This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/W9mAA3vEkNTmrq3wuSyT1ofH3o4.roa File: W9mAA3vEkNTmrq3wuSyT1ofH3o4.roa (raw, json) Hash identifier: pQ59u7iQrj8oAEkGP/xOQTUtwxUqbHCGV17teQk9aM8= Subject key identifier: 5B:D9:80:03:7B:C4:90:D4:E6:AE:AD:F0:B9:2C:93:D6:87:C7:DE:8E Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AED9CDE1AD6FB9D136012F617F95B3A6B Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/W9mAA3vEkNTmrq3wuSyT1ofH3o4.roa Signing time: Fri 05 Dec 2025 08:24:31 +0000 ROA not before: Fri 05 Dec 2025 08:24:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205886 IP address blocks: 151.240.28.0/24 maxlen: 24 151.240.152.0/24 maxlen: 24 151.240.153.0/24 maxlen: 24 151.240.226.0/24 maxlen: 24 151.241.11.0/24 maxlen: 24 151.241.12.0/24 maxlen: 24 151.241.25.0/24 maxlen: 24 151.241.27.0/24 maxlen: 24 151.241.29.0/24 maxlen: 24 151.241.104.0/24 maxlen: 24 151.241.138.0/24 maxlen: 24 151.241.149.0/24 maxlen: 24 151.241.150.0/24 maxlen: 24 151.242.79.0/24 maxlen: 24 151.242.128.0/24 maxlen: 24 151.242.236.0/24 maxlen: 24 151.242.237.0/24 maxlen: 24 151.242.239.0/24 maxlen: 24 151.243.16.0/24 maxlen: 24 151.243.189.0/24 maxlen: 24 151.244.12.0/24 maxlen: 24 151.245.0.0/17 maxlen: 24 151.245.29.0/24 maxlen: 24 151.245.108.0/24 maxlen: 24 151.245.145.0/24 maxlen: 24 151.245.182.0/24 maxlen: 24 151.245.220.0/24 maxlen: 24 151.247.138.0/24 maxlen: 24 151.247.145.0/24 maxlen: 24 151.247.238.0/24 maxlen: 24 151.247.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:9c:de:1a:d6:fb:9d:13:60:12:f6:17:f9:5b:3a:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 5 08:24:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=5bd980037bc490d4e6aeadf0b92c93d687c7de8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:71:c2:79:12:76:c0:26:68:e5:bf:d9:8b:58: 23:ca:60:62:20:f4:cc:b3:c1:b5:b6:ca:8f:23:e9: c6:19:33:fb:8c:72:a7:f8:5e:32:c4:2f:32:47:21: 01:e1:8c:58:b4:5e:aa:82:15:e5:ba:2c:4a:5b:e3: d7:82:41:eb:4b:43:09:42:15:82:7d:86:fb:34:fe: 6b:46:4e:d1:7d:01:15:3f:36:b5:aa:e0:80:5d:a1: 1f:a3:4c:43:5f:d0:4e:2c:66:d8:8f:0b:36:d1:51: f2:bf:cf:57:59:64:63:bd:91:b5:98:95:2f:64:24: 2a:d9:87:d7:4d:01:d5:39:c9:88:ff:80:be:6e:4d: cd:be:85:44:2e:c0:b8:1e:6a:59:4e:58:c4:01:fd: 27:64:f7:d2:aa:8b:80:48:ba:44:e5:28:75:c8:b6: 48:1b:1d:0e:72:0c:d5:3a:19:7a:28:1a:bb:ae:bd: 4e:fa:a4:9c:89:dc:46:41:b0:76:2a:60:70:f5:c2: f5:94:be:b7:bb:6c:c4:5b:61:0d:40:72:bd:ee:fd: 22:4c:78:43:33:01:19:e3:a7:97:22:1c:f0:8d:ec: f9:f1:7c:e9:17:a2:d0:20:11:aa:06:8a:f2:56:5b: 1c:ca:d2:b0:5e:79:d3:46:b2:13:92:e6:c5:cc:e5: 03:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D9:80:03:7B:C4:90:D4:E6:AE:AD:F0:B9:2C:93:D6:87:C7:DE:8E X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/W9mAA3vEkNTmrq3wuSyT1ofH3o4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.28.0/24 151.240.152.0/23 