This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/E-4ADBGXON3Ebg7oHiDfrmtH_lc.roa File: E-4ADBGXON3Ebg7oHiDfrmtH_lc.roa (raw, json) Hash identifier: l2qYirx7neuSnlQE7h3UgUns57ricFDVqJUUNXFMsmI= Subject key identifier: 13:EE:00:0C:11:97:38:DD:C4:6E:0E:E8:1E:20:DF:AE:6B:47:FE:57 Certificate issuer: /CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991 Certificate serial: 019B0D5764D698DD8829B476F4A1D79840C5 Authority key identifier: 2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/E-4ADBGXON3Ebg7oHiDfrmtH_lc.roa Signing time: Thu 11 Dec 2025 12:16:29 +0000 ROA not before: Thu 11 Dec 2025 12:16:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 3292 IP address blocks: 2.104.0.0/14 maxlen: 14 2.108.0.0/15 maxlen: 15 2.111.0.0/16 maxlen: 16 62.135.128.0/17 maxlen: 17 62.242.0.0/15 maxlen: 15 80.62.0.0/15 maxlen: 15 80.160.0.0/13 maxlen: 13 80.196.0.0/14 maxlen: 14 81.31.80.0/20 maxlen: 20 83.88.0.0/13 maxlen: 13 85.129.0.0/17 maxlen: 17 87.48.0.0/13 maxlen: 13 87.56.32.0/19 maxlen: 19 87.56.128.0/17 maxlen: 17 87.57.0.0/16 maxlen: 16 87.58.32.0/19 maxlen: 19 87.58.160.0/19 maxlen: 19 87.58.224.0/19 maxlen: 19 87.59.0.0/16 maxlen: 16 87.60.0.0/16 maxlen: 16 87.61.0.0/17 maxlen: 17 87.61.128.0/18 maxlen: 18 87.61.224.0/19 maxlen: 19 87.62.0.0/15 maxlen: 15 93.160.0.0/14 maxlen: 14 93.164.0.0/17 maxlen: 17 93.164.160.0/19 maxlen: 19 93.164.192.0/18 maxlen: 18 93.165.0.0/18 maxlen: 18 93.165.96.0/19 maxlen: 19 93.165.128.0/17 maxlen: 17 93.166.0.0/15 maxlen: 15 93.178.128.0/18 maxlen: 18 94.189.0.0/17 maxlen: 17 95.166.64.0/18 maxlen: 18 95.166.128.0/17 maxlen: 17 128.76.0.0/18 maxlen: 18 128.76.128.0/17 maxlen: 17 128.77.128.0/17 maxlen: 17 131.164.0.0/16 maxlen: 16 176.20.0.0/17 maxlen: 17 176.20.224.0/19 maxlen: 19 176.21.0.0/16 maxlen: 16 176.22.0.0/17 maxlen: 17 176.22.160.0/19 maxlen: 19 176.22.192.0/18 maxlen: 18 176.23.0.0/17 maxlen: 17 176.23.160.0/19 maxlen: 19 176.23.192.0/18 maxlen: 18 188.176.0.0/13 maxlen: 13 192.66.25.0/24 maxlen: 24 192.66.33.0/24 maxlen: 24 192.66.36.0/24 maxlen: 24 192.66.38.0/24 maxlen: 24 192.66.175.0/24 maxlen: 24 192.66.180.0/24 maxlen: 24 192.66.181.0/24 maxlen: 24 193.3.130.0/23 maxlen: 23 193.3.140.0/24 maxlen: 24 193.3.141.0/24 maxlen: 24 193.3.142.0/24 