This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ePodhqJBcnjI8JUR1yfWdEm3JHM.roa File: ePodhqJBcnjI8JUR1yfWdEm3JHM.roa (raw, json) Hash identifier: vZczKOR1T9I7G5f4AmwrwUOwCu8reFGT2qrpAgtw+rA= Subject key identifier: 78:FA:1D:86:A2:41:72:78:C8:F0:95:11:D7:27:D6:74:49:B7:24:73 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B6EFD9CEF30D06A3499A56E5D099AC1EE Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ePodhqJBcnjI8JUR1yfWdEm3JHM.roa Signing time: Tue 30 Dec 2025 11:21:13 +0000 ROA not before: Tue 30 Dec 2025 11:21:13 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 0 IP address blocks: 45.66.228.0/24 maxlen: 24 45.66.231.0/24 maxlen: 24 45.89.247.0/24 maxlen: 24 45.141.158.0/24 maxlen: 24 81.161.238.0/24 maxlen: 24 83.219.99.0/24 maxlen: 24 85.217.130.0/23 maxlen: 24 87.120.87.0/24 maxlen: 24 87.120.126.0/24 maxlen: 24 87.120.166.0/24 maxlen: 24 87.121.60.0/23 maxlen: 23 87.121.132.0/22 maxlen: 24 87.121.165.0/24 maxlen: 24 91.92.67.0/24 maxlen: 24 91.92.248.0/21 maxlen: 24 92.119.196.0/23 maxlen: 24 92.249.50.0/24 maxlen: 24 93.123.109.0/24 maxlen: 24 185.222.160.0/24 maxlen: 24 193.25.216.0/24 maxlen: 24 194.31.222.0/24 maxlen: 24 194.55.186.0/24 maxlen: 24 194.169.175.0/24 maxlen: 24 212.73.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 05:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6e:fd:9c:ef:30:d0:6a:34:99:a5:6e:5d:09:9a:c1:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Dec 30 11:21:13 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=78fa1d86a2417278c8f09511d727d67449b72473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d6:58:61:ea:64:37:67:de:e7:e8:52:8a:a2: 00:59:b1:15:d2:94:ea:79:52:f8:a6:58:ce:ab:1b: 6a:1c:64:ce:4d:bd:84:78:24:87:c7:89:53:3a:94: 65:08:f1:15:18:cd:c6:6f:d2:5e:52:2b:7d:0c:5c: 22:bc:d9:a5:2d:b9:02:70:fb:8a:87:07:0a:83:48: 01:52:f5:a5:56:20:b4:ee:90:b9:66:b1:5b:06:fc: 76:7d:bb:5a:01:81:91:da:5d:c2:d0:07:d5:ef:e8: 7c:4b:e8:b9:bf:d8:1a:ed:94:a8:2a:ef:16:53:4d: 9a:f9:23:2e:fd:e4:58:70:2a:da:c1:d3:4e:a8:8d: 4d:b4:1d:8b:a9:8a:5b:c0:c8:de:2f:95:ee:82:c8: 5b:d5:d2:c8:07:64:9b:c8:a1:3e:98:88:72:fb:c6: db:c9:03:ef:00:8d:a0:e1:2c:2c:01:17:5c:f1:74: db:1d:30:19:9c:62:44:c5:a7:78:48:53:54:33:d0: 03:03:5d:d7:f7:3c:cd:c3:10:c8:6e:a0:b2:67:86: 58:c6:27:b2:4c:86:18:bd:1c:82:4f:3d:7c:a0:ca: 2f:96:62:5b:9d:31:7c:bd:db:f3:5c:98:1a:fe:c5: ed:47:58:a0:a7:c5:ae:66:bf:ed:ec:ea:ee:d5:02: 41:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:FA:1D:86:A2:41:72:78:C8:F0:95:11:D7:27:D6:74:49:B7:24:73 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/ePodhqJBcnjI8JUR1yfWdEm3JHM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.228.0/24 45.66.231.0/24 45.89.247.0/24 45.141.158.0/24 