This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/se8ZmNZwysXpuweRGnsBtH2PjEQ.roa File: se8ZmNZwysXpuweRGnsBtH2PjEQ.roa (raw, json) Hash identifier: fXKlT4UQmcDfDbOZRGjsT8vocED3WqxK/GvXRU170g0= Subject key identifier: B1:EF:19:98:D6:70:CA:C5:E9:BB:07:91:1A:7B:01:B4:7D:8F:8C:44 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019A61E6110422B0E22FACBD805592FFBDCA Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/se8ZmNZwysXpuweRGnsBtH2PjEQ.roa Signing time: Sat 08 Nov 2025 05:17:38 +0000 ROA not before: Sat 08 Nov 2025 05:17:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 395374 IP address blocks: 151.243.5.0/24 maxlen: 24 151.245.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:61:e6:11:04:22:b0:e2:2f:ac:bd:80:55:92:ff:bd:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 8 05:17:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b1ef1998d670cac5e9bb07911a7b01b47d8f8c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:10:5b:fd:5a:47:e1:af:1d:13:fa:a2:9a:68: b8:ef:be:c9:ec:ff:8e:01:f7:4f:a0:e9:86:ba:5d: 7d:fa:10:31:d2:49:e5:b6:4d:21:5f:28:ad:4f:00: 6d:a3:ed:a0:27:46:ed:d9:4a:1c:e8:4a:ba:fe:72: 07:fe:f1:6e:59:91:6b:3f:db:73:bb:91:b4:84:0f: 6b:e1:7a:4b:29:30:e1:27:5d:fd:e4:f9:ae:0c:64: ae:ef:1c:77:9e:36:16:03:cf:e2:fc:53:4d:9e:b3: a0:16:92:94:ef:5f:9c:92:50:7e:06:65:26:92:0c: 56:b2:fc:87:b3:a4:35:cf:1d:10:6a:a7:29:ed:64: ed:d2:e1:05:e1:19:c7:a2:69:07:13:6e:ef:85:0d: db:a1:37:cd:00:db:05:82:97:73:aa:5a:f5:3d:b5: 41:3a:3d:63:8d:7a:90:96:e2:3f:df:31:de:a8:d7: 8d:21:be:33:6b:f4:9b:43:58:6e:21:53:06:62:fd: 3e:34:70:3d:00:f1:ce:39:46:74:1b:7e:9c:65:7d: 61:0f:2e:bc:d6:7f:3a:e3:f6:80:82:69:e3:fc:d1: ee:ef:eb:a6:a4:48:d8:d1:7f:ab:69:62:d8:1f:a9: 0f:6e:29:9c:10:5b:e4:c8:14:d4:16:02:d4:e2:ae: d4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EF:19:98:D6:70:CA:C5:E9:BB:07:91:1A:7B:01:B4:7D:8F:8C:44 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/se8ZmNZwysXpuweRGnsBtH2PjEQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.5.0/24 151.245.181.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:26:1c:fb:9e:1a:e2:0f:e2:c9:e4:42:1d:73:67:16:ec:98: 1c:cc:f3:36:5f:f5:c5:2a:7a:78:54:24:95:7c:71:a8:93:3b: f0:b7:e6:cb:05:10:65:35:e6:d9:e2:a0:02:df:a4:32:d2:39: 2b:39:71:5b:ce:1d:87:69:16:8c:2a:23:18:aa:17:98:0c:71: a9:71:e2:ed:8b:7c:d0:00:38:30:fe:96:e1:c4:ba:02:d3:79: 2f:04:91:69:58:e7:66:b8:1a:4d:77:ca:61:3b:22:65:a1:a0: 51:37:b4:ac:6d:9c:e5:a9:ee:24:75:96:f0:0f:1d:9f:f1:70: e3:6f:4c:1a:5f:e8:5e:ea:d5:53:1d:f8:85:1b:d5:fb:6c:d3: f3:f4:a0:eb:73:65:cb:9e:e3:f5:e9:fc:37:41:95:d4:30:77: 27:f0:a6:ef:d0:8f:22:e0:ea:d9:fd:67:4f:56:83:4a:e7:49: 7e:16:37:bd:c5:5c:be:65:d7:df:c8:b2:28:3f:92:5e:6e:02: 84:bd:2b:1e:af:1c:93:51:c8:68:4a:6e:5e:19:c6:e5:62:4b: c9:f9:41:85:a0:e1:04:59:89:f9:29:0f:d8:58:87:f9:7b:d6: 32:ae:61:cc:fa:50:d4:a6:12:fe:cc:6f:d5:dd:5c:0e:f6:79: d5:99:63:6e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZph5hEEIrDiL6y9gFWS/73KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTA4MDUxNzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWVmMTk5OGQ2NzBjYWM1ZTliYjA3OTExYTdiMDFiNDdkOGY4YzQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RBb/VpH4a8dE/qimmi4777J7P+O AfdPoOmGul19+hAx0knltk0hXyitTwBto+2gJ0bt2Uoc6Eq6/nIH/vFuWZFrP9tz u5G0hA9r4XpLKTDhJ1395PmuDGSu7xx3njYWA8/i/FNNnrOgFpKU71+cklB+BmUm kgxWsvyHs6Q1zx0Qaqcp7WTt0uEF4RnHomkHE27vhQ3boTfNANsFgpdzqlr1PbVB Oj1jjXqQluI/3zHeqNeNIb4za/SbQ1huIVMGYv0+NHA9APHOOUZ0G36cZX1hDy68 1n864/aAgmnj/NHu7+umpEjY0X+raWLYH6kPbimcEFvkyBTUFgLU4q7UJQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLHvGZjWcMrF6bsHkRp7AbR9j4xEMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvc2U4Wm1OWnd5c1hwdXdlUkduc0J0SDJQakVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/MFAwQA l/W1MA0GCSqGSIb3DQEBCwUAA4IBAQBLJhz7nhriD+LJ5EIdc2cW7JgczPM2X/XF Knp4VCSVfHGokzvwt+bLBRBlNebZ4qAC36Qy0jkrOXFbzh2HaRaMKiMYqheYDHGp ceLti3zQADgw/pbhxLoC03kvBJFpWOdmuBpNd8phOyJloaBRN7SsbZzlqe4kdZbw Dx2f8XDjb0waX+he6tVTHfiFG9X7bNPz9KDrc2XLnuP16fw3QZXUMHcn8Kbv0I8i 4OrZ/WdPVoNK50l+Fje9xVy+ZdffyLIoP5JebgKEvSserxyTUchoSm5eGcblYkvJ +UGFoOEEWYn5KQ/YWIf5e9YyrmHM+lDUphL+zG/V3VwO9nnVmWNu -----END CERTIFICATE-----Generated at Wed Dec 3 09:42:30 2025 by rpki-client