This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FR9Pxr5xoMA3r6Gm9ECemSacM_k.roa File: FR9Pxr5xoMA3r6Gm9ECemSacM_k.roa (raw, json) Hash identifier: ZXZlRiafzZv7YsbbuME5zCMqDk/OEplevRIAzGhmWbw= Subject key identifier: 15:1F:4F:C6:BE:71:A0:C0:37:AF:A1:A6:F4:40:9E:99:26:9C:33:F9 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AE559BA25C7977A3436F11E6A992033CA Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FR9Pxr5xoMA3r6Gm9ECemSacM_k.roa Signing time: Wed 03 Dec 2025 17:54:14 +0000 ROA not before: Wed 03 Dec 2025 17:54:14 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214024 IP address blocks: 151.241.128.0/22 maxlen: 24 151.243.44.0/24 maxlen: 24 151.244.128.0/24 maxlen: 24 151.244.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e5:59:ba:25:c7:97:7a:34:36:f1:1e:6a:99:20:33:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 3 17:54:14 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=151f4fc6be71a0c037afa1a6f4409e99269c33f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:aa:3b:d4:0c:a5:fc:c7:49:29:04:7a:5e:57: 37:95:49:cb:87:20:3f:9c:5e:5a:d1:d9:fb:9f:6d: fd:3c:40:9e:74:0b:7a:00:ac:60:26:8f:a9:27:e9: 89:d7:06:27:f2:31:ed:a5:20:b3:24:79:61:cc:ae: 43:59:1d:41:e9:80:8c:a1:38:20:b9:14:d7:27:c0: b6:9f:e5:a1:69:d5:d0:b7:df:da:c5:e3:e2:b6:eb: 23:30:08:62:d9:13:2f:cc:b7:5c:47:91:56:12:1a: 03:0e:6e:83:7e:f5:28:27:43:b9:6e:1a:8d:f2:89: 5d:8c:ea:fd:94:06:c6:9f:95:55:31:da:87:06:c5: 98:65:fd:d3:df:f7:d2:50:05:81:d0:88:fd:40:5c: af:07:b6:54:66:41:77:6d:be:a8:ef:03:6e:f4:72: ef:bb:52:80:e0:7a:09:c7:6c:48:99:ee:6d:fe:15: 59:14:58:5c:96:fc:91:f3:5e:25:c0:d0:80:60:cf: 3f:25:d4:cf:21:ca:da:5f:f3:86:fe:fc:48:81:7e: e6:6b:ad:43:0d:ab:d3:f9:8c:93:82:a3:23:1e:fd: 43:cb:0f:45:dc:74:bd:78:8e:79:dd:d4:e1:13:48: 6a:4a:93:33:b0:96:4d:01:41:ec:e1:09:a5:4a:c6: e9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:1F:4F:C6:BE:71:A0:C0:37:AF:A1:A6:F4:40:9E:99:26:9C:33:F9 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/FR9Pxr5xoMA3r6Gm9ECemSacM_k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.128.0/22 151.243.44.0/24 151.244.128.0/24 151.244.130.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:ef:98:0f:4f:a4:df:92:b9:56:6e:36:d8:ca:f7:a4:59:92: 43:b5:92:01:b1:c9:6b:26:a4:be:4f:55:4b:ae:19:f5:ce:78: c5:e6:da:67:d1:3e:b1:23:d1:7b:ed:d0:4d:05:56:12:e8:62: 73:a9:ee:a2:2d:16:ba:8d:30:3b:6d:d2:89:d9:09:3a:09:8d: 8f:6a:d0:9d:7f:88:96:fd:44:7b:a6:29:f8:d0:e4:68:40:91: 17:a8:62:82:ba:e3:bb:de:34:44:b0:57:7c:99:77:ea:f4:05: 8e:07:a6:fb:50:22:81:71:ec:8c:4e:c0:11:ae:a8:d7:5a:31: 6a:d2:01:40:67:1d:dc:ba:ff:8b:1b:66:10:6d:c6:3a:8c:2c: 0a:89:1a:cf:ed:40:94:e4:be:f8:16:5b:a4:16:fb:23:07:54: 8b:d4:53:36:87:dd:8b:5f:f7:4f:cb:25:92:53:28:31:29:d1: b4:fd:97:d0:e1:c0:ea:b4:46:bf:8e:50:dd:7d:eb:27:fe:8f: 21:01:77:d7:c8:d8:72:0f:c5:b9:98:2f:ae:4c:2b:ad:45:c3: c6:c0:43:a6:d2:c3:08:87:ee:d1:31:ee:00:19:eb:c7:d1:0e: ad:35:7a:6e:f5:e8:d9:f7:b2:c5:cc:45:08:ef:5c:dd:51:d7: 24:b0:93:01 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZrlWbolx5d6NDbxHmqZIDPKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjAzMTc1NDE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNTFmNGZjNmJlNzFhMGMwMzdhZmExYTZmNDQwOWU5OTI2OWMzM2Y5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ko71Ayl/MdJKQR6Xlc3lUnLhyA/ nF5a0dn7n239PECedAt6AKxgJo+pJ+mJ1wYn8jHtpSCzJHlhzK5DWR1B6YCMoTgg uRTXJ8C2n+WhadXQt9/axePitusjMAhi2RMvzLdcR5FWEhoDDm6DfvUoJ0O5bhqN 8oldjOr9lAbGn5VVMdqHBsWYZf3T3/fSUAWB0Ij9QFyvB7ZUZkF3bb6o7wNu9HLv u1KA4HoJx2xIme5t/hVZFFhclvyR814lwNCAYM8/JdTPIcraX/OG/vxIgX7ma61D DavT+YyTgqMjHv1Dyw9F3HS9eI553dThE0hqSpMzsJZNAUHs4QmlSsbpoQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFBUfT8a+caDAN6+hpvRAnpkmnDP5MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvRlI5UHhyNXhvTUEzcjZHbTlFQ2VtU2FjTV9rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCl/GAAwQA l/MsAwQAl/SAAwQAl/SCMA0GCSqGSIb3DQEBCwUAA4IBAQB675gPT6TfkrlWbjbY yvekWZJDtZIBsclrJqS+T1VLrhn1znjF5tpn0T6xI9F77dBNBVYS6GJzqe6iLRa6 jTA7bdKJ2Qk6CY2PatCdf4iW/UR7pin40ORoQJEXqGKCuuO73jREsFd8mXfq9AWO B6b7UCKBceyMTsARrqjXWjFq0gFAZx3cuv+LG2YQbcY6jCwKiRrP7UCU5L74Fluk FvsjB1SL1FM2h92LX/dPyyWSUygxKdG0/ZfQ4cDqtEa/jlDdfesn/o8hAXfXyNhy D8W5mC+uTCutRcPGwEOm0sMIh+7RMe4AGevH0Q6tNXpu9ejZ97LFzEUI71zdUdck sJMB -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:17 2025 by rpki-client