This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/w_8fx6fcxQ6HR5GkcllEKsbrH8o.roa File: w_8fx6fcxQ6HR5GkcllEKsbrH8o.roa (raw, json) Hash identifier: S93sSL/lOlBNcvZ+31i5qXjnau2AIXl+vhWdQ5+PtNo= Subject key identifier: C3:FF:1F:C7:A7:DC:C5:0E:87:47:91:A4:72:59:44:2A:C6:EB:1F:CA Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AE559B820E163CB9A9FA95BE53CC2A6A9 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/w_8fx6fcxQ6HR5GkcllEKsbrH8o.roa Signing time: Wed 03 Dec 2025 17:54:13 +0000 ROA not before: Wed 03 Dec 2025 17:54:13 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16276 IP address blocks: 37.202.202.0/24 maxlen: 24 151.240.1.0/24 maxlen: 24 151.240.9.0/24 maxlen: 24 151.240.17.0/24 maxlen: 24 151.240.24.0/24 maxlen: 24 151.240.149.0/24 maxlen: 24 151.240.227.0/24 maxlen: 24 151.241.1.0/24 maxlen: 24 151.241.8.0/24 maxlen: 24 151.241.68.0/24 maxlen: 24 151.241.92.0/24 maxlen: 24 151.242.67.0/24 maxlen: 24 151.242.103.0/24 maxlen: 24 151.242.117.0/24 maxlen: 24 151.242.118.0/24 maxlen: 24 151.243.6.0/24 maxlen: 24 151.243.120.0/24 maxlen: 24 151.243.160.0/22 maxlen: 22 151.244.78.0/24 maxlen: 24 151.244.192.0/24 maxlen: 24 151.245.54.0/24 maxlen: 24 151.245.144.0/24 maxlen: 24 151.245.183.0/24 maxlen: 24 151.245.238.0/24 maxlen: 24 151.246.177.0/24 maxlen: 24 151.246.190.0/24 maxlen: 24 151.247.158.0/24 maxlen: 24 151.247.192.0/24 maxlen: 24 151.247.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 20:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e5:59:b8:20:e1:63:cb:9a:9f:a9:5b:e5:3c:c2:a6:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 3 17:54:13 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c3ff1fc7a7dcc50e874791a47259442ac6eb1fca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:94:e5:67:42:10:4a:3e:58:15:85:44:78:54: 6e:52:07:f0:5c:23:eb:02:2d:a7:d3:d2:2b:57:a3: 5c:fc:02:2e:e0:d3:40:d0:d7:7e:7c:3d:4a:7c:bf: 47:9c:31:40:4e:c2:f4:54:1c:29:1d:b7:e7:d7:3b: 61:46:82:1a:30:a7:30:5e:ca:5a:ed:c6:71:f0:ef: 9b:ff:f6:cb:60:e2:8b:be:59:f7:40:91:42:2d:6e: a9:49:24:a9:75:26:97:cc:71:9e:f8:59:50:10:df: 53:7b:c9:f6:92:d1:e2:db:39:14:a6:3a:d4:87:a1: a8:db:e0:6d:f3:b9:66:57:aa:bc:04:dc:58:51:4b: 9c:06:2f:fd:3c:38:77:ad:dd:24:14:07:60:b2:51: 0b:0c:09:91:3f:6a:da:73:aa:45:6d:52:d3:d1:47: eb:57:5d:47:7e:0b:70:6f:54:17:aa:31:42:a4:62: 2c:22:fa:b8:76:0c:77:52:19:7a:0a:ed:9e:14:3a: f8:40:9f:c5:6b:df:63:63:38:a9:91:4e:cc:e6:f4: 41:3f:52:b5:b0:54:56:96:0e:9b:9f:07:f6:dc:b9: 23:36:ea:6f:b6:f2:f3:90:32:2c:ed:ca:04:d4:87: 2c:cc:d7:c0:a9:bc:9d:83:61:48:0c:a6:e5:fd:13: 02:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FF:1F:C7:A7:DC:C5:0E:87:47:91:A4:72:59:44:2A:C6:EB:1F:CA X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/w_8fx6fcxQ6HR5GkcllEKsbrH8o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.202.0/24 151.240.1.0/24 151.240.9.0/24 151.240.17.0/24 151.240.24.0/24 151.240.149.0/24 151.240.227.0/24 151.241.1.0/24 151.241.8.0/24 151.241.68.0/24 151.241.92.0/24 151.242.67.0/24 151.242.103.0/24 151.242.117.0-151.242.118.255 151.243.6.0/24 151.243.120.0/24 151.243.160.0/22 151.244.78.0/24 151.244.192.0/24 151.245.54.0/24 151.245.144.0/24 151.245.183.0/24 151.245.238.0/24 151.246.177.0/24 151.246.190.0/24 151.247.158.0/24 151.247.192.0/24 151.247.217.