This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/g1yIzDmqb3a2gKzYmLjEP77vUN4.roa File: g1yIzDmqb3a2gKzYmLjEP77vUN4.roa (raw, json) Hash identifier: oB3MnZHO8dVr1qekPBVW+4Nt7xrP7uWDSqXEz8igHgc= Subject key identifier: 83:5C:88:CC:39:AA:6F:76:B6:80:AC:D8:98:B8:C4:3F:BE:EF:50:DE Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019A8DDD8B209D40033F97991C730B9D51CC Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/g1yIzDmqb3a2gKzYmLjEP77vUN4.roa Signing time: Sun 16 Nov 2025 18:11:37 +0000 ROA not before: Sun 16 Nov 2025 18:11:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 25198 IP address blocks: 94.229.209.0/24 maxlen: 24 103.102.135.0/24 maxlen: 24 124.158.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 00:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:8d:dd:8b:20:9d:40:03:3f:97:99:1c:73:0b:9d:51:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Nov 16 18:11:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=835c88cc39aa6f76b680acd898b8c43fbeef50de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:81:5c:4b:42:19:1b:b8:6c:21:b3:4f:ab:1d: 6c:1a:13:59:8c:5f:cc:b6:d1:ab:44:da:79:c6:fe: c5:d4:6e:4f:24:b1:a2:14:db:18:73:2e:59:fe:ce: e9:4f:13:de:0d:7f:0d:7d:ae:c1:a6:5d:e2:9f:21: 09:94:78:94:ed:4f:2d:05:0a:32:9a:f5:10:4f:a1: 8a:25:04:56:a3:5f:c3:73:52:5b:b4:36:37:1f:38: fd:fd:39:d9:51:8f:43:b1:73:a7:27:e7:9c:33:72: a1:4c:ea:97:11:38:bc:12:ed:e7:64:a9:a4:58:37: c1:cd:b9:8c:bc:95:8e:2a:4a:c1:b8:b4:3e:06:2a: 1b:a8:5c:87:ae:7b:16:da:00:e1:dc:da:6f:ee:a9: 79:f4:f8:0b:25:30:f8:0f:c9:de:77:e7:9e:de:b6: 0e:95:65:e6:08:fc:05:63:c8:fd:be:46:c4:e1:4c: d3:bb:96:d4:01:7c:07:a4:44:d1:1e:19:f0:e3:4f: 7a:6b:ae:d2:20:d7:0e:13:73:b9:d5:82:14:05:29: 24:5b:46:62:c6:0b:d5:94:e2:51:58:21:d8:a7:03: b3:67:4d:11:c6:56:2d:b4:9e:7e:12:bb:d0:36:ef: 8f:91:ef:7f:7d:d0:41:91:82:50:6c:89:f8:1e:91: 0f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:5C:88:CC:39:AA:6F:76:B6:80:AC:D8:98:B8:C4:3F:BE:EF:50:DE X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/g1yIzDmqb3a2gKzYmLjEP77vUN4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.229.209.0/24 103.102.135.0/24 124.158.101.0/24 Signature Algorithm: sha256WithRSAEncryption b4:00:81:2f:0c:5e:2c:cd:0a:4b:a9:e0:eb:fc:f5:61:6a:2e: b4:40:06:a4:17:8d:74:87:44:8a:91:cf:a6:fa:38:0a:cf:15: e1:c2:7e:7e:bb:4c:4c:69:fd:e1:5a:35:3a:8b:34:73:f2:33: 92:2f:55:1c:31:2c:68:bf:1e:d6:ae:f8:9b:a0:d9:64:84:8c: 73:e1:a4:ee:91:40:0c:0f:d7:c1:a0:7a:45:d3:2a:cf:96:dd: 2f:ec:0d:6d:fa:8b:23:d4:e2:f2:23:84:54:ba:b2:61:b5:d8: c3:af:d0:8b:c0:2e:3c:67:ac:e9:9e:b6:99:4d:78:85:1f:fd: 69:85:d7:0b:e7:a4:19:6e:4c:a0:26:ad:fb:0d:ff:09:f0:f6: 43:e3:8e:36:35:de:b4:ef:2d:7e:99:d2:53:44:2a:93:c1:6d: ea:27:4c:9b:0f:c8:7d:16:1e:2b:e1:9b:30:be:4f:81:33:e0: a8:2b:63:27:1a:54:1b:16:06:ed:71:c9:2e:e8:91:d5:b4:6f: cf:19:1d:46:47:d7:9b:a1:68:15:eb:59:ef:a4:3f:8d:1d:ea: 3f:2b:72:6b:62:d1:2d:b9:d6:3b:7c:2e:71:df:e1:ea:4c:59: 27:be:64:15:44:22:2e:75:7a:db:00:47:d8:3d:18:98:e9:58: 3f:db:ae:1c -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqN3YsgnUADP5eZHHMLnVHMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjUxMTE2MTgxMTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MzVjODhjYzM5YWE2Zjc2YjY4MGFjZDg5OGI4YzQzZmJlZWY1MGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoFcS0IZG7hsIbNPqx1sGhNZjF/M ttGrRNp5xv7F1G5PJLGiFNsYcy5Z/s7pTxPeDX8Nfa7Bpl3inyEJlHiU7U8tBQoy mvUQT6GKJQRWo1/Dc1JbtDY3Hzj9/TnZUY9DsXOnJ+ecM3KhTOqXETi8Eu3nZKmk WDfBzbmMvJWOKkrBuLQ+BiobqFyHrnsW2gDh3Npv7ql59PgLJTD4D8ned+ee3rYO lWXmCPwFY8j9vkbE4UzTu5bUAXwHpETRHhnw4096a67SINcOE3O51YIUBSkkW0Zi xgvVlOJRWCHYpwOzZ00RxlYttJ5+ErvQNu+Pke9/fdBBkYJQbIn4HpEP+wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFINciMw5qm92toCs2Ji4xD++71DeMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvZzF5SXpEbXFiM2EyZ0t6WW1MakVQNzd2VU40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXuXRAwQA Z2aHAwQAfJ5lMA0GCSqGSIb3DQEBCwUAA4IBAQC0AIEvDF4szQpLqeDr/PVhai60 QAakF410h0SKkc+m+jgKzxXhwn5+u0xMaf3hWjU6izRz8jOSL1UcMSxovx7Wrvib oNlkhIxz4aTukUAMD9fBoHpF0yrPlt0v7A1t+osj1OLyI4RUurJhtdjDr9CLwC48 Z6zpnraZTXiFH/1phdcL56QZbkygJq37Df8J8PZD4442Nd607y1+mdJTRCqTwW3q J0ybD8h9Fh4r4Zswvk+BM+CoK2MnGlQbFgbtccku6JHVtG/PGR1GR9eboWgV61nv pD+NHeo/K3JrYtEtudY7fC5x3+HqTFknvmQVRCIudXrbAEfYPRiY6Vg/264c -----END CERTIFICATE-----Generated at Fri Dec 5 09:28:44 2025 by rpki-client