This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/EAis4VgXPq-qy_VbTw0J8ovZZjw.roa File: EAis4VgXPq-qy_VbTw0J8ovZZjw.roa (raw, json) Hash identifier: PwMG2cvZ8UVTE71xYomxLk/Yvlw7ffLcHje7fTpaiWk= Subject key identifier: 10:08:AC:E1:58:17:3E:AF:AA:CB:F5:5B:4F:0D:09:F2:8B:D9:66:3C Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019A7C443AFA2E3E103ABDC8BD70DE3AE906 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/EAis4VgXPq-qy_VbTw0J8ovZZjw.roa Signing time: Thu 13 Nov 2025 08:10:37 +0000 ROA not before: Thu 13 Nov 2025 08:10:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 7029 IP address blocks: 77.105.22.0/24 maxlen: 24 79.175.96.0/24 maxlen: 24 109.121.0.0/19 maxlen: 24 109.121.40.0/24 maxlen: 24 109.121.43.0/24 maxlen: 24 109.233.184.0/24 maxlen: 24 109.233.185.0/24 maxlen: 24 178.219.14.0/24 maxlen: 24 178.253.237.0/24 maxlen: 24 212.69.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7c:44:3a:fa:2e:3e:10:3a:bd:c8:bd:70:de:3a:e9:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Nov 13 08:10:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=1008ace158173eafaacbf55b4f0d09f28bd9663c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:77:71:46:7d:92:5d:a3:2c:3f:f3:55:61:09: 42:b9:91:b5:fd:76:3c:af:6e:c5:94:6c:34:59:81: 2c:67:23:83:07:0c:e3:9a:20:47:1c:e0:bf:d9:e5: 1e:13:ea:82:e3:ce:77:1c:aa:3d:9d:9f:eb:8f:9e: 26:d9:03:9e:92:1d:58:99:66:86:1a:1a:52:67:8d: d7:38:1f:6d:3b:45:77:71:8f:80:33:37:f6:24:52: b7:b5:fb:60:29:4c:54:df:66:b3:87:20:71:54:99: 32:4d:c7:2f:8a:0c:f0:5e:03:30:60:ee:df:46:8d: d5:90:10:3e:c4:57:43:3e:55:44:54:b5:30:f6:f0: 6d:59:78:c8:3c:7b:c1:01:e1:d7:13:b5:77:63:17: 77:e3:6c:fc:56:fb:fb:51:e7:dc:1b:b8:a6:28:0f: 8a:93:ae:20:5a:71:66:dd:6e:7f:e9:d2:d4:23:f3: d9:9c:e3:31:9b:f2:7a:85:e5:10:a4:79:0d:09:8f: 4c:87:1c:bb:e5:29:f0:8b:38:90:b2:b6:f2:2c:d3: 1f:ee:2b:c3:06:82:90:97:d6:f2:f5:35:d4:e7:df: a7:37:4a:11:89:07:ae:7e:c1:ca:bc:35:e7:2b:15: 96:c8:d1:fb:56:df:17:cc:65:98:c1:f1:4f:7d:d1: 58:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:08:AC:E1:58:17:3E:AF:AA:CB:F5:5B:4F:0D:09:F2:8B:D9:66:3C X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/EAis4VgXPq-qy_VbTw0J8ovZZjw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.105.22.0/24 79.175.96.0/24 109.121.0.0/19 109.121.40.0/24 109.121.43.0/24 109.233.184.0/23 178.219.14.0/24 178.253.237.0/24 212.69.0.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:ed:92:4b:6f:6f:1f:78:4a:79:c4:11:ac:db:aa:b8:2f:45: 0b:05:87:2f:21:09:65:07:85:03:9f:6c:cf:c0:20:e2:55:5d: f8:4d:58:48:3a:dd:0f:fc:10:79:02:ae:b7:24:02:b5:2c:71: 30:a8:de:62:48:4f:d9:5d:9b:0a:a5:27:51:91:1b:ef:35:aa: 89:cb:d8:bc:fc:d3:a7:4a:a8:1b:cc:89:7a:f9:b4:96:64:2c: 9e:3d:c1:7b:9e:14:5e:b5:ae:89:38:ad:a5:3f:bf:49:c9:90: 23:14:fe:02:c3:15:ab:c6:2c:81:26:13:cd:10:64:cd:74:55: f9:6c:86:7a:c3:f3:60:16:6f:75:1e:2a:06:dc:37:e6:1c:65: db:cc:55:35:72:a7:fe:6b:eb:82:15:3b:76:5e:9d:32:11:ce: d4:8c:09:16:85:0e:4c:d3:7d:0f:71:21:a7:90:fd:1a:e0:7a: b6:c1:dc:39:ad:96:d9:69:2a:90:2f:cd:2e:04:70:88:28:ec: 53:79:af:a7:bd:70:2f:1d:59:5c:a8:1c:b6:16:af:95:39:1c: 35:b5:c5:76:7d:c2:4e:18:56:2d:89:cf:e2:1f:6a:5c:04:82: f4:4c:40:83:6c:4e:99:8f:fb:76:08:64:82:7f:7f:41:42:fd: 9d:ed:5b:56 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZp8RDr6Lj4QOr3IvXDeOukGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjUxMTEzMDgxMDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDA4YWNlMTU4MTczZWFmYWFjYmY1NWI0ZjBkMDlmMjhiZDk2NjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtndxRn2SXaMsP/NVYQlCuZG1/XY8 r27FlGw0WYEsZyODBwzjmiBHHOC/2eUeE+qC4853HKo9nZ/rj54m2QOekh1YmWaG GhpSZ43XOB9tO0V3cY+AMzf2JFK3tftgKUxU32azhyBxVJkyTccvigzwXgMwYO7f Ro3VkBA+xFdDPlVEVLUw9vBtWXjIPHvBAeHXE7V3Yxd342z8Vvv7UefcG7imKA+K k64gWnFm3W5/6dLUI/PZnOMxm/J6heUQpHkNCY9Mhxy75SnwiziQsrbyLNMf7ivD BoKQl9by9TXU59+nN0oRiQeufsHKvDXnKxWWyNH7Vt8XzGWYwfFPfdFYGQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFBAIrOFYFz6vqsv1W08NCfKL2WY8MB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvRUFpczRWZ1hQcS1xeV9WYlR3MEo4b3ZaWmp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQATWkWAwQA T69gAwQFbXkAAwQAbXkoAwQAbXkrAwQBbem4AwQAstsOAwQAsv3tAwQA1EUAMA0G CSqGSIb3DQEBCwUAA4IBAQBN7ZJLb28feEp5xBGs26q4L0ULBYcvIQllB4UDn2zP wCDiVV34TVhIOt0P/BB5Aq63JAK1LHEwqN5iSE/ZXZsKpSdRkRvvNaqJy9i8/NOn SqgbzIl6+bSWZCyePcF7nhReta6JOK2lP79JyZAjFP4CwxWrxiyBJhPNEGTNdFX5 bIZ6w/NgFm91HioG3DfmHGXbzFU1cqf+a+uCFTt2Xp0yEc7UjAkWhQ5M030PcSGn kP0a4Hq2wdw5rZbZaSqQL80uBHCIKOxTea+nvXAvHVlcqBy2Fq+VORw1tcV2fcJO GFYtic/iH2pcBIL0TECDbE6Zj/t2CGSCf39BQv2d7VtW -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:42 2025 by rpki-client