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:8a:35:0a:b9:e2:e8:94:4b:4b:ce:be:fe:d7:e4:8d:93:fb: a8:98:a9:dd:b7:24:4f:99:6e:d1:e9:c5:67:5e:24:49:fb:d6: 90:63:c7:f3:9c:83:55:20:ef:99:d2:a2:9f:4f:20:5b:92:0a: a2:d6:d8:b3:de:76:e0:c5:89:87:e3:e8:23:15:42:02:e8:10: f2:93:9a:8f:08:30:9d:fb:95:dc:fb:c4:8e:fa:a9:ba:1a:77: 8a:26:b3:cc:cb:13:b6:c4:e6:73:d1:92:36:3d:df:1b:d6:ab: 63:1e:09:36:60:f9:49:6a:11:07:26:dd:4d:c1:84:43:84:60: 24:c7:19:7e:bc:c2:6e:a8:51:25:dd:01:c1:01:13:e3:95:0d: 3e:c6:75:36:21:e9:f7:58:af:13:a1:95:c8:bb:9e:04:13:db: 6e:f4:b8:1b:65:33:f2:35:4e:0b:d7:57:db:cd:05:a8:31:ea: 78:e5:53:62:43:d8:69:c5:cd:c3:3a:f7:d8:70:0e:fb:8c:df: 09:44:de:de:1d:ee:74:9f:79:4d:66:d3:80:c5:c8:20:84:b9: 97:6b:dc:24:11:4c:38:74:1d:14:25:5c:88:90:3d:f5:e3:70: 08:60:f2:d4:e0:46:a2:64:36:6f:3e:bd:a4:f9:8e:0c:0c:c2: 68:f7:23:c0 -----BEGIN CERTIFICATE----- MIIFrDCCBJSgAwIBAgISAZrlWbgg4WPLmp+pW+U8wqapMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjAzMTc1NDEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2ZmMWZjN2E3ZGNjNTBlODc0NzkxYTQ3MjU5NDQyYWM2ZWIxZmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJTlZ0IQSj5YFYVEeFRuUgfwXCPr Ai2n09IrV6Nc/AIu4NNA0Nd+fD1KfL9HnDFATsL0VBwpHbfn1zthRoIaMKcwXspa 7cZx8O+b//bLYOKLvln3QJFCLW6pSSSpdSaXzHGe+FlQEN9Te8n2ktHi2zkUpjrU h6Go2+Bt87lmV6q8BNxYUUucBi/9PDh3rd0kFAdgslELDAmRP2rac6pFbVLT0Ufr V11Hfgtwb1QXqjFCpGIsIvq4dgx3Uhl6Cu2eFDr4QJ/Fa99jYzipkU7M5vRBP1K1 sFRWlg6bnwf23LkjNupvtvLzkDIs7coE1IcszNfAqbydg2FIDKbl/RMCwwIDAQAB o4ICuDCCArQwHQYDVR0OBBYEFMP/H8en3MUOh0eRpHJZRCrG6x/KMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvd184Zng2ZmN4UTZIUjVHa2NsbEVLc2JySDhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHNBggrBgEFBQcBBwEB/wSBvTCBujCBtwQCAAEwgbADBAAl ysoDBACX8AEDBACX8AkDBACX8BEDBACX8BgDBACX8JUDBACX8OMDBACX8QEDBACX 8QgDBACX8UQDBACX8VwDBACX8kMDBACX8mcwDAMEAJfydQMEAJfydgMEAJfzBgME AJfzeAMEApfzoAMEAJf0TgMEAJf0wAMEAJf1NgMEAJf1kAMEAJf1twMEAJf17gME AJf2sQMEAJf2vgMEAJf3ngMEAJf3wAMEAJf32TANBgkqhkiG9w0BAQsFAAOCAQEA moo1Crni6JRLS86+/tfkjZP7qJip3bckT5lu0enFZ14kSfvWkGPH85yDVSDvmdKi n08gW5IKotbYs9524MWJh+PoIxVCAugQ8pOajwgwnfuV3PvEjvqpuhp3iiazzMsT tsTmc9GSNj3fG9arYx4JNmD5SWoRBybdTcGEQ4RgJMcZfrzCbqhRJd0BwQET45UN PsZ1NiHp91ivE6GVyLueBBPbbvS4G2Uz8jVOC9dX280FqDHqeOVTYkPYacXNwzr3 2HAO+4zfCUTe3h3udJ95TWbTgMXIIIS5l2vcJBFMOHQdFCVciJA99eNwCGDy1OBG omQ2bz69pPmODAzCaPcjwA== -----END CERTIFICATE-----Generated at Fri Dec 5 04:29:26 2025 by rpki-client