This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EY3YZOkPHB0AuPlPeIb-kXNOSYQ.roa File: EY3YZOkPHB0AuPlPeIb-kXNOSYQ.roa (raw, json) Hash identifier: gYk0NfY+4Clppiv5yutKjUzHSKz/z3wmTlqtJwC0Yog= Subject key identifier: 11:8D:D8:64:E9:0F:1C:1D:00:B8:F9:4F:78:86:FE:91:73:4E:49:84 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019AE8686F68942D84E8626CAD65918B78B2 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EY3YZOkPHB0AuPlPeIb-kXNOSYQ.roa Signing time: Thu 04 Dec 2025 08:09:09 +0000 ROA not before: Thu 04 Dec 2025 08:09:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44559 IP address blocks: 62.76.226.0/24 maxlen: 24 62.76.227.0/24 maxlen: 24 62.76.231.0/24 maxlen: 24 62.76.235.0/24 maxlen: 24 185.72.10.0/24 maxlen: 24 192.124.183.0/24 maxlen: 24 192.124.188.0/24 maxlen: 24 192.124.190.0/24 maxlen: 24 193.124.3.0/24 maxlen: 24 193.124.6.0/24 maxlen: 24 193.124.8.0/24 maxlen: 24 193.124.91.0/24 maxlen: 24 193.124.94.0/24 maxlen: 24 194.58.43.0/24 maxlen: 24 194.58.60.0/24 maxlen: 24 194.58.67.0/24 maxlen: 24 194.87.3.0/24 maxlen: 24 194.87.6.0/24 maxlen: 24 194.87.7.0/24 maxlen: 24 194.87.16.0/24 maxlen: 24 194.87.33.0/24 maxlen: 24 194.87.34.0/24 maxlen: 24 194.87.36.0/24 maxlen: 24 194.87.42.0/24 maxlen: 24 194.87.63.0/24 maxlen: 24 194.87.116.0/24 maxlen: 24 194.87.117.0/24 maxlen: 24 194.87.120.0/24 maxlen: 24 194.87.121.0/24 maxlen: 24 194.87.160.0/24 maxlen: 24 194.87.163.0/24 maxlen: 24 194.87.165.0/24 maxlen: 24 194.87.166.0/24 maxlen: 24 194.87.176.0/24 maxlen: 24 194.87.177.0/24 maxlen: 24 194.87.180.0/24 maxlen: 24 194.87.181.0/24 maxlen: 24 194.87.182.0/24 maxlen: 24 194.87.229.0/24 maxlen: 24 194.87.231.0/24 maxlen: 24 194.135.23.0/24 maxlen: 24 195.58.55.0/24 maxlen: 24 195.58.56.0/24 maxlen: 24 195.58.59.0/24 maxlen: 24 195.58.62.0/24 maxlen: 24 195.133.12.0/24 maxlen: 24 195.133.35.0/24 maxlen: 24 195.133.56.0/24 maxlen: 24 195.133.57.0/24 maxlen: 24 195.133.60.0/24 maxlen: 24 195.133.61.0/24 maxlen: 24 195.133.80.0/24 maxlen: 24 195.133.82.0/24 maxlen: 24 212.192.210.0/24 maxlen: 24 212.192.211.0/24 maxlen: 24 212.192.242.0/24 maxlen: 24 212.192.251.0/24 maxlen: 24 212.193.10.0/24 maxlen: 24 212.193.