This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/EwcZg-vTn90_0p1Zc9YeuFGPAYE.roa File: EwcZg-vTn90_0p1Zc9YeuFGPAYE.roa (raw, json) Hash identifier: mFgykHjCEZP545L3rZyO7ozms2YceeGVlHWxtXJTBzo= Subject key identifier: 13:07:19:83:EB:D3:9F:DD:3F:D2:9D:59:73:D6:1E:B8:51:8F:01:81 Certificate issuer: /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827 Certificate serial: 019B175ADD6B672EE57A0D9735F5A9862806 Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/EwcZg-vTn90_0p1Zc9YeuFGPAYE.roa Signing time: Sat 13 Dec 2025 10:56:29 +0000 ROA not before: Sat 13 Dec 2025 10:56:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 24904 IP address blocks: 2.59.236.0/22 maxlen: 24 45.15.60.0/22 maxlen: 24 45.83.228.0/22 maxlen: 24 81.28.192.0/20 maxlen: 24 83.243.124.0/22 maxlen: 24 92.118.96.0/22 maxlen: 24 171.22.0.0/22 maxlen: 24 178.250.208.0/21 maxlen: 24 185.4.76.0/22 maxlen: 24 185.45.32.0/22 maxlen: 24 185.66.100.0/22 maxlen: 24 185.73.232.0/22 maxlen: 24 185.164.232.0/22 maxlen: 24 185.200.200.0/22 maxlen: 24 185.202.60.0/22 maxlen: 24 185.207.80.0/22 maxlen: 24 185.215.12.0/22 maxlen: 24 185.216.240.0/22 maxlen: 24 185.219.204.0/22 maxlen: 24 185.229.160.0/22 maxlen: 24 185.238.4.0/22 maxlen: 24 185.251.160.0/22 maxlen: 24 194.29.74.0/23 maxlen: 24 194.38.32.0/22 maxlen: 24 194.147.0.0/22 maxlen: 24 2a03:4980::/32 maxlen: 32 2a03:4980::/40 maxlen: 40 2a03:4980:100::/40 maxlen: 40 2a03:4980:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 07:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:17:5a:dd:6b:67:2e:e5:7a:0d:97:35:f5:a9:86:28:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827 Validity Not Before: Dec 13 10:56:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=13071983ebd39fdd3fd29d5973d61eb8518f0181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a9:e8:d9:ef:08:94:49:9a:7c:ba:cf:a0:d9: ad:e9:20:a6:04:ce:0a:97:22:f5:21:df:5b:00:5a: fb:4c:f0:50:91:79:2c:df:13:9c:75:a7:f0:33:29: cc:40:fb:8a:3b:d9:89:63:71:b8:56:00:a6:7f:e2: b1:10:05:f3:bb:e5:58:59:c2:34:51:10:ec:fa:e8: 6e:d5:a3:73:0d:22:1b:69:e0:de:3a:ff:79:85:af: 87:14:8a:a4:6e:d9:ec:5a:e5:04:a8:20:cb:81:ac: b1:26:2a:7a:79:37:5f:b5:6a:69:65:42:18:d1:5a: 36:fd:15:d8:7d:a8:dc:22:7d:41:99:a5:19:da:8c: 97:3e:20:fa:fe:71:18:0d:58:fc:63:27:4b:94:b9: 81:d1:ac:10:d7:ed:32:59:a6:ef:a8:df:d5:5c:46: d0:da:c5:99:b7:e6:59:a2:99:d8:0a:57:72:45:e5: 70:df:16:3c:5c:de:83:8a:7b:87:63:08:6f:52:6b: 64:6b:2a:17:c7:22:7a:43:c0:1e:1d:76:5e:1c:88: 30:89:78:47:1d:0f:0c:1c:1c:dd:25:3c:a7:fc:33: e0:16:e9:af:99:eb:a4:fb:b2:3e:f8:a5:08:72:d5: 7e:e3:17:b4:a9:3e:77:c0:f7:5b:6d:90:6a:f1:8a: 52:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:07:19:83:EB:D3:9F:DD:3F:D2:9D:59:73:D6:1E:B8:51:8F:01:81 X509v3 Authority Key Identifier: keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/EwcZg-vTn90_0p1Zc9YeuFGPAYE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.236.0/22 45.15.60.0/22 45.83.228.0/22 81.28.192.0/20 83.243.124.0/22 92.118.96.0/22 