This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6XS5HhAHOCz46g_ZrBWqJZLGwuY.roa File: 6XS5HhAHOCz46g_ZrBWqJZLGwuY.roa (raw, json) Hash identifier: U2m4WZesHyEJKLVevbIZmHul7lz+aiEDHiHYSlCn4Ro= Subject key identifier: E9:74:B9:1E:10:07:38:2C:F8:EA:0F:D9:AC:15:AA:25:92:C6:C2:E6 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019AA2C734B909CD6CA8E8071BFA5338E512 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6XS5HhAHOCz46g_ZrBWqJZLGwuY.roa Signing time: Thu 20 Nov 2025 19:39:15 +0000 ROA not before: Thu 20 Nov 2025 19:39:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 14.102.227.0/24 maxlen: 24 14.102.234.0/24 maxlen: 24 43.242.136.0/24 maxlen: 24 43.242.139.0/24 maxlen: 24 77.111.108.0/24 maxlen: 24 89.106.16.0/24 maxlen: 24 89.106.18.0/24 maxlen: 24 89.106.21.0/24 maxlen: 24 89.106.22.0/24 maxlen: 24 89.106.23.0/24 maxlen: 24 94.229.218.0/24 maxlen: 24 103.102.132.0/24 maxlen: 24 103.102.134.0/24 maxlen: 24 124.158.112.0/24 maxlen: 24 124.158.114.0/24 maxlen: 24 124.158.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 21:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a2:c7:34:b9:09:cd:6c:a8:e8:07:1b:fa:53:38:e5:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Nov 20 19:39:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e974b91e1007382cf8ea0fd9ac15aa2592c6c2e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fa:e8:f1:5f:e8:57:22:43:25:6f:cf:ab:20: 1c:4e:c0:9b:ad:7f:0a:dd:ff:04:72:5d:60:67:de: 4b:5f:42:38:79:8d:b5:d9:3d:d9:25:94:07:7c:4f: 3d:55:17:1e:04:1a:f3:73:14:7e:8b:a6:74:1d:1d: 95:58:08:ed:45:5a:80:0d:8f:23:18:d1:2a:ce:ce: a4:31:29:75:8c:f6:a0:a4:9a:2c:e9:cb:06:a0:4a: 02:23:85:37:b3:a0:55:45:61:ff:dc:8c:6d:65:26: db:a0:96:b1:f1:b9:99:5f:9e:f9:c2:71:4c:62:5c: 7e:48:fb:c2:71:cc:87:51:00:86:c8:c0:ec:eb:7d: 28:a4:52:17:40:a6:b7:2e:00:b3:67:e9:8f:f6:ae: 89:c5:bb:52:a6:58:c0:be:e4:cc:07:d6:ca:6c:3a: dc:b4:25:03:40:86:19:15:64:ed:6f:fc:7f:b9:2b: de:fe:15:62:1a:50:4b:cf:d1:b7:e8:b4:a2:ce:c0: 0d:a1:ba:8d:10:c3:18:c4:43:21:e0:e7:c4:ba:eb: 57:09:d6:63:98:b0:e9:7c:0b:2a:a8:82:36:2d:46: 75:5f:ac:db:6a:ec:aa:05:0e:53:11:a9:15:dd:4f: f7:d5:14:33:15:6a:1a:9e:35:8b:b7:80:e1:9b:b8: cd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:74:B9:1E:10:07:38:2C:F8:EA:0F:D9:AC:15:AA:25:92:C6:C2:E6 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/6XS5HhAHOCz46g_ZrBWqJZLGwuY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.227.0/24 14.102.234.0/24 