This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8zVCbUYzQV_7PIWOlQVEMu4Uu8g.roa File: 8zVCbUYzQV_7PIWOlQVEMu4Uu8g.roa (raw, json) Hash identifier: o1BQsJGSDIO2ecLGRt9y2tYBk9lAiK2klqLOXj2j614= Subject key identifier: F3:35:42:6D:46:33:41:5F:FB:3C:85:8E:95:05:44:32:EE:14:BB:C8 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AED9CDB626088549DD93FF800B352F100 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8zVCbUYzQV_7PIWOlQVEMu4Uu8g.roa Signing time: Fri 05 Dec 2025 08:24:31 +0000 ROA not before: Fri 05 Dec 2025 08:24:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20473 IP address blocks: 37.202.223.0/24 maxlen: 24 151.240.4.0/24 maxlen: 24 151.240.5.0/24 maxlen: 24 151.240.6.0/24 maxlen: 24 151.240.7.0/24 maxlen: 24 151.240.11.0/24 maxlen: 24 151.240.12.0/24 maxlen: 24 151.240.13.0/24 maxlen: 24 151.240.15.0/24 maxlen: 24 151.240.16.0/24 maxlen: 24 151.240.17.0/24 maxlen: 24 151.240.18.0/24 maxlen: 24 151.240.19.0/24 maxlen: 24 151.240.20.0/24 maxlen: 24 151.240.21.0/24 maxlen: 24 151.240.22.0/24 maxlen: 24 151.240.23.0/24 maxlen: 24 151.240.25.0/24 maxlen: 24 151.240.29.0/24 maxlen: 24 151.240.31.0/24 maxlen: 24 151.240.32.0/24 maxlen: 24 151.240.33.0/24 maxlen: 24 151.240.34.0/24 maxlen: 24 151.240.35.0/24 maxlen: 24 151.240.36.0/24 maxlen: 24 151.240.37.0/24 maxlen: 24 151.240.38.0/24 maxlen: 24 151.240.39.0/24 maxlen: 24 151.240.40.0/24 maxlen: 24 151.240.41.0/24 maxlen: 24 151.240.42.0/24 maxlen: 24 151.240.68.0/24 maxlen: 24 151.240.69.0/24 maxlen: 24 151.240.70.0/24 maxlen: 24 151.240.71.0/24 maxlen: 24 151.240.73.0/24 maxlen: 24 151.240.78.0/24 maxlen: 24 151.240.83.0/24 maxlen: 24 151.240.84.0/24 maxlen: 24 151.240.85.0/24 maxlen: 24 151.240.86.0/24 maxlen: 24 151.240.87.0/24 maxlen: 24 151.240.88.0/24 maxlen: 24 151.240.89.0/24 maxlen: 24 151.240.90.0/24 maxlen: 24 151.240.126.0/24 maxlen: 24 151.240.127.0/24 maxlen: 24 151.240.128.0/24 maxlen: 24 151.240.129.0/24 maxlen: 24 151.240.130.0/24 maxlen: 24 151.240.131.0/24 maxlen: 24 151.240.132.0/24 maxlen: 24 151.240.133.0/24 maxlen: 24 151.240.134.0/24 maxlen: 24 151.240.135.0/24 maxlen: 24 151.240.136.0/24 maxlen: 24 151.240.137.0/24 maxlen: 24 151.240.138.0/24 maxlen: 24 151.240.139.0/24 maxlen: 24 151.240.140.0/24 maxlen: 24 151.240.141.0/24 maxlen: 24 151.240.142.0/24 maxlen: 24 151.240.143.0/24 maxlen: 24 151.240.152.0/24 maxlen: 24 