This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/IpEWuAFE5LvYPbdUM7L4IFH6frI.roa File: IpEWuAFE5LvYPbdUM7L4IFH6frI.roa (raw, json) Hash identifier: y8dhB8FLtvlTcJQO9WnKsE5ungD688U+Xltxn/d4Vjs= Subject key identifier: 22:91:16:B8:01:44:E4:BB:D8:3D:B7:54:33:B2:F8:20:51:FA:7E:B2 Certificate issuer: /CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Certificate serial: 019AB7AE76A1677F9959F2B6A91AF72746E9 Authority key identifier: F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/IpEWuAFE5LvYPbdUM7L4IFH6frI.roa Signing time: Mon 24 Nov 2025 21:04:15 +0000 ROA not before: Mon 24 Nov 2025 21:04:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 216363 IP address blocks: 212.59.104.0/22 maxlen: 22 212.59.104.0/23 maxlen: 23 212.59.106.0/23 maxlen: 23 212.59.106.0/24 maxlen: 24 212.59.107.0/24 maxlen: 24 212.59.108.0/24 maxlen: 24 212.59.110.0/23 maxlen: 23 212.59.110.0/24 maxlen: 24 212.59.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.mft rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:b7:ae:76:a1:67:7f:99:59:f2:b6:a9:1a:f7:27:46:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3b5646b360379924cb6d9c3d99669ce7f3b2ca2 Validity Not Before: Nov 24 21:04:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=229116b80144e4bbd83db75433b2f82051fa7eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a1:af:b6:6f:a3:4d:7c:c3:a1:47:36:5a:68: ce:7d:88:51:44:21:ad:3f:43:ba:7c:f6:ac:29:42: 9e:01:03:10:01:03:99:c4:f8:30:11:17:72:89:66: f5:4b:bc:9d:d7:92:9b:40:06:c0:69:15:87:f1:8d: 70:62:9d:f9:18:96:f2:ce:00:91:17:dd:7a:c3:9c: ee:f4:d5:37:c0:0e:b5:8f:2c:1f:9a:7a:ea:33:84: 12:fb:c0:19:30:af:f9:f4:4f:e7:c2:33:54:84:9a: 34:fa:40:f4:92:d1:85:73:a7:b2:2a:51:3b:04:be: b3:42:fe:8e:ac:dd:45:94:d2:02:9c:99:e2:82:d1: 8c:f6:f2:76:32:2c:21:16:62:b6:9f:8d:be:71:ad: e9:dd:c2:8f:73:53:13:ad:66:ba:c6:14:4b:1f:12: 88:08:72:1c:eb:e9:a3:c1:3b:20:0c:34:86:86:b0: 71:89:a3:c7:0d:9a:ba:e8:7b:11:40:1e:f9:df:03: f3:a9:b4:c1:01:d6:4d:2f:e7:f4:98:a7:2f:2b:25: 8c:25:44:51:1f:9f:a4:34:be:75:8a:44:aa:d5:c6: 0c:cc:22:df:38:d0:92:ea:43:ed:a2:58:8d:b9:e5: ed:bd:23:64:c3:7c:7b:11:8d:2f:b4:3f:57:e8:23: c6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:91:16:B8:01:44:E4:BB:D8:3D:B7:54:33:B2:F8:20:51:FA:7E:B2 X509v3 Authority Key Identifier: keyid:F3:B5:64:6B:36:03:79:92:4C:B6:D9:C3:D9:96:69:CE:7F:3B:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/87VkazYDeZJMttnD2ZZpzn87LKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/IpEWuAFE5LvYPbdUM7L4IFH6frI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/572ea6-1436-4f26-af57-5975913f52c5/1/87VkazYDeZJMttnD2ZZpzn87LKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.59.104.0-212.59.108.255 