This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/ewyBIvuudgP0tUenVwQ9pf-UuFw.roa File: ewyBIvuudgP0tUenVwQ9pf-UuFw.roa (raw, json) Hash identifier: rOH4lK3Tu41q/aakYU3ilg+rGKNxkPxnYW0KziN38LU= Subject key identifier: 7B:0C:81:22:FB:AE:76:03:F4:B5:47:A7:57:04:3D:A5:FF:94:B8:5C Certificate issuer: /CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe Certificate serial: 019B3057A7E903438F66778FD7672662673C Authority key identifier: 49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/ewyBIvuudgP0tUenVwQ9pf-UuFw.roa Signing time: Thu 18 Dec 2025 07:23:29 +0000 ROA not before: Thu 18 Dec 2025 07:23:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215597 IP address blocks: 5.181.196.0/24 maxlen: 24 5.181.197.0/24 maxlen: 24 82.199.222.0/23 maxlen: 23 82.199.222.0/24 maxlen: 24 82.199.223.0/24 maxlen: 24 91.213.191.0/24 maxlen: 24 91.217.185.0/24 maxlen: 24 185.90.252.0/24 maxlen: 24 185.95.206.0/23 maxlen: 23 185.95.206.0/24 maxlen: 24 185.95.207.0/24 maxlen: 24 212.95.142.0/24 maxlen: 24 212.95.148.0/24 maxlen: 24 212.95.156.0/24 maxlen: 24 212.95.158.0/24 maxlen: 24 2a12:f680:200::/48 maxlen: 48 2a12:f680:201::/48 maxlen: 48 2a12:f680:204::/48 maxlen: 48 2a12:f680:205::/48 maxlen: 48 2a12:f680:206::/48 maxlen: 48 2a12:f680:207::/48 maxlen: 48 2a12:f680:220::/43 maxlen: 43 2a12:f680:220::/45 maxlen: 45 2a12:f680:228::/45 maxlen: 45 2a12:f680:230::/45 maxlen: 45 2a12:f680:238::/45 maxlen: 45 2a12:f680:240::/43 maxlen: 43 2a12:f680:240::/45 maxlen: 45 2a12:f680:248::/45 maxlen: 45 2a12:f680:250::/45 maxlen: 45 2a12:f680:258::/45 maxlen: 45 2a12:f680:260::/43 maxlen: 43 2a12:f680:260::/45 maxlen: 45 2a12:f680:268::/45 maxlen: 45 2a12:f680:270::/45 maxlen: 45 2a12:f680:278::/45 maxlen: 45 2a12:f680:600::/48 maxlen: 48 2a12:f680:601::/48 maxlen: 48 2a12:f680:602::/48 maxlen: 48 2a12:f680:604::/48 maxlen: 48 2a12:f680:620::/43 maxlen: 43 2a12:f680:620::/45 maxlen: 45 2a12:f680:628::/45 maxlen: 45 2a12:f680:630::/45 maxlen: 45 2a12:f680:638::/45 maxlen: 45 2a12:f680:640::/43 maxlen: 43 2a12:f680:640::/45 maxlen: 45 2a12:f680:648::/45 maxlen: 45 2a12:f680:650::/45 maxlen: 45 2a12:f680:658::/45 maxlen: 45 2a12:f680:660::/43 maxlen: 43 2a12:f680:660::/45 maxlen: 45 2a12:f680:668::/45 maxlen: 45 2a12:f680:670::/45 maxlen: 45 2a12:f680:678::/45 maxlen: 45 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.mft rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:57:a7:e9:03:43:8f:66:77:8f:d7:67:26:62:67:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49dd8f1a62a5d7f80212de0f3efe75b2fa338ffe Validity Not Before: Dec 18 07:23:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7b0c8122fbae7603f4b547a757043da5ff94b85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b2:f5:38:e1:13:a7:a3:0e:74:00:a6:11:d1: f9:0a:2c:1e:73:ba:2f:36:49:b6:8c:28:1b:aa:9a: 4f:25:39:c6:45:1f:12:a6:79:22:9c:05:39:ca:9b: 70:5b:40:f3:e4:50:eb:9d:12:24:35:d9:b1:cc:0b: 2d:49:66:90:50:59:b7:8c:35:84:63:0f:38:8b:ac: 82:ce:97:62:48:84:9b:d5:26:80:dd:12:77:da:56: 00:65:73:a9:bf:6f:cf:e5:42:d6:e7:aa:e6:0d:07: a7:1e:22:f4:71:59:85:dc:3f:a3:e6:4e:83:e1:62: 8e:ef:fa:d1:0a:49:f7:1c:df:e2:9a:5b:29:2c:74: 60:6e:a5:1e:e6:da:98:99:e9:13:1c:cc:9c:16:43: d5:2e:11:32:5d:bd:8c:b1:05:49:e0:d1:c3:b5:06: 98:03:89:07:15:92:8f:f4:77:19:10:00:d1:2f:17: 7a:15:d0:ff:ce:02:b9:f1:51:07:c4:57:f5:86:87: 37:63:e2:27:5b:b4:e0:82:c4:1d:8a:5d:3e:54:34: 6b:71:8a:35:28:12:6c:b8:0c:a2:8a:b9:4f:29:63: 7d:b9:fb:d1:24:86:77:6f:5e:74:ee:7c:cb:c6:00: 99:70:1e:b9:40:97:11:b6:8b:74:e0:e3:ea:23:b9: d0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0C:81:22:FB:AE:76:03:F4:B5:47:A7:57:04:3D:A5:FF:94:B8:5C X509v3 Authority Key Identifier: keyid:49:DD:8F:1A:62:A5:D7:F8:02:12:DE:0F:3E:FE:75:B2:FA:33:8F:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd2PGmKl1_gCEt4PPv51svozj_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/ewyBIvuudgP0tUenVwQ9pf-UuFw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/01b1ef-233b-4d6f-8dcf-ceec49124c0f/1/Sd2PGmKl1_gCEt4PPv51svozj_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.181.196.0/23 82.199.222.0/23 91.213.191.0/24 91.217.185.0/24 185.90.252.0/24 185.95.206.0/23 212.95.142.0/24 212.95.148.0/24 212.95.156.0/24 212.95.158.0/24 IPv6: 2a12:f680:200::/47 2a12:f680:204::/46 2a12:f680:220::-2a12:f680:27f:ffff:ffff:ffff:ffff:ffff 2a12:f680:600::-2a12:f680:602:ffff:ffff:ffff:ffff:ffff 2a12:f680:604::/48 2a12:f680:620::-2a12:f680:67f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 07:4b:13:45:32:7a:03:36:03:61:b9:68:df:48:9e:a5:8f:22: a5:49:1e:2d:5e:99:43:de:c8:62:17:42:d8:f7:e7:6b:5a:8b: c8:cd:1c:13:b6:0c:db:8b:f7:79:57:f0:04:cd:de:bc:94:63: 13:81:63:a5:b9:8a:53:ff:be:8d:86:0b:09:02:bc:28:7d:b1: 8e:48:4d:61:0c:f9:e5:5b:62:c1:6b:47:39:2d:24:87:51:77: 