This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xgPmjJipQ9MsmKbG4pJPPRn4U8s.roa File: xgPmjJipQ9MsmKbG4pJPPRn4U8s.roa (raw, json) Hash identifier: ChY1Yft9AUNbzt/omnw6LvSewJV2aiySfgxIfNQBUAo= Subject key identifier: C6:03:E6:8C:98:A9:43:D3:2C:98:A6:C6:E2:92:4F:3D:19:F8:53:CB Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019ADD7A46BC239CE54B3A4322859B78AB25 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xgPmjJipQ9MsmKbG4pJPPRn4U8s.roa Signing time: Tue 02 Dec 2025 05:12:49 +0000 ROA not before: Tue 02 Dec 2025 05:12:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 37.202.212.0/24 maxlen: 24 151.240.118.0/23 maxlen: 24 151.240.147.0/24 maxlen: 24 151.240.150.0/24 maxlen: 24 151.240.154.0/24 maxlen: 24 151.240.161.0/24 maxlen: 24 151.240.165.0/24 maxlen: 24 151.240.179.0/24 maxlen: 24 151.240.249.0/24 maxlen: 24 151.241.9.0/24 maxlen: 24 151.241.13.0/24 maxlen: 24 151.241.26.0/24 maxlen: 24 151.241.168.0/24 maxlen: 24 151.241.174.0/24 maxlen: 24 151.241.213.0/24 maxlen: 24 151.241.222.0/24 maxlen: 24 151.241.223.0/24 maxlen: 24 151.242.143.0/24 maxlen: 24 151.243.138.0/23 maxlen: 24 151.243.144.0/23 maxlen: 24 151.243.170.0/24 maxlen: 24 151.243.172.0/24 maxlen: 24 151.243.173.0/24 maxlen: 24 151.243.176.0/24 maxlen: 24 151.243.177.0/24 maxlen: 24 151.243.224.0/24 maxlen: 24 151.243.247.0/24 maxlen: 24 151.244.64.0/24 maxlen: 24 151.244.196.0/24 maxlen: 24 151.245.42.0/24 maxlen: 24 151.245.61.0/24 maxlen: 24 151.245.63.0/24 maxlen: 24 151.245.88.0/24 maxlen: 24 151.245.91.0/24 maxlen: 24 151.245.148.0/24 maxlen: 24 151.245.150.0/24 maxlen: 24 151.245.194.0/24 maxlen: 24 151.245.224.0/23 maxlen: 24 151.245.226.0/23 maxlen: 24 151.245.230.0/24 maxlen: 24 151.246.164.0/23 maxlen: 24 151.246.176.0/24 maxlen: 24 151.246.180.0/24 maxlen: 24 151.246.181.0/24 maxlen: 24 151.246.184.0/24 maxlen: 24 151.246.185.0/24 maxlen: 24 151.246.186.0/24 maxlen: 24 151.246.187.0/24 maxlen: 24 151.246.189.0/24 maxlen: 24 151.246.246.0/23 maxlen: 24 151.246.249.0/24 maxlen: 24 151.246.250.0/23 maxlen: 24 151.246.255.0/24 maxlen: 24 151.247.137.0/24 maxlen: 24 151.247.161.0/24 maxlen: 24 151.247.162.0/24 maxlen: 24 151.247.163.0/24 maxlen: 24 151.247.164.0/24 maxlen: 24 151.247.165.0/24 maxlen: 24 151.247.167.0/24 maxlen: 24 151.247.169.0/24 maxlen: 24 151.247.170.0/24 maxlen: 24 151.247.177.0/24 maxlen: 24 151.247.248.0/24 maxlen: 24 151.247.249.0/24 maxlen: 24 151.247.250.0/24 maxlen: 24 151.247.253.0/24 maxlen: 24 151.247.