maxlen: 24 193.3.224.0/22 maxlen: 22 193.39.139.0/24 maxlen: 24 193.88.0.0/15 maxlen: 15 193.162.32.0/23 maxlen: 23 193.162.98.0/23 maxlen: 23 193.162.145.0/24 maxlen: 24 193.162.146.0/24 maxlen: 24 193.162.152.0/21 maxlen: 21 193.163.10.0/24 maxlen: 24 193.163.24.0/22 maxlen: 22 193.163.158.0/23 maxlen: 23 193.163.160.0/21 maxlen: 21 194.182.128.0/20 maxlen: 20 194.182.144.0/21 maxlen: 21 194.182.232.0/21 maxlen: 21 194.182.240.0/20 maxlen: 20 194.192.0.0/16 maxlen: 16 194.239.0.0/16 maxlen: 16 194.247.188.0/23 maxlen: 23 195.41.0.0/16 maxlen: 16 195.95.181.0/24 maxlen: 24 195.97.128.0/18 maxlen: 18 195.184.32.0/19 maxlen: 19 195.215.0.0/16 maxlen: 16 195.249.0.0/16 maxlen: 16 212.130.0.0/16 maxlen: 16 2001:6c8::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.mft rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:57:64:d6:98:dd:88:29:b4:76:f4:a1:d7:98:40:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e8b24c76ad87a6c1fedffaf08d9b17b45249991 Validity Not Before: Dec 11 12:16:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=13ee000c119738ddc46e0ee81e20dfae6b47fe57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:47:3a:5d:36:86:ad:81:62:f2:a3:77:49:02: e4:99:53:c7:a5:9e:21:81:e6:33:57:bd:19:c3:11: 98:19:83:18:07:e8:ba:7b:3e:e5:a7:18:95:56:1a: 01:15:00:72:6f:17:cb:a0:34:35:8d:9a:f5:a5:bb: b9:b8:95:b8:c9:1a:f0:44:dc:0f:04:e0:40:07:af: a0:46:3d:21:26:75:86:89:36:1f:5d:c0:5d:a1:47: e7:ab:bb:63:90:ab:be:d1:44:b4:ca:73:f3:50:f3: 60:07:84:f6:fc:12:5c:a3:1d:72:76:85:f2:83:10: bf:d2:c0:c0:19:ff:c5:79:cc:80:e2:55:34:3b:9a: ff:a3:76:65:6e:2a:c8:01:20:9b:c2:7e:49:e8:e7: 88:2c:a8:aa:86:4f:8e:d6:65:b9:8e:2a:47:6b:41: d4:c1:90:33:03:5d:28:c9:36:f4:d6:7d:da:74:67: df:44:56:d2:f9:81:5d:04:15:6c:61:13:f1:17:4c: 4a:fb:0b:14:5e:9d:10:82:f5:24:d6:59:4b:2f:e9: 53:47:44:b3:55:bd:18:f8:ea:28:b3:e2:4d:5e:bf: 8c:e4:d0:89:52:0c:5d:6c:b1:fe:6a:24:6c:af:8f: ec:40:a1:2b:58:a8:9f:c3:fb:34:5d:0b:b0:80:c4: e8:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:EE:00:0C:11:97:38:DD:C4:6E:0E:E8:1E:20:DF:AE:6B:47:FE:57 X509v3 Authority Key Identifier: keyid:2E:8B:24:C7:6A:D8:7A:6C:1F:ED:FF:AF:08:D9:B1:7B:45:24:99:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Loskx2rYemwf7f-vCNmxe0UkmZE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/E-4ADBGXON3Ebg7oHiDfrmtH_lc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/04d348-75b9-48d2-be10-91190a02db70/1/Loskx2rYemwf7f-vCNmxe0UkmZE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.104.0.0-2.109.255.255 2.111.0.0/16 62.135.128.0/17 62.242.0.0/15 80.62.0.0/15 80.160.0.0/13 80.196.0.0/14 81.31.80.0/20 83.88.0.0/13 85.129.0.0/17 87.48.0.0/13 87.56.32.0/19 87.56.128.0-87.57.255.255 87.58.32.0/19 87.58.160.0/19 87.58.224.0-87.61.191.255 87.61.224.0-87.63.255.255 93.160.0.0-93.164.127.255 93.164.160.0-93.165.63.255 93.165.96.0-93.167.255.255 93.178.128.0/18 94.189.0.0/17 95.166.64.0-95.166.255.255 128.76.0.0/18 128.76.128.0/17 128.77.128.0/17 131.164.0.0/16 176.20.0.0/17 176.20.224.0-176.22.127.255 176.22.160.0-176.23.127.255 176.23.160.0-176.23.255.255 188.176.0.0/13 192.66.25.0/24 192.66.33.0/24 192.66.36.0/24 192.66.38.0/24 192.66.175.0/24 192.66.180.0/23 193.3.130.0/23 193.3.140.0-193.3.142.255 193.3.224.0/22 193.39.139.0/24 193.88.0.0/15 193.162.32.0/23 193.162.98.0/23 193.162.145.0-193.162.146.255 193.162.152.0/21 193.163.10.0/24 193.163.24.0/22 193.163.158.0-193.163.167.255 194.182.128.0-194.182.151.255 194.182.232.0-194.182.255.255 194.192.0.0/16 194.239.0.0/16 194.247.188.0/23 195.41.0.0/16 195.95.181.0/24 195.97.128.0/18 195.184.32.0/19 195.215.0.0/16 195.249.0.0/16 212.130.0.0/16 IPv6: 2001:6c8::/29 Signature Algorithm: sha256WithRSAEncryption b6:0b:94:76:78:e5:f8:c0:fb:10:4f:69:ce:69:b6:19:ec:b3: 79:66:be:03:c0:75:00:8b:df:58:92:eb:88:af:1c:c2:43:7d: 80:41:c9:55:9d:c6:bf:c3:f8:c7:ac:d7:e3:14:8d:d3:f8:3b: b2:cf:39:cd:d1:e2:ad:76:b1:53:b5:2f:c8:e6:63:65:54:e2: 22:89:71:c6:dd:1e:13:7e:c0:06:f3:d5:9a:e2:df:13:0a:c1: 8c:e2:7b:34:23:2a:7a:33:29:5a:0e:de:66:ff:35:79:a1:42: 1c:01:91:f4:34:86:f7:e8:57:eb:68:3a:e6:6e:6c:0a:a4:4b: 9d:64:71:b7:5b:62:98:ad:ff:e4:88:13:f2:86:07:00:cb:aa: a6:20:8f:ff:28:88:6b:be:01:e1:7a:3d:5c:6a:f1:ad:57:55: 6f:30:d5:53:a5:c1:22:f8:d6:ef:6c:d3:3c:8d:6a:62:61:85: 34:c9:b6:8e:80:dc:bf:96:7c:71:e8:8e:88:a4:8a:6f:30:40: 4d:ae:ee:60:60:92:ba:29:b1:86:b0:6b:82:62:24:6d:f9:37: 3d:f2:b6:97:69:b8:35:90:cf:86:15:4c:1b:96:c3:be:7e:de: a0:c7:60:72:ba:5f:98:5b:bf:cf:00:ab:6b:1a:63:58:e5:57: 4d:28:06:b8 -----BEGIN