxfG9opnGqM LXmSln0Kb0MMKK3GFKTjmraZ5hKxOpnNkusVGYQETk6aAHadeuhQ55ZhwQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLCcnb4J5spJdkFQH+EFdPHD7diBMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvc0p5ZHZnbm15a2wyUVZBZjRRVjA4Y1B0MklFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/GpAwQA l/QcMA0GCSqGSIb3DQEBCwUAA4IBAQCBXBuACo2TQhWFupuFvMyp15HAdzpGBbKW i7yNOnzQsVRQzR4o6RZF5auaBNq1Naw8llXdK+HAHKECuGe6pSw16kYHdoAcsgDh PY58zsIqcDbqZCA8H1Ep+tOJDuSa+gkgKI9MAN8xgeG5tJhw0VM/iCd8HxgZ5b0o mbDkK/vyCyvs+BxgctnqRx3EP5t2QThHqHNq68pv2I9fwW20dTn+4kOA2qHe+yLJ ndjrv/Fmx7o3J6IEL1ShxR6+oYp5UVJdaHouaYHtinx/11UWMqp0zwSj4k6vjgoR 9CJdtLdStDtuOPQ+a97A7Nqz791A85X1E9Hp9bcOq0dvWcJakhcy -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:55 2025 by rpki-client