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:dd:7a:46:bc:23:9c:e5:4b:3a:43:22:85:9b:78:ab:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 2 05:12:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c603e68c98a943d32c98a6c6e2924f3d19f853cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5f:db:35:54:83:e3:b5:81:09:09:59:6e:3c: 96:12:a8:23:92:e0:9f:a1:ca:de:b9:3d:6f:76:ff: f7:32:3c:54:d9:34:f4:85:31:00:42:db:fa:d5:c5: c1:e2:a1:68:f1:0b:c8:9d:a7:a7:66:63:ec:f2:a3: a8:41:e3:dc:4a:ed:04:65:cd:78:47:7c:77:ed:65: 89:fb:b6:e8:15:47:5e:75:ca:d1:1e:62:9b:f9:1c: 20:99:bd:6a:88:a1:cd:e7:e9:d4:3b:41:bb:53:3e: de:ba:b2:53:29:a5:14:a4:83:e0:63:49:80:5d:a5: 3a:c7:81:50:61:37:34:a9:4d:63:5c:ff:1b:c8:24: cd:0f:d9:ea:cb:a6:a0:e8:21:c6:56:29:69:b1:8c: 1d:c4:90:67:d3:ce:df:ba:ab:96:d8:a5:b9:e6:30: 8f:e4:7e:93:23:c4:ad:18:c4:00:0f:b4:de:3f:09: f5:a1:25:ad:1e:b4:fa:f3:02:36:d9:29:ae:9b:0f: cf:d5:f1:93:10:84:16:3b:e8:cc:52:5c:ee:ed:8c: 77:be:3a:f2:a5:ab:29:25:06:89:3d:12:09:2f:3b: 39:e4:f4:7a:67:0d:ff:65:e2:66:6d:1b:8d:5d:c8: cd:76:29:57:2c:c6:84:c9:9f:c1:0e:22:51:ff:29: a9:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:03:E6:8C:98:A9:43:D3:2C:98:A6:C6:E2:92:4F:3D:19:F8:53:CB X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xgPmjJipQ9MsmKbG4pJPPRn4U8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.212.0/24 151.240.118.0/23 151.240.147.0/24 151.240.150.0/24 151.240.154.0/24 151.240.161.0/24 151.240.165.0/24 151.240.179.0/24 151.240.249.0/24 151.241.9.0/24 151.241.13.0/24 151.241.26.0/24 151.241.168.0/24 151.241.174.0/24 151.241.213.0/24 151.241.222.0/23 151.242.143.0/24 151.243.138.0/23 151.243.144.0/23 151.243.170.0/24 151.243.172.0/23 151.243.176.0/23 151.243.224.0/24 151.243.247.0/24 151.244.64.0/24 151.244.196.0/24 151.245.42.0/24 151.245.61.0/24 151.245.63.0/24 151.245.88.0/24 151.245.91.0/24 151.245.148.0/24 151.245.150.0/24 151.245.194.0/24 151.245.224.0/22 151.245.230.0/24 151.246.164.0/23 151.246.176.0/24 151.246.180.0/23 151.246.184.0/22 151.246.189.0/24 151.246.246.0/23 151.246.249.0-151.246.251.255 151.246.255.0/24 151.247.137.0/24 151.247.161.0-151.247.165.255 151.247.167.0/24 151.247.169.0-151.247.170.255 151.247.177.0/24 151.247.248.0-151.247.250.255 151.247.253.0-151.247.254.255 Signature Algorithm: sha256WithRSAEncryption 3b:b7:56:e8:de:50:7c:89:28:8d:6e:ae:20:dc:15:75:88:5f: f0:fb:37:ce:36:51:eb:a0:ba:4c:e0:b4:47:dc:81:21:ef:17: 25:a0:df:5e:9b:0c:09:0d:fc:5b:b6:23:14:66:03:27:6f:55: 