This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/eeGezoY2_u8NBTEPzu2i8vvTAmU.roa
File: eeGezoY2_u8NBTEPzu2i8vvTAmU.roa (raw, json)
Hash identifier: i0S2SKLqhKdPvx+2WCq/ylse6+pyU1QX6Yk6gD/92s0=
Subject key identifier: 79:E1:9E:CE:86:36:FE:EF:0D:05:31:0F:CE:ED:A2:F2:FB:D3:02:65
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019AEF151E1372A37E4AE34FDAFEC98FC416
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/eeGezoY2_u8NBTEPzu2i8vvTAmU.roa
Signing time: Fri 05 Dec 2025 15:15:29 +0000
ROA not before: Fri 05 Dec 2025 15:15:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401776
IP address blocks: 158.173.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:ef:15:1e:13:72:a3:7e:4a:e3:4f:da:fe:c9:8f:c4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Dec 5 15:15:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=79e19ece8636feef0d05310fceeda2f2fbd30265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8d:f4:6b:0b:3b:c6:da:e7:1f:b9:6d:15:9b:
50:54:c1:a6:56:4b:ad:ad:23:88:12:68:2f:ef:89:
b3:8b:81:e2:1f:04:d8:d8:f4:28:b9:ae:27:dc:ff:
78:85:74:4f:31:2c:18:a1:f3:e5:cc:66:6b:45:31:
d2:22:17:a5:96:55:75:cd:4b:f7:60:bf:df:bd:52:
85:7e:51:43:cf:59:b1:91:b5:c0:e1:fd:50:24:bd:
f9:d3:11:f2:b5:78:21:61:79:cc:3e:18:df:0c:24:
7c:0c:01:58:fc:b8:fa:cc:84:14:ec:8a:68:0b:76:
da:74:d4:51:55:a3:ba:24:3f:da:8d:84:cd:ee:0d:
5f:5a:98:d4:46:c4:f1:40:68:a5:34:04:b1:33:7a:
c4:f0:69:7f:3e:57:18:fb:ad:d5:4a:59:da:36:02:
99:41:6f:c0:e8:8b:51:cc:38:55:3e:78:59:c9:5b:
77:ca:a1:6c:0a:1d:37:b1:31:f2:1c:15:31:15:f2:
9e:2b:71:76:bf:f7:e4:52:9d:39:1d:96:a1:1f:50:
1f:51:58:e8:c0:38:25:75:5b:8b:94:c4:ce:92:c2:
8f:c9:22:00:ce:bd:ee:64:22:ae:69:61:c8:96:55:
e9:9f:8f:b4:9f:31:c8:a6:59:fe:90:96:8c:bb:51:
d8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:E1:9E:CE:86:36:FE:EF:0D:05:31:0F:CE:ED:A2:F2:FB:D3:02:65
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/eeGezoY2_u8NBTEPzu2i8vvTAmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.227.0/24
Signature Algorithm: sha256WithRSAEncryption
93:44:8e:a4:08:96:e6:76:24:2e:83:50:df:90:f2:ce:2a:c9:
b5:dd:bd:cf:a0:b4:3e:d5:0a:e3:0a:b1:8e:35:3e:d0:e9:d2:
f1:fc:c9:d3:33:48:62:26:57:bb:69:7b:d3:e4:0a:1a:fe:d2:
32:35:58:2a:ca:b4:eb:02:f4:8d:27:d0:7f:98:7e:7c:d4:99:
86:14:e9:73:69:07:bc:12:12:b1:a2:d1:e2:b5:94:d7:79:22:
af:76:45:13:7b:27:ea:f3:6b:91:41:33:61:58:12:65:f9:0c:
6d:bb:7b:ed:5d:57:e1:71:f0:96:35:76:e4:c5:61:a6:c1:3a:
71:51:5c:15:10:bf:f1:39:a5:67:d4:5c:6e:e9:a9:a3:6e:09:
55:2b:ab:f8:29:db:d4:aa:a6:3f:69:ee:dd:ee:6d:a5:97:2e:
25:12:76:5f:3c:3d:50:a4:53:81:d6:d5:d2:40:93:f1:17:d2:
2d:bb:9b:78:9c:2e:91:f2:e8:8a:9d:ea:9d:56:cd:7f:ef:55:
18:be:f6:2e:5c:4b:10:60:f8:c5:79:5b:0e:fa:a9:c3:b2:e1:
13:55:a2:b3:2f:84:69:94:a6:6e:18:c4:d6:ac:e6:22:bf:28:
f4:e2:f9:71:fe:1e:10:2b:b5:c0:10:a2:de:9d:25:03:72:3c:
07:2a:91:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZrvFR4TcqN+SuNP2v7Jj8QWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjUxMjA1MTUxNTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWUxOWVjZTg2MzZmZWVmMGQwNTMxMGZjZWVkYTJmMmZiZDMwMjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI30aws7xtrnH7ltFZtQVMGmVkut
rSOIEmgv74mzi4HiHwTY2PQoua4n3P94hXRPMSwYofPlzGZrRTHSIhelllV1zUv3
YL/fvVKFflFDz1mxkbXA4f1QJL350xHytXghYXnMPhjfDCR8DAFY/Lj6zIQU7Ipo
C3badNRRVaO6JD/ajYTN7g1fWpjURsTxQGilNASxM3rE8Gl/PlcY+63VSlnaNgKZ
QW/A6ItRzDhVPnhZyVt3yqFsCh03sTHyHBUxFfKeK3F2v/fkUp05HZahH1AfUVjo
wDgldVuLlMTOksKPySIAzr3uZCKuaWHIllXpn4+0nzHIpln+kJaMu1HYrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHnhns6GNv7vDQUxD87tovL70wJlMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvZWVHZXpvWTJfdThOQlRFUHp1Mmk4dnZUQW1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnq3jMA0G
CSqGSIb3DQEBCwUAA4IBAQCTRI6kCJbmdiQug1DfkPLOKsm13b3PoLQ+1QrjCrGO
NT7Q6dLx/MnTM0hiJle7aXvT5Aoa/tIyNVgqyrTrAvSNJ9B/mH581JmGFOlzaQe8
EhKxotHitZTXeSKvdkUTeyfq82uRQTNhWBJl+Qxtu3vtXVfhcfCWNXbkxWGmwTpx
UVwVEL/xOaVn1Fxu6amjbglVK6v4KdvUqqY/ae7d7m2lly4lEnZfPD1QpFOB1tXS
QJPxF9Itu5t4nC6R8uiKneqdVs1/71UYvvYuXEsQYPjFeVsO+qnDsuETVaKzL4Rp
lKZuGMTWrOYivyj04vlx/h4QK7XAEKLenSUDcjwHKpFg
-----END CERTIFICATE-----
Generated at Sat Dec 6 07:41:43 2025 by rpki-client