This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/_Zm38mWsDA4W4P2ViJw_3hi6Ugo.roa File: _Zm38mWsDA4W4P2ViJw_3hi6Ugo.roa (raw, json) Hash identifier: QdxMDwJ1Tc9ly73ufjVBd/SMfIN3Qt0ls/tTwx6UGIU= Subject key identifier: FD:99:B7:F2:65:AC:0C:0E:16:E0:FD:95:88:9C:3F:DE:18:BA:52:0A Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC848F42F0B0AE65679AC8C234097EE Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/_Zm38mWsDA4W4P2ViJw_3hi6Ugo.roa Signing time: Thu 01 Jan 2026 18:18:24 +0000 ROA not before: Thu 01 Jan 2026 18:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 14.102.227.0/24 maxlen: 24 43.242.136.0/24 maxlen: 24 43.242.139.0/24 maxlen: 24 77.111.108.0/24 maxlen: 24 94.229.218.0/24 maxlen: 24 103.102.132.0/24 maxlen: 24 103.102.134.0/24 maxlen: 24 124.158.112.0/24 maxlen: 24 124.158.114.0/24 maxlen: 24 124.158.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 04:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:48:f4:2f:0b:0a:e6:56:79:ac:8c:23:40:97:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd99b7f265ac0c0e16e0fd95889c3fde18ba520a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:44:2b:2b:32:70:d7:ae:52:54:bc:30:98:a4: a7:68:92:a9:4c:16:08:f6:fc:35:40:e3:e6:cb:72: fc:a0:e3:54:52:2b:b2:17:06:42:c6:6f:30:fa:20: bc:a0:8b:64:a3:63:ea:a7:b5:f5:f8:d6:02:f5:f5: 87:d7:f8:90:06:9e:97:4d:e5:fd:fe:db:0e:6c:39: aa:10:25:d3:17:fa:76:76:52:c3:39:f4:1f:77:d8: 39:a6:5c:b1:ef:41:02:5a:1d:9c:d1:cf:83:71:ac: 76:6c:8a:b1:87:69:2c:4a:a2:3f:4c:c9:bc:47:94: 2c:7f:83:69:2b:01:c9:2b:03:7d:bb:fc:50:b8:05: 90:ca:85:50:74:a0:d4:02:01:5a:b5:59:a1:fa:23: dd:54:a6:af:7f:fe:80:d5:84:ca:40:d9:3b:c2:95: a8:a3:97:a2:0e:e3:40:17:c9:ef:53:d5:10:69:4f: 77:fa:33:05:41:69:81:c3:0b:21:9f:c5:94:af:3f: 4e:f2:06:07:3e:85:2c:88:25:b1:49:31:ec:58:a9: 00:e5:9a:73:ae:60:ba:e5:33:79:70:1d:df:1c:54: b5:10:ac:1b:e7:ac:fc:a8:dc:fa:7b:09:b4:3b:f6: eb:70:aa:e9:0c:c0:de:ae:34:25:d9:dc:84:40:52: c6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:99:B7:F2:65:AC:0C:0E:16:E0:FD:95:88:9C:3F:DE:18:BA:52:0A X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/_Zm38mWsDA4W4P2ViJw_3hi6Ugo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.227.0/24 43.242.136.0/24 43.242.139.0/24 77.111.108.0/24 94.229.218.0/24 103.102.132.0/24 103.102.134.0/24 124.158.112.0/24 124.158.114.0/23 Signature Algorithm: sha256WithRSAEncryption bf:bc:d0:a6:37:3e:36:b7:8d:ae:8d:bf:05:d3:47:5b:9c:47: 2c:8e:0a:67:fd:01:d2:85:a6:de:29:3c:83:d2:8c:31:cd:e1: b9:35:c1:d1:d1:e1:0f:b6:66:1a:bd:fc:63:9a:35:90:b2:2e: c7:b9:0e:ad:4a:6c:2e:83:f5:36:c7:85:58:47:96:f6:8c:27: 8c:e1:e2:31:e0:c4:8e:0f:cd:e3:3b:ef:b7:61:8c:38:67:b2: dd:43:04:d7:07:2b:75:51:e4:26:05:c8:39:6e:ba:59:68:1c: 81:22:73:cc:26:0a:93:81:c6:66:aa:57:20:79:38:f0:8e:cb: fb:68:20:7d:57:53:dc:52:aa:2c:98:06:3d:05:d4:bd:55:31: ce:06:4d:97:c5:a4:95:25:31:7e:3b:6e:97:73:13:2a:af:6a: bf:36:97:3e:d8:c1:70:87:6b:0e:9f:a1:44:52:c5:2e:34:06: ce:8a:d1:ae:86:9b:50:f8:42:be:22:fb:80:4a:ba:eb:8e:17: 92:c6:8c:0d:22:cd:b4:e3:a1:6b:6c:ce:d9:4f:1c:e2:96:fe: 57:f2:aa:dc:37:ac:d3:1e:7c:19:22:0e:6c:d2:81:6c:d7:22: 72:d8:4a:a1:19:f7:4c:12:a7:67:f4:f2:ec:84:92:55:59:37: 1b:08:65:6c -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt6yEj0LwsK5lZ5rIwjQJfuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDk5YjdmMjY1YWMwYzBlMTZlMGZkOTU4ODljM2ZkZTE4YmE1MjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUQrKzJw165SVLwwmKSnaJKpTBYI 9vw1QOPmy3L8oONUUiuyFwZCxm8w+iC8oItko2Pqp7X1+NYC9fWH1/iQBp6XTeX9 /tsObDmqECXTF/p2dlLDOfQfd9g5plyx70ECWh2c0c+Dcax2bIqxh2ksSqI/TMm8 R5Qsf4NpKwHJKwN9u/xQuAWQyoVQdKDUAgFatVmh+iPdVKavf/6A1YTKQNk7wpWo o5eiDuNAF8nvU9UQaU93+jMFQWmBwwshn8WUrz9O8gYHPoUsiCWxSTHsWKkA5Zpz rmC65TN5cB3fHFS1EKwb56z8qNz6ewm0O/brcKrpDMDerjQl2dyEQFLGpQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFP2Zt/JlrAwOFuD9lYicP94YulIKMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvX1ptMzhtV3NEQTRXNFAyVmlKd18zaGk2VWdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQADmbjAwQA K/KIAwQAK/KLAwQATW9sAwQAXuXaAwQAZ2aEAwQAZ2aGAwQAfJ5wAwQBfJ5yMA0G CSqGSIb3DQEBCwUAA4IBAQC/vNCmNz42t42ujb8F00dbnEcsjgpn/QHShabeKTyD 0owxzeG5NcHR0eEPtmYavfxjmjWQsi7HuQ6tSmwug/U2x4VYR5b2jCeM4eIx4MSO D83jO++3YYw4Z7LdQwTXByt1UeQmBcg5brpZaByBInPMJgqTgcZmqlcgeTjwjsv7 aCB9V1PcUqosmAY9BdS9VTHOBk2XxaSVJTF+O26XcxMqr2q/Npc+2MFwh2sOn6FE UsUuNAbOitGuhptQ+EK+IvuASrrrjheSxowNIs2046FrbM7ZTxzilv5X8qrcN6zT HnwZIg5s0oFs1yJy2EqhGfdMEqdn9PLshJJVWTcbCGVs -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:37 2026 by rpki-client