This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/8j4LgbxBq1_Ug1E0JjhdEFdRWaU.roa File: 8j4LgbxBq1_Ug1E0JjhdEFdRWaU.roa (raw, json) Hash identifier: lpq78A2ao++aXEMTVFO89JrJPOUjAzRCkVWrq3satz4= Subject key identifier: F2:3E:0B:81:BC:41:AB:5F:D4:83:51:34:26:38:5D:10:57:51:59:A5 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019AA79698C8D620054BD58AEA4979656E38 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/8j4LgbxBq1_Ug1E0JjhdEFdRWaU.roa Signing time: Fri 21 Nov 2025 18:04:15 +0000 ROA not before: Fri 21 Nov 2025 18:04:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 212238 IP address blocks: 14.102.226.0/24 maxlen: 24 14.102.232.0/24 maxlen: 24 85.208.11.0/24 maxlen: 24 94.229.214.0/24 maxlen: 24 94.229.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Dec 2025 03:01:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a7:96:98:c8:d6:20:05:4b:d5:8a:ea:49:79:65:6e:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Nov 21 18:04:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f23e0b81bc41ab5fd483513426385d10575159a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d3:74:01:a6:9f:7a:56:32:9d:ae:ca:33:f7: de:aa:69:36:00:99:db:04:16:e5:52:a6:f6:0b:6d: 73:f7:08:4a:d5:d2:c0:28:cd:6a:76:b3:6c:0b:f6: fa:af:0c:1b:60:91:03:16:65:bb:87:76:88:a7:52: 3e:8f:e0:0f:7b:b0:2e:34:9a:75:a6:5b:c1:03:f6: ad:05:f3:51:5e:f8:9e:4b:a7:90:b3:9e:ce:d0:56: 6b:a5:42:b9:b6:f4:d2:9e:76:91:b0:56:00:51:c3: 69:eb:a8:57:7f:e3:5e:42:5a:6a:55:34:cb:e7:53: 10:1e:92:52:36:21:f4:a7:d8:3d:31:06:33:2d:46: 99:39:88:42:75:55:19:da:70:6d:a9:4e:11:f0:8f: 15:49:fd:61:17:43:51:e3:1f:d4:be:21:9b:f3:5a: 71:53:6c:e9:74:97:7d:36:94:09:af:42:83:cd:80: 5a:6c:7b:b4:81:31:06:a4:52:19:dc:2b:12:87:c8: be:b8:b8:85:2c:7a:7f:e4:54:6d:b7:37:1a:68:ab: fc:82:7d:d1:27:ab:a1:2c:bc:70:46:93:09:fe:e3: c8:8c:10:fe:71:d3:f1:76:9f:df:26:6f:c3:22:35: 33:f3:59:b0:ac:d7:a7:96:d4:f1:20:44:a3:4d:a9: bc:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3E:0B:81:BC:41:AB:5F:D4:83:51:34:26:38:5D:10:57:51:59:A5 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/8j4LgbxBq1_Ug1E0JjhdEFdRWaU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.226.0/24 14.102.232.0/24 85.208.11.0/24 94.229.214.0/24 94.229.219.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:1c:99:6b:1f:38:64:7e:5c:02:58:27:22:5d:76:fa:db:9e: 4a:9e:a7:64:13:30:9d:0a:18:e2:3e:76:63:27:47:3d:f4:f4: 8c:a0:ff:ca:9f:1e:1c:bd:f0:49:fe:2e:08:ca:91:5e:92:89: 74:88:d8:27:1c:47:36:3d:ca:0e:a1:d1:1e:70:4e:bb:fe:44: 22:62:99:a7:90:81:79:3a:24:ad:b7:36:c3:19:ff:07:67:ec: 10:65:ee:bf:c6:5c:7a:84:be:d6:34:8f:e7:b3:34:3e:56:b2: ca:0a:24:cc:ff:73:77:b5:b6:3a:b8:72:85:32:0a:6c:4b:8b: 10:22:92:f9:e3:f1:09:13:89:2c:4b:46:07:86:4f:90:12:73: 16:44:7e:e4:54:90:f3:5d:88:51:d1:3e:7b:7a:e7:d1:42:2b: a2:0e:fc:63:26:36:95:3e:60:ba:f1:d6:61:e6:aa:6a:85:fd: be:94:9a:07:8a:ab:c9:db:3b:6b:a8:7b:88:ab:d2:99:0a:54: fe:9b:96:29:b1:dd:d8:e8:6e:2b:ec:2d:66:db:6c:32:14:dd: e9:41:c1:a9:77:b3:a3:6a:c2:e9:d1:af:34:a5:61:71:ad:ba: 46:7f:fd:28:18:d0:6b:08:69:43:60:6b:66:97:3b:26:6d:19: 67:0a:d9:c6 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZqnlpjI1iAFS9WK6kl5ZW44MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjUxMTIxMTgwNDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjNlMGI4MWJjNDFhYjVmZDQ4MzUxMzQyNjM4NWQxMDU3NTE1OWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdN0AaafelYyna7KM/feqmk2AJnb BBblUqb2C21z9whK1dLAKM1qdrNsC/b6rwwbYJEDFmW7h3aIp1I+j+APe7AuNJp1 plvBA/atBfNRXvieS6eQs57O0FZrpUK5tvTSnnaRsFYAUcNp66hXf+NeQlpqVTTL 51MQHpJSNiH0p9g9MQYzLUaZOYhCdVUZ2nBtqU4R8I8VSf1hF0NR4x/UviGb81px U2zpdJd9NpQJr0KDzYBabHu0gTEGpFIZ3CsSh8i+uLiFLHp/5FRttzcaaKv8gn3R J6uhLLxwRpMJ/uPIjBD+cdPxdp/fJm/DIjUz81mwrNenltTxIESjTam8EwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFPI+C4G8Qatf1INRNCY4XRBXUVmlMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvOGo0TGdieEJxMV9VZzFFMEpqaGRFRmRSV2FVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQADmbiAwQA DmboAwQAVdALAwQAXuXWAwQAXuXbMA0GCSqGSIb3DQEBCwUAA4IBAQAfHJlrHzhk flwCWCciXXb6255KnqdkEzCdChjiPnZjJ0c99PSMoP/Knx4cvfBJ/i4IypFekol0 iNgnHEc2PcoOodEecE67/kQiYpmnkIF5OiSttzbDGf8HZ+wQZe6/xlx6hL7WNI/n szQ+VrLKCiTM/3N3tbY6uHKFMgpsS4sQIpL54/EJE4ksS0YHhk+QEnMWRH7kVJDz XYhR0T57eufRQiuiDvxjJjaVPmC68dZh5qpqhf2+lJoHiqvJ2ztrqHuIq9KZClT+ m5Ypsd3Y6G4r7C1m22wyFN3pQcGpd7OjasLp0a80pWFxrbpGf/0oGNBrCGlDYGtm lzsmbRlnCtnG -----END CERTIFICATE-----Generated at Wed Dec 3 12:02:54 2025 by rpki-client