This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/eBFmNSCELNvZO_tqhD6ey9CaN14.roa File: eBFmNSCELNvZO_tqhD6ey9CaN14.roa (raw, json) Hash identifier: n+63lq95+CsW60T+wzDM2SpHj5pvDFoVyp7C8VAjqyY= Subject key identifier: 78:11:66:35:20:84:2C:DB:D9:3B:FB:6A:84:3E:9E:CB:D0:9A:37:5E Certificate issuer: /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Certificate serial: 019B21553076FD0BAD34422F1E941BB40C6C Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/eBFmNSCELNvZO_tqhD6ey9CaN14.roa Signing time: Mon 15 Dec 2025 09:26:29 +0000 ROA not before: Mon 15 Dec 2025 09:26:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 103.216.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 09:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:55:30:76:fd:0b:ad:34:42:2f:1e:94:1b:b4:0c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96 Validity Not Before: Dec 15 09:26:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7811663520842cdbd93bfb6a843e9ecbd09a375e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:68:98:98:a8:48:af:60:d7:8f:bc:51:3f:45: 1e:e0:34:2f:e5:d5:4b:54:b1:63:a6:ad:9d:de:a2: d1:d3:62:fa:57:e7:75:79:5a:30:fd:fb:cf:c3:51: 82:42:1b:30:64:9e:a6:11:11:24:3a:aa:e1:d3:fb: e4:27:79:3d:34:cf:26:f7:1c:6a:e3:3a:53:3d:d0: 4a:8e:2e:e7:38:87:78:37:cb:ff:64:68:bb:19:be: e3:57:3a:dc:bf:29:40:a2:9a:05:78:0b:86:c9:b0: d9:86:bd:56:4a:56:2b:48:eb:a4:b4:61:85:e6:3e: 92:ee:eb:98:50:2f:ec:b8:05:2f:11:aa:0b:b6:ab: 76:61:98:d7:1f:a2:46:b4:a5:4d:b0:d6:32:ee:66: aa:d2:1d:75:5b:ab:60:08:ca:dc:da:f8:36:8f:3e: cf:bb:37:08:ed:04:8e:55:7c:60:0c:6b:f4:18:f9: dc:59:a3:c5:d0:b5:e5:5c:af:f9:41:c3:4d:2c:c8: 59:22:c3:31:a8:8b:c5:9e:77:74:ff:f4:25:de:83: a8:09:4d:77:74:10:08:d1:f1:60:0e:d4:93:ba:e1: ea:19:84:46:c8:91:58:bc:3e:4b:0a:a9:d8:98:f5: e6:46:72:12:dd:f4:28:12:70:e9:a5:99:59:a4:ca: dd:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:11:66:35:20:84:2C:DB:D9:3B:FB:6A:84:3E:9E:CB:D0:9A:37:5E X509v3 Authority Key Identifier: keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/eBFmNSCELNvZO_tqhD6ey9CaN14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.216.174.0/24 Signature Algorithm: sha256WithRSAEncryption 57:f7:f6:de:a0:d3:98:fb:19:5b:98:2f:bd:c1:ca:6f:6f:7a: 7c:8a:05:7d:09:38:41:83:fe:1a:de:42:01:f3:0e:d4:f1:53: 14:e1:73:61:59:ef:f2:0d:d2:e1:0a:f7:93:70:1c:e7:f9:e4: 74:9a:86:dd:33:c2:64:9a:a0:c4:1e:f9:9d:68:ef:88:11:81: d2:41:18:dc:41:78:7d:4e:31:69:99:af:08:45:3a:28:2c:61: 61:1b:cd:46:c8:66:d0:f4:cf:12:d2:db:5d:3d:c6:1c:44:b5: 56:46:3e:9d:08:06:85:65:5f:28:6c:f5:55:4c:97:0a:58:01: ad:55:79:64:ba:5e:58:c1:9a:d6:fe:23:d7:aa:e1:1b:46:65: 53:db:bc:f0:7e:29:4e:ec:0a:36:cc:98:54:53:f2:f3:f3:c9: 92:57:a3:05:cc:64:c6:c0:7c:2a:5e:a2:7c:26:35:23:a2:68: bd:71:b0:33:32:a3:9d:22:df:32:a0:09:e5:e3:66:b2:fe:89: 03:6f:08:26:97:e3:ab:cc:22:18:12:e8:64:1f:2f:e0:72:83: f2:2d:ec:39:49:57:c4:02:bf:c2:45:2c:d0:55:c4:bc:ef:c3: b9:75:64:15:9c:bd:96:10:81:94:b7:3b:5b:f4:5b:44:b9:69: f1:5d:d2:14 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZshVTB2/QutNEIvHpQbtAxsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODQ2NWIzN2IyZDRlOWY0MTNhMzFkYzdiN2U2Y2JhMmEz M2RiOTYwHhcNMjUxMjE1MDkyNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODExNjYzNTIwODQyY2RiZDkzYmZiNmE4NDNlOWVjYmQwOWEzNzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2iYmKhIr2DXj7xRP0Ue4DQv5dVL VLFjpq2d3qLR02L6V+d1eVow/fvPw1GCQhswZJ6mEREkOqrh0/vkJ3k9NM8m9xxq 4zpTPdBKji7nOId4N8v/ZGi7Gb7jVzrcvylAopoFeAuGybDZhr1WSlYrSOuktGGF 5j6S7uuYUC/suAUvEaoLtqt2YZjXH6JGtKVNsNYy7maq0h11W6tgCMrc2vg2jz7P uzcI7QSOVXxgDGv0GPncWaPF0LXlXK/5QcNNLMhZIsMxqIvFnnd0//Ql3oOoCU13 dBAI0fFgDtSTuuHqGYRGyJFYvD5LCqnYmPXmRnIS3fQoEnDppZlZpMrdTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHgRZjUghCzb2Tv7aoQ+nsvQmjdeMB8GA1UdIwQY MBaAFAiEZbN7LU6fQTox3Ht+bLoqM9uWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUt MmM3MDg2ZmRlZDkzLzEvZUJGbU5TQ0VMTnZaT190cWhENmV5OUNhTjE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8zZTJiMTgtNTVjOS00MTgwLThjNmUtMmM3MDg2ZmRlZDkz LzEvQ0lSbHMzc3RUcDlCT2pIY2UzNXN1aW96MjVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9iuMA0G CSqGSIb3DQEBCwUAA4IBAQBX9/beoNOY+xlbmC+9wcpvb3p8igV9CThBg/4a3kIB 8w7U8VMU4XNhWe/yDdLhCveTcBzn+eR0mobdM8JkmqDEHvmdaO+IEYHSQRjcQXh9 TjFpma8IRTooLGFhG81GyGbQ9M8S0ttdPcYcRLVWRj6dCAaFZV8obPVVTJcKWAGt VXlkul5YwZrW/iPXquEbRmVT27zwfilO7Ao2zJhUU/Lz88mSV6MFzGTGwHwqXqJ8 JjUjomi9cbAzMqOdIt8yoAnl42ay/okDbwgml+OrzCIYEuhkHy/gcoPyLew5SVfE Ar/CRSzQVcS878O5dWQVnL2WEIGUtztb9FtEuWnxXdIU -----END CERTIFICATE-----Generated at Mon Dec 15 17:21:40 2025 by rpki-client