This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/Ee-a8j6XhNZCNFgfVRs92gY6WdI.roa File: Ee-a8j6XhNZCNFgfVRs92gY6WdI.roa (raw, json) Hash identifier: iwMpY36khSGjNTrmpB2B0AqQ83qJVqJRDA0DSjAiZW0= Subject key identifier: 11:EF:9A:F2:3E:97:84:D6:42:34:58:1F:55:1B:3D:DA:06:3A:59:D2 Certificate issuer: /CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9 Certificate serial: 019AD8C3971B799C1E481B09ACEDC31CCEE8 Authority key identifier: 8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/Ee-a8j6XhNZCNFgfVRs92gY6WdI.roa Signing time: Mon 01 Dec 2025 07:14:48 +0000 ROA not before: Mon 01 Dec 2025 07:14:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 12324 IP address blocks: 5.201.0.0/17 maxlen: 17 87.246.192.0/19 maxlen: 19 87.246.240.0/20 maxlen: 20 185.76.104.0/22 maxlen: 22 212.182.0.0/18 maxlen: 18 212.182.64.0/20 maxlen: 20 2a04:440::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.mft rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d8:c3:97:1b:79:9c:1e:48:1b:09:ac:ed:c3:1c:ce:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d4f3f8ba7dcf5894f2f611d7dfab53d4a63c0a9 Validity Not Before: Dec 1 07:14:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=11ef9af23e9784d64234581f551b3dda063a59d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7b:36:5b:e1:b6:f0:87:ce:1c:11:bd:21:80: 66:15:f6:18:27:53:83:54:6c:de:fa:d4:41:0f:c6: 1f:14:6e:d4:ec:f9:f2:21:63:1c:44:26:b0:5e:99: 4a:92:ec:fe:25:40:18:3b:d3:1a:d4:e5:5e:56:75: 86:84:ca:46:34:40:d9:13:ee:30:64:8a:a3:17:a3: 4b:c4:05:49:98:5a:98:9c:62:e1:08:8f:23:d2:7d: 1c:89:4e:30:e5:a8:ba:4d:4c:e6:44:b0:3f:97:ae: 66:57:c1:85:fc:b1:8e:6e:cc:cf:99:30:94:ab:50: b0:f0:ad:ec:9d:c6:90:f9:67:41:86:53:76:d9:3f: 52:97:6f:5f:74:5e:66:93:f9:91:c7:dc:91:40:b9: 0f:02:66:d5:ed:15:17:d7:a1:3f:67:e5:91:b2:c9: bf:5e:d6:4e:db:2c:e7:46:6a:fe:6e:30:f0:ab:bb: 76:e2:bf:6b:fd:ed:a5:60:8a:4f:a7:c9:60:95:71: 14:41:cb:c8:ef:cc:49:98:30:b7:d3:55:5c:aa:27: 34:ed:25:13:32:43:6f:e8:68:0b:e9:a9:07:e1:05: ac:8e:c6:09:8a:5e:7e:4e:1e:ce:fe:50:44:a3:ab: 0f:f6:0d:80:f9:eb:1d:01:b6:14:35:d3:f0:b7:23: 1f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:EF:9A:F2:3E:97:84:D6:42:34:58:1F:55:1B:3D:DA:06:3A:59:D2 X509v3 Authority Key Identifier: keyid:8D:4F:3F:8B:A7:DC:F5:89:4F:2F:61:1D:7D:FA:B5:3D:4A:63:C0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU8_i6fc9YlPL2Edffq1PUpjwKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/Ee-a8j6XhNZCNFgfVRs92gY6WdI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55229c-e282-4a85-b7a4-8acbfea2ecfa/1/jU8_i6fc9YlPL2Edffq1PUpjwKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.201.0.0/17 