This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/lEEyuAddblYNTeWx211i0OkHLwc.roa File: lEEyuAddblYNTeWx211i0OkHLwc.roa (raw, json) Hash identifier: xrs17fe1+/VBDSqf3ILWe0WvYIKh2Ut8uQHgq7w6B3M= Subject key identifier: 94:41:32:B8:07:5D:6E:56:0D:4D:E5:B1:DB:5D:62:D0:E9:07:2F:07 Certificate issuer: /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3 Certificate serial: 019AC28DABAE2682A350017D54F1A4BE294E Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/lEEyuAddblYNTeWx211i0OkHLwc.roa Signing time: Wed 26 Nov 2025 23:44:15 +0000 ROA not before: Wed 26 Nov 2025 23:44:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202261 IP address blocks: 194.147.136.0/24 maxlen: 24 194.147.137.0/24 maxlen: 24 2a07:e480::/48 maxlen: 48 2a07:e480:100::/48 maxlen: 48 2a07:e480:aaa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c2:8d:ab:ae:26:82:a3:50:01:7d:54:f1:a4:be:29:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3 Validity Not Before: Nov 26 23:44:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=944132b8075d6e560d4de5b1db5d62d0e9072f07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6b:79:de:a0:17:59:39:da:47:7e:0e:43:9a: ea:f7:dc:58:14:f8:a8:d1:0b:7e:cb:ce:37:50:fb: a0:5a:cd:6c:2a:cd:d0:a8:64:8b:b6:ce:fa:bb:ff: 05:bb:5e:a2:b6:6f:61:4c:83:69:f4:c4:2a:fb:f4: 20:74:7a:25:9e:49:0e:44:72:f7:a9:c5:75:fe:75: f6:5b:00:5c:f3:09:15:66:2e:50:10:e9:18:47:78: 9c:e5:f7:1f:3e:63:15:94:c5:5d:ab:16:13:ec:9a: e1:7a:5a:40:b6:00:ca:24:3c:c0:59:25:02:4d:c6: b2:31:f0:36:6a:87:19:ab:54:be:a3:f4:02:43:f9: d3:59:f5:40:39:23:55:20:9b:af:a4:5d:fd:cb:62: d9:be:d4:df:46:67:1d:22:b4:da:c0:30:c7:05:e3: bd:de:f2:f2:c6:fd:3c:10:c7:8d:26:50:40:fd:7a: 6e:af:53:4e:5a:7d:7e:f8:e5:7f:fc:d0:86:fb:b7: 02:57:a5:03:d2:46:c2:5d:b4:6b:0d:71:15:52:4e: 90:02:82:04:ae:f7:25:de:37:de:63:5e:f7:c8:8d: 30:73:bb:38:14:06:8d:ba:47:0a:26:59:43:02:dc: c8:2e:37:81:a2:7b:98:ab:d7:2a:28:9f:c2:62:d9: a3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:41:32:B8:07:5D:6E:56:0D:4D:E5:B1:DB:5D:62:D0:E9:07:2F:07 X509v3 Authority Key Identifier: keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/lEEyuAddblYNTeWx211i0OkHLwc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.147.136.0/23 IPv6: 2a07:e480::/48 2a07:e480:100::/48 2a07:e480:aaa::/48 Signature Algorithm: sha256WithRSAEncryption 2c:49:52:38:c1:af:ff:b9:73:4c:3d:e7:df:7a:6b:69:59:0f: 