151.240.156.0/24 maxlen: 24 151.240.157.0/24 maxlen: 24 151.240.159.0/24 maxlen: 24 151.240.160.0/24 maxlen: 24 151.240.162.0/24 maxlen: 24 151.240.163.0/24 maxlen: 24 151.240.164.0/24 maxlen: 24 151.240.166.0/24 maxlen: 24 151.240.167.0/24 maxlen: 24 151.240.168.0/24 maxlen: 24 151.240.169.0/24 maxlen: 24 151.240.170.0/24 maxlen: 24 151.240.171.0/24 maxlen: 24 151.240.172.0/24 maxlen: 24 151.240.173.0/24 maxlen: 24 151.240.174.0/24 maxlen: 24 151.240.175.0/24 maxlen: 24 151.240.176.0/24 maxlen: 24 151.240.178.0/24 maxlen: 24 151.240.180.0/24 maxlen: 24 151.240.181.0/24 maxlen: 24 151.240.182.0/24 maxlen: 24 151.240.183.0/24 maxlen: 24 151.240.184.0/24 maxlen: 24 151.240.185.0/24 maxlen: 24 151.240.186.0/24 maxlen: 24 151.240.187.0/24 maxlen: 24 151.240.188.0/24 maxlen: 24 151.240.189.0/24 maxlen: 24 151.240.190.0/24 maxlen: 24 151.240.191.0/24 maxlen: 24 151.240.192.0/24 maxlen: 24 151.240.193.0/24 maxlen: 24 151.240.194.0/24 maxlen: 24 151.240.195.0/24 maxlen: 24 151.240.196.0/24 maxlen: 24 151.240.197.0/24 maxlen: 24 151.240.198.0/24 maxlen: 24 151.240.199.0/24 maxlen: 24 151.240.200.0/24 maxlen: 24 151.240.201.0/24 maxlen: 24 151.240.202.0/24 maxlen: 24 151.240.203.0/24 maxlen: 24 151.240.204.0/24 maxlen: 24 151.240.206.0/24 maxlen: 24 151.240.207.0/24 maxlen: 24 151.240.208.0/24 maxlen: 24 151.240.209.0/24 maxlen: 24 151.240.210.0/24 maxlen: 24 151.240.211.0/24 maxlen: 24 151.240.212.0/24 maxlen: 24 151.240.213.0/24 maxlen: 24 151.240.214.0/24 maxlen: 24 151.240.215.0/24 maxlen: 24 151.240.216.0/24 maxlen: 24 151.240.217.0/24 maxlen: 24 151.240.218.0/24 maxlen: 24 151.240.219.0/24 maxlen: 24 151.240.220.0/24 maxlen: 24 151.240.221.0/24 maxlen: 24 151.240.222.0/24 maxlen: 24 151.240.223.0/24 maxlen: 24 151.240.224.0/24 maxlen: 24 151.240.225.0/24 maxlen: 24 151.240.229.0/24 maxlen: 24 151.240.233.0/24 maxlen: 24 151.240.234.0/24 maxlen: 24 151.240.235.0/24 maxlen: 24 151.240.236.0/24 maxlen: 24 151.240.237.0/24 maxlen: 24 151.240.238.0/24 maxlen: 24 151.240.240.0/24 maxlen: 24 151.240.248.0/24 maxlen: 24 151.240.254.0/24 maxlen: 24 151.241.32.0/24 maxlen: 24 151.242.145.0/24 maxlen: 24 151.242.148.0/24 maxlen: 24 151.243.45.0/24 maxlen: 24 151.243.88.0/24 maxlen: 24 151.243.89.0/24 maxlen: 24 151.244.3.0/24 maxlen: 24 151.244.4.0/24 maxlen: 24 151.244.186.0/24 maxlen: 24 151.244.187.0/24 maxlen: 24 151.245.68.0/24 maxlen: 24 151.245.132.0/24 maxlen: 24 151.245.203.0/24 maxlen: 24 151.247.