This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/tXe_4_ppBEMShuWC1_ux2Wv0_rA.roa File: tXe_4_ppBEMShuWC1_ux2Wv0_rA.roa (raw, json) Hash identifier: 5YKzYNgLvCRZ1/ayk0NfwUpxgG4T6ghl4aeB8AUXLF0= Subject key identifier: B5:77:BF:E3:FA:69:04:43:12:86:E5:82:D7:FB:B1:D9:6B:F4:FE:B0 Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Certificate serial: 019ACB48FACA5C26321D831C4AAD4F7DE66B Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/tXe_4_ppBEMShuWC1_ux2Wv0_rA.roa Signing time: Fri 28 Nov 2025 16:25:48 +0000 ROA not before: Fri 28 Nov 2025 16:25:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205886 IP address blocks: 43.242.138.0/24 maxlen: 24 45.151.140.0/24 maxlen: 24 89.106.14.0/24 maxlen: 24 94.229.209.0/24 maxlen: 24 194.36.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:cb:48:fa:ca:5c:26:32:1d:83:1c:4a:ad:4f:7d:e6:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63 Validity Not Before: Nov 28 16:25:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b577bfe3fa6904431286e582d7fbb1d96bf4feb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bd:e3:29:dc:45:56:36:bf:fb:68:aa:23:93: 77:cc:44:22:27:5a:b4:21:31:92:e1:39:1c:30:7f: af:b9:7f:38:dd:d7:d1:bc:08:9c:90:5a:9f:e9:a5: 8e:bc:5f:7b:09:05:21:29:04:9e:73:ab:ef:34:50: 37:4c:48:cd:94:77:69:95:0a:7e:4b:d2:17:c9:2a: fd:df:b2:2d:cc:db:86:a0:79:e8:61:af:e5:05:a3: e8:b2:60:cf:74:6c:30:63:d0:06:45:c8:54:7d:e2: 25:f8:26:68:2e:13:2e:bc:25:2e:4e:83:3e:fb:44: 32:16:ee:fb:71:9e:20:44:60:31:af:58:eb:fa:8d: 0a:2e:98:10:3a:d2:3d:06:3d:d6:20:52:d3:d3:b3: 50:95:da:69:53:88:e1:94:9c:1f:59:3c:9d:8f:0a: d6:c6:8c:76:03:92:16:ed:0b:54:ef:dc:c8:c5:1a: 8d:22:de:23:d0:25:f4:46:f4:25:8a:b3:66:d5:25: cb:03:3b:c9:b1:4d:56:a1:66:5b:a1:2b:6f:15:f9: 3e:b0:ef:ef:77:db:54:70:b6:4e:ed:fd:e7:97:e1: 57:ba:7c:ee:e6:92:a5:a8:76:10:33:6c:47:42:38: 59:d2:9b:da:08:89:6d:b3:77:1b:bc:78:88:74:86: 60:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:77:BF:E3:FA:69:04:43:12:86:E5:82:D7:FB:B1:D9:6B:F4:FE:B0 X509v3 Authority Key Identifier: keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/tXe_4_ppBEMShuWC1_ux2Wv0_rA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.242.138.0/24 45.151.140.0/24 89.106.14.0/24 94.229.209.0/24 194.36.33.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:c2:d4:b3:c5:93:32:3c:6e:de:86:bc:47:29:b1:38:f6:e9: dd:bc:6f:91:de:37:5b:d6:63:81:5e:f1:1a:92:4a:23:44:c3: 8f:ed:3d:5d:02:f9:8a:9c:3d:06:06:65:7f:27:17:02:d0:59: 34:82:10:a9:0f:12:19:7a:18:ad:60:0f:07:90:1e:5f:f2:1e: a1:f8:64:3d:08:81:48:45:6c:70:e6:4b:21:3e:d9:02:2d:c6: 45:9e:71:b0:49:8b:e8:85:dc:50:64:90:d9:4f:53:ae:c4:4f: 7c:6a:69:04:8f:f4:82:7c:56:47:1d:3e:c1:28:cf:dd:01:52: a5:bc:43:5f:77:cf:14:57:7f:1f:64:d0:93:f6:9b:57:c6:36: b3:bf:a7:7f:55:c4:ce:9b:56:8d:22:56:ac:dc:66:31:5a:69: 1f:c5:cb:61:1f:37:d8:46:cd:72:ad:aa:b8:71:88:21:41:dc: 42:41:0e:d2:e0:c3:aa:2f:dd:e1:08:9d:70:7e:6c:fa:47:27: 72:a2:09:8f:d5:d9:c8:4d:fd:06:19:93:03:3a:fd:81:c0:26: 6d:7d:b4:6d:27:c2:6f:9a:81:1a:6d:9c:03:2e:53:01:2d:39: e1:22:53:02:28:01:93:02:b0:19:33:f3:60:4c:71:2f:94:b8: 82:98:65:a1 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZrLSPrKXCYyHYMcSq1PfeZrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlMWMzNDcyYzI1YWNkMzQ3MzY0YjdkNjMxMjYxOGFhMzUz MGNiNjMwHhcNMjUxMTI4MTYyNTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTc3YmZlM2ZhNjkwNDQzMTI4NmU1ODJkN2ZiYjFkOTZiZjRmZWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtr3jKdxFVja/+2iqI5N3zEQiJ1q0 ITGS4TkcMH+vuX843dfRvAickFqf6aWOvF97CQUhKQSec6vvNFA3TEjNlHdplQp+ S9IXySr937ItzNuGoHnoYa/lBaPosmDPdGwwY9AGRchUfeIl+CZoLhMuvCUuToM+ +0QyFu77cZ4gRGAxr1jr+o0KLpgQOtI9Bj3WIFLT07NQldppU4jhlJwfWTydjwrW xox2A5IW7QtU79zIxRqNIt4j0CX0RvQlirNm1SXLAzvJsU1WoWZboStvFfk+sO/v d9tUcLZO7f3nl+FXunzu5pKlqHYQM2xHQjhZ0pvaCIlts3cbvHiIdIZgdwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFLV3v+P6aQRDEoblgtf7sdlr9P6wMB8GA1UdIwQY MBaAFO4cNHLCWs00c2S31jEmGKo1MMtjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYt YjRiOGRiMjBiMWZiLzEvdFhlXzRfcHBCRU1TaHVXQzFfdXgyV3YwX3JBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi8xZmY0NGYtNTFkNi00NTQ1LWFkMzYtYjRiOGRiMjBiMWZi LzEvN2h3MGNzSmF6VFJ6WkxmV01TWVlxalV3eTJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAK/KKAwQA LZeMAwQAWWoOAwQAXuXRAwQAwiQhMA0GCSqGSIb3DQEBCwUAA4IBAQCbwtSzxZMy PG7ehrxHKbE49undvG+R3jdb1mOBXvEakkojRMOP7T1dAvmKnD0GBmV/JxcC0Fk0 ghCpDxIZehitYA8HkB5f8h6h+GQ9CIFIRWxw5kshPtkCLcZFnnGwSYvohdxQZJDZ T1OuxE98amkEj/SCfFZHHT7BKM/dAVKlvENfd88UV38fZNCT9ptXxjazv6d/VcTO m1aNIlas3GYxWmkfxcthHzfYRs1yraq4cYghQdxCQQ7S4MOqL93hCJ1wfmz6Rydy ogmP1dnITf0GGZMDOv2BwCZtfbRtJ8JvmoEabZwDLlMBLTnhIlMCKAGTArAZM/Ng THEvlLiCmGWh -----END CERTIFICATE-----Generated at Sat Dec 6 09:53:43 2025 by rpki-client