87.246.192.0/19 87.246.240.0/20 185.76.104.0/22 212.182.0.0-212.182.79.255 IPv6: 2a04:440::/32 Signature Algorithm: sha256WithRSAEncryption c8:39:38:68:0e:76:3a:e5:55:0e:c9:94:6e:5f:71:04:99:03: ff:d8:94:1b:be:63:3a:d8:36:99:f0:64:5f:de:10:6d:09:b3: 97:e9:59:ce:6b:c7:c5:41:79:0b:f9:35:58:c1:86:fc:58:ae: 49:1a:68:d0:87:9b:1e:56:27:66:e5:ec:30:9c:06:99:81:46: 71:c6:52:cd:6b:37:ed:28:d6:07:91:fd:4d:1e:9a:1c:6a:f5: cc:bc:6f:3c:bb:aa:d3:16:e1:41:45:ea:a2:44:5f:fa:05:6d: cc:06:bc:a5:9d:23:2c:bf:3e:e3:43:a1:2f:8c:49:a9:9c:ac: a6:22:92:e3:ca:56:3c:5a:1f:b9:8c:bd:2b:fa:73:cc:b0:ac: b6:5b:c3:5c:74:40:93:1b:84:db:61:d1:7f:5f:7f:f6:17:c5: fa:00:bf:fb:8e:fb:64:72:3b:6d:4c:0a:0f:55:f4:2b:0b:c0: 7e:bd:62:d4:61:e9:38:db:02:59:57:a0:49:2e:e5:e4:2d:ee: a1:0e:53:e8:79:a1:0f:4c:16:72:a7:28:7e:ad:64:ef:5d:b7: a2:99:0b:09:54:2e:bb:62:d6:1d:0f:5b:99:25:39:66:31:72: 51:1d:ed:e5:82:fb:08:ae:fc:07:93:2a:4b:65:70:8a:c7:f7: 7e:59:80:c3 -----BEGIN CERTIFICATE----- MIIFKzCCBBOgAwIBAgISAZrYw5cbeZweSBsJrO3DHM7oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNGYzZjhiYTdkY2Y1ODk0ZjJmNjExZDdkZmFiNTNkNGE2 M2MwYTkwHhcNMjUxMjAxMDcxNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWVmOWFmMjNlOTc4NGQ2NDIzNDU4MWY1NTFiM2RkYTA2M2E1OWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Xs2W+G28IfOHBG9IYBmFfYYJ1OD VGze+tRBD8YfFG7U7PnyIWMcRCawXplKkuz+JUAYO9Ma1OVeVnWGhMpGNEDZE+4w ZIqjF6NLxAVJmFqYnGLhCI8j0n0ciU4w5ai6TUzmRLA/l65mV8GF/LGObszPmTCU q1Cw8K3sncaQ+WdBhlN22T9Sl29fdF5mk/mRx9yRQLkPAmbV7RUX16E/Z+WRssm/ XtZO2yznRmr+bjDwq7t24r9r/e2lYIpPp8lglXEUQcvI78xJmDC301Vcqic07SUT MkNv6GgL6akH4QWsjsYJil5+Th7O/lBEo6sP9g2A+esdAbYUNdPwtyMf1wIDAQAB o4ICNzCCAjMwHQYDVR0OBBYEFBHvmvI+l4TWQjRYH1UbPdoGOlnSMB8GA1UdIwQY MBaAFI1PP4un3PWJTy9hHX36tT1KY8CpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy81NTIyOWMtZTI4Mi00YTg1LWI3YTQt OGFjYmZlYTJlY2ZhLzEvRWUtYThqNlhoTlpDTkZnZlZSczkyZ1k2V2RJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy81NTIyOWMtZTI4Mi00YTg1LWI3YTQtOGFjYmZlYTJlY2Zh LzEvalU4X2k2ZmM5WWxQTDJFZGZmcTFQVXBqd0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDArBAIAATAlAwQHBckAAwQF V/bAAwQEV/bwAwQCuUxoMAsDAwHUtgMEBNS2QDANBAIAAjAHAwUAKgQEQDANBgkq hkiG9w0BAQsFAAOCAQEAyDk4aA52OuVVDsmUbl9xBJkD/9iUG75jOtg2mfBkX94Q bQmzl+lZzmvHxUF5C/k1WMGG/FiuSRpo0IebHlYnZuXsMJwGmYFGccZSzWs37SjW B5H9TR6aHGr1zLxvPLuq0xbhQUXqokRf+gVtzAa8pZ0jLL8+40OhL4xJqZyspiKS 48pWPFofuYy9K/pzzLCstlvDXHRAkxuE22HRf19/9hfF+gC/+477ZHI7bUwKD1X0 KwvAfr1i1GHpONsCWVegSS7l5C3uoQ5T6HmhD0wWcqcofq1k7123opkLCVQuu2LW HQ9bmSU5ZjFyUR3t5YL7CK78B5MqS2Vwisf3flmAww== -----END CERTIFICATE-----Generated at Sat Dec 6 21:29:48 2025 by rpki-client