This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BQqXKgB7Gwq-if4S_S30XpTWr18.roa File: BQqXKgB7Gwq-if4S_S30XpTWr18.roa (raw, json) Hash identifier: 9DNLCLdX+YFDFdGkgyZIRdRlr2hQfSNEL2JaF1bA9Us= Subject key identifier: 05:0A:97:2A:00:7B:1B:0A:BE:89:FE:12:FD:2D:F4:5E:94:D6:AF:5F Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B0340E4C925ACE01189DD451BDC096B35 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BQqXKgB7Gwq-if4S_S30XpTWr18.roa Signing time: Tue 09 Dec 2025 13:15:43 +0000 ROA not before: Tue 09 Dec 2025 13:15:43 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 211439 IP address blocks: 151.242.138.0/24 maxlen: 24 151.244.77.0/24 maxlen: 24 151.244.84.0/24 maxlen: 24 151.245.79.0/24 maxlen: 24 151.245.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:03:40:e4:c9:25:ac:e0:11:89:dd:45:1b:dc:09:6b:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 9 13:15:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=050a972a007b1b0abe89fe12fd2df45e94d6af5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:90:cc:1b:50:76:3c:d6:db:5a:30:a8:7b:e5: 01:c3:0f:72:e6:f2:a8:69:c0:04:f3:9c:98:22:e1: e4:f2:66:fa:5d:65:3b:df:ff:35:93:53:d6:4f:77: 29:40:6f:38:dd:3c:18:36:e5:39:26:30:01:0f:f3: 0d:6b:9a:a5:a8:3c:a1:66:e9:0b:84:f3:dc:20:6d: 6b:63:a4:f2:86:21:cd:56:ef:90:38:a9:5d:2d:6f: d8:56:90:47:17:33:77:68:04:9e:7f:0d:71:36:68: 73:38:97:01:1c:dc:71:be:b7:bf:1a:ea:2d:c9:84: e4:8d:5e:40:88:7e:e7:4d:f8:ad:75:ce:b5:4e:17: 34:c4:e4:24:07:20:53:0c:b0:2e:01:f1:b3:7c:29: 44:9a:1f:23:1c:01:80:cc:f1:b4:42:12:63:d4:22: 46:5c:50:e4:7a:0e:af:e7:cb:6e:b2:70:68:10:6d: 8d:0e:e6:ca:ec:46:62:16:ff:25:c7:c6:e7:a3:69: 7d:57:df:93:19:07:64:a5:54:10:0e:3f:28:7e:17: 2e:73:43:46:7f:29:f0:d1:ab:96:b7:11:6c:88:06: 20:21:72:b6:41:ab:7a:0c:80:48:57:91:2a:67:c4: 84:b3:57:63:4f:ac:79:b6:65:7f:64:de:7b:3e:c9: 77:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:0A:97:2A:00:7B:1B:0A:BE:89:FE:12:FD:2D:F4:5E:94:D6:AF:5F X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BQqXKgB7Gwq-if4S_S30XpTWr18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.242.138.0/24 151.244.77.0/24 151.244.84.0/24 151.245.79.0/24 151.245.84.0/24 Signature Algorithm: sha256WithRSAEncryption a3:cf:4e:38:ca:26:6d:85:44:3c:4e:77:f2:55:9e:37:40:2b: a8:43:f1:0b:74:7d:cb:f7:ba:0b:0e:c3:dd:5e:b0:25:f0:20: f6:ba:a8:f4:6c:44:cc:f8:68:19:6d:0e:94:a2:02:5d:a5:83: 9a:d3:2c:1e:80:43:38:cf:55:de:66:74:4b:40:cc:4a:65:65: a9:fe:93:c3:61:44:cf:80:2e:75:48:7b:55:55:ec:d4:48:07: 25:75:38:00:d7:cd:67:42:de:ba:d4:fb:cc:b2:89:12:23:c3: c9:23:f3:05:c9:2b:04:57:e7:b9:13:2b:1f:ee:a3:2b:9a:67: e4:92:41:66:24:36:bb:d6:80:f3:9d:14:7e:66:1f:64:f6:4c: df:87:7f:c0:d0:e8:93:7d:14:2c:b6:59:46:b6:55:4f:24:59: 97:4b:ad:75:84:87:cb:97:fa:2a:cf:2d:22:aa:83:81:19:4f: 76:dc:9a:4b:5a:f0:37:e9:56:d9:7a:5d:f8:a2:43:97:e9:fa: 38:64:19:31:0b:2d:4a:5c:dd:95:ea:7b:87:f4:8f:ba:cd:45: cf:32:7a:26:18:6b:24:5e:6f:b9:c6:9e:71:14:4a:50:db:76: a3:8a:dd:e2:3f:9e:2d:0f:68:e2:0d:32:15:15:b1:69:64:f8: f5:a0:58:2a -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZsDQOTJJazgEYndRRvcCWs1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjA5MTMxNTQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNTBhOTcyYTAwN2IxYjBhYmU4OWZlMTJmZDJkZjQ1ZTk0ZDZhZjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5DMG1B2PNbbWjCoe+UBww9y5vKo acAE85yYIuHk8mb6XWU73/81k1PWT3cpQG843TwYNuU5JjABD/MNa5qlqDyhZukL hPPcIG1rY6TyhiHNVu+QOKldLW/YVpBHFzN3aASefw1xNmhzOJcBHNxxvre/Guot yYTkjV5AiH7nTfitdc61Thc0xOQkByBTDLAuAfGzfClEmh8jHAGAzPG0QhJj1CJG XFDkeg6v58tusnBoEG2NDubK7EZiFv8lx8bno2l9V9+TGQdkpVQQDj8ofhcuc0NG fynw0auWtxFsiAYgIXK2Qat6DIBIV5EqZ8SEs1djT6x5tmV/ZN57Psl3gQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFAUKlyoAexsKvon+Ev0t9F6U1q9fMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvQlFxWEtnQjdHd3EtaWY0U19TMzBYcFRXcjE4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAl/KKAwQA l/RNAwQAl/RUAwQAl/VPAwQAl/VUMA0GCSqGSIb3DQEBCwUAA4IBAQCjz044yiZt hUQ8TnfyVZ43QCuoQ/ELdH3L97oLDsPdXrAl8CD2uqj0bETM+GgZbQ6UogJdpYOa 0ywegEM4z1XeZnRLQMxKZWWp/pPDYUTPgC51SHtVVezUSAcldTgA181nQt661PvM sokSI8PJI/MFySsEV+e5Eysf7qMrmmfkkkFmJDa71oDznRR+Zh9k9kzfh3/A0OiT fRQstllGtlVPJFmXS611hIfLl/oqzy0iqoOBGU923JpLWvA36VbZel34okOX6fo4 ZBkxCy1KXN2V6nuH9I+6zUXPMnomGGskXm+5xp5xFEpQ23ajit3iP54tD2jiDTIV FbFpZPj1oFgq -----END CERTIFICATE-----Generated at Wed Dec 17 19:18:16 2025 by rpki-client