This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t47GQZOc_OczWhk626J-9sH01PA.roa File: t47GQZOc_OczWhk626J-9sH01PA.roa (raw, json) Hash identifier: pkMmGArqG04T1SWCUY9EzLk+8AOMFy1dkE4d2CYqH8o= Subject key identifier: B7:8E:C6:41:93:9C:FC:E7:33:5A:19:3A:DB:A2:7E:F6:C1:F4:D4:F0 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019AED9CDCAB72487B810AB1D8ABC5BD7F75 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t47GQZOc_OczWhk626J-9sH01PA.roa Signing time: Fri 05 Dec 2025 08:24:31 +0000 ROA not before: Fri 05 Dec 2025 08:24:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 62513 IP address blocks: 151.243.164.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:ed:9c:dc:ab:72:48:7b:81:0a:b1:d8:ab:c5:bd:7f:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 5 08:24:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b78ec641939cfce7335a193adba27ef6c1f4d4f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:35:72:e6:6f:b1:c3:60:c7:98:41:16:e1:9d: 97:a3:6d:8a:e2:43:52:d8:9b:53:2d:3d:96:e6:5b: 8f:b5:01:2c:22:5d:0f:59:79:ca:b6:6f:d2:78:01: d5:04:c8:5d:79:c9:5a:6e:73:03:cd:31:63:11:e3: 18:cd:49:77:cb:3f:50:c3:78:29:94:8c:33:b5:79: b2:8c:fd:fb:90:ae:67:92:52:d0:3d:f3:46:76:2b: 1b:b6:e5:aa:42:6f:47:3f:b0:c4:4a:5a:98:12:fd: 59:26:73:e7:b0:16:f1:6d:e9:29:18:62:86:fa:a3: de:a8:d7:33:d2:f0:92:ce:d8:61:05:5b:ab:f2:c5: 30:17:e9:15:37:1b:7b:1b:5f:2a:db:f7:aa:76:d4: b0:9c:a0:6d:6f:04:86:52:48:ac:62:02:5d:92:b0: e8:f1:f3:c1:43:78:7a:b9:9a:74:13:12:20:ff:7e: 57:5b:2b:83:b1:7f:a1:7e:1c:bd:fa:0d:67:64:fa: f0:de:4e:a6:08:99:87:6b:d0:24:82:36:61:8b:90: 01:e4:20:60:01:1e:89:1e:cf:67:39:4e:3b:0f:73: 9f:ab:41:2f:97:05:4c:af:2a:3f:e7:e3:6e:33:ab: f2:2d:04:7f:20:d3:45:ad:f1:3d:9b:e4:1b:99:99: 7d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:8E:C6:41:93:9C:FC:E7:33:5A:19:3A:DB:A2:7E:F6:C1:F4:D4:F0 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t47GQZOc_OczWhk626J-9sH01PA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.243.164.0/22 Signature Algorithm: sha256WithRSAEncryption b2:dd:ad:53:eb:80:9d:7e:dc:e0:f7:1d:98:db:d3:ec:9b:d8: 24:90:ca:df:ca:55:30:0e:4b:c4:ab:f6:b7:6f:4a:03:9f:58: 08:ab:d2:50:4d:59:7a:76:91:87:81:11:bc:12:e4:49:37:25: 4a:eb:b4:5c:32:59:31:02:ae:c2:75:8f:a9:8b:8f:f5:c8:2f: ae:34:6c:b6:f1:a5:18:99:8f:91:f8:de:e9:7e:2d:36:d5:bb: e8:58:71:ee:4b:a6:d7:04:a2:ac:eb:8f:39:b5:35:3c:1e:5b: 03:bb:9c:3a:d0:0f:db:3c:a4:a8:b0:54:5d:75:0d:2e:c9:06: 54:9e:11:c0:00:3f:e0:66:34:7f:f5:5d:25:00:aa:4e:d0:c6: 2f:1f:9f:75:4b:56:81:7b:4e:f6:77:1d:8d:54:43:10:ec:fa: a2:b9:8c:2b:44:61:cf:0f:ca:a9:92:58:83:98:ca:11:c3:53: b7:26:f0:ea:ec:c2:0d:4f:a5:1d:8e:cb:90:71:b2:97:eb:f5: 0e:68:11:e0:d1:35:38:fe:5c:ab:41:92:1f:79:1f:e9:fe:20: ca:87:eb:4e:d8:71:a1:8d:a0:6d:61:d1:ee:67:8f:af:ad:12: a4:0b:5e:2d:5f:8a:89:ef:54:c5:04:00:cc:a7:4b:04:a0:e4: 94:d2:3e:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrtnNyrckh7gQqx2KvFvX91MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjA1MDgyNDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNzhlYzY0MTkzOWNmY2U3MzM1YTE5M2FkYmEyN2VmNmMxZjRkNGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljVy5m+xw2DHmEEW4Z2Xo22K4kNS 2JtTLT2W5luPtQEsIl0PWXnKtm/SeAHVBMhdeclabnMDzTFjEeMYzUl3yz9Qw3gp lIwztXmyjP37kK5nklLQPfNGdisbtuWqQm9HP7DESlqYEv1ZJnPnsBbxbekpGGKG +qPeqNcz0vCSzthhBVur8sUwF+kVNxt7G18q2/eqdtSwnKBtbwSGUkisYgJdkrDo 8fPBQ3h6uZp0ExIg/35XWyuDsX+hfhy9+g1nZPrw3k6mCJmHa9AkgjZhi5AB5CBg AR6JHs9nOU47D3Ofq0EvlwVMryo/5+NuM6vyLQR/INNFrfE9m+QbmZl9qwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLeOxkGTnPznM1oZOtuifvbB9NTwMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvdDQ3R1FaT2NfT2N6V2hrNjI2Si05c0gwMVBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl/OkMA0G CSqGSIb3DQEBCwUAA4IBAQCy3a1T64Cdftzg9x2Y29Psm9gkkMrfylUwDkvEq/a3 b0oDn1gIq9JQTVl6dpGHgRG8EuRJNyVK67RcMlkxAq7CdY+pi4/1yC+uNGy28aUY mY+R+N7pfi021bvoWHHuS6bXBKKs6485tTU8HlsDu5w60A/bPKSosFRddQ0uyQZU nhHAAD/gZjR/9V0lAKpO0MYvH591S1aBe072dx2NVEMQ7PqiuYwrRGHPD8qpkliD mMoRw1O3JvDq7MINT6UdjsuQcbKX6/UOaBHg0TU4/lyrQZIfeR/p/iDKh+tO2HGh jaBtYdHuZ4+vrRKkC14tX4qJ71TFBADMp0sEoOSU0j4P -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:15 2025 by rpki-client