3e:0d:c4:84:b9:dc:ee:dd:05:9a:5e:99:c1:f3:f0:b3:f1:46: 48:83:d9:09:90:57:5a:56:b0:75:42:31:ae:64:e3:2e:56:4d: 3d:a8:db:4d:de:8d:c4:40:64:e5:9e:83:85:0b:6c:94:5d:a1: 7f:d1:0e:d9:39:cf:73:16:dc:ec:73:81:ab:18:ab:b4:e5:1c: 1c:4a:70:f9:a0:de:f0:88:f4:47:15:c2:41:46:a9:6d:6d:0f: 77:b5:19:a5:a7:e8:fe:6a:4e:76:0d:4e:31:f2:fd:87:74:65: 7c:e7:6c:81:d6:2b:ed:8d:a0:fa:84:47:46:4d:ca:98:6e:a2: 79:72:ec:28:0d:0f:7b:a7:7a:2f:91:b9:fb:4e:60:e6:99:33: 41:51:ed:fa:1f:52:fd:cb:65:73:d0:51:07:9c:14:e5:30:2b: 15:d7:87:37:ce:45:31:7e:0a:0a:ee:7b:50:13:bf:58:5c:d0: c0:90:63:71:1a:c9:29:17:79:98:cb:77:05:73:0b:be:ce:6b: a0:ff:b7:d6:21:ec:31:8b:c0:3c:b8:04:dc:0d:cb:ee:94:65: b6:07:01:51:34:92:27:aa:02:86:34:14:ee:31:72:a4:88:6d: 33:8e:cb:61 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZrCjauuJoKjUAF9VPGkvilOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZDM2YTIxZTliMzY4ZDc0OGJhYjhjNzdiZWJkZGUyYzIy N2M2YzMwHhcNMjUxMTI2MjM0NDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDQxMzJiODA3NWQ2ZTU2MGQ0ZGU1YjFkYjVkNjJkMGU5MDcyZjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2t53qAXWTnaR34OQ5rq99xYFPio 0Qt+y843UPugWs1sKs3QqGSLts76u/8Fu16itm9hTINp9MQq+/QgdHolnkkORHL3 qcV1/nX2WwBc8wkVZi5QEOkYR3ic5fcfPmMVlMVdqxYT7JrhelpAtgDKJDzAWSUC TcayMfA2aocZq1S+o/QCQ/nTWfVAOSNVIJuvpF39y2LZvtTfRmcdIrTawDDHBeO9 3vLyxv08EMeNJlBA/Xpur1NOWn1++OV//NCG+7cCV6UD0kbCXbRrDXEVUk6QAoIE rvcl3jfeY173yI0wc7s4FAaNukcKJllDAtzILjeBonuYq9cqKJ/CYtmjVwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFJRBMrgHXW5WDU3lsdtdYtDpBy8HMB8GA1UdIwQY MBaAFFnTaiHps2jXSLq4x3vr3eLCJ8bDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS83YTdkYzEtZTE2OC00ZDQ3LWI0NmQt NDBlYTgwODkyZjAzLzEvbEVFeXVBZGRibFlOVGVXeDIxMWkwT2tITHdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS83YTdkYzEtZTE2OC00ZDQ3LWI0NmQtNDBlYTgwODkyZjAz LzEvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQBwpOIMCEE AgACMBsDBwAqB+SAAAADBwAqB+SAAQADBwAqB+SACqowDQYJKoZIhvcNAQELBQAD ggEBACxJUjjBr/+5c0w95996a2lZDz4NxIS53O7dBZpemcHz8LPxRkiD2QmQV1pW sHVCMa5k4y5WTT2o203ejcRAZOWeg4ULbJRdoX/RDtk5z3MW3OxzgasYq7TlHBxK cPmg3vCI9EcVwkFGqW1tD3e1GaWn6P5qTnYNTjHy/Yd0ZXznbIHWK+2NoPqER0ZN yphuonly7CgND3unei+RuftOYOaZM0FR7fofUv3LZXPQUQecFOUwKxXXhzfORTF+ Cgrue1ATv1hc0MCQY3EaySkXeZjLdwVzC77Oa6D/t9Yh7DGLwDy4BNwNy+6UZbYH AVE0kieqAoY0FO4xcqSIbTOOy2E= -----END CERTIFICATE-----Generated at Sat Dec 6 22:12:41 2025 by rpki-client