This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aqCeTLqtgYPn2gaolqir7RT4_to.roa File: aqCeTLqtgYPn2gaolqir7RT4_to.roa (raw, json) Hash identifier: m22KapLteRnY/+aRHqjNdrXUzoOF5q7hzayYZ2W8/Co= Subject key identifier: 6A:A0:9E:4C:BA:AD:81:83:E7:DA:06:A8:96:A8:AB:ED:14:F8:FE:DA Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B20839114A564F0E3088AD17187C3A89A Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aqCeTLqtgYPn2gaolqir7RT4_to.roa Signing time: Mon 15 Dec 2025 05:37:31 +0000 ROA not before: Mon 15 Dec 2025 05:37:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214025 IP address blocks: 151.240.165.0/24 maxlen: 24 151.242.114.0/24 maxlen: 24 151.243.30.0/24 maxlen: 24 151.243.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:83:91:14:a5:64:f0:e3:08:8a:d1:71:87:c3:a8:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 15 05:37:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6aa09e4cbaad8183e7da06a896a8abed14f8feda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:a7:7a:1f:fe:9a:31:50:ad:7e:13:cc:c2:86: 00:f5:f4:b3:2a:37:62:da:dc:3b:68:df:91:7c:cc: d6:25:04:a7:81:48:86:66:ee:96:4f:6d:81:e6:8f: 05:70:36:a5:38:f1:a0:ab:f2:6a:e8:de:c2:85:02: 25:3f:8e:a7:15:c4:9c:9a:31:fd:54:48:83:b0:fa: 6b:5c:59:8c:b9:75:13:d7:be:72:37:96:c8:c1:d5: 5f:31:13:15:ef:80:da:47:f5:1f:0d:92:39:f6:58: f5:d5:01:ef:04:e3:69:79:c1:7f:c4:6a:71:e9:3c: 42:a4:8c:9c:15:bd:cb:5b:c5:df:55:ae:02:4a:7f: 0c:ac:2d:89:a0:42:28:5b:02:72:63:32:4e:5b:5f: dc:b2:48:3c:a7:91:79:6d:b4:30:b6:f3:db:a8:55: da:76:59:09:74:65:f6:79:e4:25:d4:ad:47:38:79: 0a:62:e6:6b:19:89:b4:76:56:df:68:c1:a9:1d:62: 54:72:e3:51:60:7d:c0:6e:0d:bd:c2:16:11:58:03: fc:90:85:df:cb:3c:50:78:7c:6d:95:12:2d:88:75: 2a:af:c4:7b:8a:37:ef:be:51:89:d2:bc:93:ee:ac: 4d:be:37:27:a2:bf:cc:78:2f:40:7a:5c:a7:23:38: 8b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A0:9E:4C:BA:AD:81:83:E7:DA:06:A8:96:A8:AB:ED:14:F8:FE:DA X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aqCeTLqtgYPn2gaolqir7RT4_to.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.240.165.0/24 151.242.114.0/24 151.243.30.0/24 151.243.59.0/24 Signature Algorithm: sha256WithRSAEncryption 36:8c:e7:93:aa:09:55:c1:75:89:b9:18:96:5b:fc:00:86:3e: c9:a0:80:b2:0b:09:fd:1a:f1:70:b8:f3:2c:0f:3c:da:dc:0b: 95:74:9a:d0:29:1a:86:3d:a5:46:0c:31:fa:9d:d7:9c:6d:37: ab:76:14:53:c5:27:47:8f:45:74:17:5f:16:f4:3e:2d:2f:99: 32:e9:23:cf:90:87:78:92:be:1b:6f:e7:42:87:29:19:cb:52: 53:55:6c:4d:2c:a8:96:a1:bc:e2:cb:91:6f:67:8e:5e:9f:f3: 10:79:eb:65:4e:91:ef:6b:cd:9b:5c:43:94:50:0a:26:fb:21: b2:fc:26:17:6d:21:0f:81:ea:49:2d:8e:96:4c:81:74:4a:65: 49:ed:b8:58:62:67:72:1f:3a:ed:e3:da:aa:a0:7b:29:38:7b: 81:98:58:13:53:b9:b0:71:8d:d3:d2:d1:2d:98:4f:34:a5:f8: 91:e4:81:4f:32:6a:cb:e1:51:50:36:aa:82:eb:f2:f7:39:b9: bc:df:3f:8a:4c:53:cb:6c:9d:b1:e7:09:e8:40:62:f1:18:dc: d6:d0:2e:9b:b4:51:81:96:4e:99:48:bb:f3:17:45:6a:32:af: 1a:d3:d9:2d:5d:65:63:4d:f5:cd:59:fa:29:6c:2a:92:c8:ea: cf:20:63:0a -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZsgg5EUpWTw4wiK0XGHw6iaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjE1MDUzNzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWEwOWU0Y2JhYWQ4MTgzZTdkYTA2YTg5NmE4YWJlZDE0ZjhmZWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qd6H/6aMVCtfhPMwoYA9fSzKjdi 2tw7aN+RfMzWJQSngUiGZu6WT22B5o8FcDalOPGgq/Jq6N7ChQIlP46nFcScmjH9 VEiDsPprXFmMuXUT175yN5bIwdVfMRMV74DaR/UfDZI59lj11QHvBONpecF/xGpx 6TxCpIycFb3LW8XfVa4CSn8MrC2JoEIoWwJyYzJOW1/cskg8p5F5bbQwtvPbqFXa dlkJdGX2eeQl1K1HOHkKYuZrGYm0dlbfaMGpHWJUcuNRYH3Abg29whYRWAP8kIXf yzxQeHxtlRItiHUqr8R7ijfvvlGJ0ryT7qxNvjcnor/MeC9AelynIziLDwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGqgnky6rYGD59oGqJaoq+0U+P7aMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvYXFDZVRMcXRnWVBuMmdhb2xxaXI3UlQ0X3RvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/ClAwQA l/JyAwQAl/MeAwQAl/M7MA0GCSqGSIb3DQEBCwUAA4IBAQA2jOeTqglVwXWJuRiW W/wAhj7JoICyCwn9GvFwuPMsDzza3AuVdJrQKRqGPaVGDDH6ndecbTerdhRTxSdH j0V0F18W9D4tL5ky6SPPkId4kr4bb+dChykZy1JTVWxNLKiWobziy5FvZ45en/MQ eetlTpHva82bXEOUUAom+yGy/CYXbSEPgepJLY6WTIF0SmVJ7bhYYmdyHzrt49qq oHspOHuBmFgTU7mwcY3T0tEtmE80pfiR5IFPMmrL4VFQNqqC6/L3Obm83z+KTFPL bJ2x5wnoQGLxGNzW0C6btFGBlk6ZSLvzF0VqMq8a09ktXWVjTfXNWfopbCqSyOrP IGMK -----END CERTIFICATE-----Generated at Wed Dec 17 15:24:04 2025 by rpki-client