151.240.226.0/24 151.241.11.0-151.241.12.255 151.241.25.0/24 151.241.27.0/24 151.241.29.0/24 151.241.104.0/24 151.241.138.0/24 151.241.149.0-151.241.150.255 151.242.79.0/24 151.242.128.0/24 151.242.236.0/23 151.242.239.0/24 151.243.16.0/24 151.243.189.0/24 151.244.12.0/24 151.245.0.0/17 151.245.145.0/24 151.245.182.0/24 151.245.220.0/24 151.247.138.0/24 151.247.145.0/24 151.247.238.0/24 151.247.242.0/24 Signature Algorithm: sha256WithRSAEncryption b1:48:2f:aa:ce:16:31:01:fd:41:14:75:eb:29:fb:e5:e9:10: 1e:73:cf:e1:4b:94:4f:c9:bd:f4:11:9e:73:7b:f9:1b:3c:5e: bc:7f:05:aa:a3:06:58:d2:c7:68:b7:62:2b:31:cc:b0:e2:98: 45:a8:d0:7d:7e:4c:70:c1:ab:84:e9:6f:c1:ee:90:5d:4d:6e: 8e:94:99:aa:a1:ea:ac:87:40:68:49:39:43:e1:db:b7:77:c2: 20:ce:5c:ce:a6:46:13:d4:78:52:7e:37:48:83:46:4e:1c:12: 85:e5:06:f9:91:f3:dd:ca:4c:9b:71:77:67:cd:88:6c:a8:24: 07:30:5d:97:5d:18:53:21:a8:f2:56:30:0d:7f:59:2f:ca:99: 63:0e:2b:e3:f2:d8:e9:24:f6:7f:25:b9:62:87:31:48:d3:86: e3:ef:60:92:80:11:ae:74:00:25:17:00:89:4f:e7:3a:c0:91: 0d:3f:31:a7:05:60:1b:e9:1a:89:9f:9c:a6:85:a6:12:0d:62: f1:a4:33:24:00:2c:37:4e:fd:f2:32:64:22:53:fc:bb:90:eb: 27:55:04:9b:c5:eb:a1:85:b3:eb:cb:44:0a:dd:29:bc:a7:f3: 72:cd:88:45:1b:cb:e0:92:d9:eb:14:73:1d:82:fb:0d:05:d0: a6:0c:32:47 -----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgISAZrtnN4a1vudE2AS9hf5WzprMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjA1MDgyNDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmQ5ODAwMzdiYzQ5MGQ0ZTZhZWFkZjBiOTJjOTNkNjg3YzdkZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHHCeRJ2wCZo5b/Zi1gjymBiIPTM s8G1tsqPI+nGGTP7jHKn+F4yxC8yRyEB4YxYtF6qghXluixKW+PXgkHrS0MJQhWC fYb7NP5rRk7RfQEVPza1quCAXaEfo0xDX9BOLGbYjws20VHyv89XWWRjvZG1mJUv ZCQq2YfXTQHVOcmI/4C+bk3NvoVELsC4HmpZTljEAf0nZPfSqouASLpE5Sh1yLZI Gx0OcgzVOhl6KBq7rr1O+qScidxGQbB2KmBw9cL1lL63u2zEW2ENQHK97v0iTHhD MwEZ46eXIhzwjez58XzpF6LQIBGqBoryVlscytKwXnnTRrITkubFzOUDcQIDAQAB o4ICrjCCAqowHQYDVR0OBBYEFFvZgAN7xJDU5q6t8Lksk9aHx96OMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvVzltQUEzdkVrTlRtcnEzd3VTeVQxb2ZIM280LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHDBggrBgEFBQcBBwEB/wSBszCBsDCBrQQCAAEwgaYDBACX 8BwDBAGX8JgDBACX8OIwDAMEAJfxCwMEAJfxDAMEAJfxGQMEAJfxGwMEAJfxHQME AJfxaAMEAJfxijAMAwQAl/GVAwQAl/GWAwQAl/JPAwQAl/KAAwQBl/LsAwQAl/Lv AwQAl/MQAwQAl/O9AwQAl/QMAwQHl/UAAwQAl/WRAwQAl/W2AwQAl/XcAwQAl/eK AwQAl/eRAwQAl/fuAwQAl/fyMA0GCSqGSIb3DQEBCwUAA4IBAQCxSC+qzhYxAf1B FHXrKfvl6RAec8/hS5RPyb30EZ5ze/kbPF68fwWqowZY0sdot2IrMcyw4phFqNB9 fkxwwauE6W/B7pBdTW6OlJmqoeqsh0BoSTlD4du3d8IgzlzOpkYT1HhSfjdIg0ZO HBKF5Qb5kfPdykybcXdnzYhsqCQHMF2XXRhTIajyVjANf1kvypljDivj8tjpJPZ/ JblihzFI04bj72CSgBGudAAlFwCJT+c6wJENPzGnBWAb6RqJn5ymhaYSDWLxpDMk ACw3Tv3yMmQiU/y7kOsnVQSbxeuhhbPry0QK3Sm8p/NyzYhFG8vgktnrFHMdgvsN BdCmDDJH -----END CERTIFICATE-----Generated at Sat Dec 6 08:50:32 2025 by rpki-client