This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kCfFsvO08QSVL4suseVjX4Cwd7g.roa File: kCfFsvO08QSVL4suseVjX4Cwd7g.roa (raw, json) Hash identifier: tySiYFE60t2IbW9tLSXf5F1E6FhphK8uqw+XN5W63Gg= Subject key identifier: 90:27:C5:B2:F3:B4:F1:04:95:2F:8B:2E:B1:E5:63:5F:80:B0:77:B8 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B208391F2310F93ACDA4F13AAC54E80DE Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kCfFsvO08QSVL4suseVjX4Cwd7g.roa Signing time: Mon 15 Dec 2025 05:37:31 +0000 ROA not before: Mon 15 Dec 2025 05:37:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215304 IP address blocks: 151.241.128.0/22 maxlen: 24 151.243.44.0/24 maxlen: 24 151.244.128.0/24 maxlen: 24 151.244.130.0/24 maxlen: 24 151.244.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:83:91:f2:31:0f:93:ac:da:4f:13:aa:c5:4e:80:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 15 05:37:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9027c5b2f3b4f104952f8b2eb1e5635f80b077b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:24:2b:74:95:8b:2e:a2:0b:16:c0:a1:4e:eb: b9:ec:e4:6c:e5:b1:f5:2e:1d:f2:f5:70:4d:c6:05: 75:9c:96:84:04:62:a3:36:5d:03:8a:35:df:53:b1: 3f:40:93:fa:a2:ec:e4:ab:f6:99:71:43:af:0d:ad: 18:53:18:93:13:34:0a:54:af:68:cc:67:b0:2e:1e: 14:a0:91:b6:21:b9:9b:6c:f0:54:79:3b:49:c3:6d: 4a:f6:c1:5d:92:cb:11:3f:b6:72:5e:e5:4f:3d:be: 02:5b:e1:44:93:e1:78:f8:64:ae:aa:f0:de:2d:9c: 91:80:de:93:af:e4:ac:12:0c:e9:1b:1a:8d:13:21: 9b:ed:41:57:50:c1:ac:8e:e7:29:5a:e4:2e:8f:76: 55:2e:a2:a4:db:6c:08:6c:40:cd:49:a5:57:ef:97: fb:d3:89:6e:da:17:36:24:cc:2d:24:f5:ce:c3:2d: ed:79:e0:74:44:f8:69:bb:8a:bd:58:bf:2b:04:37: 57:8f:5c:d0:cb:1a:83:e0:75:58:21:58:4f:8d:80: 3a:f8:15:32:6f:62:bd:d1:cd:38:f8:8b:35:a7:d0: 36:83:73:37:5f:12:ad:f9:56:9d:75:ad:7d:94:13: 01:50:4c:3b:ea:36:b1:f8:62:64:05:22:01:3a:10: e0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:27:C5:B2:F3:B4:F1:04:95:2F:8B:2E:B1:E5:63:5F:80:B0:77:B8 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kCfFsvO08QSVL4suseVjX4Cwd7g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.241.128.0/22 151.243.44.0/24 151.244.128.0/24 151.244.130.0/24 151.244.236.0/24 Signature Algorithm: sha256WithRSAEncryption 53:90:8a:6b:45:a3:db:e4:0f:5f:b4:86:f6:97:65:eb:fc:60: 8c:99:40:6d:82:81:6c:30:f3:06:c9:3c:2d:fc:3b:5f:f2:f8: 99:0e:b9:84:05:36:08:f4:ca:79:c7:85:da:ec:6d:da:35:72: fd:8c:4f:a7:dc:c7:e8:d0:5f:41:5c:fa:6b:ff:7b:82:97:65: 7d:4c:37:7d:e5:d3:19:45:14:30:6e:d9:b9:b9:21:27:6e:cc: c7:ec:19:40:0a:6f:5c:78:28:3c:12:93:e5:cd:a6:af:73:ad: a6:c2:a9:ae:d3:c5:49:fe:55:05:0c:4c:a5:9b:d3:f6:c8:6c: 1f:b7:44:24:e2:7f:5d:0d:58:f0:e5:5e:99:8e:18:80:0f:7f: fc:6d:63:c4:1d:69:a9:49:cd:fd:65:4c:63:27:af:47:06:98: 15:00:a1:82:61:9a:13:dc:73:6b:b9:04:76:f1:d7:f5:ce:a3: 3f:85:a1:60:da:ab:05:6d:3e:2c:b8:24:10:6e:4b:54:41:fb: 96:5e:36:c0:93:32:95:4b:fa:64:87:17:47:fa:8c:8e:2b:61: 9d:f0:d7:0f:07:59:34:90:fb:e5:85:c0:e3:c9:eb:6e:28:5b: 99:1d:63:79:a1:6b:e8:f6:36:a0:fa:5f:c0:49:15:1d:a9:85: 5b:71:2a:20 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZsgg5HyMQ+TrNpPE6rFToDeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjE1MDUzNzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDI3YzViMmYzYjRmMTA0OTUyZjhiMmViMWU1NjM1ZjgwYjA3N2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCQrdJWLLqILFsChTuu57ORs5bH1 Lh3y9XBNxgV1nJaEBGKjNl0DijXfU7E/QJP6ouzkq/aZcUOvDa0YUxiTEzQKVK9o zGewLh4UoJG2IbmbbPBUeTtJw21K9sFdkssRP7ZyXuVPPb4CW+FEk+F4+GSuqvDe LZyRgN6Tr+SsEgzpGxqNEyGb7UFXUMGsjucpWuQuj3ZVLqKk22wIbEDNSaVX75f7 04lu2hc2JMwtJPXOwy3teeB0RPhpu4q9WL8rBDdXj1zQyxqD4HVYIVhPjYA6+BUy b2K90c04+Is1p9A2g3M3XxKt+Vadda19lBMBUEw76jax+GJkBSIBOhDgMQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFJAnxbLztPEElS+LLrHlY1+AsHe4MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEva0NmRnN2TzA4UVNWTDRzdXNlVmpYNEN3ZDdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCl/GAAwQA l/MsAwQAl/SAAwQAl/SCAwQAl/TsMA0GCSqGSIb3DQEBCwUAA4IBAQBTkIprRaPb 5A9ftIb2l2Xr/GCMmUBtgoFsMPMGyTwt/Dtf8viZDrmEBTYI9Mp5x4Xa7G3aNXL9 jE+n3Mfo0F9BXPpr/3uCl2V9TDd95dMZRRQwbtm5uSEnbszH7BlACm9ceCg8EpPl zaavc62mwqmu08VJ/lUFDEylm9P2yGwft0Qk4n9dDVjw5V6ZjhiAD3/8bWPEHWmp Sc39ZUxjJ69HBpgVAKGCYZoT3HNruQR28df1zqM/haFg2qsFbT4suCQQbktUQfuW XjbAkzKVS/pkhxdH+oyOK2Gd8NcPB1k0kPvlhcDjyetuKFuZHWN5oWvo9jag+l/A SRUdqYVbcSog -----END CERTIFICATE-----Generated at Wed Dec 17 17:00:24 2025 by rpki-client