This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/AKuegXjKXAcF15mDuSJfD_t3Zbs.roa File: AKuegXjKXAcF15mDuSJfD_t3Zbs.roa (raw, json) Hash identifier: T+ejm6R1EP5zKos1L7KItkstRNeEKi9ZwovLco39PBg= Subject key identifier: 00:AB:9E:81:78:CA:5C:07:05:D7:99:83:B9:22:5F:0F:FB:77:65:BB Certificate issuer: /CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb Certificate serial: 019A83380505127DE6E648E2A1B14D9B9009 Authority key identifier: 7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/AKuegXjKXAcF15mDuSJfD_t3Zbs.roa Signing time: Fri 14 Nov 2025 16:34:37 +0000 ROA not before: Fri 14 Nov 2025 16:34:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 8069 IP address blocks: 145.190.0.0/23 maxlen: 23 145.190.2.0/24 maxlen: 24 145.190.3.0/24 maxlen: 24 145.190.4.0/23 maxlen: 23 145.190.6.0/24 maxlen: 24 145.190.7.0/24 maxlen: 24 145.190.8.0/21 maxlen: 21 145.190.16.0/21 maxlen: 21 145.190.24.0/21 maxlen: 21 145.190.32.0/22 maxlen: 22 145.190.36.0/24 maxlen: 24 145.190.37.0/24 maxlen: 24 145.190.38.0/23 maxlen: 23 145.190.40.0/23 maxlen: 23 145.190.42.0/24 maxlen: 24 145.190.43.0/24 maxlen: 24 145.190.44.0/22 maxlen: 22 145.190.48.0/22 maxlen: 22 145.190.52.0/23 maxlen: 23 145.190.54.0/24 maxlen: 24 145.190.55.0/24 maxlen: 24 145.190.56.0/23 maxlen: 23 145.190.58.0/24 maxlen: 24 145.190.59.0/24 maxlen: 24 145.190.60.0/24 maxlen: 24 145.190.61.0/24 maxlen: 24 145.190.62.0/24 maxlen: 24 145.190.63.0/24 maxlen: 24 145.190.64.0/24 maxlen: 24 145.190.65.0/24 maxlen: 24 145.190.66.0/24 maxlen: 24 145.190.67.0/24 maxlen: 24 145.190.128.0/24 maxlen: 24 145.190.129.0/24 maxlen: 24 145.190.130.0/24 maxlen: 24 145.190.131.0/24 maxlen: 24 145.190.132.0/24 maxlen: 24 145.190.133.0/24 maxlen: 24 145.190.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.mft rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:83:38:05:05:12:7d:e6:e6:48:e2:a1:b1:4d:9b:90:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ce68daf5f089456c0e1d02245393531ac5b8fcb Validity Not Before: Nov 14 16:34:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=00ab9e8178ca5c0705d79983b9225f0ffb7765bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:12:7e:fe:9b:c4:7d:7e:62:05:db:ac:59:10: 07:0c:9e:d1:95:7a:12:2e:fb:47:4e:62:03:ed:60: 50:56:f2:e5:41:5b:47:8b:48:83:8f:11:47:26:ac: 28:6e:c4:52:7d:34:38:8a:b9:03:10:27:d2:83:6e: 08:e4:b5:da:35:a2:71:d7:f9:de:d9:3a:1a:6b:39: b5:40:3b:85:5d:c1:16:c2:c4:ff:1d:c1:62:b1:f5: 00:97:6c:03:bc:3b:c1:6e:01:b3:b5:2c:6c:c4:1b: 4d:c4:f4:f3:ba:00:de:a3:74:fb:63:34:ca:4d:b9: 2e:fb:dc:56:40:04:79:94:ed:30:40:c7:58:85:27: 51:55:c6:85:01:ee:18:31:d8:84:d2:8e:96:e6:90: f1:4d:30:0b:8a:3c:0f:38:66:b6:d9:7f:58:ac:ae: 82:08:76:3f:d1:48:c5:57:02:99:3d:76:78:86:c8: e3:0b:fa:84:98:e8:aa:7d:a0:22:ee:de:27:96:cd: 26:f4:d1:c2:f0:a1:a0:10:ed:d2:da:60:77:1f:16: 38:09:14:53:2b:0f:08:8c:6b:3d:fe:07:8b:b1:9b: 0c:0d:9f:d6:82:7e:2c:a7:48:f2:7d:69:e5:13:a1: 10:25:72:74:33:82:d4:f6:f8:fb:98:c7:ae:e2:62: 40:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:AB:9E:81:78:CA:5C:07:05:D7:99:83:B9:22:5F:0F:FB:77:65:BB