212.59.110.0/23 Signature Algorithm: sha256WithRSAEncryption 68:0b:64:de:95:86:99:8e:01:8d:d0:16:a2:26:5e:a0:d2:a6: 12:16:02:7f:39:f4:79:43:87:d5:6f:11:17:8d:2f:87:28:74: 2b:56:73:d9:ac:e3:32:93:55:4f:63:24:36:b4:bd:ea:9b:e5: 19:c2:14:35:99:1a:91:33:a2:6f:03:ad:48:de:f4:8b:73:75: e0:8d:e3:2d:32:7b:38:04:d3:b8:44:b8:dc:71:63:2f:43:bd: 9d:9a:d9:27:99:92:21:80:46:6d:6a:0e:fb:ea:ae:10:a6:52: 88:41:22:b2:0d:68:28:6b:21:c1:1b:da:0a:f0:60:e5:b0:76: ca:25:1c:6d:56:bc:8c:5b:1e:a3:82:ff:0c:db:c6:66:24:92: 0b:cf:7a:89:4d:ae:14:e7:79:e5:8a:92:2f:07:c6:b5:19:a2: e8:61:fa:58:24:c6:7d:15:2d:99:70:92:6d:cc:93:96:71:78: a3:cc:94:5d:15:23:80:89:dd:9f:b2:39:55:8c:58:32:48:20: 1c:1c:4d:2c:55:4e:ca:5b:17:a4:f0:26:8d:8a:9b:ef:f9:db: eb:00:f4:9e:4f:53:79:56:4e:9d:6a:34:eb:96:1f:bf:62:d0: ad:0b:9b:c4:8e:03:8b:a1:ff:f8:79:b0:9c:e2:74:fe:7b:42: dc:cb:85:79 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZq3rnahZ3+ZWfK2qRr3J0bpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzYjU2NDZiMzYwMzc5OTI0Y2I2ZDljM2Q5OTY2OWNlN2Yz YjJjYTIwHhcNMjUxMTI0MjEwNDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjkxMTZiODAxNDRlNGJiZDgzZGI3NTQzM2IyZjgyMDUxZmE3ZWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KGvtm+jTXzDoUc2WmjOfYhRRCGt P0O6fPasKUKeAQMQAQOZxPgwERdyiWb1S7yd15KbQAbAaRWH8Y1wYp35GJbyzgCR F916w5zu9NU3wA61jywfmnrqM4QS+8AZMK/59E/nwjNUhJo0+kD0ktGFc6eyKlE7 BL6zQv6OrN1FlNICnJnigtGM9vJ2MiwhFmK2n42+ca3p3cKPc1MTrWa6xhRLHxKI CHIc6+mjwTsgDDSGhrBxiaPHDZq66HsRQB753wPzqbTBAdZNL+f0mKcvKyWMJURR H5+kNL51ikSq1cYMzCLfONCS6kPtoliNueXtvSNkw3x7EY0vtD9X6CPG2wIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFCKRFrgBROS72D23VDOy+CBR+n6yMB8GA1UdIwQY MBaAFPO1ZGs2A3mSTLbZw9mWac5/OyyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTct NTk3NTkxM2Y1MmM1LzEvSXBFV3VBRkU1THZZUGJkVU03TDRJRkg2ZnJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy81NzJlYTYtMTQzNi00ZjI2LWFmNTctNTk3NTkxM2Y1MmM1 LzEvODdWa2F6WURlWkpNdHRuRDJaWnB6bjg3TEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAPUO2gD BADUO2wDBAHUO24wDQYJKoZIhvcNAQELBQADggEBAGgLZN6VhpmOAY3QFqImXqDS phIWAn859HlDh9VvEReNL4codCtWc9ms4zKTVU9jJDa0veqb5RnCFDWZGpEzom8D rUje9ItzdeCN4y0yezgE07hEuNxxYy9DvZ2a2SeZkiGARm1qDvvqrhCmUohBIrIN aChrIcEb2grwYOWwdsolHG1WvIxbHqOC/wzbxmYkkgvPeolNrhTneeWKki8HxrUZ ouhh+lgkxn0VLZlwkm3Mk5ZxeKPMlF0VI4CJ3Z+yOVWMWDJIIBwcTSxVTspbF6Tw Jo2Km+/52+sA9J5PU3lWTp1qNOuWH79i0K0Lm8SOA4uh//h5sJzidP57QtzLhXk= -----END CERTIFICATE-----Generated at Sun Dec 7 00:10:45 2025 by rpki-client