This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/fCTShEpusBf4IfctxeHbHt0PYL4.roa File: fCTShEpusBf4IfctxeHbHt0PYL4.roa (raw, json) Hash identifier: k0e1fa3v35t52TODWHwSQUmeNUluwVpEjhZjZWJRzoQ= Subject key identifier: 7C:24:D2:84:4A:6E:B0:17:F8:21:F7:2D:C5:E1:DB:1E:DD:0F:60:BE Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B23281D05C94B59B62C274B991D2CC89D Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/fCTShEpusBf4IfctxeHbHt0PYL4.roa Signing time: Mon 15 Dec 2025 17:56:30 +0000 ROA not before: Mon 15 Dec 2025 17:56:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 14.102.227.0/24 maxlen: 24 43.242.136.0/24 maxlen: 24 43.242.139.0/24 maxlen: 24 77.111.108.0/24 maxlen: 24 94.229.218.0/24 maxlen: 24 103.102.132.0/24 maxlen: 24 103.102.134.0/24 maxlen: 24 124.158.112.0/24 maxlen: 24 124.158.114.0/24 maxlen: 24 124.158.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 02:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:23:28:1d:05:c9:4b:59:b6:2c:27:4b:99:1d:2c:c8:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Dec 15 17:56:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7c24d2844a6eb017f821f72dc5e1db1edd0f60be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9d:e0:bf:ac:27:78:47:f7:ca:58:a2:49:da: 66:62:96:10:e0:86:8d:32:71:e1:6c:a1:dd:57:11: 39:42:b2:d7:ed:69:93:43:36:ac:82:17:27:88:1b: 1a:f6:fa:34:64:2d:01:e0:ec:9c:67:d6:b8:cd:8d: e5:b3:a5:a2:bd:e5:98:e9:1e:71:f6:ca:d0:c6:29: 1e:9d:e0:69:97:dc:b7:6b:f2:91:86:8e:bc:53:d2: 70:23:13:c3:53:0b:30:d1:84:e7:9f:e4:d3:38:20: f0:6f:d4:0a:d0:8d:f2:c2:1b:79:bf:51:60:9d:0d: 80:bf:b7:6b:39:2a:77:22:33:96:92:02:cb:98:19: 12:16:e9:2a:b5:bc:fd:dd:ce:b7:1e:49:72:f3:cb: 07:38:a9:20:41:4a:3c:72:ef:2a:37:37:6b:36:de: ca:a2:d9:62:53:3d:73:01:b6:8e:2f:e6:72:8d:39: 6a:49:4d:9f:03:46:aa:00:cb:16:19:7c:ac:29:ba: 6e:62:b4:bd:41:bc:be:2c:87:e5:7f:b0:dd:d6:38: 50:54:32:54:f9:01:7f:90:6b:3d:92:aa:2b:53:29: 34:08:13:58:d6:23:f9:9b:92:e0:4b:a8:c0:7b:f2: ce:8b:ad:32:a8:0b:db:32:60:ab:52:74:73:ab:c7: b5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:24:D2:84:4A:6E:B0:17:F8:21:F7:2D:C5:E1:DB:1E:DD:0F:60:BE X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/fCTShEpusBf4IfctxeHbHt0PYL4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.227.0/24 43.242.136.0/24 43.242.139.0/24 77.111.108.0/24 94.229.218.0/24 103.102.132.0/24 103.102.134.0/24 124.158.112.0/24 124.158.114.0/23 Signature Algorithm: sha256WithRSAEncryption 90:97:3a:54:e1:aa:0f:8e:34:75:25:f5:d4:c4:3d:78:f2:96: ad:3c:5e:3a:16:55:5f:93:a8:dc:14:97:08:52:fb:af:fd:5a: 9b:da:f5:53:e5:cc:8f:98:4e:bd:0e:ba:c5:58:c4:1e:71:20: ee:d0:2a:80:7a:ac:dd:c2:7a:20:06:d7:ab:cc:e1:4a:cf:3a: 8e:24:d9:57:59:12:5d:1b:7f:05:d8:31:fb:98:d4:bb:77:a6: 4c:53:5e:8c:9f:ba:39:13:e6:34:74:df:e7:c2:39:7f:c4:36: 27:6d:58:a8:ce:9d:ac:9b:75:99:bb:fd:b4:e4:b3:5e:ed:49: c0:75:f3:ad:0e:d7:3f:0c:b9:92:3d:ea:4b:83:cc:4a:76:48: d1:2b:c6:5f:fb:d2:fe:5b:d6:97:5a:d4:39:68:ec:9b:73:f5: da:3a:07:fc:89:f3:16:6d:52:a5:60:de:73:83:bd:ae:59:66: ea:a2:c5:57:7d:7f:44:8a:b2:ca:fb:0f:2e:25:8a:15:28:fd: fe:a7:c2:b0:7b:e5:60:cd:36:2d:6c:84:43:19:5a:44:5d:4b: 70:e9:81:1c:6e:96:0e:97:34:cd:b2:07:90:20:f6:42:4c:80: 68:27:e8:f5:57:38:60:87:5f:f6:7c:17:1c:a1:e9:10:b2:d0: c0:4c:a7:14 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZsjKB0FyUtZtiwnS5kdLMidMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjUxMjE1MTc1NjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzI0ZDI4NDRhNmViMDE3ZjgyMWY3MmRjNWUxZGIxZWRkMGY2MGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ3gv6wneEf3yliiSdpmYpYQ4IaN MnHhbKHdVxE5QrLX7WmTQzasghcniBsa9vo0ZC0B4OycZ9a4zY3ls6WiveWY6R5x 9srQxikeneBpl9y3a/KRho68U9JwIxPDUwsw0YTnn+TTOCDwb9QK0I3ywht5v1Fg nQ2Av7drOSp3IjOWkgLLmBkSFukqtbz93c63Hkly88sHOKkgQUo8cu8qNzdrNt7K otliUz1zAbaOL+ZyjTlqSU2fA0aqAMsWGXysKbpuYrS9Qby+LIflf7Dd1jhQVDJU +QF/kGs9kqorUyk0CBNY1iP5m5LgS6jAe/LOi60yqAvbMmCrUnRzq8e1xQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFHwk0oRKbrAX+CH3LcXh2x7dD2C+MB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvZkNUU2hFcHVzQmY0SWZjdHhlSGJIdDBQWUw0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQADmbjAwQA K/KIAwQAK/KLAwQATW9sAwQAXuXaAwQAZ2aEAwQAZ2aGAwQAfJ5wAwQBfJ5yMA0G CSqGSIb3DQEBCwUAA4IBAQCQlzpU4aoPjjR1JfXUxD148patPF46FlVfk6jcFJcI Uvuv/Vqb2vVT5cyPmE69DrrFWMQecSDu0CqAeqzdwnogBterzOFKzzqOJNlXWRJd G38F2DH7mNS7d6ZMU16Mn7o5E+Y0dN/nwjl/xDYnbViozp2sm3WZu/205LNe7UnA dfOtDtc/DLmSPepLg8xKdkjRK8Zf+9L+W9aXWtQ5aOybc/XaOgf8ifMWbVKlYN5z g72uWWbqosVXfX9EirLK+w8uJYoVKP3+p8Kwe+VgzTYtbIRDGVpEXUtw6YEcbpYO lzTNsgeQIPZCTIBoJ+j1Vzhgh1/2fBccoekQstDATKcU -----END CERTIFICATE-----Generated at Tue Dec 16 12:06:50 2025 by rpki-client