This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/EbuCeZYnH0f3EbkXKCG5L9233UU.roa File: EbuCeZYnH0f3EbkXKCG5L9233UU.roa (raw, json) Hash identifier: wIuPNpNj3feWeaeRP0mbrTaq1TgbNrC1/1nvndjr0b4= Subject key identifier: 11:BB:82:79:96:27:1F:47:F7:11:B9:17:28:21:B9:2F:DD:B7:DD:45 Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B45A835C0910BB349A258CFA2324FF1E3 Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/EbuCeZYnH0f3EbkXKCG5L9233UU.roa Signing time: Mon 22 Dec 2025 10:43:30 +0000 ROA not before: Mon 22 Dec 2025 10:43:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202656 IP address blocks: 45.136.206.0/24 maxlen: 24 45.137.52.0/24 maxlen: 24 45.137.53.0/24 maxlen: 24 45.137.55.0/24 maxlen: 24 45.137.191.0/24 maxlen: 24 45.139.28.0/24 maxlen: 24 45.139.31.0/24 maxlen: 24 45.140.171.0/24 maxlen: 24 45.140.173.0/24 maxlen: 24 45.141.186.0/24 maxlen: 24 45.141.187.0/24 maxlen: 24 45.141.198.0/23 maxlen: 23 45.145.162.0/24 maxlen: 24 45.147.1.0/24 maxlen: 24 45.149.83.0/24 maxlen: 24 45.152.225.0/24 maxlen: 24 45.154.162.0/24 maxlen: 24 85.202.166.0/24 maxlen: 24 85.202.167.0/24 maxlen: 24 91.191.186.0/24 maxlen: 24 91.212.82.0/24 maxlen: 24 91.220.84.0/24 maxlen: 24 91.220.90.0/24 maxlen: 24 91.220.126.0/24 maxlen: 24 91.221.38.0/24 maxlen: 24 92.249.13.0/24 maxlen: 24 92.249.14.0/24 maxlen: 24 193.150.98.0/24 maxlen: 24 193.150.170.0/24 maxlen: 24 193.150.171.0/24 maxlen: 24 193.163.199.0/24 maxlen: 24 194.33.8.0/24 maxlen: 24 194.33.9.0/24 maxlen: 24 194.55.103.0/24 maxlen: 24 194.55.104.0/24 maxlen: 24 194.61.76.0/24 maxlen: 24 194.61.233.0/24 maxlen: 24 194.147.84.0/24 maxlen: 24 194.147.85.0/24 maxlen: 24 195.245.110.0/24 maxlen: 24 213.139.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 22:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:a8:35:c0:91:0b:b3:49:a2:58:cf:a2:32:4f:f1:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Dec 22 10:43:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=11bb827996271f47f711b9172821b92fddb7dd45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7b:75:e4:c1:b3:96:8e:89:67:b5:12:41:c0: 3b:02:70:0c:2e:8f:fb:f2:a2:47:d1:71:63:ca:9f: 44:62:9e:03:2e:90:de:f3:c2:dc:62:9e:0f:2a:d7: 29:72:95:d7:ba:39:1c:28:80:d3:2d:9f:02:fe:39: 0b:26:df:54:9b:55:e7:bb:e3:18:55:0f:53:d7:62: e1:05:36:3c:b0:23:6e:75:71:a8:4d:1e:0f:bc:ce: fa:9e:94:fa:0b:9e:46:20:1a:45:cb:47:d8:7c:3d: 38:ed:76:4e:59:e3:fd:df:8e:f9:86:8f:0b:c8:25: 32:a7:04:2e:d2:ce:a9:ec:2a:66:4c:5a:54:94:b9: f6:e3:f2:cd:5c:ad:92:ee:de:44:ca:78:0c:b7:97: 6f:cc:d4:bb:03:12:2c:d8:a8:fa:b9:76:f6:01:59: bd:19:8d:5b:5f:03:4c:5c:ef:15:f7:e5:03:b0:08: 9f:4d:8b:be:13:96:ba:26:9d:56:3a:e9:9a:58:44: 2f:8c:48:f0:7b:8b:7a:03:18:16:ef:0d:4f:74:3b: 4e:76:17:54:af:71:22:2c:2e:b7:e2:4d:64:8e:3d: 5c:42:68:ac:88:25:57:c6:4f:33:f1:ae:67:a4:08: 20:ae:2d:ee:91:75:06:bc:ba:2e:07:7f:70:f5:bc: 1b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BB:82:79:96:27:1F:47:F7:11:B9:17:28:21:B9:2F:DD:B7:DD:45 X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/EbuCeZYnH0f3EbkXKCG5L9233UU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.206.0/24 