This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/KrxtMfrEx2PQVn6uOs38nHwM5MA.roa File: KrxtMfrEx2PQVn6uOs38nHwM5MA.roa (raw, json) Hash identifier: jNML+SfxMivRPQISGOOlwRgG8iz/x6LZLtkIg9mT05w= Subject key identifier: 2A:BC:6D:31:FA:C4:C7:63:D0:56:7E:AE:3A:CD:FC:9C:7C:0C:E4:C0 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019C0FCF50F65AA57D8812669B735859793B Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/KrxtMfrEx2PQVn6uOs38nHwM5MA.roa Signing time: Fri 30 Jan 2026 16:49:30 +0000 ROA not before: Fri 30 Jan 2026 16:49:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 14.102.226.0/23 maxlen: 24 43.242.136.0/24 maxlen: 24 45.151.140.0/24 maxlen: 24 45.151.141.0/24 maxlen: 24 74.112.152.0/22 maxlen: 24 77.111.96.0/22 maxlen: 22 77.111.102.0/23 maxlen: 24 77.111.105.0/24 maxlen: 24 89.106.23.0/24 maxlen: 24 94.229.208.0/24 maxlen: 24 94.229.209.0/24 maxlen: 24 94.229.213.0/24 maxlen: 24 94.229.215.0/24 maxlen: 24 94.229.222.0/24 maxlen: 24 94.229.223.0/24 maxlen: 24 103.41.44.0/23 maxlen: 24 103.47.59.0/24 maxlen: 24 103.102.132.0/24 maxlen: 24 103.102.133.0/24 maxlen: 24 124.158.101.0/24 maxlen: 24 124.158.112.0/24 maxlen: 24 194.36.35.0/24 maxlen: 24 205.237.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Feb 2026 02:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:0f:cf:50:f6:5a:a5:7d:88:12:66:9b:73:58:59:79:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 30 16:49:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2abc6d31fac4c763d0567eae3acdfc9c7c0ce4c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:97:4f:6c:19:d5:fb:85:2b:2e:6e:f3:26:4f: cd:08:56:4d:37:0b:e6:05:f4:7c:66:16:67:e0:10: 47:9b:17:96:ff:68:14:b4:61:2f:8c:ee:97:17:33: eb:c0:ae:71:53:1f:bf:08:b2:c7:96:42:be:c9:03: 49:bb:00:6f:2b:29:6f:bf:5a:e2:89:78:0b:b0:df: 59:cf:dd:4b:3a:b2:f5:a5:a8:3a:f4:d0:0b:6a:7d: 2b:6e:e2:88:13:42:e0:4b:05:f8:9c:11:9e:34:a8: 8a:d5:36:9a:7c:71:f4:04:a4:6d:24:85:80:bd:54: 52:a6:3d:07:ed:21:8b:01:ec:d3:3a:1f:0b:a0:59: de:ca:97:80:1f:61:07:18:13:b3:8b:13:a9:8d:1d: 18:31:b1:ad:cf:32:08:c8:a1:a2:b4:fb:e9:08:1b: c6:03:2d:a9:66:f9:a7:ef:3f:90:2c:a8:9a:68:aa: ab:48:5a:65:71:9a:c8:38:08:3f:ec:cc:49:aa:f3: 37:c3:0d:4a:87:06:8e:9f:4d:59:0d:70:b7:64:0d: 4d:8b:0d:86:35:f8:c6:ca:1f:55:ad:a2:78:07:d6: cd:8b:bb:1c:fe:7e:8d:f7:dc:d8:fa:d1:1e:4f:8f: d0:df:70:1f:e2:fd:dc:1a:22:27:69:09:8f:60:26: 5c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BC:6D:31:FA:C4:C7:63:D0:56:7E:AE:3A:CD:FC:9C:7C:0C:E4:C0 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/KrxtMfrEx2PQVn6uOs38nHwM5MA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.226.0/23 43.242.136.0/24 45.151.140.0/23 74.112.152.0/22 77.111.96.0/22 77.111.102.0/23 77.111.105.0/24 89.106.23.0/24 94.229.208.0/23 94.229.213.0/24 94.229.215.0/24 94.229.222.0/23 103.41.44.0/23 103.47.59.0/24 103.102.132.0/23 124.158.101.0/24 124.158.112.0/24 194.36.35.0/24 205.237.88.