This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1N3phhPpZwe095KYdydQisrSpAk.roa
File: 1N3phhPpZwe095KYdydQisrSpAk.roa (raw, json)
Hash identifier: FqR/ujq1dsQxrwgUnsG3KOdKOse9OXY0df3cDbxvrn4=
Subject key identifier: D4:DD:E9:86:13:E9:67:07:B4:F7:92:98:77:27:50:8A:CA:D2:A4:09
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019B1635EB8A5FEFA5271AF2610E0C8FC5A8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1N3phhPpZwe095KYdydQisrSpAk.roa
Signing time: Sat 13 Dec 2025 05:36:31 +0000
ROA not before: Sat 13 Dec 2025 05:36:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197537
IP address blocks: 151.242.112.0/24 maxlen: 24
151.244.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Dec 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:16:35:eb:8a:5f:ef:a5:27:1a:f2:61:0e:0c:8f:c5:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Dec 13 05:36:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4dde98613e96707b4f792987727508acad2a409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7a:88:7f:69:fb:51:12:01:68:9c:5d:f3:40:
94:ca:94:bd:70:a0:91:d3:07:5f:98:3b:99:f1:41:
af:29:ad:fc:c0:a2:4f:db:ef:8f:d5:c6:10:c1:fa:
02:03:24:a1:98:be:c9:65:92:97:af:0b:a3:21:8d:
49:dd:57:c0:a7:ea:04:b4:5b:25:42:42:60:8a:e0:
0d:3e:25:e7:3a:45:78:3d:77:78:46:59:cb:a6:31:
7d:f0:c8:2b:3e:00:97:43:94:aa:db:db:d2:7a:aa:
32:23:c1:76:9b:b8:94:f3:42:9c:90:08:ed:a7:ad:
d0:ca:6e:47:da:88:a8:0c:00:63:37:f6:28:9f:85:
9a:4d:b9:14:12:be:a4:07:43:c0:13:83:b8:d5:2e:
28:9b:35:86:bc:46:72:2c:21:69:90:bb:cb:e0:05:
1b:f9:fe:b1:bd:43:cd:ee:af:bc:c5:e6:84:00:f3:
0b:4c:78:e3:fa:04:47:f2:79:42:21:8e:8a:74:dd:
2a:a3:fa:a5:59:87:04:3f:22:cb:ac:95:ce:09:1a:
79:b1:78:96:d6:13:4c:7c:01:4a:df:c3:f5:e4:bd:
a2:d6:d6:a5:a2:ab:fe:1b:9c:10:6e:46:16:54:ec:
6d:bf:b2:22:17:96:13:b7:e8:41:06:8c:cd:db:f4:
32:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DD:E9:86:13:E9:67:07:B4:F7:92:98:77:27:50:8A:CA:D2:A4:09
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1N3phhPpZwe095KYdydQisrSpAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.112.0/24
151.244.3.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:7e:48:27:51:95:d8:b1:01:b9:d6:a5:75:46:72:69:a7:e9:
49:44:1c:03:e4:a2:67:f1:72:c9:d8:b0:e3:d6:e8:b5:6c:58:
2f:40:e1:c4:c3:51:e0:e6:be:20:25:8e:52:fb:3b:01:bc:d5:
d0:5b:34:b8:bc:cd:e4:f5:7c:77:cf:73:8a:cf:84:f1:62:9c:
80:e4:31:49:07:29:df:43:fa:77:03:cb:0e:4f:c7:8e:de:41:
fc:f6:62:3e:77:27:47:44:7e:71:c9:e8:c6:d0:62:aa:3f:a6:
35:e5:7a:6f:39:95:01:cf:a4:60:30:5f:33:77:86:f6:e6:e9:
92:c6:e2:bc:75:8f:0b:72:da:d9:3d:2a:9d:49:5c:b3:a8:af:
b2:97:35:e1:0e:38:cd:e2:a3:54:6c:51:8b:08:05:68:a1:9f:
12:43:5a:a9:83:65:b8:cb:db:4e:a8:e6:b9:51:95:f0:47:23:
6b:69:14:1e:f6:c2:8a:b9:a5:ca:af:87:e3:1c:b7:3a:49:b0:
8c:ec:9e:2a:57:c6:e6:74:2c:7f:66:2c:4a:8b:4b:e5:21:37:
ce:b2:0a:e7:00:53:95:5d:09:02:bd:ac:bc:a3:d0:9c:b4:4b:
21:7a:2d:19:04:50:ab:97:fa:6c:74:d5:18:4e:1e:e3:c5:41:
e2:ef:80:3a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZsWNeuKX++lJxryYQ4Mj8WoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUxMjEzMDUzNjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGRkZTk4NjEzZTk2NzA3YjRmNzkyOTg3NzI3NTA4YWNhZDJhNDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XqIf2n7URIBaJxd80CUypS9cKCR
0wdfmDuZ8UGvKa38wKJP2++P1cYQwfoCAyShmL7JZZKXrwujIY1J3VfAp+oEtFsl
QkJgiuANPiXnOkV4PXd4RlnLpjF98MgrPgCXQ5Sq29vSeqoyI8F2m7iU80KckAjt
p63Qym5H2oioDABjN/Yon4WaTbkUEr6kB0PAE4O41S4omzWGvEZyLCFpkLvL4AUb
+f6xvUPN7q+8xeaEAPMLTHjj+gRH8nlCIY6KdN0qo/qlWYcEPyLLrJXOCRp5sXiW
1hNMfAFK38P15L2i1taloqv+G5wQbkYWVOxtv7IiF5YTt+hBBozN2/QykQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNTd6YYT6WcHtPeSmHcnUIrK0qQJMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvMU4zcGhoUHBad2UwOTVLWWR5ZFFpc3JTcEFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/JwAwQA
l/QDMA0GCSqGSIb3DQEBCwUAA4IBAQCifkgnUZXYsQG51qV1RnJpp+lJRBwD5KJn
8XLJ2LDj1ui1bFgvQOHEw1Hg5r4gJY5S+zsBvNXQWzS4vM3k9Xx3z3OKz4TxYpyA
5DFJBynfQ/p3A8sOT8eO3kH89mI+dydHRH5xyejG0GKqP6Y15XpvOZUBz6RgMF8z
d4b25umSxuK8dY8LctrZPSqdSVyzqK+ylzXhDjjN4qNUbFGLCAVooZ8SQ1qpg2W4
y9tOqOa5UZXwRyNraRQe9sKKuaXKr4fjHLc6SbCM7J4qV8bmdCx/ZixKi0vlITfO
sgrnAFOVXQkCvay8o9CctEshei0ZBFCrl/psdNUYTh7jxUHi74A6
-----END CERTIFICATE-----
Generated at Wed Dec 17 20:09:19 2025 by rpki-client