This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/eIuwLUi_tUH9axX7ffljFKWX964.roa File: eIuwLUi_tUH9axX7ffljFKWX964.roa (raw, json) Hash identifier: vKLCpdvF8QvRc1psT7A0tODI7Pnut7s9GiVgwdIB8wc= Subject key identifier: 78:8B:B0:2D:48:BF:B5:41:FD:6B:15:FB:7D:F9:63:14:A5:97:F7:AE Certificate issuer: /CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Certificate serial: 019B0AC5206C0E386204222A3853555106D1 Authority key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/eIuwLUi_tUH9axX7ffljFKWX964.roa Signing time: Thu 11 Dec 2025 00:17:29 +0000 ROA not before: Thu 11 Dec 2025 00:17:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 53813 IP address blocks: 147.161.192.0/23 maxlen: 24 147.161.194.0/23 maxlen: 24 147.161.196.0/23 maxlen: 24 147.161.198.0/23 maxlen: 24 147.161.200.0/23 maxlen: 24 147.161.204.0/23 maxlen: 24 147.161.208.0/23 maxlen: 24 147.161.210.0/23 maxlen: 24 147.161.212.0/23 maxlen: 24 147.161.214.0/23 maxlen: 24 147.161.216.0/23 maxlen: 24 147.161.218.0/23 maxlen: 24 147.161.220.0/23 maxlen: 24 159.254.98.0/24 maxlen: 24 159.254.103.0/24 maxlen: 24 164.137.56.0/24 maxlen: 24 164.137.57.0/24 maxlen: 24 164.137.58.0/24 maxlen: 24 164.137.59.0/24 maxlen: 24 164.137.60.0/24 maxlen: 24 164.137.69.0/24 maxlen: 24 164.137.109.0/24 maxlen: 24 164.137.159.0/24 maxlen: 24 164.137.160.0/24 maxlen: 24 164.137.161.0/24 maxlen: 24 164.137.162.0/24 maxlen: 24 164.137.163.0/24 maxlen: 24 164.137.164.0/24 maxlen: 24 164.137.165.0/24 maxlen: 24 164.137.166.0/24 maxlen: 24 164.137.167.0/24 maxlen: 24 164.137.168.0/24 maxlen: 24 164.137.169.0/24 maxlen: 24 164.137.170.0/24 maxlen: 24 164.137.171.0/24 maxlen: 24 164.137.172.0/24 maxlen: 24 164.137.173.0/24 maxlen: 24 164.137.174.0/24 maxlen: 24 164.137.175.0/24 maxlen: 24 164.137.176.0/24 maxlen: 24 164.137.177.0/24 maxlen: 24 164.137.178.0/24 maxlen: 24 164.137.179.0/24 maxlen: 24 164.137.180.0/24 maxlen: 24 164.137.181.0/24 maxlen: 24 164.137.182.0/24 maxlen: 24 164.137.183.0/24 maxlen: 24 164.137.184.0/24 maxlen: 24 164.137.185.0/24 maxlen: 24 164.137.186.0/24 maxlen: 24 164.137.187.0/24 maxlen: 24 164.137.188.0/24 maxlen: 24 164.137.189.0/24 maxlen: 24 164.137.190.0/24 maxlen: 24 164.137.191.0/24 maxlen: 24 164.137.192.0/24 maxlen: 24 2a03:eec0:3211::/48 maxlen: 48 2a03:eec0:3223::/48 maxlen: 48 2a03:eec0:3224::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0a:c5:20:6c:0e:38:62:04:22:2a:38:53:55:51:06:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20 Validity Not Before: Dec 11 00:17:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=788bb02d48bfb541fd6b15fb7df96314a597f7ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7b:d0:86:4f:e4:b6:d6:39:52:4c:78:6b:08: 81:50:ba:5c:50:9b:1a:b6:0e:c7:b9:f0:aa:cf:bd: e4:6a:71:be:87:a2:c1:f1:14:90:42:82:4c:a9:42: 85:59:26:a9:84:cd:b2:b3:b1:ac:13:2e:6d:2b:80: bd:3c:8b:52:88:4c:ab:f0:60:93:53:19:f1:be:bb: ef:65:5a:bf:6e:3e:26:e9:1f:55:89:be:83:2d:fb: 18:9c:81:91:ee:2c:7d:2c:10:b8:29:6d:54:b3:cb: 67:0b:8c:9b:f0:8c:f8:bb:e9:32:f6:61:a6:72:3f: ec:59:c3:29:43:df:32:c5:07:83:b4:3c:3b:09:ed: 66:7d:b9:89:87:60:0c:6d:5d:9c:45:45:5a:65:60: 02:90:02:ae:d0:0c:82:e6:03:b4:ad:22:d7:80:29: 5b:9a:75:b8:0a:48:11:88:4d:1a:ff:0c:d3:94:1b: e3:cb:89:1f:57:25:93:50:35:da:c0:4f:30:86:f0: 6c:aa:00:0e:3d:88:7c:0c:03:d2:ba:46:0f:e3:c0: 6f:0e:5c:02:02:46:20:91:da:94:b6:05:0f:2b:81: dc:73:c6:08:9c:d2:3b:d6:bf:75:a2:eb:eb:23:a6: c9:a1:00:14:a6:76:2a:86:08:15:ef:d7:1b:59:c6: 0a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8B:B0:2D:48:BF:B5:41:FD:6B:15:FB:7D:F9:63:14:A5:97:F7:AE X509v3 Authority Key Identifier: keyid:AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/eIuwLUi_tUH9axX7ffljFKWX964.