99:a0:9b:1c:34:c0:86:ef:0d:1b:ea:05:74:d1:bf:4f:d8:f9: f9:e1:5e:d9:d9:b4:53:12:67:bc:34:89:78:d8:6d:71:cd:e0: 81:9a:63:96:54:ad:5e:30:2a:7f:03:fb:05:34:8b:3c:29:00: 33:09:76:b9:34:6a:9d:52:89:cf:e0:4e:d8:b9:09:ce:a0:5b: 42:09:51:35:08:4d:f0:2b:30:1e:33:ff:d7:42:70:92:1e:b4: 72:35:fd:54:e4:6d:25:da:92:b9:14:b5:dc:f2:e8:db:1f:20: 3d:6e:2b:6f:50:13:5e:85:b3:3e:b2:39:ff:8d:7a:99:68:5b: 5b:85:a8:2f:d9:c9:d5:52:a4:29:8c:54:a9:d6:96:b0:b1:e2: da:9e:3c:ed:13:b0:e0:e8:0f:11:36:e7:86:21:dd:c2:3c:7f: 3a:fb:32:57 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgISAZswV6fpA0OPZneP12cmYmc8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZGQ4ZjFhNjJhNWQ3ZjgwMjEyZGUwZjNlZmU3NWIyZmEz MzhmZmUwHhcNMjUxMjE4MDcyMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YjBjODEyMmZiYWU3NjAzZjRiNTQ3YTc1NzA0M2RhNWZmOTRiODVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobL1OOETp6MOdACmEdH5Ciwec7ov Nkm2jCgbqppPJTnGRR8SpnkinAU5yptwW0Dz5FDrnRIkNdmxzAstSWaQUFm3jDWE Yw84i6yCzpdiSISb1SaA3RJ32lYAZXOpv2/P5ULW56rmDQenHiL0cVmF3D+j5k6D 4WKO7/rRCkn3HN/imlspLHRgbqUe5tqYmekTHMycFkPVLhEyXb2MsQVJ4NHDtQaY A4kHFZKP9HcZEADRLxd6FdD/zgK58VEHxFf1hoc3Y+InW7TggsQdil0+VDRrcYo1 KBJsuAyiirlPKWN9ufvRJIZ3b1507nzLxgCZcB65QJcRtot04OPqI7nQjQIDAQAB o4ICoDCCApwwHQYDVR0OBBYEFHsMgSL7rnYD9LVHp1cEPaX/lLhcMB8GA1UdIwQY MBaAFEndjxpipdf4AhLeDz7+dbL6M4/+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2Yt Y2VlYzQ5MTI0YzBmLzEvZXd5Qkl2dXVkZ1AwdFVlblZ3UTlwZi1VdUZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8wMWIxZWYtMjMzYi00ZDZmLThkY2YtY2VlYzQ5MTI0YzBm LzEvU2QyUEdtS2wxX2dDRXQ0UFB2NTFzdm96al80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG1BggrBgEFBQcBBwEB/wSBpTCBojBCBAIAATA8AwQBBbXE AwQBUsfeAwQAW9W/AwQAW9m5AwQAuVr8AwQBuV/OAwQA1F+OAwQA1F+UAwQA1F+c AwQA1F+eMFwEAgACMFYDBwEqEvaAAgADBwIqEvaAAgQwEgMHBSoS9oACIAMHByoS 9oACADARAwYBKhL2gAYDBwAqEvaABgIDBwAqEvaABgQwEgMHBSoS9oAGIAMHByoS 9oAGADANBgkqhkiG9w0BAQsFAAOCAQEAB0sTRTJ6AzYDYblo30iepY8ipUkeLV6Z Q97IYhdC2Pfna1qLyM0cE7YM24v3eVfwBM3evJRjE4FjpbmKU/++jYYLCQK8KH2x jkhNYQz55VtiwWtHOS0kh1F3maCbHDTAhu8NG+oFdNG/T9j5+eFe2dm0UxJnvDSJ eNhtcc3ggZpjllStXjAqfwP7BTSLPCkAMwl2uTRqnVKJz+BO2LkJzqBbQglRNQhN 8CswHjP/10Jwkh60cjX9VORtJdqSuRS13PLo2x8gPW4rb1ATXoWzPrI5/416mWhb W4WoL9nJ1VKkKYxUqdaWsLHi2p487ROw4OgPETbnhiHdwjx/OvsyVw== -----END CERTIFICATE-----Generated at Thu Dec 18 22:33:18 2025 by rpki-client