81.161.238.0/24 83.219.99.0/24 85.217.130.0/23 87.120.87.0/24 87.120.126.0/24 87.120.166.0/24 87.121.60.0/23 87.121.132.0/22 87.121.165.0/24 91.92.67.0/24 91.92.248.0/21 92.119.196.0/23 92.249.50.0/24 93.123.109.0/24 185.222.160.0/24 193.25.216.0/24 194.31.222.0/24 194.55.186.0/24 194.169.175.0/24 212.73.149.0/24 Signature Algorithm: sha256WithRSAEncryption a2:bf:e8:13:7d:71:07:c3:0d:5b:a8:8a:e8:66:ee:7c:f1:3e: ce:f8:ab:c6:36:b0:f8:b9:b5:87:b9:11:af:9f:c8:57:6e:1d: 63:49:69:31:0b:2e:32:e1:90:6b:46:96:44:62:79:a9:fa:b7: 60:f0:fd:cd:7d:44:64:d9:42:79:dc:60:72:d9:a9:f1:1b:d5: 87:d7:96:e9:00:d0:ff:ea:5b:70:44:8f:22:9f:56:4b:29:96: f9:54:de:c5:49:de:72:9f:58:9f:e8:ea:03:5d:fb:d8:9b:c2: da:48:6a:a1:f0:2d:9f:41:88:5c:7d:01:f5:b8:fe:03:5b:90: 41:38:43:a9:83:e7:98:4c:13:05:f6:56:87:b8:ab:19:9d:79: 1e:1a:22:5c:20:b2:7b:30:2c:ac:9a:59:a6:a4:66:8c:d0:d1: 29:78:98:aa:d5:97:28:e5:ce:8c:fa:c7:97:65:18:10:25:f7: d7:63:47:4f:f3:47:f1:cd:bc:af:15:34:1c:8a:70:eb:e8:ba: 5a:28:bf:9d:44:e0:de:b4:ef:d5:63:03:12:df:fc:97:80:5d: a3:55:0e:df:34:c1:e0:75:7b:b0:30:a0:a7:71:eb:2e:cc:81: e7:ed:e1:41:43:40:dc:cc:2d:37:13:c0:f7:20:14:66:4d:40: e4:ca:fc:6f -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgISAZtu/ZzvMNBqNJmlbl0JmsHuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjUxMjMwMTEyMTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGZhMWQ4NmEyNDE3Mjc4YzhmMDk1MTFkNzI3ZDY3NDQ5YjcyNDczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9ZYYepkN2fe5+hSiqIAWbEV0pTq eVL4pljOqxtqHGTOTb2EeCSHx4lTOpRlCPEVGM3Gb9JeUit9DFwivNmlLbkCcPuK hwcKg0gBUvWlViC07pC5ZrFbBvx2fbtaAYGR2l3C0AfV7+h8S+i5v9ga7ZSoKu8W U02a+SMu/eRYcCrawdNOqI1NtB2LqYpbwMjeL5Xugshb1dLIB2SbyKE+mIhy+8bb yQPvAI2g4SwsARdc8XTbHTAZnGJExad4SFNUM9ADA13X9zzNwxDIbqCyZ4ZYxiey TIYYvRyCTz18oMovlmJbnTF8vdvzXJga/sXtR1igp8WuZr/t7Oru1QJBOQIDAQAB o4ICmDCCApQwHQYDVR0OBBYEFHj6HYaiQXJ4yPCVEdcn1nRJtyRzMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvZVBvZGhxSkJjbmpJOEpVUjF5ZldkRW0zSkhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGtBggrBgEFBQcBBwEB/wSBnTCBmjCBlwQCAAEwgZADBAAt QuQDBAAtQucDBAAtWfcDBAAtjZ4DBABRoe4DBABT22MDBAFV2YIDBABXeFcDBABX eH4DBABXeKYDBAFXeTwDBAJXeYQDBABXeaUDBABbXEMDBANbXPgDBAFcd8QDBABc +TIDBABde20DBAC53qADBADBGdgDBADCH94DBADCN7oDBADCqa8DBADUSZUwDQYJ KoZIhvcNAQELBQADggEBAKK/6BN9cQfDDVuoiuhm7nzxPs74q8Y2sPi5tYe5Ea+f yFduHWNJaTELLjLhkGtGlkRiean6t2Dw/c19RGTZQnncYHLZqfEb1YfXlukA0P/q W3BEjyKfVksplvlU3sVJ3nKfWJ/o6gNd+9ibwtpIaqHwLZ9BiFx9AfW4/gNbkEE4 Q6mD55hMEwX2Voe4qxmdeR4aIlwgsnswLKyaWaakZozQ0Sl4mKrVlyjlzoz6x5dl GBAl99djR0/zR/HNvK8VNByKcOvouloov51E4N6079VjAxLf/JeAXaNVDt80weB1 e7AwoKdx6y7Mgeft4UFDQNzMLTcTwPcgFGZNQOTK/G8= -----END CERTIFICATE-----Generated at Wed Dec 31 10:25:01 2025 by rpki-client