This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/EeZP-5SHSEawYdE6cDHYPsGpsC4.roa File: EeZP-5SHSEawYdE6cDHYPsGpsC4.roa (raw, json) Hash identifier: AP7Fyhfq5/WIxTZ9Gig6bft8IGMBLH4JkZ4O2XoWirA= Subject key identifier: 11:E6:4F:FB:94:87:48:46:B0:61:D1:3A:70:31:D8:3E:C1:A9:B0:2E Certificate issuer: /CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea Certificate serial: 019B7CED2474097B990BC38E847714C9F716 Authority key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/EeZP-5SHSEawYdE6cDHYPsGpsC4.roa Signing time: Fri 02 Jan 2026 04:17:54 +0000 ROA not before: Fri 02 Jan 2026 04:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 63949 IP address blocks: 80.85.84.0/22 maxlen: 24 85.90.244.0/22 maxlen: 24 85.159.208.0/21 maxlen: 24 88.80.184.0/21 maxlen: 24 109.74.192.0/20 maxlen: 24 109.237.24.0/22 maxlen: 24 151.236.216.0/21 maxlen: 24 176.58.96.0/19 maxlen: 24 178.79.128.0/18 maxlen: 24 185.3.92.0/22 maxlen: 24 192.46.208.0/21 maxlen: 24 192.46.216.0/22 maxlen: 24 192.46.220.0/23 maxlen: 24 192.46.222.0/23 maxlen: 24 192.46.224.0/21 maxlen: 24 192.46.232.0/21 maxlen: 24 192.53.112.0/21 maxlen: 24 192.53.120.0/22 maxlen: 24 192.53.124.0/22 maxlen: 24 192.53.160.0/21 maxlen: 24 192.53.168.0/23 maxlen: 24 192.53.170.0/23 maxlen: 24 192.53.172.0/22 maxlen: 24 194.195.112.0/21 maxlen: 24 194.195.120.0/21 maxlen: 24 194.195.208.0/21 maxlen: 24 194.195.216.0/21 maxlen: 24 194.195.240.0/21 maxlen: 24 194.195.248.0/21 maxlen: 24 194.233.160.0/21 maxlen: 24 194.233.168.0/21 maxlen: 24 194.233.176.0/21 maxlen: 24 194.233.184.0/21 maxlen: 24 212.71.232.0/21 maxlen: 24 212.71.244.0/22 maxlen: 24 212.71.248.0/21 maxlen: 24 212.111.40.0/22 maxlen: 24 213.52.128.0/22 maxlen: 24 213.168.248.0/22 maxlen: 24 213.219.36.0/22 maxlen: 24 2a01:7e00::/32 maxlen: 48 2a01:7e01::/32 maxlen: 48 2a01:7e02::/32 maxlen: 48 2a01:7e03::/32 maxlen: 48 2a01:7e04::/32 maxlen: 48 2a01:7e05::/32 maxlen: 48 2a01:7e06::/32 maxlen: 48 2a01:7e07::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:24:74:09:7b:99:0b:c3:8e:84:77:14:c9:f7:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea Validity Not Before: Jan 2 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11e64ffb94874846b061d13a7031d83ec1a9b02e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b9:39:43:ed:e1:cc:58:eb:76:53:fe:46:55: e3:65:8d:c1:46:c5:9c:b8:d4:5b:6a:9d:af:56:00: 4d:06:7c:48:a3:4b:a8:93:41:cb:60:b1:59:9e:e1: e4:71:4b:2a:9b:40:33:a4:79:5f:83:2d:7b:ac:4c: a3:ee:4e:5f:6f:99:bd:0b:86:08:14:8d:63:34:12: 5a:e5:07:99:2e:8d:d5:9b:05:d4:80:3a:1e:79:ed: 4f:0f:3a:7e:d8:f3:81:6d:b9:31:a9:74:9a:3f:cd: 7c:9b:06:e7:e2:5b:1d:46:a8:2c:cb:c0:e6:a0:d5: 76:bc:57:d2:94:56:87:6d:a0:71:a4:e6:22:3b:d9: af:a6:aa:28:c5:df:31:78:8a:d1:a9:73:aa:60:db: 30:69:79:92:f5:8a:f5:09:44:c1:84:d8:5b:3a:7c: ef:6c:5b:b6:9c:34:36:b1:2d:81:5e:f8:57:89:a8: b1:76:d7:ca:d5:d6:15:27:ac:0c:ab:ff:70:47:82: b7:96:72:1e:ba:9a:a4:64:7c:d0:f9:6e:3b:47:6b: 3d:0f:7b:03:ec:96:0f:06:64:40:51:e9:8f:2c:37: 5c:60:41:8d:99:49:34:2b:85:d5:e3:c7:0d:d8:1e: c0:c6:e9:09:35:a4:17:77:3e:b8:ab:a4:b7:f0:99: 9a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E6:4F:FB:94:87:48:46:B0:61:D1:3A:70:31:D8:3E:C1:A9:B0:2E X509v3 Authority Key Identifier: keyid:29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/EeZP-5SHSEawYdE6cDHYPsGpsC4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.85.84.0/22 85.90.244.0/22 85.159.208.0/21 88.80.184.0/21 109.74.192.0/20 109.237.24.0/22 151.236.216.0/21 176.58.96.0/19 178.79.128.0/18 185.3.92.0/22 192.46.208.0-192.46.239.255 192.53.112.0/20 192.53.160.0/20 194.195.112.0/20 194.195.208.0/20 194.195.240.0/20 194.233.160.0/19 212.71.232.0/21 212.71.244.0-212.71.255.255 212.111.40.0/22 213.52.128.0/22 213.168.248.0/22 213.219.36.0/22 IPv6: 2a01:7e00::/29 Signature Algorithm: sha256WithRSAEncryption 7d:b9:ba:2b:d3:c0:64:dc:e8:f7:1e:3b:5d:8e:46:29:91:8e: 7a:c0:16:89:34:d7:56:79:bb:8f:9f:a3:04:0e:cc:4e:f1:38: c8:f7:c8:f3:0b:bb:dc:6a:38:79:8f:19:85:f8:0a:13:3a:6f: bf:03:cd:21:35:d0:2d:ac:3c:f1:7f:96:16:52:5b:66:53:63: fc:48:17:0b:8f:fd:f7:2b:9f:c2:1e:25:75:96:f8:fb:89:7d: d3:b0:82:98:cd:a5:81:f1:a5:5a:61:be:d5:71:61:46:03:47: c2:49:97:86:f1:36:f0:3b:43:56:ee:bc:23:28:21:49:8d:21: d3:2c:dc:79:6d:48:17:66:ae:2b:8b:f1:97:69:f5:21:28:c0: 99:06:8a:25:29:53:db:92:e6:c3:7c:bb:35:6e:7c:30:fe:cd: 66:83:54:09:22:90:f7:c9:28:c5:09:ea:59:d6:36:38:ad:38: 97:d5:75:50:4b:2a:39:61:cb:0b:63:c7:a6:0b:53:43:3e:b5: f3:ab:54:c4:26:5e:c1:2b:fa:89:b6:f6:06:a5:34:b5:21:17: 63:65:40:54:bc:8e:1e:68:78:70:73:a9:9d:8f:fd:7a:89:94: 7d:3d:d6:64:d4:90:4c:30:4b:24:76:6c:be:6d:9c:a7:a9:35: 5e:97:bf:c8 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgISAZt87SR0CXuZC8OOhHcUyfcWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YWQ4YmZlMDdhZDVkMmNjYjQzYjBkMWRiYTZiMTkyY2I1 MWRiZWEwHhcNMjYwMTAyMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWU2NGZmYjk0ODc0ODQ2YjA2MWQxM2E3MDMxZDgzZWMxYTliMDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrk5Q+3hzFjrdlP+RlXjZY3BRsWc uNRbap2vVgBNBnxIo0uok0HLYLFZnuHkcUsqm0AzpHlfgy17rEyj7k5fb5m9C4YI FI1jNBJa5QeZLo3VmwXUgDoeee1PDzp+2POBbbkxqXSaP818mwbn4lsdRqgsy8Dm oNV2vFfSlFaHbaBxpOYiO9mvpqooxd8xeIrRqXOqYNswaXmS9Yr1CUTBhNhbOnzv bFu2nDQ2sS2BXvhXiaixdtfK1dYVJ6wMq/9wR4K3lnIeupqkZHzQ+W47R2s9D3sD 7JYPBmRAUemPLDdcYEGNmUk0K4XV48cN2B7AxukJNaQXdz64q6S38JmaJwIDAQAB o4ICsDCCAqwwHQYDVR0OBBYEFBHmT/uUh0hGsGHROnAx2D7BqbAuMB8GA1UdIwQY MBaAFCmti/4HrV0sy0Ow0dumsZLLUdvqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yMzVkMjYtNzA5NC00ZmViLTljYTkt Mzc4NDk5Mzk4ZjE4LzEvRWVaUC01U0hTRWF3WWRFNmNESFlQc0dwc0M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My8yMzVkMjYtNzA5NC00ZmViLTljYTktMzc4NDk5Mzk4ZjE4 LzEvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHFBggrBgEFBQcBBwEB/wSBtTCBsjCBoAQCAAEwgZkDBAJQ VVQDBAJVWvQDBANVn9ADBANYULgDBARtSsADBAJt7RgDBAOX7NgDBAWwOmADBAay T4ADBAK5A1wwDAMEBMAu0AMEBMAu4AMEBMA1cAMEBMA1oAMEBMLDcAMEBMLD0AME BMLD8AMEBcLpoAMEA9RH6DALAwQC1Ef0AwMD1EADBALUbygDBALVNIADBALVqPgD BALV2yQwDQQCAAIwBwMFAyoBfgAwDQYJKoZIhvcNAQELBQADggEBAH25uivTwGTc 6PceO12ORimRjnrAFok011Z5u4+fowQOzE7xOMj3yPMLu9xqOHmPGYX4ChM6b78D zSE10C2sPPF/lhZSW2ZTY/xIFwuP/fcrn8IeJXWW+PuJfdOwgpjNpYHxpVphvtVx YUYDR8JJl4bxNvA7Q1buvCMoIUmNIdMs3HltSBdmriuL8Zdp9SEowJkGiiUpU9uS 5sN8uzVufDD+zWaDVAkikPfJKMUJ6lnWNjitOJfVdVBLKjlhywtjx6YLU0M+tfOr VMQmXsEr+om29galNLUhF2NlQFS8jh5oeHBzqZ2P/XqJlH091mTUkEwwSyR2bL5t nKepNV6Xv8g= -----END CERTIFICATE-----Generated at Sat Jan 10 22:34:37 2026 by rpki-client