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:9c:db:62:60:88:54:9d:d9:3f:f8:00:b3:52:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 5 08:24:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f335426d4633415ffb3c858e95054432ee14bbc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8c:01:35:19:79:91:40:8b:99:ef:54:35:ea: ff:85:00:c4:95:71:96:4a:56:5c:37:2f:70:0a:08: f6:1d:cd:a4:33:6e:64:3e:94:76:49:3d:04:6e:90: 42:2a:cd:7a:55:4d:4d:21:b4:12:5b:6d:ff:d5:9b: ab:62:41:35:58:93:18:13:16:55:97:2c:93:b8:cf: 1b:81:3f:63:3b:0d:79:8b:69:6a:98:a3:da:13:9c: 3c:c3:3d:9f:83:bd:8f:c2:c2:e4:1c:68:c5:72:70: f4:f5:48:28:67:bf:1f:49:6c:ee:8c:27:1e:e1:f9: 88:06:f9:a0:4e:c9:a2:a8:3d:5e:ec:43:53:c7:10: 0b:94:b2:6e:80:2c:af:af:af:fe:3b:32:a9:ee:08: 71:bc:f5:37:2c:48:c6:eb:d7:19:cd:c9:2a:22:c5: 05:73:b9:da:90:e0:96:21:9d:e4:2d:39:f3:b5:91: 4a:b5:64:6a:4f:1a:24:5d:50:ca:e7:c9:e3:82:28: c8:cf:15:c2:d8:20:2e:20:1a:40:80:a6:e7:45:8f: 21:27:21:5e:fa:8c:f9:e7:8d:35:1d:3d:ce:e2:2a: ca:ce:8d:10:4f:9e:cd:0b:cf:aa:55:01:ff:b4:ad: eb:a8:4a:71:86:38:df:82:62:7f:4a:10:36:b6:1c: 62:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:35:42:6D:46:33:41:5F:FB:3C:85:8E:95:05:44:32:EE:14:BB:C8 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8zVCbUYzQV_7PIWOlQVEMu4Uu8g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.223.0/24 151.240.4.0/22 151.240.11.0-151.240.13.255 151.240.15.0-151.240.23.255 151.240.25.0/24 151.240.29.0/24 151.240.31.0-151.240.42.255 151.240.68.0/22 151.240.73.0/24 151.240.78.0/24 151.240.83.0-151.240.90.255 151.240.126.0-151.240.143.255 151.240.152.0/24 151.240.156.0/23 151.240.159.0-151.240.160.255 151.240.162.0-151.240.164.255 151.240.166.0-151.240.176.255 151.240.178.0/24 151.240.180.0-151.240.204.255 151.240.206.0-151.240.225.255 151.240.229.0/24 151.240.233.0-151.240.238.255 151.240.240.0/24 151.240.248.0/24 151.240.254.0/24 151.241.32.0/24 151.242.145.0/24 151.242.148.0/24 151.243.45.0/24 151.243.88.0/23 151.244.3.0-151.244.4.255 151.244.186.0/23 151.245.68.0/24 151.245.132.0/24 151.245.203.0/24 151.247.218.