This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/OEvrke_fiQq2S5wkwHARU9mdBlU.roa File: OEvrke_fiQq2S5wkwHARU9mdBlU.roa (raw, json) Hash identifier: J0URbnqYeSEhRdlOcgePnD6AE/5ie4TM5KHbB6Wvml4= Subject key identifier: 38:4B:EB:91:EF:DF:89:0A:B6:4B:9C:24:C0:70:11:53:D9:9D:06:55 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B041D5541D4AD6ABC604BFF5051983D21 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/OEvrke_fiQq2S5wkwHARU9mdBlU.roa Signing time: Tue 09 Dec 2025 17:16:29 +0000 ROA not before: Tue 09 Dec 2025 17:16:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 14.102.226.0/23 maxlen: 24 45.151.141.0/24 maxlen: 24 45.151.143.0/24 maxlen: 24 74.112.152.0/22 maxlen: 24 77.111.96.0/22 maxlen: 22 77.111.102.0/23 maxlen: 24 77.111.105.0/24 maxlen: 24 89.106.16.0/24 maxlen: 24 89.106.18.0/24 maxlen: 24 89.106.21.0/24 maxlen: 24 89.106.22.0/24 maxlen: 24 89.106.23.0/24 maxlen: 24 94.229.208.0/24 maxlen: 24 94.229.213.0/24 maxlen: 24 94.229.222.0/24 maxlen: 24 94.229.223.0/24 maxlen: 24 103.41.44.0/23 maxlen: 24 103.47.59.0/24 maxlen: 24 205.237.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:04:1d:55:41:d4:ad:6a:bc:60:4b:ff:50:51:98:3d:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Dec 9 17:16:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=384beb91efdf890ab64b9c24c0701153d99d0655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:43:87:f9:d2:cf:7a:30:67:51:35:88:90:a1: 42:f6:13:46:af:43:99:12:e8:49:fd:a6:f3:98:f2: d9:19:a6:b2:5f:07:77:7e:ae:04:c8:42:86:51:41: 76:fc:8d:08:e0:56:f2:49:4d:6b:36:26:60:e3:b3: ae:13:f9:e1:5a:80:45:ae:37:71:83:6f:c1:ad:ae: 12:cd:c0:ee:a9:09:25:56:b9:54:0c:87:14:c2:ed: 73:c1:73:06:9a:2d:8d:90:8b:a2:25:be:dc:9e:ca: 91:71:06:44:a0:3a:d5:84:6f:ec:60:e3:e8:42:4e: 34:15:98:74:37:b9:66:f3:9b:37:ed:1c:dc:53:58: 5c:15:f9:4b:61:bb:54:ca:5c:0b:73:f0:d4:53:33: dd:f8:9d:dd:bc:a9:c5:65:ca:da:99:24:2f:78:fa: 11:24:ee:06:3b:2c:77:8b:9c:dc:8d:1f:22:0a:74: 87:28:e9:42:ee:a3:f5:22:71:89:71:1e:ef:a3:af: 31:ee:d3:88:15:f1:e1:1e:88:f6:1a:4f:cf:85:6a: 34:c4:28:49:2d:d6:ff:dc:b6:a1:73:13:43:59:00: 67:f2:61:46:20:f5:55:a5:ec:98:69:8b:aa:17:67: 2c:38:af:7d:df:b3:71:e1:67:fe:fa:05:de:4e:84: 92:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4B:EB:91:EF:DF:89:0A:B6:4B:9C:24:C0:70:11:53:D9:9D:06:55 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/OEvrke_fiQq2S5wkwHARU9mdBlU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.226.0/23 45.151.141.0/24 45.151.143.0/24 74.112.152.0/22 