This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vUkQtAou7xvx0_KEB6Zu9e7XLik.roa File: vUkQtAou7xvx0_KEB6Zu9e7XLik.roa (raw, json) Hash identifier: vcluu/osIBtC36oam6xUh6WTwG7P+HOdODTHTcXME9k= Subject key identifier: BD:49:10:B4:0A:2E:EF:1B:F1:D3:F2:84:07:A6:6E:F5:EE:D7:2E:29 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AA9FFAD0AE708FF9CB06DB11F367CB663 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vUkQtAou7xvx0_KEB6Zu9e7XLik.roa Signing time: Sat 22 Nov 2025 05:18:16 +0000 ROA not before: Sat 22 Nov 2025 05:18:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 151.240.128.0/21 maxlen: 24 151.240.136.0/21 maxlen: 24 151.240.145.0/24 maxlen: 24 151.240.171.0/24 maxlen: 24 151.241.105.0/24 maxlen: 24 151.241.106.0/24 maxlen: 24 151.241.107.0/24 maxlen: 24 151.241.132.0/22 maxlen: 22 151.242.56.0/24 maxlen: 24 151.242.70.0/24 maxlen: 24 151.242.71.0/24 maxlen: 24 151.242.135.0/24 maxlen: 24 151.243.8.0/23 maxlen: 23 151.243.204.0/23 maxlen: 23 151.244.56.0/24 maxlen: 24 151.245.2.0/24 maxlen: 24 151.245.22.0/24 maxlen: 24 151.245.56.0/22 maxlen: 22 151.245.185.0/24 maxlen: 24 151.245.187.0/24 maxlen: 24 151.245.188.0/24 maxlen: 24 151.246.8.0/21 maxlen: 24 151.247.133.0/24 maxlen: 24 151.247.134.0/24 maxlen: 24 151.247.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a9:ff:ad:0a:e7:08:ff:9c:b0:6d:b1:1f:36:7c:b6:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Nov 22 05:18:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=bd4910b40a2eef1bf1d3f28407a66ef5eed72e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:de:1d:f8:b9:d7:5a:21:76:7c:c9:94:83:63: 56:e1:7f:61:a3:c4:94:ef:25:9a:a4:64:92:f1:50: 56:1f:ab:21:45:bc:fe:d7:0f:be:d4:65:13:c0:eb: 2a:47:a4:b5:79:30:8a:a9:8f:d5:83:29:f0:f5:4e: e3:96:60:13:b9:dd:b3:e7:bb:ee:d2:15:4e:1a:04: eb:3a:63:3d:cd:60:14:a4:95:e1:88:b9:65:db:b8: 25:a2:55:fd:36:e4:da:7f:35:33:17:58:9d:8a:32: 7e:c3:b8:e6:5d:e1:18:c2:08:72:87:64:13:9b:ca: b8:5b:64:b8:5e:2c:5d:b7:f9:f4:a2:8b:76:59:6c: 70:83:f7:ff:22:fc:04:44:30:4b:6e:84:fe:be:3e: 87:da:a5:d8:3a:9e:f7:b0:56:10:bd:27:9f:e6:b2: 6f:4d:43:f5:4d:0a:1c:16:cf:95:70:62:b7:92:e8: a2:88:96:9c:68:ce:95:94:c6:03:45:41:1b:d9:2a: 73:35:37:fd:b0:5a:04:77:fc:f5:b4:88:34:6b:4e: cd:8f:63:fe:5e:45:2f:e4:cc:40:c3:6f:cb:eb:e4: 2c:45:3a:4c:d3:2e:07:0c:4f:49:c4:a8:5f:48:b1: 7d:b0:7a:d7:6a:77:66:9d:36:c9:e1:27:5d:47:39: f4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:49:10:B4:0A:2E:EF:1B:F1:D3:F2:84:07:A6:6E:F5:EE:D7:2E:29 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vUkQtAou7xvx0_KEB6Zu9e7XLik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.128.0/20 151.240.145.0/24 151.240.171.0/24 