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 08:40:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e8:68:6f:68:94:2d:84:e8:62:6c:ad:65:91:8b:78:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Dec 4 08:09:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=118dd864e90f1c1d00b8f94f7886fe91734e4984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:82:88:e7:2b:03:0f:2e:ae:29:1a:22:85: 7b:15:84:d4:21:79:db:07:25:9d:d1:14:21:c1:a1: 87:d3:8f:e4:a6:bb:39:2f:68:a1:49:34:3b:fb:68: 30:05:a8:48:00:75:04:8c:8e:60:e4:9c:36:bf:c1: c3:9d:37:62:93:60:d8:cd:57:61:7c:40:f0:f0:a7: 4b:02:b9:d7:f3:be:95:2d:54:fb:7e:58:e9:5c:b4: 3f:cb:d6:a0:1a:46:37:c6:75:91:aa:63:40:a1:b5: 07:b1:ad:ec:de:d7:74:e8:8b:4c:84:41:06:4b:48: 27:3d:cf:04:28:b6:70:fc:f2:02:bd:cd:22:f7:ff: 24:fa:f1:c3:30:7a:f0:58:50:31:6a:00:80:60:75: 7b:64:46:0a:78:eb:f3:c7:11:c8:b1:ab:e7:de:04: d1:b2:0a:71:3e:43:34:e1:83:eb:16:a1:a0:8c:f1: 14:1e:03:03:c3:5f:61:14:ca:c7:1f:a3:85:74:24: 9b:5c:d0:97:d6:6a:30:fc:b8:fa:e4:25:ad:ed:e9: b9:e8:52:4b:c8:54:7c:f9:37:63:13:10:fe:d5:27: 20:09:46:53:50:d8:ae:bb:44:b2:61:c9:76:48:07: 99:c2:b6:a1:42:8a:0b:76:d1:69:34:3e:4f:17:f0: 76:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8D:D8:64:E9:0F:1C:1D:00:B8:F9:4F:78:86:FE:91:73:4E:49:84 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EY3YZOkPHB0AuPlPeIb-kXNOSYQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.76.226.0/23 62.76.231.0/24 62.76.235.0/24 185.72.10.0/24 192.124.183.0/24 192.124.188.0/24 192.124.190.0/24 193.124.3.0/24 193.124.6.0/24 193.124.8.0/24 193.124.91.0/24 193.124.94.0/24 194.58.43.0/24 194.58.60.0/24 194.58.67.0/24 194.87.3.0/24 194.87.6.0/23 194.87.16.0/24 194.87.33.0-194.87.34.255 194.87.36.0/24 194.87.42.0/24 194.87.63.0/24 194.87.116.0/23 194.87.120.0/23 194.87.160.0/24 194.87.163.0/24 194.87.165.0-194.87.166.255 194.87.176.0/23 194.87.180.0-194.87.182.255 194.87.229.0/24 194.87.231.0/24 194.135.23.0/24 195.58.55.0-195.58.56.255 195.58.59.0/24 195.58.62.0/24 195.133.12.0/24 195.133.35.0/24 195.133.56.0/23 195.133.60.0/23 195.133.80.0/24 195.133.82.0/24 212.192.210.0/23 212.192.242.0/24 212.192.251.0/24 212.193.10.0/24 212.193.15.0/24 Signature Algorithm: sha256WithRSAEncryption 02:71:bc:f5:e1:32:76:84:fc:11:06:ae:55:6d:88:31:ca:ea: 8e:b8:9b:e6:0d:23:55:82:29:05:55:0b:bd:da:9c:e4:d0:07: b3:4c:f9:da:f0:7d:24:1f:33:bc:92:d8:a6:d8:1a:6f:b6:3e: 5d:23:ec:02:a1:eb:91:34:a1:63:4a:ad:4c:8a:42:ca:d7:d3: