This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/EZgthmV-Ra7gv9VxID_LxuQNZRk.roa File: EZgthmV-Ra7gv9VxID_LxuQNZRk.roa (raw, json) Hash identifier: /sMTXd+Qkuph99VXYlJb+JgMuVUgV39vMBsQNIId7R8= Subject key identifier: 11:98:2D:86:65:7E:45:AE:E0:BF:D5:71:20:3F:CB:C6:E4:0D:65:19 Certificate issuer: /CN=37a352e17af87ee2e5dc173d15543da63be55473 Certificate serial: 019A82B71AAEDC6DC6381928BC6BD04729DE Authority key identifier: 37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/EZgthmV-Ra7gv9VxID_LxuQNZRk.roa Signing time: Fri 14 Nov 2025 14:13:49 +0000 ROA not before: Fri 14 Nov 2025 14:13:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12684 IP address blocks: 80.247.150.0/24 maxlen: 24 80.247.153.0/24 maxlen: 24 80.247.158.0/24 maxlen: 24 80.247.159.0/24 maxlen: 24 148.253.24.0/24 maxlen: 24 212.56.249.0/24 maxlen: 24 212.56.250.0/24 maxlen: 24 212.165.152.0/24 maxlen: 24 212.165.206.0/24 maxlen: 24 212.165.207.0/24 maxlen: 24 212.165.240.0/24 maxlen: 24 212.165.241.0/24 maxlen: 24 212.165.242.0/24 maxlen: 24 212.165.243.0/24 maxlen: 24 212.165.248.0/24 maxlen: 24 212.165.249.0/24 maxlen: 24 212.165.250.0/24 maxlen: 24 212.165.251.0/24 maxlen: 24 212.165.252.0/24 maxlen: 24 212.165.253.0/24 maxlen: 24 212.165.254.0/24 maxlen: 24 2a02::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:b7:1a:ae:dc:6d:c6:38:19:28:bc:6b:d0:47:29:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37a352e17af87ee2e5dc173d15543da63be55473 Validity Not Before: Nov 14 14:13:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=11982d86657e45aee0bfd571203fcbc6e40d6519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:da:70:22:28:b0:78:e9:9d:be:01:80:44:69: 50:3a:65:8e:da:d3:6f:11:b7:10:10:84:19:a7:8b: 5d:e5:50:9f:33:fd:3d:e7:e1:23:9d:fc:dc:d6:0d: 19:c9:9e:d6:a2:2c:95:23:23:6e:c0:d4:35:7d:86: 62:5f:5c:89:1b:06:76:ec:23:af:20:93:c2:25:63: 0f:02:e4:53:74:a9:ee:da:e0:be:a8:f1:ac:f1:c1: 11:cd:d1:bc:d8:39:a2:b7:3d:bf:d7:26:e4:80:f0: fe:88:c6:3b:28:6b:f8:32:8a:a2:15:25:e6:4e:5c: 1f:28:84:f6:52:e2:73:5a:f1:90:21:bf:c0:60:ac: a1:81:1d:72:ac:38:af:2b:7b:2a:15:e0:92:fa:cd: fa:c9:26:72:ce:88:11:da:ca:be:3d:dc:6e:20:ff: 15:82:c2:6c:25:dd:3d:55:29:6b:bb:1c:6b:7d:68: 39:e2:fe:4c:69:09:f5:d0:09:f7:a2:03:66:3b:1b: 3b:f6:b0:68:5b:36:23:45:88:f2:94:4e:ec:58:21: 5d:f5:3c:c3:57:b9:f3:e4:fb:7d:a6:db:d5:08:7f: 16:63:20:82:19:f6:6d:34:c8:02:b3:2b:de:30:f7: 60:e8:b6:ff:8f:cc:b0:8d:1a:c6:f2:ca:bb:83:ed: 0f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:98:2D:86:65:7E:45:AE:E0:BF:D5:71:20:3F:CB:C6:E4:0D:65:19 X509v3 Authority Key Identifier: keyid:37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/EZgthmV-Ra7gv9VxID_LxuQNZRk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.247.150.0/24 80.247.153.0/24 80.247.158.0/23 148.253.24.0/24 