This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1--i2SQr7jWVaxld8lCfcq4lEucA.roa File: 1--i2SQr7jWVaxld8lCfcq4lEucA.roa (raw, json) Hash identifier: +vgJrhcEr5xLLOtAxNDQbsKmOVvjMyQmU8t727LMotU= Subject key identifier: FB:E8:B6:49:0A:FB:8D:65:5A:C6:57:7C:94:27:DC:AB:89:44:B9:C0 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AED9CDFADC9DB6687AFE057D9A2CF9667 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1--i2SQr7jWVaxld8lCfcq4lEucA.roa Signing time: Fri 05 Dec 2025 08:24:32 +0000 ROA not before: Fri 05 Dec 2025 08:24:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 151.240.45.0/24 maxlen: 24 151.240.163.0/24 maxlen: 24 151.240.173.0/24 maxlen: 24 151.241.30.0/24 maxlen: 24 151.241.39.0/24 maxlen: 24 151.241.50.0/24 maxlen: 24 151.241.64.0/24 maxlen: 24 151.241.67.0/24 maxlen: 24 151.241.70.0/24 maxlen: 24 151.241.71.0/24 maxlen: 24 151.241.73.0/24 maxlen: 24 151.241.77.0/24 maxlen: 24 151.241.95.0/24 maxlen: 24 151.241.115.0/24 maxlen: 24 151.241.160.0/24 maxlen: 24 151.241.176.0/24 maxlen: 24 151.241.204.0/24 maxlen: 24 151.242.45.0/24 maxlen: 24 151.242.158.0/24 maxlen: 24 151.243.2.0/24 maxlen: 24 151.243.105.0/24 maxlen: 24 151.243.137.0/24 maxlen: 24 151.244.5.0/24 maxlen: 24 151.244.57.0/24 maxlen: 24 151.244.111.0/24 maxlen: 24 151.244.114.0/24 maxlen: 24 151.244.115.0/24 maxlen: 24 151.244.131.0/24 maxlen: 24 151.244.191.0/24 maxlen: 24 151.244.193.0/24 maxlen: 24 151.244.198.0/24 maxlen: 24 151.244.201.0/24 maxlen: 24 151.244.212.0/24 maxlen: 24 151.244.243.0/24 maxlen: 24 151.245.28.0/24 maxlen: 24 151.245.70.0/24 maxlen: 24 151.245.76.0/24 maxlen: 24 151.245.78.0/24 maxlen: 24 151.245.104.0/24 maxlen: 24 151.245.195.0/24 maxlen: 24 151.245.201.0/24 maxlen: 24 151.245.212.0/24 maxlen: 24 151.247.120.0/23 maxlen: 24 151.247.122.0/23 maxlen: 24 151.247.124.0/23 maxlen: 24 151.247.126.0/23 maxlen: 24 151.247.188.0/24 maxlen: 24 151.247.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:9c:df:ad:c9:db:66:87:af:e0:57:d9:a2:cf:96:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 5 08:24:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fbe8b6490afb8d655ac6577c9427dcab8944b9c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b0:e7:c5:4a:8f:1f:a1:c7:ef:f9:70:f3:8e: 8b:55:12:25:1a:46:c6:b1:aa:93:5a:84:35:50:51: 5d:6d:b4:dd:af:26:c6:60:fa:b3:b5:04:18:fe:fb: b6:50:8a:22:9a:a8:7b:a0:4f:f3:7d:e5:2f:58:c2: 0a:ad:e6:ec:6b:c3:06:c1:34:47:ca:a1:58:b4:f9: b7:71:30:50:7e:c1:0c:ef:15:48:90:65:4f:61:cd: b6:90:d2:82:51:52:6d:c2:33:97:79:54:0e:5a:90: b4:f5:3c:81:e8:89:3f:8f:53:a2:90:63:91:fd:1c: ab:42:60:36:69:95:a9:a8:66:82:72:ea:40:fc:33: 59:79:f4:df:b3:1c:72:9a:c2:49:ab:48:e0:93:8e: 1a:d3:ab:f2:34:8f:65:03:e0:59:a0:bd:4f:c6:94: 6d:ef:47:19:5d:45:c6:e3:06:10:e8:57:5e:05:35: af:14:b6:71:40:a5:7d:f3:95:40:c6:58:44:da:b5: d2:ad:b2:16:75:98:1b:99:f6:c7:28:8a:ac:55:da: d4:9a:8a:85:5f:77:ed:13:97:a0:f1:76:e4:4f:f5: 13:0f:31:aa:1c:0a:f7:96:e9:30:c7:b3:fd:6a:87: 13:99:54:57:2d:d8:b6:68:fd:30:6b:0c:94:8f:51: 11:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:E8:B6:49:0A:FB:8D:65:5A:C6:57:7C:94:27:DC:AB:89:44:B9:C0 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1--i2SQr7jWVaxld8lCfcq4lEucA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.45.0/24 151.240.163.0/24 151.240.173.0/24 151.241.30.0/24 151.241.39.0/24 