This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_LNnXiKWEDOWOzAxv7aHHo8LexA.roa File: _LNnXiKWEDOWOzAxv7aHHo8LexA.roa (raw, json) Hash identifier: E83kpNYugLCkxIeXrserIUZ89Hk1RcHWgR00mGjZzEI= Subject key identifier: FC:B3:67:5E:22:96:10:33:96:3B:30:31:BF:B6:87:1E:8F:0B:7B:10 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AF20208AFB3EA3A4C37480EDE9FEF557B Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_LNnXiKWEDOWOzAxv7aHHo8LexA.roa Signing time: Sat 06 Dec 2025 04:53:30 +0000 ROA not before: Sat 06 Dec 2025 04:53:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 174 IP address blocks: 151.240.82.0/24 maxlen: 24 151.240.205.0/24 maxlen: 24 151.241.119.0/24 maxlen: 24 151.241.122.0/24 maxlen: 24 151.241.123.0/24 maxlen: 24 151.241.125.0/24 maxlen: 24 151.243.227.0/24 maxlen: 24 151.243.235.0/24 maxlen: 24 151.243.241.0/24 maxlen: 24 151.245.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:02:08:af:b3:ea:3a:4c:37:48:0e:de:9f:ef:55:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 6 04:53:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=fcb3675e22961033963b3031bfb6871e8f0b7b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ee:a9:77:a3:e1:81:93:bf:8f:d7:fd:bf:01: db:38:42:b6:88:92:c5:b3:b0:89:7a:a5:81:d0:fa: 7e:73:55:a0:9c:ea:2e:cc:54:5d:01:4e:ee:a9:b6: d7:77:dc:03:29:64:c4:a3:f8:ec:27:06:f8:aa:6c: fd:76:13:e5:ce:fd:d3:b9:0f:00:8b:a1:a4:c6:16: 83:bd:c7:93:b4:25:2c:d7:c1:fe:bd:b5:31:10:5b: 6c:82:6e:fc:d8:27:6a:58:14:90:9b:1b:72:dc:3a: 0d:87:65:82:ae:ac:45:25:65:c8:b0:dc:b7:09:ec: 58:4d:a6:32:ff:47:32:5d:15:6a:e8:07:15:ca:80: db:dc:42:5e:bc:37:c5:db:29:01:c9:74:8f:c8:c8: 99:a3:c8:ba:89:44:17:29:6d:3c:e3:9b:dc:9f:9b: 26:4d:ed:45:1c:da:ed:f9:dd:d6:1d:d4:b6:0e:d6: ba:b3:f7:dc:96:cb:9f:e4:38:73:dd:16:06:02:77: 7b:17:a2:a3:eb:78:70:39:a7:1d:f9:3f:d4:35:55: de:27:33:cd:2a:9b:73:27:c7:ad:65:d2:5e:69:ba: 58:dd:75:5c:fb:0c:a9:fe:c2:7f:af:15:ce:95:18: 51:47:6c:a8:13:32:3a:6e:bf:2d:22:c6:aa:7e:ad: 62:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:B3:67:5E:22:96:10:33:96:3B:30:31:BF:B6:87:1E:8F:0B:7B:10 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_LNnXiKWEDOWOzAxv7aHHo8LexA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.82.0/24 151.240.205.0/24 151.241.119.0/24 151.241.122.0/23 151.241.125.0/24 151.243.227.0/24 151.243.235.0/24 151.243.241.0/24 151.245.120.0/23 Signature Algorithm: sha256WithRSAEncryption 06:32:40:60:6e:ed:ac:c5:82:23:5d:37:26:d9:fd:19:f5:23: 7a:34:31:15:36:e5:d2:4f:77:bd:46:2c:a5:30:1d:ea:f0:06: 4c:cd:c6:6e:d6:20:25:a0:06:36:2c:57:77:0b:2e:9b:1f:b4: 9f:a3:b8:84:7f:83:bd:fa:1b:c4:e1:58:76:db:1b:f6:57:d9: 60:13:e3:99:19:58:2d:2d:13:c5:f1:ca:20:98:54:b2:88:96: c4:ee:7e:63:96:2e:6e:17:f9:75:f4:e3:3f:f2:0b:29:10:04: 15:3b:d9:b2:17:d3:67:26:67:2e:e9:20:05:d0:6e:b5:82:3f: 4f:a8:d5:0e:66:2b:9e:68:b4:b1:ca:b5:f2:dc:15:07:a4:40: fb:13:89:93:98:3a:f1:8d:0e:63:7f:7f:69:6d:c6:72:c1:b0: de:f8:7e:11:e3:52:b6:28:7a:ff:0e:59:56:30:75:62:90:bc: 41:62:56:5d:75:bc:70:ee:18:d1:5e:de:3c:42:19:67:7b:69: 9a:e8:21:55:03:ce:85:1a:42:9c:bb:d7:34:20:8d:25:99:ae: 65:da:0a:d4:53:7d:a4:06:b9:bd:71:2e:07:0e:fc:eb:a0:46: 1c:ec:e6:43:d9:8e:47:24:2e:27:ae:4f:16:97:8d:56:12:03: 78:dc:93:45 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZryAgivs+o6TDdIDt6f71V7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjA2MDQ1MzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2IzNjc1ZTIyOTYxMDMzOTYzYjMwMzFiZmI2ODcxZThmMGI3YjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu6pd6PhgZO/j9f9vwHbOEK2iJLF s7CJeqWB0Pp+c1WgnOouzFRdAU7uqbbXd9wDKWTEo/jsJwb4qmz9dhPlzv3TuQ8A i6GkxhaDvceTtCUs18H+vbUxEFtsgm782CdqWBSQmxty3DoNh2WCrqxFJWXIsNy3 CexYTaYy/0cyXRVq6AcVyoDb3EJevDfF2ykByXSPyMiZo8i6iUQXKW0845vcn5sm Te1FHNrt+d3WHdS2Dta6s/fclsuf5Dhz3RYGAnd7F6Kj63hwOacd+T/UNVXeJzPN KptzJ8etZdJeabpY3XVc+wyp/sJ/rxXOlRhRR2yoEzI6br8tIsaqfq1iswIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFPyzZ14ilhAzljswMb+2hx6PC3sQMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvX0xOblhpS1dFRE9XT3pBeHY3YUhIbzhMZXhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAl/BSAwQA l/DNAwQAl/F3AwQBl/F6AwQAl/F9AwQAl/PjAwQAl/PrAwQAl/PxAwQBl/V4MA0G CSqGSIb3DQEBCwUAA4IBAQAGMkBgbu2sxYIjXTcm2f0Z9SN6NDEVNuXST3e9Riyl MB3q8AZMzcZu1iAloAY2LFd3Cy6bH7Sfo7iEf4O9+hvE4Vh22xv2V9lgE+OZGVgt LRPF8cogmFSyiJbE7n5jli5uF/l19OM/8gspEAQVO9myF9NnJmcu6SAF0G61gj9P qNUOZiueaLSxyrXy3BUHpED7E4mTmDrxjQ5jf39pbcZywbDe+H4R41K2KHr/DllW MHVikLxBYlZddbxw7hjRXt48Qhlne2ma6CFVA86FGkKcu9c0II0lma5l2grUU32k Brm9cS4HDvzroEYc7OZD2Y5HJC4nrk8Wl41WEgN43JNF -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:48 2025 by rpki-client