This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/EUtwtrnlxvCWVVWHbeOYBovT2WI.roa File: EUtwtrnlxvCWVVWHbeOYBovT2WI.roa (raw, json) Hash identifier: c2+azpALywzFAwerkfDL4o13LLBfkq4+t9kGUXiPYwk= Subject key identifier: 11:4B:70:B6:B9:E5:C6:F0:96:55:55:87:6D:E3:98:06:8B:D3:D9:62 Certificate issuer: /CN=43e0a364131841056d48b2d788ea00ca4b91db56 Certificate serial: 019B281D09627A6CDEC62C896B827FBEED06 Authority key identifier: 43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/EUtwtrnlxvCWVVWHbeOYBovT2WI.roa Signing time: Tue 16 Dec 2025 17:02:30 +0000 ROA not before: Tue 16 Dec 2025 17:02:30 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 48254 IP address blocks: 45.8.224.0/24 maxlen: 24 45.8.225.0/24 maxlen: 24 45.8.226.0/24 maxlen: 24 45.8.227.0/24 maxlen: 24 46.247.89.0/24 maxlen: 24 46.247.90.0/24 maxlen: 24 46.247.91.0/24 maxlen: 24 185.146.164.0/24 maxlen: 24 185.146.165.0/24 maxlen: 24 185.146.166.0/24 maxlen: 24 185.146.167.0/24 maxlen: 24 185.151.28.0/24 maxlen: 24 185.151.29.0/24 maxlen: 24 185.151.30.0/24 maxlen: 24 185.151.31.0/24 maxlen: 24 193.176.16.0/24 maxlen: 24 193.176.17.0/24 maxlen: 24 194.38.52.0/24 maxlen: 24 194.38.53.0/24 maxlen: 24 194.38.54.0/24 maxlen: 24 2a07:7800::/29 maxlen: 48 2a07:7800::/48 maxlen: 48 2a07:7800:1::/48 maxlen: 48 2a07:7800:2::/48 maxlen: 48 2a07:7800:3::/48 maxlen: 48 2a07:7800:4::/48 maxlen: 48 2a07:7800:5::/48 maxlen: 48 2a07:7800:6::/48 maxlen: 48 2a07:7800:7::/48 maxlen: 48 2a07:7800:8::/48 maxlen: 48 2a07:7800:9::/48 maxlen: 48 2a07:7800:10::/48 maxlen: 48 2a07:7800:11::/48 maxlen: 48 2a07:7800:12::/48 maxlen: 48 2a07:7800:13::/48 maxlen: 48 2a07:7800:14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 20:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:28:1d:09:62:7a:6c:de:c6:2c:89:6b:82:7f:be:ed:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43e0a364131841056d48b2d788ea00ca4b91db56 Validity Not Before: Dec 16 17:02:30 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=114b70b6b9e5c6f0965555876de398068bd3d962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:33:4f:9d:d7:fa:5e:75:49:83:07:af:e7:84: 43:78:5f:18:84:f5:f8:13:d6:cd:01:0b:84:27:63: 9e:a2:2f:58:b2:2c:63:d5:00:81:fe:a2:20:38:a5: 03:93:95:f6:ce:c0:0f:03:9f:5d:03:16:6d:46:f5: 33:6f:db:b6:39:ea:2b:b8:80:7c:35:5a:24:3d:b5: 9d:4c:ee:5b:b9:bd:c5:01:7d:b4:45:9c:e9:60:0f: 10:b5:18:dc:2e:0f:5e:e1:f0:63:e2:a4:24:c2:30: 7f:2f:ef:9f:fd:aa:31:36:a1:c0:ff:78:8d:2b:8a: 61:57:f9:ce:ee:b0:32:6c:c2:dc:ce:a8:e6:98:1d: 8f:40:de:79:96:2e:a0:d2:6c:1c:f2:23:46:f3:06: 7d:e5:d8:d5:08:b6:13:dc:fe:e6:4b:06:64:64:a7: a4:3f:3b:da:46:4d:88:82:5e:23:9d:7e:72:7c:7e: e6:89:4f:b4:99:1e:c5:68:f7:0a:0b:72:d9:24:07: 47:49:b8:e0:18:48:71:bc:06:1f:6d:82:75:56:1b: e0:61:5d:4b:17:19:d9:68:b7:ab:43:ed:9c:09:41: e8:e6:43:0e:32:26:a5:0c:1b:a2:86:2a:be:0e:59: 35:56:93:95:e9:8d:44:57:b7:27:d1:51:bd:f5:fa: 79:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4B:70:B6:B9:E5:C6:F0:96:55:55:87:6D:E3:98:06:8B:D3:D9:62 X509v3 Authority Key Identifier: keyid:43:E0:A3:64:13:18:41:05:6D:48:B2:D7:88:EA:00:CA:4B:91:DB:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-CjZBMYQQVtSLLXiOoAykuR21Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/EUtwtrnlxvCWVVWHbeOYBovT2WI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cbb06-b4da-4c94-b418-4b081cc2b39a/1/Q-CjZBMYQQVtSLLXiOoAykuR21Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.8.224.0/22 46.247.89.0-46.247.91.255 185.146.164.0/22 185.151.28.0/22 193.176.16.0/23 194.38.52.0-194.38.54.255 IPv6: 2a07:7800::/29 Signature Algorithm: sha256WithRSAEncryption 46:2d:e9:c7:6b:c3:21:f8:8a:35:86:45:37:0a:76:6b:32:19: 26:c1:cb:cf:71:0c:92:ef:d6:1f:6e:38:2b:e4:da:be:88:95: 4b:74:2e:9b:f4:64:d1:51:20:8e:7c:83:95:37:d2:e7:22:33: 7c:b6:cd:1f:b6:a1:ec:a4:2f:1b:34:35:91:e6:b0:a3:d1:e4: b1:7a:69:13:4a:13:61:a9:11:6f:f3:7d:6b:02:c6:93:cd:21: 19:26:64:30:e6:fc:bd:2a:01:aa:ce:c5:9f:b9:47:5a:ea:c3: 89:89:cc:17:31:8a:ae:9f:5e:78:1d:48:e7:a2:43:62:88:5f: 12:21:47:23:2d:43:aa:e6:ea:dd:ed:a3:6f:75:58:bd:56:2b: ee:c5:38:99:8d:30:a4:55:3a:96:59:1a:4d:8f:a5:b8:ee:96: 8c:3b:4b:fc:c2:cd:0e:f2:63:96:77:b8:b1:7f:6b:f2:0b:6a: e4:6f:7a:fd:96:03:67:dc:64:c2:67:1a:e0:6f:70:4f:c2:c3: f0:f9:95:5f:ef:60:e0:e4:76:f1:01:57:f3:45:12:27:2c:de: 07:ce:fa:e7:54:2a:0e:39:99:9d:78:7a:60:11:e6:83:57:64: b8:51:5f:97:3e:33:ee:36:05:6f:1e:f2:c1:4c:ed:05:f5:94: 6d:38:e9:08 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgISAZsoHQliemzexiyJa4J/vu0GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZTBhMzY0MTMxODQxMDU2ZDQ4YjJkNzg4ZWEwMGNhNGI5 MWRiNTYwHhcNMjUxMjE2MTcwMjMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTRiNzBiNmI5ZTVjNmYwOTY1NTU1ODc2ZGUzOTgwNjhiZDNkOTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzNPndf6XnVJgwev54RDeF8YhPX4 E9bNAQuEJ2Oeoi9Ysixj1QCB/qIgOKUDk5X2zsAPA59dAxZtRvUzb9u2OeoruIB8 NVokPbWdTO5bub3FAX20RZzpYA8QtRjcLg9e4fBj4qQkwjB/L++f/aoxNqHA/3iN K4phV/nO7rAybMLczqjmmB2PQN55li6g0mwc8iNG8wZ95djVCLYT3P7mSwZkZKek PzvaRk2Igl4jnX5yfH7miU+0mR7FaPcKC3LZJAdHSbjgGEhxvAYfbYJ1VhvgYV1L FxnZaLerQ+2cCUHo5kMOMialDBuihiq+Dlk1VpOV6Y1EV7cn0VG99fp5lwIDAQAB o4ICRjCCAkIwHQYDVR0OBBYEFBFLcLa55cbwllVVh23jmAaL09liMB8GA1UdIwQY MBaAFEPgo2QTGEEFbUiy14jqAMpLkdtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUS1DalpCTVlRUVZ0U0xMWGlPb0F5a3VSMjFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi85Y2JiMDYtYjRkYS00Yzk0LWI0MTgt NGIwODFjYzJiMzlhLzEvRVV0d3Rybmx4dkNXVlZXSGJlT1lCb3ZUMldJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi85Y2JiMDYtYjRkYS00Yzk0LWI0MTgtNGIwODFjYzJiMzlh LzEvUS1DalpCTVlRUVZ0U0xMWGlPb0F5a3VSMjFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFwGCCsGAQUFBwEHAQH/BE0wSzA6BAIAATA0AwQCLQjgMAwD BAAu91kDBAIu91gDBAK5kqQDBAK5lxwDBAHBsBAwDAMEAsImNAMEAMImNjANBAIA AjAHAwUDKgd4ADANBgkqhkiG9w0BAQsFAAOCAQEARi3px2vDIfiKNYZFNwp2azIZ JsHLz3EMku/WH244K+TavoiVS3Qum/Rk0VEgjnyDlTfS5yIzfLbNH7ah7KQvGzQ1 keawo9HksXppE0oTYakRb/N9awLGk80hGSZkMOb8vSoBqs7Fn7lHWurDiYnMFzGK rp9eeB1I56JDYohfEiFHIy1Dqubq3e2jb3VYvVYr7sU4mY0wpFU6llkaTY+luO6W jDtL/MLNDvJjlne4sX9r8gtq5G96/ZYDZ9xkwmca4G9wT8LD8PmVX+9g4OR28QFX 80USJyzeB87651QqDjmZnXh6YBHmg1dkuFFflz4z7jYFbx7ywUztBfWUbTjpCA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:36:56 2025 by rpki-client