212.56.249.0-212.56.250.255 212.165.152.0/24 212.165.206.0/23 212.165.240.0/22 212.165.248.0-212.165.254.255 IPv6: 2a02::/32 Signature Algorithm: sha256WithRSAEncryption a1:31:47:aa:f6:87:88:b2:99:fa:b3:a1:bc:17:be:8c:c0:21: fd:24:af:c7:b1:c4:df:39:db:73:d3:99:f5:44:ba:49:71:bc: d5:71:fa:3a:fd:1b:cf:0b:d4:42:ff:4d:5c:e6:9d:ad:d7:60: 78:75:f9:9e:ff:7e:a1:59:b0:e6:f4:a0:6e:b9:7f:30:55:58: 1f:c8:2e:e9:ed:e0:ad:f1:5f:1f:a0:55:d7:73:d7:03:a6:d9: 8c:23:fe:bb:ab:76:72:1e:1a:ca:a0:18:aa:4f:c4:75:99:bc: d6:86:0e:a8:2c:34:ec:53:3a:cd:13:75:76:8a:7d:bf:b0:c4: b2:c8:e7:cd:10:3a:04:9a:f8:2f:4e:d1:ee:e8:79:d0:9a:d0: 81:2d:42:90:e0:cf:45:36:59:7b:31:e5:64:fd:a4:b2:a8:b9: 63:00:d8:37:dd:f8:62:67:52:d0:d2:10:06:15:af:84:74:23: 7c:bb:b2:eb:54:1d:a0:c8:b2:31:2c:5a:80:3b:26:e0:d9:f1: 6f:21:ec:ab:6f:73:c3:c3:a0:a7:32:c4:d0:18:46:fb:66:a3: 7f:b2:a3:04:da:39:e8:08:d3:13:61:56:25:4a:9a:ad:cc:57: b6:dd:74:e2:69:e1:54:ce:3e:4c:a1:66:c5:70:46:c2:e4:dc: f8:43:17:28 -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgISAZqCtxqu3G3GOBkovGvQRyneMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3YTM1MmUxN2FmODdlZTJlNWRjMTczZDE1NTQzZGE2M2Jl NTU0NzMwHhcNMjUxMTE0MTQxMzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTk4MmQ4NjY1N2U0NWFlZTBiZmQ1NzEyMDNmY2JjNmU0MGQ2NTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9pwIiiweOmdvgGARGlQOmWO2tNv EbcQEIQZp4td5VCfM/095+Ejnfzc1g0ZyZ7WoiyVIyNuwNQ1fYZiX1yJGwZ27COv IJPCJWMPAuRTdKnu2uC+qPGs8cERzdG82Dmitz2/1ybkgPD+iMY7KGv4MoqiFSXm TlwfKIT2UuJzWvGQIb/AYKyhgR1yrDivK3sqFeCS+s36ySZyzogR2sq+PdxuIP8V gsJsJd09VSlruxxrfWg54v5MaQn10An3ogNmOxs79rBoWzYjRYjylE7sWCFd9TzD V7nz5Pt9ptvVCH8WYyCCGfZtNMgCsyveMPdg6Lb/j8ywjRrG8sq7g+0PgQIDAQAB o4ICWDCCAlQwHQYDVR0OBBYEFBGYLYZlfkWu4L/VcSA/y8bkDWUZMB8GA1UdIwQY MBaAFDejUuF6+H7i5dwXPRVUPaY75VRzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjZOUzRYcjRmdUxsM0JjOUZWUTlwanZsVkhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9hOTc3ZWEtNGE5My00NjE4LWI3ZmYt MzViMjFiZmZhZDRkLzEvRVpndGhtVi1SYTdndjlWeElEX0x4dVFOWlJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9hOTc3ZWEtNGE5My00NjE4LWI3ZmYtMzViMjFiZmZhZDRk LzEvTjZOUzRYcjRmdUxsM0JjOUZWUTlwanZsVkhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTBMBAIAATBGAwQAUPeWAwQA UPeZAwQBUPeeAwQAlP0YMAwDBADUOPkDBADUOPoDBADUpZgDBAHUpc4DBALUpfAw DAMEA9Sl+AMEANSl/jANBAIAAjAHAwUAKgIAADANBgkqhkiG9w0BAQsFAAOCAQEA oTFHqvaHiLKZ+rOhvBe+jMAh/SSvx7HE3znbc9OZ9US6SXG81XH6Ov0bzwvUQv9N XOadrddgeHX5nv9+oVmw5vSgbrl/MFVYH8gu6e3grfFfH6BV13PXA6bZjCP+u6t2 ch4ayqAYqk/EdZm81oYOqCw07FM6zRN1dop9v7DEssjnzRA6BJr4L07R7uh50JrQ gS1CkODPRTZZezHlZP2ksqi5YwDYN934YmdS0NIQBhWvhHQjfLuy61QdoMiyMSxa gDsm4NnxbyHsq29zw8OgpzLE0BhG+2ajf7KjBNo56AjTE2FWJUqarcxXtt104mnh VM4+TKFmxXBGwuTc+EMXKA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:05:38 2025 by rpki-client