This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/EYwLftDqST2_awKHPX53MIAhSV8.roa File: EYwLftDqST2_awKHPX53MIAhSV8.roa (raw, json) Hash identifier: li17058OcbjaiTz61Xt7sULpik4PJGKUZujj+TFLCa0= Subject key identifier: 11:8C:0B:7E:D0:EA:49:3D:BF:6B:02:87:3D:7E:77:30:80:21:49:5F Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019AFE6910C42449CC89C8029B27D5CA921E Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/EYwLftDqST2_awKHPX53MIAhSV8.roa Signing time: Mon 08 Dec 2025 14:41:29 +0000 ROA not before: Mon 08 Dec 2025 14:41:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 212.116.227.0/24 maxlen: 24 212.116.228.0/23 maxlen: 23 212.116.236.0/24 maxlen: 24 212.116.237.0/24 maxlen: 24 212.116.238.0/23 maxlen: 24 212.116.240.0/24 maxlen: 24 212.116.243.0/24 maxlen: 24 212.116.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 14:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fe:69:10:c4:24:49:cc:89:c8:02:9b:27:d5:ca:92:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Dec 8 14:41:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=118c0b7ed0ea493dbf6b02873d7e77308021495f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1c:01:d0:ac:7f:ce:08:8e:e9:5a:45:78:a2: 86:53:58:3e:02:69:e0:ba:4e:0a:ce:a9:5a:ae:dd: 19:5b:36:08:e2:fb:37:fc:f5:77:c0:c1:28:0c:c2: 28:c9:5f:40:70:d0:97:de:1b:14:97:f9:22:6d:31: ca:d4:41:45:cf:17:bd:db:27:ff:59:65:9b:08:23: a2:09:1d:8d:5a:4d:1b:61:0a:4a:b7:99:9e:cd:f8: 7b:6d:7a:17:87:41:01:33:64:ae:f8:28:6f:23:51: 47:42:c2:49:dc:f5:e2:05:cf:47:00:92:79:24:fa: ca:74:8f:4f:00:c6:87:97:1f:c1:96:2c:c6:56:8f: d6:8f:91:ac:e1:bc:82:99:62:e9:95:af:b2:8f:bd: 53:d7:14:70:87:fa:54:92:8d:98:5f:bb:cc:04:a4: f1:e2:34:20:1e:9f:53:3d:25:51:00:e9:91:9d:d9: bf:1a:a7:e2:0a:f6:b3:f1:62:b3:c3:c7:b4:d4:40: 3b:f5:cb:7d:c3:4d:6c:34:1b:b1:7b:15:14:2c:38: af:af:de:60:1f:f6:36:5a:d6:1f:d8:f9:0c:b5:7e: 44:a6:4b:6b:02:09:6f:27:34:cc:7a:9c:1c:dd:2f: a9:fe:a5:4e:9b:19:21:7d:aa:97:02:e2:bc:97:45: 9c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:8C:0B:7E:D0:EA:49:3D:BF:6B:02:87:3D:7E:77:30:80:21:49:5F X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/EYwLftDqST2_awKHPX53MIAhSV8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.116.227.0-212.116.229.255 212.116.236.0-212.116.240.255 212.116.243.0-212.116.244.255 Signature Algorithm: sha256WithRSAEncryption c7:02:d2:d7:84:15:c2:b7:ab:af:c0:89:6b:13:d9:9e:44:ef: 87:a0:8e:23:c3:57:9d:c1:18:bc:eb:df:b2:ba:0f:cb:af:5a: 19:16:17:fb:6d:a2:e2:08:1e:26:5f:2d:6b:0d:12:30:90:09: 50:6d:af:55:7f:8b:a1:24:fc:ec:56:28:20:ea:b6:ca:f9:d3: 66:cc:79:36:02:c5:08:41:f7:70:d5:9f:4f:47:79:a2:f0:5f: 7a:f5:1c:1d:b8:c7:94:bc:01:46:9e:73:bb:d6:61:bc:0a:a0: f5:8e:47:33:6a:7d:50:fb:92:fc:47:f5:06:f6:1f:8b:dc:19: ac:63:d5:0a:e4:2a:02:56:89:64:22:3a:cb:a7:c2:b1:bf:ec: bc:a0:ce:6a:16:a4:90:37:ee:3f:0e:64:68:af:85:44:7a:fa: 1f:55:88:8a:2f:6e:95:e7:97:87:79:15:eb:f1:b0:e8:47:15: 02:e2:f2:26:fa:6b:b4:36:be:fb:3d:cf:27:54:97:6c:fc:fc: 2d:dd:4d:6b:9f:e5:44:7e:78:a9:fc:25:ff:88:e4:c7:75:23: 92:98:04:96:3c:7c:07:bc:8b:65:f0:3e:a6:5b:f3:a0:15:d0: 10:7b:97:a9:bb:77:67:09:62:cd:c3:25:24:24:79:f9:94:b2: d4:dc:33:55 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZr+aRDEJEnMicgCmyfVypIeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjUxMjA4MTQ0MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMThjMGI3ZWQwZWE0OTNkYmY2YjAyODczZDdlNzczMDgwMjE0OTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthwB0Kx/zgiO6VpFeKKGU1g+Amng uk4Kzqlart0ZWzYI4vs3/PV3wMEoDMIoyV9AcNCX3hsUl/kibTHK1EFFzxe92yf/ WWWbCCOiCR2NWk0bYQpKt5mezfh7bXoXh0EBM2Su+ChvI1FHQsJJ3PXiBc9HAJJ5 JPrKdI9PAMaHlx/BlizGVo/Wj5Gs4byCmWLpla+yj71T1xRwh/pUko2YX7vMBKTx 4jQgHp9TPSVRAOmRndm/GqfiCvaz8WKzw8e01EA79ct9w01sNBuxexUULDivr95g H/Y2WtYf2PkMtX5EpktrAglvJzTMepwc3S+p/qVOmxkhfaqXAuK8l0WcLQIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFBGMC37Q6kk9v2sChz1+dzCAIUlfMB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvRVl3TGZ0RHFTVDJfYXdLSFBYNTNNSUFoU1Y4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqMAwDBADUdOMD BAHUdOQwDAMEAtR07AMEANR08DAMAwQA1HTzAwQA1HT0MA0GCSqGSIb3DQEBCwUA A4IBAQDHAtLXhBXCt6uvwIlrE9meRO+HoI4jw1edwRi869+yug/Lr1oZFhf7baLi CB4mXy1rDRIwkAlQba9Vf4uhJPzsVigg6rbK+dNmzHk2AsUIQfdw1Z9PR3mi8F96 9RwduMeUvAFGnnO71mG8CqD1jkczan1Q+5L8R/UG9h+L3BmsY9UK5CoCVolkIjrL p8Kxv+y8oM5qFqSQN+4/DmRor4VEevofVYiKL26V55eHeRXr8bDoRxUC4vIm+mu0 Nr77Pc8nVJds/Pwt3U1rn+VEfnip/CX/iOTHdSOSmASWPHwHvItl8D6mW/OgFdAQ e5epu3dnCWLNwyUkJHn5lLLU3DNV -----END CERTIFICATE-----Generated at Mon Dec 15 17:22:01 2025 by rpki-client