aa:e5:3e:27:73:50:9c:67:9e:e5:cf:c8:98:f2:49:b0:f2:4f: 4b:73:09:3f:b3:81:b1:01:f0:fa:18:b7:89:ff:86:95:c7:90: 9e:b1:87:04:ff:a3:a5:b0:70:7b:55:52:80:f3:4e:da:31:dd: 71:fe:c1:5c:28:11:ae:03:d9:0a:c4:7a:32:e5:46:a4:58:74: 66:e4:ac:6e:b2:be:83:3a:cc:e7:db:8a:5d:95:73:d7:3a:a3: 7a:20:bf:e4:78:d3:7b:74:da:72:0b:8d:4c:9c:58:70:fd:65: 38:20:a7:de:29:c3:89:12:90:22:2f:15:cf:43:11:7b:91:d2: 7b:fc:2b:32:50:d6:2a:c1:61:c2:f6:9b:27:d0:16:5f:6a:85: 9f:34:82:60:dd:66:3e:61:a7:fe:48:e8:7a:c3:84:99:b3:21: f4:07:50:11:f2:f2:7c:bf:61:7e:1b:0c:19:b8:52:36:57:e9: 1f:a0:08:09 -----BEGIN CERTIFICATE----- MIIGNTCCBR2gAwIBAgISAZroaG9olC2E6GJsrWWRi3iyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjUxMjA0MDgwOTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMThkZDg2NGU5MGYxYzFkMDBiOGY5NGY3ODg2ZmU5MTczNGU0OTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscCCiOcrAw8urikaIoV7FYTUIXnb ByWd0RQhwaGH04/kprs5L2ihSTQ7+2gwBahIAHUEjI5g5Jw2v8HDnTdik2DYzVdh fEDw8KdLArnX876VLVT7fljpXLQ/y9agGkY3xnWRqmNAobUHsa3s3td06ItMhEEG S0gnPc8EKLZw/PICvc0i9/8k+vHDMHrwWFAxagCAYHV7ZEYKeOvzxxHIsavn3gTR sgpxPkM04YPrFqGgjPEUHgMDw19hFMrHH6OFdCSbXNCX1mow/Lj65CWt7em56FJL yFR8+TdjExD+1ScgCUZTUNiuu0SyYcl2SAeZwrahQooLdtFpND5PF/B2ZQIDAQAB o4IDQTCCAz0wHQYDVR0OBBYEFBGN2GTpDxwdALj5T3iG/pFzTkmEMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvRVkzWVpPa1BIQjBBdVBsUGVJYi1rWE5PU1lRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBVQYIKwYBBQUHAQcBAf8EggFEMIIBQDCCATwEAgABMIIB NAMEAT5M4gMEAD5M5wMEAD5M6wMEALlICgMEAMB8twMEAMB8vAMEAMB8vgMEAMF8 AwMEAMF8BgMEAMF8CAMEAMF8WwMEAMF8XgMEAMI6KwMEAMI6PAMEAMI6QwMEAMJX AwMEAcJXBgMEAMJXEDAMAwQAwlchAwQAwlciAwQAwlckAwQAwlcqAwQAwlc/AwQB wld0AwQBwld4AwQAwlegAwQAwlejMAwDBADCV6UDBADCV6YDBAHCV7AwDAMEAsJX tAMEAMJXtgMEAMJX5QMEAMJX5wMEAMKHFzAMAwQAwzo3AwQAwzo4AwQAwzo7AwQA wzo+AwQAw4UMAwQAw4UjAwQBw4U4AwQBw4U8AwQAw4VQAwQAw4VSAwQB1MDSAwQA 1MDyAwQA1MD7AwQA1MEKAwQA1MEPMA0GCSqGSIb3DQEBCwUAA4IBAQACcbz14TJ2 hPwRBq5VbYgxyuqOuJvmDSNVgikFVQu92pzk0AezTPna8H0kHzO8ktim2Bpvtj5d I+wCoeuRNKFjSq1MikLK19Oq5T4nc1CcZ57lz8iY8kmw8k9Lcwk/s4GxAfD6GLeJ /4aVx5CesYcE/6OlsHB7VVKA807aMd1x/sFcKBGuA9kKxHoy5UakWHRm5Kxusr6D Oszn24pdlXPXOqN6IL/keNN7dNpyC41MnFhw/WU4IKfeKcOJEpAiLxXPQxF7kdJ7 /CsyUNYqwWHC9psn0BZfaoWfNIJg3WY+Yaf+SOh6w4SZsyH0B1AR8vJ8v2F+GwwZ uFI2V+kfoAgJ -----END CERTIFICATE-----Generated at Fri Dec 5 11:50:10 2025 by rpki-client