This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ND2msvU5ynETYM1RSNHVm2cupAo.roa File: ND2msvU5ynETYM1RSNHVm2cupAo.roa (raw, json) Hash identifier: s7+eaee+eSUQkKBJQA4NNdSKA0RTW6YD696UhnG8kSM= Subject key identifier: 34:3D:A6:B2:F5:39:CA:71:13:60:CD:51:48:D1:D5:9B:67:2E:A4:0A Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B1635EB4A0792C350BC0B751C14CF2C3D Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ND2msvU5ynETYM1RSNHVm2cupAo.roa Signing time: Sat 13 Dec 2025 05:36:31 +0000 ROA not before: Sat 13 Dec 2025 05:36:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55201 IP address blocks: 151.244.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 23:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:35:eb:4a:07:92:c3:50:bc:0b:75:1c:14:cf:2c:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 13 05:36:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=343da6b2f539ca711360cd5148d1d59b672ea40a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8a:18:1f:89:f6:bb:8a:7f:7a:c5:b4:b8:09: f7:22:01:46:a8:9f:ba:f9:94:e0:a3:3a:68:09:80: b1:e7:56:f3:99:34:b6:e3:44:87:ab:68:45:e6:8a: f3:ef:41:38:4d:71:69:76:30:a2:0c:9f:96:dd:87: 4e:34:42:1b:37:c2:00:54:95:81:36:ea:0c:ff:08: d0:a1:08:ff:44:5f:b5:2f:c5:2d:13:52:c3:4c:95: 19:06:55:f9:ea:a0:dd:f7:b5:5f:38:98:d7:59:19: a8:13:38:fe:e6:97:60:86:92:d1:75:66:73:bd:b4: 12:97:f6:b8:ae:1e:9b:ff:7d:fc:8e:af:c2:e1:6c: a5:37:fa:98:8f:ff:52:e7:f2:b4:b0:0e:40:e0:bb: 46:1b:60:7b:84:05:e5:e7:1d:be:e9:d0:6a:79:70: 7d:d4:f6:66:d8:c3:82:47:f2:fd:d9:61:dd:57:11: 53:52:d5:c7:b8:5a:d7:22:fe:aa:7d:c7:da:55:6c: cf:13:74:c7:74:21:30:3f:44:c7:c3:dd:83:9e:3e: 9e:c8:25:9f:62:9f:69:d4:54:dd:a2:59:da:89:b7: a2:c8:cd:f3:d1:e1:53:90:ff:38:69:c6:60:43:bc: f7:42:e6:25:48:77:a5:b7:06:eb:42:b7:2a:bd:3f: bf:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:3D:A6:B2:F5:39:CA:71:13:60:CD:51:48:D1:D5:9B:67:2E:A4:0A X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ND2msvU5ynETYM1RSNHVm2cupAo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.3.0/24 Signature Algorithm: sha256WithRSAEncryption 05:94:9d:87:b9:ff:fd:b5:5b:6d:36:5e:7c:4b:20:df:0e:e0: 6c:44:a1:4c:bd:a6:7a:0d:26:2a:1a:56:b2:f8:5d:d3:5e:59: 38:61:b9:fa:f0:00:55:35:dc:f6:10:17:f7:c4:0b:6b:24:01: 3e:c3:59:3c:0c:a9:7b:c0:47:b0:f8:9b:05:95:de:41:66:3b: 62:5c:86:b3:bd:3a:fa:a1:62:58:11:c2:42:03:e0:03:63:72: f7:74:cd:d2:84:55:bf:83:8f:f4:5a:23:fd:2d:e3:a9:b7:11: 81:6b:ef:49:9b:ab:01:8d:92:a2:46:35:68:49:eb:db:8d:5e: 3c:5f:c2:f1:ce:5c:eb:f8:f2:14:6a:36:9e:6d:df:31:3a:a5: d8:b7:55:4d:15:42:e1:43:57:63:33:a5:86:df:7c:95:06:d2: 1e:67:8a:7a:32:95:01:5d:53:af:f3:0e:53:b0:b3:f1:01:54: 7a:2f:f5:88:87:f9:c2:d8:09:37:29:08:92:36:d2:04:df:5b: c5:bc:57:e5:77:a4:88:a1:08:c3:70:6b:5e:44:2a:05:ac:71: 70:09:4b:ef:d5:a5:d1:8e:1b:aa:d7:7f:b6:f3:97:5f:a8:6a: 58:35:77:24:df:da:b5:ba:d7:34:b9:b4:8a:ce:1b:01:dd:e7: 55:6f:50:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsWNetKB5LDULwLdRwUzyw9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjEzMDUzNjMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNDNkYTZiMmY1MzljYTcxMTM2MGNkNTE0OGQxZDU5YjY3MmVhNDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwooYH4n2u4p/esW0uAn3IgFGqJ+6 +ZTgozpoCYCx51bzmTS240SHq2hF5orz70E4TXFpdjCiDJ+W3YdONEIbN8IAVJWB NuoM/wjQoQj/RF+1L8UtE1LDTJUZBlX56qDd97VfOJjXWRmoEzj+5pdghpLRdWZz vbQSl/a4rh6b/338jq/C4WylN/qYj/9S5/K0sA5A4LtGG2B7hAXl5x2+6dBqeXB9 1PZm2MOCR/L92WHdVxFTUtXHuFrXIv6qfcfaVWzPE3THdCEwP0THw92Dnj6eyCWf Yp9p1FTdolnaibeiyM3z0eFTkP84acZgQ7z3QuYlSHeltwbrQrcqvT+/bQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDQ9prL1OcpxE2DNUUjR1ZtnLqQKMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvTkQybXN2VTV5bkVUWU0xUlNOSFZtMmN1cEFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/QDMA0G CSqGSIb3DQEBCwUAA4IBAQAFlJ2Huf/9tVttNl58SyDfDuBsRKFMvaZ6DSYqGlay +F3TXlk4Ybn68ABVNdz2EBf3xAtrJAE+w1k8DKl7wEew+JsFld5BZjtiXIazvTr6 oWJYEcJCA+ADY3L3dM3ShFW/g4/0WiP9LeOptxGBa+9Jm6sBjZKiRjVoSevbjV48 X8Lxzlzr+PIUajaebd8xOqXYt1VNFULhQ1djM6WG33yVBtIeZ4p6MpUBXVOv8w5T sLPxAVR6L/WIh/nC2Ak3KQiSNtIE31vFvFfld6SIoQjDcGteRCoFrHFwCUvv1aXR jhuq13+285dfqGpYNXck39q1utc0ubSKzhsB3edVb1B2 -----END CERTIFICATE-----Generated at Tue Dec 16 06:14:22 2025 by rpki-client