This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Q95GS2HwfQH12CLBeZfkL1Nbvug.roa File: Q95GS2HwfQH12CLBeZfkL1Nbvug.roa (raw, json) Hash identifier: sXueRyn3naR6948AKAgW4PeoFj7+9D/eqJH1BG+tv9A= Subject key identifier: 43:DE:46:4B:61:F0:7D:01:F5:D8:22:C1:79:97:E4:2F:53:5B:BE:E8 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019B7AC861651C4900981168C3D86814E586 Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Q95GS2HwfQH12CLBeZfkL1Nbvug.roa Signing time: Thu 01 Jan 2026 18:18:31 +0000 ROA not before: Thu 01 Jan 2026 18:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 14.102.226.0/24 maxlen: 24 14.102.232.0/24 maxlen: 24 85.208.11.0/24 maxlen: 24 94.229.214.0/24 maxlen: 24 94.229.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:61:65:1c:49:00:98:11:68:c3:d8:68:14:e5:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Jan 1 18:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43de464b61f07d01f5d822c17997e42f535bbee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:76:c0:12:a0:d7:1c:42:3f:74:fa:0d:fa:35: 8e:81:4d:7f:af:fb:51:74:02:ac:fa:72:fa:c2:ec: ed:a0:02:33:84:f6:5c:d1:bf:90:aa:cd:71:ae:82: 6a:de:90:c5:21:45:11:f9:97:a0:4f:59:10:9d:ed: 7e:97:64:83:eb:83:98:92:d2:70:9c:a3:74:10:75: ca:5b:a6:ba:fd:32:07:95:66:0a:ea:87:61:58:3e: 0d:44:cd:0c:92:ea:47:b8:d6:d8:d8:99:5d:4f:9e: 3c:47:11:5d:c7:03:7a:96:65:ea:7c:3c:75:14:f2: c1:f6:1a:a3:74:6b:76:51:b6:f6:3b:bf:01:98:3b: a9:58:c8:56:95:6f:b7:97:0d:af:72:4f:66:58:24: 98:f9:aa:2b:24:68:fd:c6:44:be:30:35:22:42:82: 27:b2:cf:3d:a2:23:e3:f0:73:95:ad:cb:f6:28:cd: 4a:5d:10:39:ed:3d:9a:91:43:8b:8f:c9:cc:dc:a0: 80:dc:01:da:85:75:da:db:ad:6b:3a:ed:0f:3f:09: 32:07:12:09:f7:c7:67:35:2c:62:6b:b1:2b:b5:54: dd:13:2f:bd:58:3a:8e:1c:98:2d:c5:86:a7:d3:4f: 75:5c:6e:c2:6a:30:43:6b:e5:08:5c:df:aa:da:91: a1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DE:46:4B:61:F0:7D:01:F5:D8:22:C1:79:97:E4:2F:53:5B:BE:E8 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Q95GS2HwfQH12CLBeZfkL1Nbvug.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.102.226.0/24 14.102.232.0/24 85.208.11.0/24 94.229.214.0/24 94.229.219.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:f4:63:8d:e4:5c:e5:95:84:80:51:42:9c:53:b2:4b:26:c9: 8f:4c:d6:e0:ca:fc:a4:75:51:2a:9b:45:9c:21:09:42:61:f4: 90:6b:fb:33:9e:ff:c4:3b:d1:30:f3:1a:d3:d9:e9:3e:5a:26: 67:93:c8:1b:15:bf:e7:16:3a:4e:56:8d:2c:b5:42:51:c1:a4: b0:33:55:c6:e9:bc:05:21:ec:38:f5:29:c0:b1:91:37:14:39: f7:1a:8f:7f:d1:0b:67:4e:35:b3:fb:a3:29:a9:ba:14:87:1b: 09:25:19:12:0a:23:37:bf:97:77:02:e5:a5:49:c4:62:c2:ff: 11:36:bd:58:3a:2e:37:3f:c9:af:ea:8d:39:bc:3d:75:4b:5b: 28:3e:8a:ce:06:da:71:7b:5a:45:27:20:af:f6:76:82:b3:94: d9:04:ca:0c:6a:07:3c:40:33:d8:79:cd:1d:28:9d:73:98:b0: 54:af:41:79:e3:1e:14:93:ed:ca:33:62:bb:2d:60:15:5a:b7: e6:14:52:2f:c2:a0:ef:49:ea:7a:02:d5:8b:6f:d8:ba:f6:f3: 9d:4f:02:3a:be:2f:19:38:d1:12:e5:5e:83:75:c5:35:26:56: 20:5d:88:48:68:a4:9c:e0:26:63:f0:97:95:d0:19:b8:26:06: ef:04:64:61 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt6yGFlHEkAmBFow9hoFOWGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjYwMTAxMTgxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2RlNDY0YjYxZjA3ZDAxZjVkODIyYzE3OTk3ZTQyZjUzNWJiZWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnbAEqDXHEI/dPoN+jWOgU1/r/tR dAKs+nL6wuztoAIzhPZc0b+Qqs1xroJq3pDFIUUR+ZegT1kQne1+l2SD64OYktJw nKN0EHXKW6a6/TIHlWYK6odhWD4NRM0MkupHuNbY2JldT548RxFdxwN6lmXqfDx1 FPLB9hqjdGt2Ubb2O78BmDupWMhWlW+3lw2vck9mWCSY+aorJGj9xkS+MDUiQoIn ss89oiPj8HOVrcv2KM1KXRA57T2akUOLj8nM3KCA3AHahXXa261rOu0PPwkyBxIJ 98dnNSxia7ErtVTdEy+9WDqOHJgtxYan0091XG7CajBDa+UIXN+q2pGhdwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFEPeRkth8H0B9dgiwXmX5C9TW77oMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvUTk1R1MySHdmUUgxMkNMQmVaZmtMMU5idnVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQADmbiAwQA DmboAwQAVdALAwQAXuXWAwQAXuXbMA0GCSqGSIb3DQEBCwUAA4IBAQB69GON5Fzl lYSAUUKcU7JLJsmPTNbgyvykdVEqm0WcIQlCYfSQa/sznv/EO9Ew8xrT2ek+WiZn k8gbFb/nFjpOVo0stUJRwaSwM1XG6bwFIew49SnAsZE3FDn3Go9/0QtnTjWz+6Mp qboUhxsJJRkSCiM3v5d3AuWlScRiwv8RNr1YOi43P8mv6o05vD11S1soPorOBtpx e1pFJyCv9naCs5TZBMoMagc8QDPYec0dKJ1zmLBUr0F54x4Uk+3KM2K7LWAVWrfm FFIvwqDvSep6AtWLb9i69vOdTwI6vi8ZONES5V6DdcU1JlYgXYhIaKSc4CZj8JeV 0Bm4JgbvBGRh -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:19 2026 by rpki-client