This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Ea1rVNT1Q14ooqev0ccpUEFt22k.roa File: Ea1rVNT1Q14ooqev0ccpUEFt22k.roa (raw, json) Hash identifier: wvNZCaA6kegTR1qn0cPx6zY+o6F+/+/1QHTWqFxF6yg= Subject key identifier: 11:AD:6B:54:D4:F5:43:5E:28:A2:A7:AF:D1:C7:29:50:41:6D:DB:69 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B23281CCA54BE45EF8ADB9C084B82137C Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Ea1rVNT1Q14ooqev0ccpUEFt22k.roa Signing time: Mon 15 Dec 2025 17:56:29 +0000 ROA not before: Mon 15 Dec 2025 17:56:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 14.102.226.0/23 maxlen: 24 14.102.234.0/24 maxlen: 24 45.151.141.0/24 maxlen: 24 45.151.143.0/24 maxlen: 24 74.112.152.0/22 maxlen: 24 77.111.96.0/22 maxlen: 22 77.111.102.0/23 maxlen: 24 77.111.105.0/24 maxlen: 24 89.106.16.0/24 maxlen: 24 89.106.18.0/24 maxlen: 24 89.106.21.0/24 maxlen: 24 89.106.22.0/24 maxlen: 24 89.106.23.0/24 maxlen: 24 94.229.208.0/24 maxlen: 24 94.229.213.0/24 maxlen: 24 94.229.215.0/24 maxlen: 24 94.229.222.0/24 maxlen: 24 94.229.223.0/24 maxlen: 24 103.41.44.0/23 maxlen: 24 103.47.59.0/24 maxlen: 24 194.36.35.0/24 maxlen: 24 205.237.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 02:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:28:1c:ca:54:be:45:ef:8a:db:9c:08:4b:82:13:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Dec 15 17:56:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=11ad6b54d4f5435e28a2a7afd1c72950416ddb69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e7:11:a4:a9:cd:89:ba:65:cf:03:49:d3:85: 81:2a:50:8a:d9:2d:1d:09:1a:45:53:3c:5e:60:0a: b5:ca:03:ba:da:93:96:7a:ea:86:a5:65:ae:cd:a8: ae:22:60:32:57:11:94:f4:38:c4:a6:0b:f1:5f:39: 4f:ab:e3:32:d2:12:f7:a1:a5:1a:ed:b3:55:5d:1f: 09:7d:3a:47:10:9b:94:e6:86:bc:45:64:dd:9b:15: ab:d1:6f:cc:4f:f6:5e:50:00:ca:49:fe:9c:20:de: 3b:fc:d9:e3:0a:b3:8b:ae:7d:1a:46:7b:9c:06:c5: dd:c5:8a:b9:9e:b6:8e:0f:1c:6f:22:2d:6f:11:67: 61:e5:9f:a4:c9:69:b0:1d:7b:b8:ef:44:45:63:d8: d2:ad:de:ba:e5:01:a1:e4:42:fe:28:14:c0:c9:b0: 4d:c8:ad:b2:24:a7:bf:9a:ba:dd:ae:ef:33:bf:3c: 69:e1:e5:f7:19:65:36:a1:22:dc:a6:b4:d4:a8:72: bb:64:1c:6f:12:59:98:56:a3:5c:23:2b:32:70:3c: 98:f6:09:be:fd:41:2d:3e:65:64:34:9d:54:d0:56: 6e:21:65:89:ca:26:d4:c8:d5:a5:d5:81:95:6c:2f: 42:d6:ed:ad:ec:ab:2c:5e:16:fc:bd:dd:5e:bb:3c: e2:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AD:6B:54:D4:F5:43:5E:28:A2:A7:AF:D1:C7:29:50:41:6D:DB:69 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Ea1rVNT1Q14ooqev0ccpUEFt22k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.226.0/23 14.102.234.0/24 