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:c3:4f:b4:66:5d:65:01:b7:3c:4e:21:56:69:89:0c:13:8d: 72:57:53:16:12:77:5f:15:de:ea:db:52:07:e8:73:48:88:fe: 67:86:d2:c4:86:bf:77:6d:18:e2:09:39:1f:25:00:03:1b:d6: 35:53:30:d4:ed:1d:03:75:c5:75:40:5b:ff:59:cc:c9:86:a2: c3:ee:b1:db:de:91:4f:2b:86:21:85:a2:ec:fa:32:31:eb:35: ba:dd:ee:84:5f:03:09:ff:c7:32:2d:d5:f6:af:5b:fc:cc:26: 11:cd:ee:ed:f9:1a:78:f1:99:de:ed:03:bc:83:da:34:23:09: 5e:17:dc:53:e9:8c:cc:e8:35:fd:20:3a:0d:1f:40:25:27:2a: 84:e4:c3:be:5a:2e:a1:a1:30:82:70:e7:7f:76:b6:28:65:6c: 2b:cf:b9:8c:53:f9:09:43:3a:0f:30:9c:9d:9d:c3:e0:61:28: 8e:1e:74:f5:56:b7:ad:4e:9f:bb:9d:2c:67:63:cf:9b:20:40: 0c:5c:10:b9:53:68:ae:70:1b:99:67:43:66:e3:8b:45:3f:0a: 03:2b:99:45:ba:96:70:76:d9:7e:6d:2e:6d:71:6e:dd:82:8d: b3:c0:06:6e:2e:c2:dd:97:ec:ff:7f:e0:da:a0:f8:a2:8a:fa: 14:23:f3:65 -----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgISAZwPz1D2WqV9iBJmm3NYWXk7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTMwMTY0OTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYWJjNmQzMWZhYzRjNzYzZDA1NjdlYWUzYWNkZmM5YzdjMGNlNGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75dPbBnV+4UrLm7zJk/NCFZNNwvm BfR8ZhZn4BBHmxeW/2gUtGEvjO6XFzPrwK5xUx+/CLLHlkK+yQNJuwBvKylvv1ri iXgLsN9Zz91LOrL1pag69NALan0rbuKIE0LgSwX4nBGeNKiK1TaafHH0BKRtJIWA vVRSpj0H7SGLAezTOh8LoFneypeAH2EHGBOzixOpjR0YMbGtzzIIyKGitPvpCBvG Ay2pZvmn7z+QLKiaaKqrSFplcZrIOAg/7MxJqvM3ww1KhwaOn01ZDXC3ZA1Niw2G NfjGyh9VraJ4B9bNi7sc/n6N99zY+tEeT4/Q33Af4v3cGiInaQmPYCZcfwIDAQAB o4ICdjCCAnIwHQYDVR0OBBYEFCq8bTH6xMdj0FZ+rjrN/Jx8DOTAMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvS3J4dE1mckV4MlBRVm42dU9zMzhuSHdNNU1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMEAQ5m4gME ACvyiAMEAS2XjAMEAkpwmAMEAk1vYAMEAU1vZgMEAE1vaQMEAFlqFwMEAV7l0AME AF7l1QMEAF7l1wMEAV7l3gMEAWcpLAMEAGcvOwMEAWdmhAMEAHyeZQMEAHyecAME AMIkIwMEAs3tWDANBgkqhkiG9w0BAQsFAAOCAQEAm8NPtGZdZQG3PE4hVmmJDBON cldTFhJ3XxXe6ttSB+hzSIj+Z4bSxIa/d20Y4gk5HyUAAxvWNVMw1O0dA3XFdUBb /1nMyYaiw+6x296RTyuGIYWi7PoyMes1ut3uhF8DCf/HMi3V9q9b/MwmEc3u7fka ePGZ3u0DvIPaNCMJXhfcU+mMzOg1/SA6DR9AJScqhOTDvlouoaEwgnDnf3a2KGVs K8+5jFP5CUM6DzCcnZ3D4GEojh509Va3rU6fu50sZ2PPmyBADFwQuVNornAbmWdD ZuOLRT8KAyuZRbqWcHbZfm0ubXFu3YKNs8AGbi7C3Zfs/3/g2qD4oor6FCPzZQ== -----END CERTIFICATE-----Generated at Sat Jan 31 11:50:41 2026 by rpki-client