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:89:b3:13:51:9b:e3:82:03:5f:64:af:b9:28:a8:a9:33:51: 1c:c8:a6:30:a9:6c:a3:3c:17:d1:1a:74:c5:b8:6a:0a:79:0c: bb:0e:cf:97:d1:41:67:d6:a4:a4:89:13:60:cd:7e:74:b5:76: 9e:eb:6a:34:85:ad:96:52:40:df:95:ff:1a:43:df:20:4f:a3: 0d:ba:bd:bb:25:66:03:ba:2f:05:12:e6:cf:d0:fc:b0:7e:45: a5:ea:f9:51:d3:85:8b:8e:56:99:2e:9f:45:e8:42:f8:57:ba: b0:eb:68:33:f6:ec:1a:77:cd:9f:ce:b0:9f:62:83:9a:e0:c9: ce:65:0f:51:2c:ed:8e:3f:c6:b1:ad:76:39:9e:9b:b0:5c:7f: 91:ea:26:84:60:ac:76:84:f2:23:32:22:01:53:a7:23:bf:e4: f0:85:a2:ad:f6:bd:92:b7:47:fc:dc:c4:0c:4c:48:09:73:dd: ad:79:f7:4a:72:0d:41:d1:ce:81:12:b1:0f:ed:5f:52:d3:b5: 80:33:37:66:c6:50:6a:7d:39:72:e9:e0:e4:5f:d7:ae:cf:28: 6f:10:96:56:9e:1b:3b:00:86:27:77:85:9c:a5:6f:b5:dd:f7: d4:ba:e3:c8:4c:5a:d6:47:d9:84:6b:1d:5a:03:d1:bd:ff:98: 67:d0:8c:6c -----BEGIN CERTIFICATE----- MIIGOTCCBSGgAwIBAgISAZrtnNtiYIhUndk/+ACzUvEAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjA1MDgyNDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzM1NDI2ZDQ2MzM0MTVmZmIzYzg1OGU5NTA1NDQzMmVlMTRiYmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIwBNRl5kUCLme9UNer/hQDElXGW SlZcNy9wCgj2Hc2kM25kPpR2ST0EbpBCKs16VU1NIbQSW23/1ZurYkE1WJMYExZV lyyTuM8bgT9jOw15i2lqmKPaE5w8wz2fg72PwsLkHGjFcnD09UgoZ78fSWzujCce 4fmIBvmgTsmiqD1e7ENTxxALlLJugCyvr6/+OzKp7ghxvPU3LEjG69cZzckqIsUF c7nakOCWIZ3kLTnztZFKtWRqTxokXVDK58njgijIzxXC2CAuIBpAgKbnRY8hJyFe +oz55401HT3O4irKzo0QT57NC8+qVQH/tK3rqEpxhjjfgmJ/ShA2thxi8wIDAQAB o4IDRTCCA0EwHQYDVR0OBBYEFPM1Qm1GM0Ff+zyFjpUFRDLuFLvIMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvOHpWQ2JVWXpRVl83UElXT2xRVkVNdTRVdThnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBWQYIKwYBBQUHAQcBAf8EggFIMIIBRDCCAUAEAgABMIIB OAMEACXK3wMEApfwBDAMAwQAl/ALAwQBl/AMMAwDBACX8A8DBAOX8BADBACX8BkD BACX8B0wDAMEAJfwHwMEAJfwKgMEApfwRAMEAJfwSQMEAJfwTjAMAwQAl/BTAwQA l/BaMAwDBAGX8H4DBASX8IADBACX8JgDBAGX8JwwDAMEAJfwnwMEAJfwoDAMAwQB l/CiAwQAl/CkMAwDBAGX8KYDBACX8LADBACX8LIwDAMEApfwtAMEAJfwzDAMAwQB l/DOAwQBl/DgAwQAl/DlMAwDBACX8OkDBACX8O4DBACX8PADBACX8PgDBACX8P4D BACX8SADBACX8pEDBACX8pQDBACX8y0DBAGX81gwDAMEAJf0AwMEAJf0BAMEAZf0 ugMEAJf1RAMEAJf1hAMEAJf1ywMEAJf32jANBgkqhkiG9w0BAQsFAAOCAQEAO4mz E1Gb44IDX2SvuSioqTNRHMimMKlsozwX0Rp0xbhqCnkMuw7Pl9FBZ9akpIkTYM1+ dLV2nutqNIWtllJA35X/GkPfIE+jDbq9uyVmA7ovBRLmz9D8sH5Fper5UdOFi45W mS6fRehC+Fe6sOtoM/bsGnfNn86wn2KDmuDJzmUPUSztjj/Gsa12OZ6bsFx/keom hGCsdoTyIzIiAVOnI7/k8IWirfa9krdH/NzEDExICXPdrXn3SnINQdHOgRKxD+1f UtO1gDM3ZsZQan05cung5F/Xrs8obxCWVp4bOwCGJ3eFnKVvtd331LrjyExa1kfZ hGsdWgPRvf+YZ9CMbA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:11 2025 by rpki-client