45.151.141.0/24 45.151.143.0/24 74.112.152.0/22 77.111.96.0/22 77.111.102.0/23 77.111.105.0/24 89.106.16.0/24 89.106.18.0/24 89.106.21.0-89.106.23.255 94.229.208.0/24 94.229.213.0/24 94.229.215.0/24 94.229.222.0/23 103.41.44.0/23 103.47.59.0/24 194.36.35.0/24 205.237.88.0/22 Signature Algorithm: sha256WithRSAEncryption 76:86:71:b6:90:2f:67:7a:70:e4:da:d2:f6:b3:0d:06:c7:03: f2:41:22:6c:3e:c5:c5:f5:1d:72:0e:53:74:94:b6:69:13:aa: ee:4f:34:aa:f0:7e:d2:dc:5a:bc:72:68:7b:5b:cc:e4:38:c3: fc:5f:a3:0a:3a:9b:14:25:bb:2b:c2:88:56:61:35:59:8a:85: 20:d2:e0:a7:27:9d:2a:75:4b:27:9b:1f:88:59:5d:ed:fb:73: bf:bf:0c:3d:df:9c:e0:b3:b8:cc:0a:cf:9a:f0:71:3e:a7:1d: e8:a9:d9:95:18:df:35:c5:c4:bf:a1:1a:8b:c5:a0:a5:a0:59: d6:aa:a9:f4:f7:76:ee:7d:1b:e0:4a:5d:db:9b:56:60:8a:33: 9f:f6:01:be:8c:66:4e:46:1c:ac:eb:2b:db:78:da:27:18:5c: 78:ba:00:3b:28:de:2b:d1:03:01:c6:53:7e:df:04:b9:51:4f: da:0e:94:28:e5:c1:4e:85:0d:d4:6f:dc:b6:bf:1f:b4:ae:cf: 7e:e4:3e:3c:7f:98:d9:d5:5d:af:97:e4:6e:33:3d:2e:b2:f6: 76:9c:c8:eb:f8:7e:55:10:0c:56:4b:02:5e:78:75:e5:0b:7c: 66:19:d1:f0:a7:a9:6d:c0:2b:73:36:4a:22:77:a1:02:eb:7a: 7f:35:22:88 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgISAZsjKBzKVL5F74rbnAhLghN8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjUxMjE1MTc1NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWFkNmI1NGQ0ZjU0MzVlMjhhMmE3YWZkMWM3Mjk1MDQxNmRkYjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnucRpKnNibplzwNJ04WBKlCK2S0d CRpFUzxeYAq1ygO62pOWeuqGpWWuzaiuImAyVxGU9DjEpgvxXzlPq+My0hL3oaUa 7bNVXR8JfTpHEJuU5oa8RWTdmxWr0W/MT/ZeUADKSf6cIN47/NnjCrOLrn0aRnuc BsXdxYq5nraODxxvIi1vEWdh5Z+kyWmwHXu470RFY9jSrd665QGh5EL+KBTAybBN yK2yJKe/mrrdru8zvzxp4eX3GWU2oSLcprTUqHK7ZBxvElmYVqNcIysycDyY9gm+ /UEtPmVkNJ1U0FZuIWWJyibUyNWl1YGVbC9C1u2t7KssXhb8vd1euzzi3QIDAQAB o4ICgTCCAn0wHQYDVR0OBBYEFBGta1TU9UNeKKKnr9HHKVBBbdtpMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvRWExclZOVDFRMTRvb3FldjBjY3BVRUZ0MjJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzCBgAQCAAEwegMEAQ5m 4gMEAA5m6gMEAC2XjQMEAC2XjwMEAkpwmAMEAk1vYAMEAU1vZgMEAE1vaQMEAFlq EAMEAFlqEjAMAwQAWWoVAwQDWWoQAwQAXuXQAwQAXuXVAwQAXuXXAwQBXuXeAwQB ZyksAwQAZy87AwQAwiQjAwQCze1YMA0GCSqGSIb3DQEBCwUAA4IBAQB2hnG2kC9n enDk2tL2sw0GxwPyQSJsPsXF9R1yDlN0lLZpE6ruTzSq8H7S3Fq8cmh7W8zkOMP8 X6MKOpsUJbsrwohWYTVZioUg0uCnJ50qdUsnmx+IWV3t+3O/vww935zgs7jMCs+a 8HE+px3oqdmVGN81xcS/oRqLxaCloFnWqqn093bufRvgSl3bm1ZgijOf9gG+jGZO Rhys6yvbeNonGFx4ugA7KN4r0QMBxlN+3wS5UU/aDpQo5cFOhQ3Ub9y2vx+0rs9+ 5D48f5jZ1V2vl+RuMz0usvZ2nMjr+H5VEAxWSwJeeHXlC3xmGdHwp6ltwCtzNkoi d6EC63p/NSKI -----END CERTIFICATE-----Generated at Tue Dec 16 12:06:49 2025 by rpki-client