This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/i4btCSie9IMgRW08HEi69v4lXDw.roa File: i4btCSie9IMgRW08HEi69v4lXDw.roa (raw, json) Hash identifier: QqQRmGPpcaQBnNw8aTpozZHgqLinJ94bD4N9oe0Fv2Y= Subject key identifier: 8B:86:ED:09:28:9E:F4:83:20:45:6D:3C:1C:48:BA:F6:FE:25:5C:3C Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AED9CDFF9CCA3AB9F53CDF11C89438A2B Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/i4btCSie9IMgRW08HEi69v4lXDw.roa Signing time: Fri 05 Dec 2025 08:24:32 +0000 ROA not before: Fri 05 Dec 2025 08:24:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 399870 IP address blocks: 151.244.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:9c:df:f9:cc:a3:ab:9f:53:cd:f1:1c:89:43:8a:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 5 08:24:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8b86ed09289ef48320456d3c1c48baf6fe255c3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:89:90:f1:4e:ee:18:7f:ee:98:b6:76:83:0a: 89:d7:33:ae:ff:a8:63:7d:a8:02:14:7e:a8:9c:1b: c6:32:38:08:e6:f6:e0:a1:33:73:1c:e9:03:7d:1e: 27:fe:b8:b1:08:2a:83:f1:1f:60:5e:a6:a7:c5:74: d8:e8:a5:76:45:33:87:9d:f3:3e:73:14:28:38:c3: 2c:ba:17:52:d4:35:0b:6a:51:d4:bb:6f:db:0b:3e: 5f:cc:eb:90:24:74:8e:eb:d8:ba:13:b7:63:64:aa: 6a:6d:ad:ec:a7:5b:aa:07:a8:e6:0a:78:04:ca:72: 7a:29:44:73:7c:53:c1:9a:8f:47:e6:4f:76:6c:37: 36:75:e2:b3:fe:ff:1e:e2:5e:40:14:75:a9:cd:a2: 5b:00:3d:24:c3:01:6e:e4:9f:d4:71:24:78:75:1a: 40:6c:c7:18:39:c9:31:7e:02:c7:e8:ec:ec:f8:67: aa:f3:8d:a8:1d:45:3f:f1:c1:01:18:d0:16:7b:63: 8d:fb:ad:2e:94:a5:4a:e8:7c:38:97:dc:90:ef:a3: a2:ff:63:e7:b3:cc:6c:6e:16:37:88:f9:8d:fb:8d: 1c:36:eb:09:e0:5b:7e:92:aa:a0:7e:23:7b:31:f2: 1d:90:99:d6:57:e9:73:e1:6d:ae:01:b3:b9:18:8e: b4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:86:ED:09:28:9E:F4:83:20:45:6D:3C:1C:48:BA:F6:FE:25:5C:3C X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/i4btCSie9IMgRW08HEi69v4lXDw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.134.0/24 Signature Algorithm: sha256WithRSAEncryption 48:3a:c1:f7:26:b1:2e:54:a2:56:cd:d9:52:9a:ef:06:65:a8: d2:25:1a:57:bc:90:0d:99:5b:8a:4b:f9:12:3f:24:b8:5d:f1: 82:07:d1:12:7b:d2:25:42:6f:c7:7c:ef:c5:f2:8c:d5:ec:d0: f4:59:ce:00:48:56:e2:9f:94:a5:89:3a:76:0e:58:6e:69:c1: e0:3c:d3:94:c6:4f:4f:2d:52:e9:b5:97:15:52:b2:65:7d:04: 32:77:7c:65:ba:f2:36:d7:68:b2:f3:cc:7e:c4:94:32:27:af: 93:77:2a:7c:04:7f:f9:c8:9c:7c:98:40:73:bc:6f:66:b9:22: 71:99:27:cd:22:2c:77:5d:02:65:b7:27:ef:63:18:d5:2a:18: 26:15:6d:42:ce:04:ea:d9:23:57:be:0a:b7:3b:b0:1f:42:b5: ea:78:ca:0c:f8:41:18:92:c9:cc:86:4c:46:92:6f:5e:f1:d7: fd:94:66:4f:70:3c:20:08:50:0e:4b:a8:38:0c:5f:7c:45:4d: 86:53:a4:da:b7:76:17:b1:66:b0:20:fb:24:92:26:ef:14:b3: c0:49:82:eb:5c:2a:78:7f:d3:79:8e:ad:72:7e:d0:b5:b2:48: 85:39:b1:0f:f8:75:35:a5:f3:10:02:b3:76:8d:1b:6e:f7:85: 3e:5c:e3:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrtnN/5zKOrn1PN8RyJQ4orMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjA1MDgyNDMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Yjg2ZWQwOTI4OWVmNDgzMjA0NTZkM2MxYzQ4YmFmNmZlMjU1YzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsomQ8U7uGH/umLZ2gwqJ1zOu/6hj fagCFH6onBvGMjgI5vbgoTNzHOkDfR4n/rixCCqD8R9gXqanxXTY6KV2RTOHnfM+ cxQoOMMsuhdS1DULalHUu2/bCz5fzOuQJHSO69i6E7djZKpqba3sp1uqB6jmCngE ynJ6KURzfFPBmo9H5k92bDc2deKz/v8e4l5AFHWpzaJbAD0kwwFu5J/UcSR4dRpA bMcYOckxfgLH6Ozs+Geq842oHUU/8cEBGNAWe2ON+60ulKVK6Hw4l9yQ76Oi/2Pn s8xsbhY3iPmN+40cNusJ4Ft+kqqgfiN7MfIdkJnWV+lz4W2uAbO5GI60gwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIuG7QkonvSDIEVtPBxIuvb+JVw8MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvaTRidENTaWU5SU1nUlcwOEhFaTY5djRsWER3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/SGMA0G CSqGSIb3DQEBCwUAA4IBAQBIOsH3JrEuVKJWzdlSmu8GZajSJRpXvJANmVuKS/kS PyS4XfGCB9ESe9IlQm/HfO/F8ozV7ND0Wc4ASFbin5SliTp2DlhuacHgPNOUxk9P LVLptZcVUrJlfQQyd3xluvI212iy88x+xJQyJ6+Tdyp8BH/5yJx8mEBzvG9muSJx mSfNIix3XQJltyfvYxjVKhgmFW1CzgTq2SNXvgq3O7AfQrXqeMoM+EEYksnMhkxG km9e8df9lGZPcDwgCFAOS6g4DF98RU2GU6Tat3YXsWawIPskkibvFLPASYLrXCp4 f9N5jq1yftC1skiFObEP+HU1pfMQArN2jRtu94U+XOON -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:54 2025 by rpki-client