171.22.0.0/22 178.250.208.0/21 185.4.76.0/22 185.45.32.0/22 185.66.100.0/22 185.73.232.0/22 185.164.232.0/22 185.200.200.0/22 185.202.60.0/22 185.207.80.0/22 185.215.12.0/22 185.216.240.0/22 185.219.204.0/22 185.229.160.0/22 185.238.4.0/22 185.251.160.0/22 194.29.74.0/23 194.38.32.0/22 194.147.0.0/22 IPv6: 2a03:4980::/32 Signature Algorithm: sha256WithRSAEncryption 27:9b:69:d3:59:da:4d:0c:2c:24:15:b6:b1:be:53:2e:f4:45: 5f:41:5c:a3:8d:00:7f:b7:ac:ad:27:9c:87:a8:e9:12:bc:94: 97:36:00:99:5a:a1:1b:ab:32:08:9c:87:40:7e:b8:3a:db:8e: 2b:b8:30:25:e6:17:ff:2d:a5:18:b6:ec:b0:63:ae:37:3e:07: 3c:7b:a3:cb:08:b4:78:7a:7d:7b:35:99:15:56:e7:32:49:a2: 94:52:fa:54:f0:ce:65:ea:ae:46:73:01:36:18:56:30:ba:46: 08:ab:94:23:83:c6:65:fc:e0:1c:33:0b:0e:78:ec:d0:ad:2b: 02:72:4a:85:2e:5d:fc:5e:0a:aa:ef:51:74:00:b0:74:47:ca: 25:15:6a:cd:c8:db:63:ab:79:33:1f:1d:6d:d1:9b:1a:2d:b9: 53:ad:ff:d9:89:c5:df:81:95:03:bc:0a:5a:be:97:e3:bf:bf: 7a:5d:5b:3b:2e:3e:38:41:dd:f6:de:79:2e:42:ce:8d:44:86: 99:f1:09:14:a5:b9:2c:4f:9e:75:79:d6:ab:5e:79:ed:9f:ce: a8:e7:e4:4d:8a:70:13:ed:49:d8:b8:42:ad:1d:b6:a9:b4:4b: e5:f0:3a:b4:55:ab:00:6a:18:06:9d:08:78:7e:52:96:8c:9c: d3:1c:d6:c7 -----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgISAZsXWt1rZy7leg2XNfWphigGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYjVlNWU2MDFjYmY1ZDE5ZDEwZDRkYjQ3NmE5MjNiM2Iz NmY4MjcwHhcNMjUxMjEzMTA1NjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzA3MTk4M2ViZDM5ZmRkM2ZkMjlkNTk3M2Q2MWViODUxOGYwMTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Kno2e8IlEmafLrPoNmt6SCmBM4K lyL1Id9bAFr7TPBQkXks3xOcdafwMynMQPuKO9mJY3G4VgCmf+KxEAXzu+VYWcI0 URDs+uhu1aNzDSIbaeDeOv95ha+HFIqkbtnsWuUEqCDLgayxJip6eTdftWppZUIY 0Vo2/RXYfajcIn1BmaUZ2oyXPiD6/nEYDVj8YydLlLmB0awQ1+0yWabvqN/VXEbQ 2sWZt+ZZopnYCldyReVw3xY8XN6DinuHYwhvUmtkayoXxyJ6Q8AeHXZeHIgwiXhH HQ8MHBzdJTyn/DPgFumvmeuk+7I++KUIctV+4xe0qT53wPdbbZBq8YpS3wIDAQAB o4ICrTCCAqkwHQYDVR0OBBYEFBMHGYPr05/dP9KdWXPWHrhRjwGBMB8GA1UdIwQY MBaAFLq15eYBy/XRnRDU20dqkjs7NvgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wMGRmMjktNTAyMi00MDVlLTg5NWQt NzdjYTg5Y2Y0MzZhLzEvRXdjWmctdlRuOTBfMHAxWmM5WWV1RkdQQVlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy8wMGRmMjktNTAyMi00MDVlLTg5NWQtNzdjYTg5Y2Y0MzZh LzEvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHCBggrBgEFBQcBBwEB/wSBsjCBrzCBnQQCAAEwgZYDBAIC O+wDBAItDzwDBAItU+QDBARRHMADBAJT83wDBAJcdmADBAKrFgADBAOy+tADBAK5 BEwDBAK5LSADBAK5QmQDBAK5SegDBAK5pOgDBAK5yMgDBAK5yjwDBAK5z1ADBAK5 1wwDBAK52PADBAK528wDBAK55aADBAK57gQDBAK5+6ADBAHCHUoDBALCJiADBALC kwAwDQQCAAIwBwMFACoDSYAwDQYJKoZIhvcNAQELBQADggEBACebadNZ2k0MLCQV trG+Uy70RV9BXKONAH+3rK0nnIeo6RK8lJc2AJlaoRurMgich0B+uDrbjiu4MCXm F/8tpRi27LBjrjc+Bzx7o8sItHh6fXs1mRVW5zJJopRS+lTwzmXqrkZzATYYVjC6 RgirlCODxmX84BwzCw547NCtKwJySoUuXfxeCqrvUXQAsHRHyiUVas3I22OreTMf HW3RmxotuVOt/9mJxd+BlQO8Clq+l+O/v3pdWzsuPjhB3fbeeS5Czo1EhpnxCRSl uSxPnnV51qteee2fzqjn5E2KcBPtSdi4Qq0dtqm0S+XwOrRVqwBqGAadCHh+UpaM nNMc1sc= -----END CERTIFICATE-----Generated at Mon Dec 15 17:22:00 2025 by rpki-client