45.137.52.0/23 45.137.55.0/24 45.137.191.0/24 45.139.28.0/24 45.139.31.0/24 45.140.171.0/24 45.140.173.0/24 45.141.186.0/23 45.141.198.0/23 45.145.162.0/24 45.147.1.0/24 45.149.83.0/24 45.152.225.0/24 45.154.162.0/24 85.202.166.0/23 91.191.186.0/24 91.212.82.0/24 91.220.84.0/24 91.220.90.0/24 91.220.126.0/24 91.221.38.0/24 92.249.13.0-92.249.14.255 193.150.98.0/24 193.150.170.0/23 193.163.199.0/24 194.33.8.0/23 194.55.103.0-194.55.104.255 194.61.76.0/24 194.61.233.0/24 194.147.84.0/23 195.245.110.0/24 213.139.194.0/24 Signature Algorithm: sha256WithRSAEncryption 37:10:17:54:04:2c:de:4e:6d:ed:10:98:23:a2:0a:f5:da:24: 8c:32:33:6e:b4:b4:fb:7b:ee:42:e9:a7:56:32:48:ce:5a:75: 07:b3:f7:9f:b5:b7:2d:11:07:2b:d3:fc:b1:bf:bd:d4:00:9b: 41:45:2c:66:88:0f:c0:d8:66:60:66:d8:52:5b:ae:59:15:ef: e5:ff:dc:3a:bd:e7:14:e6:d0:40:58:05:4b:5d:78:fc:e7:aa: 7b:c7:ab:8b:05:fa:5e:35:06:b4:8d:34:8b:31:1d:d6:65:38: 4a:0b:d7:a1:c3:fe:5f:a1:2f:7c:17:90:1a:f9:b1:d7:ff:fc: 15:f4:3f:c8:f2:4c:53:53:f1:71:f2:cf:b3:7c:36:ec:77:f9: a2:c2:cf:98:1d:03:0e:1a:66:64:06:9c:6c:80:a1:26:1c:59: 93:c0:c2:f8:43:85:09:27:97:0a:87:3e:ec:59:8b:a3:88:b6: 4c:5f:9a:e9:03:1c:07:27:73:c4:80:e6:fc:41:89:5c:9e:c4: 96:6d:26:e8:e5:0f:b4:f4:8c:76:6b:4a:63:14:5d:90:74:f2: cb:f4:fa:51:2e:e9:e9:c8:4f:dd:3a:74:dc:2e:2f:ae:df:5a: 29:b7:d6:fd:4e:76:01:b8:d4:18:1f:77:00:9a:78:d5:cf:70: fb:15:92:9e -----BEGIN CERTIFICATE----- MIIF0jCCBLqgAwIBAgISAZtFqDXAkQuzSaJYz6IyT/HjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjUxMjIyMTA0MzMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWJiODI3OTk2MjcxZjQ3ZjcxMWI5MTcyODIxYjkyZmRkYjdkZDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3t15MGzlo6JZ7USQcA7AnAMLo/7 8qJH0XFjyp9EYp4DLpDe88LcYp4PKtcpcpXXujkcKIDTLZ8C/jkLJt9Um1Xnu+MY VQ9T12LhBTY8sCNudXGoTR4PvM76npT6C55GIBpFy0fYfD047XZOWeP93475ho8L yCUypwQu0s6p7CpmTFpUlLn24/LNXK2S7t5EyngMt5dvzNS7AxIs2Kj6uXb2AVm9 GY1bXwNMXO8V9+UDsAifTYu+E5a6Jp1WOumaWEQvjEjwe4t6AxgW7w1PdDtOdhdU r3EiLC634k1kjj1cQmisiCVXxk8z8a5npAggri3ukXUGvLouB39w9bwbmQIDAQAB o4IC3jCCAtowHQYDVR0OBBYEFBG7gnmWJx9H9xG5FyghuS/dt91FMB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvRWJ1Q2VaWW5IMGYzRWJrWEtDRzVMOTIzM1VVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHzBggrBgEFBQcBBwEB/wSB4zCB4DCB3QQCAAEwgdYDBAAt iM4DBAEtiTQDBAAtiTcDBAAtib8DBAAtixwDBAAtix8DBAAtjKsDBAAtjK0DBAEt jboDBAEtjcYDBAAtkaIDBAAtkwEDBAAtlVMDBAAtmOEDBAAtmqIDBAFVyqYDBABb v7oDBABb1FIDBABb3FQDBABb3FoDBABb3H4DBABb3SYwDAMEAFz5DQMEAFz5DgME AMGWYgMEAcGWqgMEAMGjxwMEAcIhCDAMAwQAwjdnAwQAwjdoAwQAwj1MAwQAwj3p AwQBwpNUAwQAw/VuAwQA1YvCMA0GCSqGSIb3DQEBCwUAA4IBAQA3EBdUBCzeTm3t EJgjogr12iSMMjNutLT7e+5C6adWMkjOWnUHs/eftbctEQcr0/yxv73UAJtBRSxm iA/A2GZgZthSW65ZFe/l/9w6vecU5tBAWAVLXXj856p7x6uLBfpeNQa0jTSLMR3W ZThKC9ehw/5foS98F5Aa+bHX//wV9D/I8kxTU/Fx8s+zfDbsd/miws+YHQMOGmZk BpxsgKEmHFmTwML4Q4UJJ5cKhz7sWYujiLZMX5rpAxwHJ3PEgOb8QYlcnsSWbSbo 5Q+09Ix2a0pjFF2QdPLL9PpRLunpyE/dOnTcLi+u31opt9b9TnYBuNQYH3cAmnjV z3D7FZKe -----END CERTIFICATE-----Generated at Sat Dec 27 08:05:08 2025 by rpki-client