X509v3 Authority Key Identifier: keyid:7C:E6:8D:AF:5F:08:94:56:C0:E1:D0:22:45:39:35:31:AC:5B:8F:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fOaNr18IlFbA4dAiRTk1Maxbj8s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/AKuegXjKXAcF15mDuSJfD_t3Zbs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ec0b89-1e68-45a0-8b93-13a06a269aa8/1/fOaNr18IlFbA4dAiRTk1Maxbj8s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 145.190.0.0-145.190.67.255 145.190.128.0-145.190.134.255 Signature Algorithm: sha256WithRSAEncryption 94:ff:83:e3:ac:26:0b:59:1d:38:26:db:57:77:f0:99:82:9a: a2:28:b2:bb:2e:b2:13:3b:29:74:32:b2:4d:f4:53:3e:94:60: a7:e9:70:fd:ac:b7:58:8a:c3:27:87:6f:ae:82:67:cd:f3:c5: 0e:18:01:d6:55:5d:2a:39:88:55:df:d6:c4:10:7f:60:76:cf: 14:27:2a:4f:a0:53:90:2a:bb:38:26:de:5e:5a:c6:0a:06:8d: 6f:ce:00:52:86:0e:18:01:82:67:c7:38:44:da:fe:79:05:e9: a2:4c:47:00:d4:71:c0:69:98:de:8c:b7:b2:37:26:2f:91:c0: a5:db:1a:8f:c9:b5:ef:74:5e:b6:c7:bd:7a:ac:02:60:69:a0: 0f:a6:21:b7:b1:1a:b5:b7:f2:fd:a3:28:f7:5e:7b:14:7e:c0: 20:df:e0:31:c7:a9:80:70:c9:7e:10:d5:09:d7:f7:86:6a:ab: 3d:e9:e7:ce:35:6b:51:2f:d3:35:d4:cd:fd:fe:a5:a0:6e:8a: 4c:e7:c4:6e:35:2b:aa:07:03:e8:8a:e7:a7:49:96:da:b5:b9: 85:0d:52:ea:74:90:3c:dc:28:68:3b:24:e4:13:42:e3:a2:60: f6:c1:92:1c:3b:49:b8:4d:80:3d:d1:b6:b3:8a:6d:c5:6b:9b: da:7d:48:21 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZqDOAUFEn3m5kjiobFNm5AJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjZTY4ZGFmNWYwODk0NTZjMGUxZDAyMjQ1MzkzNTMxYWM1 YjhmY2IwHhcNMjUxMTE0MTYzNDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMGFiOWU4MTc4Y2E1YzA3MDVkNzk5ODNiOTIyNWYwZmZiNzc2NWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRJ+/pvEfX5iBdusWRAHDJ7RlXoS LvtHTmID7WBQVvLlQVtHi0iDjxFHJqwobsRSfTQ4irkDECfSg24I5LXaNaJx1/ne 2Toaazm1QDuFXcEWwsT/HcFisfUAl2wDvDvBbgGztSxsxBtNxPTzugDeo3T7YzTK Tbku+9xWQAR5lO0wQMdYhSdRVcaFAe4YMdiE0o6W5pDxTTALijwPOGa22X9YrK6C CHY/0UjFVwKZPXZ4hsjjC/qEmOiqfaAi7t4nls0m9NHC8KGgEO3S2mB3HxY4CRRT Kw8IjGs9/geLsZsMDZ/Wgn4sp0jyfWnlE6EQJXJ0M4LU9vj7mMeu4mJA8wIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFACrnoF4ylwHBdeZg7kiXw/7d2W7MB8GA1UdIwQY MBaAFHzmja9fCJRWwOHQIkU5NTGsW4/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMt MTNhMDZhMjY5YWE4LzEvQUt1ZWdYaktYQWNGMTVtRHVTSmZEX3QzWmJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lYzBiODktMWU2OC00NWEwLThiOTMtMTNhMDZhMjY5YWE4 LzEvZk9hTnIxOElsRmJBNGRBaVJUazFNYXhiajhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAATAbMAsDAwGRvgME ApG+QDAMAwQHkb6AAwQAkb6GMA0GCSqGSIb3DQEBCwUAA4IBAQCU/4PjrCYLWR04 JttXd/CZgpqiKLK7LrITOyl0MrJN9FM+lGCn6XD9rLdYisMnh2+ugmfN88UOGAHW VV0qOYhV39bEEH9gds8UJypPoFOQKrs4Jt5eWsYKBo1vzgBShg4YAYJnxzhE2v55 BemiTEcA1HHAaZjejLeyNyYvkcCl2xqPybXvdF62x716rAJgaaAPpiG3sRq1t/L9 oyj3XnsUfsAg3+Axx6mAcMl+ENUJ1/eGaqs96efONWtRL9M11M39/qWgbopM58Ru NSuqBwPoiuenSZbatbmFDVLqdJA83ChoOyTkE0LjomD2wZIcO0m4TYA90bazim3F a5vafUgh -----END CERTIFICATE-----Generated at Sat Dec 6 09:49:21 2025 by rpki-client