151.241.50.0/24 151.241.64.0/24 151.241.67.0/24 151.241.70.0/23 151.241.73.0/24 151.241.77.0/24 151.241.95.0/24 151.241.115.0/24 151.241.160.0/24 151.241.176.0/24 151.241.204.0/24 151.242.45.0/24 151.242.158.0/24 151.243.2.0/24 151.243.105.0/24 151.243.137.0/24 151.244.5.0/24 151.244.57.0/24 151.244.111.0/24 151.244.114.0/23 151.244.131.0/24 151.244.191.0/24 151.244.193.0/24 151.244.198.0/24 151.244.201.0/24 151.244.212.0/24 151.244.243.0/24 151.245.28.0/24 151.245.70.0/24 151.245.76.0/24 151.245.78.0/24 151.245.104.0/24 151.245.195.0/24 151.245.201.0/24 151.245.212.0/24 151.247.120.0/21 151.247.188.0/24 151.247.221.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:bb:92:ab:3a:88:8f:2b:68:73:7c:6c:ca:9b:ad:dd:43:57: 95:14:7b:35:b1:c6:4a:56:05:6d:dc:84:61:6c:f3:28:51:21: 0a:a7:89:b0:0c:d9:f9:44:29:70:92:12:07:0a:a6:fb:4b:01: 56:d4:cd:57:52:ee:fa:eb:66:e2:cd:00:5d:87:ae:9e:ef:dd: 64:b8:7f:45:0e:83:3b:17:94:24:dc:e0:79:c1:de:49:18:df: 54:3c:3b:2d:a9:49:08:2f:33:2f:e1:fb:67:87:be:4e:11:53: b3:cb:98:0e:47:fc:5c:c3:ee:dc:9c:c7:45:80:87:56:48:6b: fe:3b:84:7a:3e:19:7f:97:3c:79:57:e8:de:37:b1:53:95:68: 27:7e:4b:73:02:2f:cd:b1:45:09:51:7a:70:79:f7:b7:e1:7b: 13:79:60:62:7b:99:76:9d:68:3e:5c:3d:06:ec:47:83:e4:ad: 12:f5:5e:61:ee:e9:e0:85:1e:a2:4b:75:0d:4a:cf:8d:27:f1: b2:d1:6a:45:42:c8:71:eb:e7:06:c2:c4:c7:cd:ce:62:f0:b7: c0:d6:40:dc:2c:a3:d7:cb:e1:c6:56:34:63:04:82:6f:7a:5c: a2:56:17:7e:58:cf:6f:13:87:4e:82:43:02:cf:7b:09:c4:c1: e1:13:11:a8 -----BEGIN CERTIFICATE----- MIIGBDCCBOygAwIBAgISAZrtnN+tydtmh6/gV9miz5ZnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjA1MDgyNDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmU4YjY0OTBhZmI4ZDY1NWFjNjU3N2M5NDI3ZGNhYjg5NDRiOWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorDnxUqPH6HH7/lw846LVRIlGkbG saqTWoQ1UFFdbbTdrybGYPqztQQY/vu2UIoimqh7oE/zfeUvWMIKrebsa8MGwTRH yqFYtPm3cTBQfsEM7xVIkGVPYc22kNKCUVJtwjOXeVQOWpC09TyB6Ik/j1OikGOR /RyrQmA2aZWpqGaCcupA/DNZefTfsxxymsJJq0jgk44a06vyNI9lA+BZoL1PxpRt 70cZXUXG4wYQ6FdeBTWvFLZxQKV985VAxlhE2rXSrbIWdZgbmfbHKIqsVdrUmoqF X3ftE5eg8XbkT/UTDzGqHAr3lukwx7P9aocTmVRXLdi2aP0wawyUj1ER9wIDAQAB o4IDEDCCAwwwHQYDVR0OBBYEFPvotkkK+41lWsZXfJQn3KuJRLnAMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvMS0taTJTUXI3aldWYXhsZDhsQ2ZjcTRsRXVjQS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOGUvZjQzYjFkLTllNTAtNDU1MS1hZTZhLTE3YjlkZTE0MTI1 Mi8xL3htSm05R2I3SkppamxGbXpOUzJpVVZHbHBNQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjCCASMGCCsGAQUFBwEHAQH/BIIBEjCCAQ4wggEKBAIAATCC AQIDBACX8C0DBACX8KMDBACX8K0DBACX8R4DBACX8ScDBACX8TIDBACX8UADBACX 8UMDBAGX8UYDBACX8UkDBACX8U0DBACX8V8DBACX8XMDBACX8aADBACX8bADBACX 8cwDBACX8i0DBACX8p4DBACX8wIDBACX82kDBACX84kDBACX9AUDBACX9DkDBACX 9G8DBAGX9HIDBACX9IMDBACX9L8DBACX9MEDBACX9MYDBACX9MkDBACX9NQDBACX 9PMDBACX9RwDBACX9UYDBACX9UwDBACX9U4DBACX9WgDBACX9cMDBACX9ckDBACX 9dQDBAOX93gDBACX97wDBACX990wDQYJKoZIhvcNAQELBQADggEBAD27kqs6iI8r aHN8bMqbrd1DV5UUezWxxkpWBW3chGFs8yhRIQqnibAM2flEKXCSEgcKpvtLAVbU zVdS7vrrZuLNAF2Hrp7v3WS4f0UOgzsXlCTc4HnB3kkY31Q8Oy2pSQgvMy/h+2eH vk4RU7PLmA5H/FzD7tycx0WAh1ZIa/47hHo+GX+XPHlX6N43sVOVaCd+S3MCL82x RQlRenB597fhexN5YGJ7mXadaD5cPQbsR4PkrRL1XmHu6eCFHqJLdQ1Kz40n8bLR akVCyHHr5wbCxMfNzmLwt8DWQNwso9fL4cZWNGMEgm96XKJWF35Yz28Th06CQwLP ewnEweETEag= -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:55 2025 by rpki-client