43.242.136.0/24 43.242.139.0/24 77.111.108.0/24 89.106.16.0/24 89.106.18.0/24 89.106.21.0-89.106.23.255 94.229.218.0/24 103.102.132.0/24 103.102.134.0/24 124.158.112.0/24 124.158.114.0/23 Signature Algorithm: sha256WithRSAEncryption 35:00:79:32:10:e5:e4:84:4e:a5:48:08:97:5c:10:e6:dd:61: 70:d5:45:2a:00:6a:7d:2b:1f:2e:28:3b:f1:2d:b7:fb:2e:75: c7:a1:96:2e:5a:c5:aa:e9:4e:0b:08:e0:6e:a5:32:72:19:98: 4a:eb:87:7a:1c:b1:73:78:aa:df:0d:b7:fe:ce:5c:b0:97:d1: 63:98:a4:f5:64:6e:62:eb:cb:96:d2:6f:f4:b5:ca:ae:04:30: ca:e8:6f:49:f5:58:31:54:2c:61:a6:b6:5d:af:44:88:01:07: 51:6b:d8:bc:c1:92:8b:7b:17:5f:1e:ba:77:16:51:46:7f:7a: 4a:50:66:a5:91:8b:21:02:1e:5d:88:1b:f1:a8:a0:7c:30:2d: 69:47:fa:b3:53:d4:1b:14:90:9f:ec:23:b0:1c:62:98:ca:d9: 88:9e:bc:a2:46:27:9f:69:d7:16:e3:a4:f1:c3:8d:b7:5d:f3: 66:de:86:19:bb:1c:8f:ae:d8:12:57:33:38:67:35:f4:9b:d2: 33:2d:8d:c0:8e:c4:cc:52:02:93:cf:0f:5e:df:42:3f:17:d3: dc:d9:4b:1a:97:27:15:75:a6:c1:47:d6:32:b0:04:9b:cf:6f: 46:11:94:3e:00:a9:b3:31:a5:60:92:8d:97:9a:50:e6:8d:5d: 51:33:ac:fd -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgISAZqixzS5Cc1sqOgHG/pTOOUSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjUxMTIwMTkzOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlOTc0YjkxZTEwMDczODJjZjhlYTBmZDlhYzE1YWEyNTkyYzZjMmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPro8V/oVyJDJW/PqyAcTsCbrX8K 3f8Ecl1gZ95LX0I4eY212T3ZJZQHfE89VRceBBrzcxR+i6Z0HR2VWAjtRVqADY8j GNEqzs6kMSl1jPagpJos6csGoEoCI4U3s6BVRWH/3IxtZSbboJax8bmZX575wnFM Ylx+SPvCccyHUQCGyMDs630opFIXQKa3LgCzZ+mP9q6JxbtSpljAvuTMB9bKbDrc tCUDQIYZFWTtb/x/uSve/hViGlBLz9G36LSizsANobqNEMMYxEMh4OfEuutXCdZj mLDpfAsqqII2LUZ1X6zbauyqBQ5TEakV3U/31RQzFWoanjWLt4Dhm7jNDQIDAQAB o4ICWTCCAlUwHQYDVR0OBBYEFOl0uR4QBzgs+OoP2awVqiWSxsLmMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvNlhTNUhoQUhPQ3o0NmdfWnJCV3FKWkxHd3VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQADmbjAwQA DmbqAwQAK/KIAwQAK/KLAwQATW9sAwQAWWoQAwQAWWoSMAwDBABZahUDBANZahAD BABe5doDBABnZoQDBABnZoYDBAB8nnADBAF8nnIwDQYJKoZIhvcNAQELBQADggEB ADUAeTIQ5eSETqVICJdcEObdYXDVRSoAan0rHy4oO/Ett/sudcehli5axarpTgsI 4G6lMnIZmErrh3ocsXN4qt8Nt/7OXLCX0WOYpPVkbmLry5bSb/S1yq4EMMrob0n1 WDFULGGmtl2vRIgBB1Fr2LzBkot7F18euncWUUZ/ekpQZqWRiyECHl2IG/GooHww LWlH+rNT1BsUkJ/sI7AcYpjK2YievKJGJ59p1xbjpPHDjbdd82behhm7HI+u2BJX MzhnNfSb0jMtjcCOxMxSApPPD17fQj8X09zZSxqXJxV1psFH1jKwBJvPb0YRlD4A qbMxpWCSjZeaUOaNXVEzrP0= -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:27 2025 by rpki-client