30:8b:54:cd:70:7b:92:e2:ba:62:a0:70:a3:ab:d9:c9:c6:fe: 6f:af:2c:24:f4:f3:87:cd:fa:71:54:b0:99:82:13:84:7a:67: 83:1c:95:8b:e0:01:eb:64:0f:ee:2d:52:0b:86:ab:26:06:fb: f6:67:ce:66:60:0f:1f:ac:bd:53:c1:26:45:a0:82:c4:d8:a4: 95:c9:d0:89:0f:58:11:1b:e4:34:46:c5:d8:5a:c6:0a:90:6e: a5:6d:6d:7b:44:da:d6:ca:db:70:30:5a:77:0e:aa:e7:0f:20: 8e:3c:74:27:08:53:8c:88:58:6e:fc:de:88:6c:b2:93:20:15: 8a:81:ee:c3:c2:9e:1f:47:5b:52:ad:37:f1:d5:04:a8:59:95: 52:68:34:6b:9b:de:8e:31:4a:a6:ae:07:e2:4c:75:a5:96:7a: 7a:35:70:18:09:a1:04:65:48:ff:92:44:ff:0e:fe:12:06:f6: 64:56:fd:7a:36:41:07:6d:65:c4:19:3a:3b:cf:08:67:99:ad: 55:e0:7a:55 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgISAZrdeka8I5zlSzpDIoWbeKslMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjAyMDUxMjQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjAzZTY4Yzk4YTk0M2QzMmM5OGE2YzZlMjkyNGYzZDE5Zjg1M2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3l/bNVSD47WBCQlZbjyWEqgjkuCf ocreuT1vdv/3MjxU2TT0hTEAQtv61cXB4qFo8QvInaenZmPs8qOoQePcSu0EZc14 R3x37WWJ+7boFUdedcrRHmKb+Rwgmb1qiKHN5+nUO0G7Uz7eurJTKaUUpIPgY0mA XaU6x4FQYTc0qU1jXP8byCTND9nqy6ag6CHGVilpsYwdxJBn087fuquW2KW55jCP 5H6TI8StGMQAD7TePwn1oSWtHrT68wI22Smumw/P1fGTEIQWO+jMUlzu7Yx3vjry paspJQaJPRIJLzs55PR6Zw3/ZeJmbRuNXcjNdilXLMaEyZ/BDiJR/ymphwIDAQAB o4IDZzCCA2MwHQYDVR0OBBYEFMYD5oyYqUPTLJimxuKSTz0Z+FPLMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEveGdQbWpKaXBROU1zbUtiRzRwSlBQUm40VThzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBewYIKwYBBQUHAQcBAf8EggFqMIIBZjCCAWIEAgABMIIB WgMEACXK1AMEAZfwdgMEAJfwkwMEAJfwlgMEAJfwmgMEAJfwoQMEAJfwpQMEAJfw swMEAJfw+QMEAJfxCQMEAJfxDQMEAJfxGgMEAJfxqAMEAJfxrgMEAJfx1QMEAZfx 3gMEAJfyjwMEAZfzigMEAZfzkAMEAJfzqgMEAZfzrAMEAZfzsAMEAJfz4AMEAJfz 9wMEAJf0QAMEAJf0xAMEAJf1KgMEAJf1PQMEAJf1PwMEAJf1WAMEAJf1WwMEAJf1 lAMEAJf1lgMEAJf1wgMEApf14AMEAJf15gMEAZf2pAMEAJf2sAMEAZf2tAMEApf2 uAMEAJf2vQMEAZf29jAMAwQAl/b5AwQCl/b4AwQAl/b/AwQAl/eJMAwDBACX96ED BAGX96QDBACX96cwDAMEAJf3qQMEAJf3qgMEAJf3sTAMAwQDl/f4AwQAl/f6MAwD BACX9/0DBACX9/4wDQYJKoZIhvcNAQELBQADggEBADu3VujeUHyJKI1uriDcFXWI X/D7N842UeugukzgtEfcgSHvFyWg316bDAkN/Fu2IxRmAydvVTCLVM1we5LiumKg cKOr2cnG/m+vLCT084fN+nFUsJmCE4R6Z4MclYvgAetkD+4tUguGqyYG+/ZnzmZg Dx+svVPBJkWggsTYpJXJ0IkPWBEb5DRGxdhaxgqQbqVtbXtE2tbK23AwWncOqucP II48dCcIU4yIWG783ohsspMgFYqB7sPCnh9HW1KtN/HVBKhZlVJoNGub3o4xSqau B+JMdaWWeno1cBgJoQRlSP+SRP8O/hIG9mRW/Xo2QQdtZcQZOjvPCGeZrVXgelU= -----END CERTIFICATE-----Generated at Wed Dec 3 09:41:09 2025 by rpki-client