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.161.192.0-147.161.201.255 147.161.204.0/23 147.161.208.0-147.161.221.255 159.254.98.0/24 159.254.103.0/24 164.137.56.0-164.137.60.255 164.137.69.0/24 164.137.109.0/24 164.137.159.0-164.137.192.255 IPv6: 2a03:eec0:3211::/48 2a03:eec0:3223::-2a03:eec0:3224:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 3e:11:18:53:54:aa:f5:2c:c5:bf:19:1d:19:c3:da:23:87:b1: db:b5:47:8e:3a:6d:8a:32:a9:0e:5f:84:b7:05:c1:bf:9c:a1: 2c:34:49:44:d9:95:ed:4f:d9:5f:1b:f3:da:04:2c:40:18:d3: 79:0c:7e:a0:49:d5:2d:c8:0a:b7:3b:7e:c3:2a:24:8f:f8:3c: d6:42:b5:71:6d:e2:7d:52:12:95:65:5a:ff:0d:c6:00:1c:8d: b7:86:4a:6d:45:79:d1:c2:15:11:7f:e2:dd:ee:f4:1f:b2:f3: 0d:f3:c9:ec:85:25:60:28:c2:3a:74:d1:6a:36:88:4f:ff:9a: 3f:fa:dd:52:52:db:ea:0e:ad:d6:7e:e7:c8:a5:49:8f:41:d4: e3:f2:13:d1:a6:90:4c:ec:b1:d1:f1:1b:b0:d7:26:df:50:99: 7d:d9:57:44:d7:01:de:ec:d9:43:97:47:80:27:a3:be:1f:1e: 22:72:c4:6c:a2:ba:f1:20:f6:60:87:b7:21:53:ab:f7:52:57: f0:4e:c4:15:96:f0:0e:0e:df:cd:c2:a0:61:72:7d:c9:87:c0: 42:cb:79:eb:12:b5:32:98:24:2c:51:57:40:2d:e0:cb:58:b0: dd:3d:f9:99:f3:2f:a3:d6:2f:54:03:82:d7:54:d8:5a:42:b2: 78:29:21:84 -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgISAZsKxSBsDjhiBCIqOFNVUQbRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTY2YTU5MzhhZjU2N2E5ZTI5YjRmNzZmMTE1NjA3YzJi OGFhMjAwHhcNMjUxMjExMDAxNzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODhiYjAyZDQ4YmZiNTQxZmQ2YjE1ZmI3ZGY5NjMxNGE1OTdmN2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnvQhk/kttY5Ukx4awiBULpcUJsa tg7HufCqz73kanG+h6LB8RSQQoJMqUKFWSaphM2ys7GsEy5tK4C9PItSiEyr8GCT UxnxvrvvZVq/bj4m6R9Vib6DLfsYnIGR7ix9LBC4KW1Us8tnC4yb8Iz4u+ky9mGm cj/sWcMpQ98yxQeDtDw7Ce1mfbmJh2AMbV2cRUVaZWACkAKu0AyC5gO0rSLXgClb mnW4CkgRiE0a/wzTlBvjy4kfVyWTUDXawE8whvBsqgAOPYh8DAPSukYP48BvDlwC AkYgkdqUtgUPK4Hcc8YInNI71r91ouvrI6bJoQAUpnYqhggV79cbWcYKjwIDAQAB o4ICgTCCAn0wHQYDVR0OBBYEFHiLsC1Iv7VB/WsV+335YxSll/euMB8GA1UdIwQY MBaAFKymalk4r1Z6nim0928RVgfCuKogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgt YjliNjU0MDJiOTI4LzEvZUl1d0xVaV90VUg5YXhYN2ZmbGpGS1dYOTY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi8xNTA4OWItMThkNy00ZmYwLTlkMjgtYjliNjU0MDJiOTI4 LzEvcktacVdUaXZWbnFlS2JUM2J4RldCOEs0cWlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzBcBAIAATBWMAwDBAaT ocADBAGTocgDBAGTocwwDAMEBJOh0AMEAZOh3AMEAJ/+YgMEAJ/+ZzAMAwQDpIk4 AwQApIk8AwQApIlFAwQApIltMAwDBACkiZ8DBACkicAwIwQCAAIwHQMHACoD7sAy ETASAwcAKgPuwDIjAwcAKgPuwDIkMA0GCSqGSIb3DQEBCwUAA4IBAQA+ERhTVKr1 LMW/GR0Zw9ojh7HbtUeOOm2KMqkOX4S3BcG/nKEsNElE2ZXtT9lfG/PaBCxAGNN5 DH6gSdUtyAq3O37DKiSP+DzWQrVxbeJ9UhKVZVr/DcYAHI23hkptRXnRwhURf+Ld 7vQfsvMN88nshSVgKMI6dNFqNohP/5o/+t1SUtvqDq3WfufIpUmPQdTj8hPRppBM 7LHR8Ruw1ybfUJl92VdE1wHe7NlDl0eAJ6O+Hx4icsRsorrxIPZgh7chU6v3Ulfw TsQVlvAODt/NwqBhcn3Jh8BCy3nrErUymCQsUVdALeDLWLDdPfmZ8y+j1i9UA4LX VNhaQrJ4KSGE -----END CERTIFICATE-----Generated at Tue Dec 16 14:18:08 2025 by rpki-client