This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IniCvHTeANDBX586j6zyLOpG0G8.roa File: IniCvHTeANDBX586j6zyLOpG0G8.roa (raw, json) Hash identifier: pl+1203yWveORad5YqQcYHnd77gebsjiUGuW1PDNJBo= Subject key identifier: 22:78:82:BC:74:DE:00:D0:C1:5F:9F:3A:8F:AC:F2:2C:EA:46:D0:6F Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AED9CDA74D0C81215EB295822F8AE0E0E Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IniCvHTeANDBX586j6zyLOpG0G8.roa Signing time: Fri 05 Dec 2025 08:24:31 +0000 ROA not before: Fri 05 Dec 2025 08:24:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 5650 IP address blocks: 151.241.232.0/23 maxlen: 24 151.243.54.0/24 maxlen: 24 151.245.222.0/23 maxlen: 24 151.246.64.0/20 maxlen: 20 151.246.252.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:9c:da:74:d0:c8:12:15:eb:29:58:22:f8:ae:0e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 5 08:24:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=227882bc74de00d0c15f9f3a8facf22cea46d06f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c4:8e:1d:3c:0f:2b:49:9a:07:9c:6a:c1:ee: e6:76:a4:cd:cf:f4:6c:85:a3:f6:27:26:92:c1:d4: f9:66:d5:99:58:d1:c5:71:c0:7f:4a:c5:0e:c9:a7: b6:2b:64:08:cc:bc:50:98:bb:b5:5e:45:d4:c2:63: e5:b6:aa:22:d7:f2:6c:d1:6d:be:b2:46:e1:e4:22: c4:83:07:07:e0:0c:29:4c:91:1e:3c:00:04:c8:55: b4:58:21:f3:b7:40:b4:f6:4a:c4:16:0d:e7:ff:74: 60:f6:07:a4:e6:39:84:33:6d:ef:71:86:db:ad:37: 87:b8:e5:db:b7:82:34:f2:17:fd:c3:6e:87:50:d6: d0:46:44:9d:bd:83:bc:3f:87:8e:1c:6d:7c:c0:29: 2e:4b:aa:fd:d8:88:56:61:8b:77:e4:09:f6:2e:75: d3:ae:64:9c:11:02:28:d7:3e:62:e9:d1:d1:66:18: 39:a7:d0:9a:96:8a:52:0f:95:04:a6:d9:fc:d6:13: 75:86:50:ec:08:fd:2c:5f:2c:d1:b9:02:d9:c4:c0: 85:6b:28:6b:4c:1d:68:7e:17:17:4c:24:b2:31:73: 91:e7:13:b6:c0:01:fc:44:22:e7:e5:0f:60:58:d2: 97:de:84:70:ae:d2:65:db:36:32:d8:b2:74:a3:64: ec:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:78:82:BC:74:DE:00:D0:C1:5F:9F:3A:8F:AC:F2:2C:EA:46:D0:6F X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/IniCvHTeANDBX586j6zyLOpG0G8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.232.0/23 151.243.54.0/24 151.245.222.0/23 151.246.64.0/20 151.246.252.0/23 Signature Algorithm: sha256WithRSAEncryption 17:b1:ec:d0:56:27:47:ea:19:e4:12:8b:46:a8:a2:3f:48:74: bf:0f:d7:6c:2c:f7:80:62:5d:9e:32:73:48:7d:f2:0b:39:c2: 4d:3f:44:b7:16:14:6f:d5:44:e9:5c:2b:a6:d5:a6:41:54:17: 33:4b:88:44:4d:71:d3:e4:8a:7b:ba:01:12:ca:12:67:91:c3: bd:0a:27:bc:d9:17:6e:a6:93:18:91:d1:2c:fb:29:00:38:0b: 6e:4d:bb:64:16:2d:19:f6:e3:4d:99:0f:5a:50:c1:79:3c:28: 49:02:b2:91:3f:29:77:f5:b0:3d:fc:16:70:4d:ab:f5:4e:40: f8:a3:72:be:f1:6b:4c:fb:82:ab:5e:c4:8c:f2:02:6f:c1:f4: ad:a7:20:bf:cc:65:fb:2f:ea:1f:85:eb:68:3b:d5:d1:e7:a1: a4:1d:86:52:ce:74:17:2e:d4:91:e2:e9:20:3f:4d:09:37:7d: 1f:f5:56:12:84:e2:bf:09:78:84:af:5c:80:d9:a4:f8:04:aa: b6:76:bd:8e:de:a2:0a:e1:19:00:4f:dc:2e:c6:74:15:16:bc: 63:18:1d:b2:7f:db:18:81:a0:b9:2f:59:e7:51:c2:7d:11:04: 2d:06:0f:4f:9e:52:cf:01:02:f9:19:e9:02:95:85:36:01:4a: 76:54:fe:29 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZrtnNp00MgSFespWCL4rg4OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjA1MDgyNDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjc4ODJiYzc0ZGUwMGQwYzE1ZjlmM2E4ZmFjZjIyY2VhNDZkMDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsSOHTwPK0maB5xqwe7mdqTNz/Rs haP2JyaSwdT5ZtWZWNHFccB/SsUOyae2K2QIzLxQmLu1XkXUwmPltqoi1/Js0W2+ skbh5CLEgwcH4AwpTJEePAAEyFW0WCHzt0C09krEFg3n/3Rg9gek5jmEM23vcYbb rTeHuOXbt4I08hf9w26HUNbQRkSdvYO8P4eOHG18wCkuS6r92IhWYYt35An2LnXT rmScEQIo1z5i6dHRZhg5p9CalopSD5UEptn81hN1hlDsCP0sXyzRuQLZxMCFayhr TB1ofhcXTCSyMXOR5xO2wAH8RCLn5Q9gWNKX3oRwrtJl2zYy2LJ0o2Ts1wIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFCJ4grx03gDQwV+fOo+s8izqRtBvMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvSW5pQ3ZIVGVBTkRCWDU4Nmo2enlMT3BHMEc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBl/HoAwQA l/M2AwQBl/XeAwQEl/ZAAwQBl/b8MA0GCSqGSIb3DQEBCwUAA4IBAQAXsezQVidH 6hnkEotGqKI/SHS/D9dsLPeAYl2eMnNIffILOcJNP0S3FhRv1UTpXCum1aZBVBcz S4hETXHT5Ip7ugESyhJnkcO9Cie82RduppMYkdEs+ykAOAtuTbtkFi0Z9uNNmQ9a UMF5PChJArKRPyl39bA9/BZwTav1TkD4o3K+8WtM+4KrXsSM8gJvwfStpyC/zGX7 L+ofhetoO9XR56GkHYZSznQXLtSR4ukgP00JN30f9VYShOK/CXiEr1yA2aT4BKq2 dr2O3qIK4RkAT9wuxnQVFrxjGB2yf9sYgaC5L1nnUcJ9EQQtBg9PnlLPAQL5GekC lYU2AUp2VP4p -----END CERTIFICATE-----Generated at Sat Dec 6 08:50:30 2025 by rpki-client