77.111.96.0/22 77.111.102.0/23 77.111.105.0/24 89.106.16.0/24 89.106.18.0/24 89.106.21.0-89.106.23.255 94.229.208.0/24 94.229.213.0/24 94.229.222.0/23 103.41.44.0/23 103.47.59.0/24 205.237.88.0/22 Signature Algorithm: sha256WithRSAEncryption 04:be:eb:83:95:b9:5e:07:1b:2e:cc:92:0a:49:29:42:1f:da: b6:a4:e1:ce:5e:ae:62:c2:4a:bb:ea:2e:8a:d8:bc:9e:bf:5f: 43:1c:ee:ea:b8:ac:4d:57:8d:66:c5:63:80:52:84:6b:65:ac: 84:4d:b6:21:46:a5:3b:ae:5d:39:29:7b:60:c8:5a:12:cd:cf: 71:15:c4:17:c2:a0:60:94:67:d2:7d:b6:4b:dc:13:12:24:33: ed:07:25:8e:eb:1c:30:3a:08:d8:d3:33:e5:fb:85:0f:65:ab: 3c:e3:c0:0b:a1:29:8e:e5:d7:8d:cd:f1:17:5f:e3:a5:51:70: 61:f1:31:22:71:ad:cf:e9:30:f3:e9:3d:be:c1:52:7d:97:a2: 62:c6:f5:2a:99:12:65:46:a2:16:7b:f2:a6:8b:58:78:19:3b: 56:ee:e0:60:69:02:2f:18:8f:c0:ed:22:e5:56:f9:f5:dd:0a: 83:3a:1c:2f:bf:77:62:5c:a2:1b:16:0a:b1:ed:95:70:de:72: 49:1c:d9:20:9f:97:ee:bd:7f:02:89:ff:a4:97:aa:00:90:0e: e5:71:92:5e:6e:65:fa:f0:2b:a0:c7:a5:13:46:55:ad:40:d3: 59:55:d9:29:56:2c:24:c4:0b:5b:7d:9b:8b:c6:c9:05:63:39: 83:fe:6f:2b -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgISAZsEHVVB1K1qvGBL/1BRmD0hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjUxMjA5MTcxNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODRiZWI5MWVmZGY4OTBhYjY0YjljMjRjMDcwMTE1M2Q5OWQwNjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArEOH+dLPejBnUTWIkKFC9hNGr0OZ EuhJ/abzmPLZGaayXwd3fq4EyEKGUUF2/I0I4FbySU1rNiZg47OuE/nhWoBFrjdx g2/Bra4SzcDuqQklVrlUDIcUwu1zwXMGmi2NkIuiJb7cnsqRcQZEoDrVhG/sYOPo Qk40FZh0N7lm85s37RzcU1hcFflLYbtUylwLc/DUUzPd+J3dvKnFZcramSQvePoR JO4GOyx3i5zcjR8iCnSHKOlC7qP1InGJcR7vo68x7tOIFfHhHoj2Gk/PhWo0xChJ Ldb/3LahcxNDWQBn8mFGIPVVpeyYaYuqF2csOK9937Nx4Wf++gXeToSSCQIDAQAB o4ICbDCCAmgwHQYDVR0OBBYEFDhL65Hv34kKtkucJMBwEVPZnQZVMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvT0V2cmtlX2ZpUXEyUzV3a3dIQVJVOW1kQmxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwbgQCAAEwaAMEAQ5m4gME AC2XjQMEAC2XjwMEAkpwmAMEAk1vYAMEAU1vZgMEAE1vaQMEAFlqEAMEAFlqEjAM AwQAWWoVAwQDWWoQAwQAXuXQAwQAXuXVAwQBXuXeAwQBZyksAwQAZy87AwQCze1Y MA0GCSqGSIb3DQEBCwUAA4IBAQAEvuuDlbleBxsuzJIKSSlCH9q2pOHOXq5iwkq7 6i6K2Lyev19DHO7quKxNV41mxWOAUoRrZayETbYhRqU7rl05KXtgyFoSzc9xFcQX wqBglGfSfbZL3BMSJDPtByWO6xwwOgjY0zPl+4UPZas848ALoSmO5deNzfEXX+Ol UXBh8TEica3P6TDz6T2+wVJ9l6JixvUqmRJlRqIWe/Kmi1h4GTtW7uBgaQIvGI/A 7SLlVvn13QqDOhwvv3diXKIbFgqx7ZVw3nJJHNkgn5fuvX8Cif+kl6oAkA7lcZJe bmX68Cugx6UTRlWtQNNZVdkpViwkxAtbfZuLxskFYzmD/m8r -----END CERTIFICATE-----Generated at Mon Dec 15 17:22:02 2025 by rpki-client