This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/E_rYoUYCf-xm7Tnvu1b7bgoqR14.roa File: E_rYoUYCf-xm7Tnvu1b7bgoqR14.roa (raw, json) Hash identifier: C7STEYPQHlCBsUrxVgumEbc0gpARgZUmNpvMcTD5rws= Subject key identifier: 13:FA:D8:A1:46:02:7F:EC:66:ED:39:EF:BB:56:FB:6E:0A:2A:47:5E Certificate issuer: /CN=16055801b775e774306321455fd463fbd9273c4c Certificate serial: 019B69B0DE747DECFEF805360751CD2334D4 Authority key identifier: 16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/E_rYoUYCf-xm7Tnvu1b7bgoqR14.roa Signing time: Mon 29 Dec 2025 10:39:17 +0000 ROA not before: Mon 29 Dec 2025 10:39:17 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 144.56.7.0/24 maxlen: 24 144.56.9.0/24 maxlen: 24 144.56.13.0/24 maxlen: 24 144.56.17.0/24 maxlen: 24 144.56.20.0/24 maxlen: 24 144.56.23.0/24 maxlen: 24 144.56.24.0/24 maxlen: 24 144.56.27.0/24 maxlen: 24 144.56.29.0/24 maxlen: 24 144.56.33.0/24 maxlen: 24 144.56.34.0/24 maxlen: 24 144.56.35.0/24 maxlen: 24 144.56.40.0/24 maxlen: 24 144.56.41.0/24 maxlen: 24 144.56.51.0/24 maxlen: 24 144.56.71.0/24 maxlen: 24 144.56.72.0/24 maxlen: 24 144.56.76.0/24 maxlen: 24 144.56.80.0/24 maxlen: 24 144.56.81.0/24 maxlen: 24 144.56.84.0/24 maxlen: 24 144.56.85.0/24 maxlen: 24 144.56.86.0/24 maxlen: 24 144.56.90.0/24 maxlen: 24 144.56.91.0/24 maxlen: 24 144.56.93.0/24 maxlen: 24 144.56.94.0/24 maxlen: 24 144.56.95.0/24 maxlen: 24 144.56.97.0/24 maxlen: 24 144.56.100.0/24 maxlen: 24 144.56.101.0/24 maxlen: 24 144.56.102.0/24 maxlen: 24 144.56.103.0/24 maxlen: 24 144.56.105.0/24 maxlen: 24 144.56.106.0/24 maxlen: 24 144.56.107.0/24 maxlen: 24 144.56.109.0/24 maxlen: 24 144.56.110.0/24 maxlen: 24 144.56.112.0/24 maxlen: 24 144.56.117.0/24 maxlen: 24 144.56.119.0/24 maxlen: 24 144.56.121.0/24 maxlen: 24 144.56.122.0/24 maxlen: 24 144.56.125.0/24 maxlen: 24 144.56.126.0/24 maxlen: 24 144.56.127.0/24 maxlen: 24 144.56.128.0/24 maxlen: 24 144.56.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.mft rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 13:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:b0:de:74:7d:ec:fe:f8:05:36:07:51:cd:23:34:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16055801b775e774306321455fd463fbd9273c4c Validity Not Before: Dec 29 10:39:17 