151.241.105.0-151.241.107.255 151.241.132.0/22 151.242.56.0/24 151.242.70.0/23 151.242.135.0/24 151.243.8.0/23 151.243.204.0/23 151.244.56.0/24 151.245.2.0/24 151.245.22.0/24 151.245.56.0/22 151.245.185.0/24 151.245.187.0-151.245.188.255 151.246.8.0/21 151.247.133.0-151.247.135.255 Signature Algorithm: sha256WithRSAEncryption ab:30:bc:eb:2e:f4:80:19:b0:f6:e0:0d:15:68:7b:8e:a6:e3: 3c:fc:bb:77:c7:56:ea:c2:fb:15:2c:ec:e3:94:33:4d:b2:08: dd:7b:a7:7b:18:73:c8:6c:a9:a0:09:bc:14:f8:a1:cb:ab:f3: c0:6e:c5:7d:03:cd:60:03:02:f9:59:b4:b6:6a:4a:d6:65:87: 84:b4:53:c6:27:2e:8f:ef:8b:55:f0:11:16:12:80:d0:52:22: d2:5f:3c:29:43:12:c1:e7:93:4e:a7:eb:70:95:88:35:b1:ba: c9:6c:cf:13:66:19:7a:6a:fc:f2:77:98:d0:98:fa:61:21:cd: 45:3c:ab:5f:d5:3c:1f:9a:d4:90:54:1d:bb:9f:ce:9f:74:a1: 5c:18:7a:c7:8c:9d:f0:64:9b:36:05:3d:67:2b:f0:29:c0:e4: dc:32:7e:7e:01:85:66:50:26:80:42:17:34:9a:e5:59:3e:21: 4a:66:34:1a:05:34:22:eb:3c:03:59:dc:5e:e7:c6:d3:8c:fc: 20:4e:6f:21:54:9e:56:be:c0:46:28:ec:61:e1:c5:50:c6:9a: 55:8f:e3:21:aa:3f:5f:6d:ce:45:3b:db:bd:b5:56:eb:28:fa: c2:b9:cb:f8:00:39:ea:ca:8c:06:2e:32:69:4b:d9:5f:33:8b: 85:9c:22:69 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZqp/60K5wj/nLBtsR82fLZjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMTIyMDUxODE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZDQ5MTBiNDBhMmVlZjFiZjFkM2YyODQwN2E2NmVmNWVlZDcyZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN4d+LnXWiF2fMmUg2NW4X9ho8SU 7yWapGSS8VBWH6shRbz+1w++1GUTwOsqR6S1eTCKqY/Vgynw9U7jlmATud2z57vu 0hVOGgTrOmM9zWAUpJXhiLll27glolX9NuTafzUzF1idijJ+w7jmXeEYwghyh2QT m8q4W2S4Xixdt/n0oot2WWxwg/f/IvwERDBLboT+vj6H2qXYOp73sFYQvSef5rJv TUP1TQocFs+VcGK3kuiiiJacaM6VlMYDRUEb2SpzNTf9sFoEd/z1tIg0a07Nj2P+ XkUv5MxAw2/L6+QsRTpM0y4HDE9JxKhfSLF9sHrXandmnTbJ4SddRzn0UwIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFL1JELQKLu8b8dPyhAembvXu1y4pMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvdlVrUXRBb3U3eHZ4MF9LRUI2WnU5ZTdYTGlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjCBiwQCAAEwgYQDBASX 8IADBACX8JEDBACX8KswDAMEAJfxaQMEApfxaAMEApfxhAMEAJfyOAMEAZfyRgME AJfyhwMEAZfzCAMEAZfzzAMEAJf0OAMEAJf1AgMEAJf1FgMEApf1OAMEAJf1uTAM AwQAl/W7AwQAl/W8AwQDl/YIMAwDBACX94UDBAOX94AwDQYJKoZIhvcNAQELBQAD ggEBAKswvOsu9IAZsPbgDRVoe46m4zz8u3fHVurC+xUs7OOUM02yCN17p3sYc8hs qaAJvBT4ocur88BuxX0DzWADAvlZtLZqStZlh4S0U8YnLo/vi1XwERYSgNBSItJf PClDEsHnk06n63CViDWxuslszxNmGXpq/PJ3mNCY+mEhzUU8q1/VPB+a1JBUHbuf zp90oVwYeseMnfBkmzYFPWcr8CnA5Nwyfn4BhWZQJoBCFzSa5Vk+IUpmNBoFNCLr PANZ3F7nxtOM/CBObyFUnla+wEYo7GHhxVDGmlWP4yGqP19tzkU72721Vuso+sK5 y/gAOerKjAYuMmlL2V8zi4WcImk= -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:37 2025 by rpki-client