CERTIFICATE----- MIIG6zCCBdOgAwIBAgISAZsNV2TWmN2IKbR29KHXmEDFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlOGIyNGM3NmFkODdhNmMxZmVkZmZhZjA4ZDliMTdiNDUy NDk5OTEwHhcNMjUxMjExMTIxNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2VlMDAwYzExOTczOGRkYzQ2ZTBlZTgxZTIwZGZhZTZiNDdmZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0c6XTaGrYFi8qN3SQLkmVPHpZ4h geYzV70ZwxGYGYMYB+i6ez7lpxiVVhoBFQBybxfLoDQ1jZr1pbu5uJW4yRrwRNwP BOBAB6+gRj0hJnWGiTYfXcBdoUfnq7tjkKu+0US0ynPzUPNgB4T2/BJcox1ydoXy gxC/0sDAGf/FecyA4lU0O5r/o3ZlbirIASCbwn5J6OeILKiqhk+O1mW5jipHa0HU wZAzA10oyTb01n3adGffRFbS+YFdBBVsYRPxF0xK+wsUXp0QgvUk1llLL+lTR0Sz Vb0Y+Ooos+JNXr+M5NCJUgxdbLH+aiRsr4/sQKErWKifw/s0XQuwgMTomwIDAQAB o4ID9zCCA/MwHQYDVR0OBBYEFBPuAAwRlzjdxG4O6B4g365rR/5XMB8GA1UdIwQY MBaAFC6LJMdq2HpsH+3/rwjZsXtFJJmRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8wNGQzNDgtNzViOS00OGQyLWJlMTAt OTExOTBhMDJkYjcwLzEvRS00QURCR1hPTjNFYmc3b0hpRGZybXRIX2xjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8wNGQzNDgtNzViOS00OGQyLWJlMTAtOTExOTBhMDJkYjcw LzEvTG9za3gyclllbXdmN2YtdkNObXhlMFVrbVpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIICCwYIKwYBBQUHAQcBAf8EggH6MIIB9jCCAeMEAgABMIIB 2zAKAwMDAmgDAwECbAMDAAJvAwQHPoeAAwMBPvIDAwFQPgMDA1CgAwMCUMQDBARR H1ADAwNTWAMEB1WBAAMDA1cwAwQFVzggMAsDBAdXOIADAwFXOAMEBVc6IAMEBVc6 oDAMAwQFVzrgAwQGVz2AMAsDBAVXPeADAwZXADALAwMFXaADBAddpAAwDAMEBV2k oAMEBl2lADALAwQFXaVgAwMDXaADBAZdsoADBAdevQAwCwMEBl+mQAMDAF+mAwQG gEwAAwQHgEyAAwQHgE2AAwMAg6QDBAewFAAwDAMEBbAU4AMEB7AWADAMAwQFsBag AwQHsBcAMAsDBAWwF6ADAwOwEAMDA7ywAwQAwEIZAwQAwEIhAwQAwEIkAwQAwEIm AwQAwEKvAwQBwEK0AwQBwQOCMAwDBALBA4wDBADBA44DBALBA+ADBADBJ4sDAwHB WAMEAcGiIAMEAcGiYjAMAwQAwaKRAwQAwaKSAwQDwaKYAwQAwaMKAwQCwaMYMAwD BAHBo54DBAPBo6AwDAMEB8K2gAMEA8K2kDALAwQDwrboAwMAwrYDAwDCwAMDAMLv AwQBwve8AwMAwykDBADDX7UDBAbDYYADBAXDuCADAwDD1wMDAMP5AwMA1IIwDQQC AAIwBwMFAyABBsgwDQYJKoZIhvcNAQELBQADggEBALYLlHZ45fjA+xBPac5pthns s3lmvgPAdQCL31iS64ivHMJDfYBByVWdxr/D+Mes1+MUjdP4O7LPOc3R4q12sVO1 L8jmY2VU4iKJccbdHhN+wAbz1Zri3xMKwYziezQjKnozKVoO3mb/NXmhQhwBkfQ0 hvfoV+toOuZubAqkS51kcbdbYpit/+SIE/KGBwDLqqYgj/8oiGu+AeF6PVxq8a1X VW8w1VOlwSL41u9s0zyNamJhhTTJto6A3L+WfHHojoikim8wQE2u7mBgkropsYaw a4JiJG35Nz3ytpdpuDWQz4YVTBuWw75+3qDHYHK6X5hbv88Aq2saY1jlV00oBrg= -----END CERTIFICATE-----Generated at Fri Dec 12 00:34:52 2025 by rpki-client