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=13fad8a146027fec66ed39efbb56fb6e0a2a475e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b2:43:99:77:95:3d:7e:b0:c9:b6:83:6b:9a: 98:69:78:ea:d5:63:2a:93:ec:5d:37:94:98:f8:48: bd:0e:93:95:4d:46:e1:28:07:40:40:a2:5b:2d:8c: f0:6b:5c:04:77:c4:a4:67:4f:33:58:0f:de:2a:61: e8:d4:c4:55:98:ce:c9:77:e6:11:68:c3:27:cd:2a: f1:38:8c:92:b3:f9:d1:41:ce:7e:46:04:f2:f0:72: 5b:17:d5:1a:0b:60:61:f2:fa:dc:6f:64:c8:85:79: a2:cc:f0:3a:63:30:f7:0a:fd:56:8e:72:e1:9f:4c: c4:9a:40:a3:2d:53:98:80:33:2c:a1:de:ab:c6:2a: 3c:8a:de:ff:5a:31:46:bc:93:40:9c:59:87:cf:6d: 8a:81:92:6d:64:5e:bb:36:f0:e6:69:b6:dc:9c:1e: d1:1b:8f:fa:7f:6a:9b:d9:a5:8a:d9:2d:70:5a:ab: d2:34:89:84:9e:ca:8d:5b:7a:38:a1:95:0c:17:56: e4:77:2f:58:60:18:45:3a:35:6e:fc:e9:30:90:78: 37:15:a1:ef:01:2c:aa:65:31:aa:37:d1:64:6b:8b: 88:05:b8:00:79:e4:a4:f6:76:b9:5f:5b:9f:4c:aa: 15:f5:d8:87:64:56:33:7d:03:0b:8b:b1:5c:cb:72: ec:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FA:D8:A1:46:02:7F:EC:66:ED:39:EF:BB:56:FB:6E:0A:2A:47:5E X509v3 Authority Key Identifier: keyid:16:05:58:01:B7:75:E7:74:30:63:21:45:5F:D4:63:FB:D9:27:3C:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgVYAbd153QwYyFFX9Rj-9knPEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/E_rYoUYCf-xm7Tnvu1b7bgoqR14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f0340b-330e-45d7-be58-135717ef388a/1/FgVYAbd153QwYyFFX9Rj-9knPEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 144.56.7.0/24 144.56.9.0/24 144.56.13.0/24 144.56.17.0/24 144.56.20.0/24 144.56.23.0-144.56.24.255 144.56.27.0/24 144.56.29.0/24 144.56.33.0-144.56.35.255 144.56.40.0/23 144.56.51.0/24 144.56.71.0-144.56.72.255 144.56.76.0/24 144.56.80.0/23 144.56.84.0-144.56.86.255 144.56.90.0/23 144.56.93.0-144.56.95.255 144.56.97.0/24 144.56.100.0/22 144.56.105.0-144.56.107.255 144.56.109.0-144.56.110.255 144.56.112.0/24 144.56.117.0/24 144.56.119.0/24 144.56.121.0-144.56.122.255 144.56.125.0-144.56.129.255 Signature Algorithm: sha256WithRSAEncryption b0:ee:b6:46:e4:46:64:12:f1:eb:5e:9d:e5:34:e6:27:78:63: c2:a0:b9:af:3c:d8:eb:b9:32:a4:b4:dd:6b:78:f7:38:d2:9d: 97:d9:f6:24:09:2d:bc:f7:d3:75:21:4d:cb:bc:ca:a4:dc:ec: fe:e7:39:c5:6b:9c:67:09:0d:6a:8b:69:29:c5:ed:a9:fa:18: 7c:a3:b2:32:04:3e:98:d8:c7:48:cc:df:6d:4f:07:cb:11:ea: 26:7f:73:d1:f6:30:a0:d0:34:bf:06:e3:9e:dc:b0:8e:06:5e: bd:ee:64:5d:18:f5:38:a0:49:bf:4e:ed:84:1a:d6:b7:d1:f8: a7:47:8c:5a:8a:fb:2b:02:eb:f9:2b:b6:97:0e:18:3a:10:39: 31:3f:6e:33:88:3b:65:e1:d9:25:da:eb:55:78:91:54:47:6d: 30:bb:39:06:5a:33:41:c0:2e:f4:8b:e2:bb:f4:23:3d:c1:3b: 22:b6:fa:64:53:d0:0b:99:25:23:10:58:87:c1:ea:6c:3b:9b: 74:df:61:93:4a:e0:fe:c2:5a:6e:44:d9:67:03:35:b1:de:7a: 48:b0:46:c5:ce:55:b8:e5:13:c8:92:b1:ee:45:dd:1d:ed:9d: 08:c9:0e:6e:c7:23:64:93:e9:ca:6a:e4:5b:86:13:3b:1b:10: 31:ac:0a:54 -----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgISAZtpsN50fez++AU2B1HNIzTUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDU1ODAxYjc3NWU3NzQzMDYzMjE0NTVmZDQ2M2ZiZDky NzNjNGMwHhcNMjUxMjI5MTAzOTE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2ZhZDhhMTQ2MDI3ZmVjNjZlZDM5ZWZiYjU2ZmI2ZTBhMmE0NzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7LJDmXeVPX6wybaDa5qYaXjq1WMq k+xdN5SY+Ei9DpOVTUbhKAdAQKJbLYzwa1wEd8SkZ08zWA/eKmHo1MRVmM7Jd+YR aMMnzSrxOIySs/nRQc5+RgTy8HJbF9UaC2Bh8vrcb2TIhXmizPA6YzD3Cv1WjnLh n0zEmkCjLVOYgDMsod6rxio8it7/WjFGvJNAnFmHz22KgZJtZF67NvDmabbcnB7R G4/6f2qb2aWK2S1wWqvSNImEnsqNW3o4oZUMF1bkdy9YYBhFOjVu/OkwkHg3FaHv ASyqZTGqN9Fka4uIBbgAeeSk9na5X1ufTKoV9diHZFYzfQMLi7Fcy3LshwIDAQAB o4IC7TCCAukwHQYDVR0OBBYEFBP62KFGAn/sZu0577tW+24KKkdeMB8GA1UdIwQY MBaAFBYFWAG3ded0MGMhRV/UY/vZJzxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgt MTM1NzE3ZWYzODhhLzEvRV9yWW9VWUNmLXhtN1RudnUxYjdiZ29xUjE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMDM0MGItMzMwZS00NWQ3LWJlNTgtMTM1NzE3ZWYzODhh LzEvRmdWWUFiZDE1M1F3WXlGRlg5UmotOWtuUEV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBAQYIKwYBBQUHAQcBAf8EgfEwge4wgesEAgABMIHkAwQA kDgHAwQAkDgJAwQAkDgNAwQAkDgRAwQAkDgUMAwDBACQOBcDBACQOBgDBACQOBsD BACQOB0wDAMEAJA4IQMEApA4IAMEAZA4KAMEAJA4MzAMAwQAkDhHAwQAkDhIAwQA kDhMAwQBkDhQMAwDBAKQOFQDBACQOFYDBAGQOFowDAMEAJA4XQMEBZA4QAMEAJA4 YQMEApA4ZDAMAwQAkDhpAwQCkDhoMAwDBACQOG0DBACQOG4DBACQOHADBACQOHUD BACQOHcwDAMEAJA4eQMEAJA4ejAMAwQAkDh9AwQBkDiAMA0GCSqGSIb3DQEBCwUA A4IBAQCw7rZG5EZkEvHrXp3lNOYneGPCoLmvPNjruTKktN1rePc40p2X2fYkCS28 99N1IU3LvMqk3Oz+5znFa5xnCQ1qi2kpxe2p+hh8o7IyBD6Y2MdIzN9tTwfLEeom f3PR9jCg0DS/BuOe3LCOBl697mRdGPU4oEm/Tu2EGta30finR4xaivsrAuv5K7aX Dhg6EDkxP24ziDtl4dkl2utVeJFUR20wuzkGWjNBwC70i+K79CM9wTsitvpkU9AL mSUjEFiHwepsO5t032GTSuD+wlpuRNlnAzWx3npIsEbFzlW45RPIkrHuRd0d7Z0I yQ5uxyNkk+nKauRbhhM7GxAxrApU -----END CERTIFICATE-----Generated at Tue Dec 30 21:08:29 2025 by rpki-client