This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/En8rpl-LNaAq3f8AsyjWN5ulsXo.roa File: En8rpl-LNaAq3f8AsyjWN5ulsXo.roa (raw, json) Hash identifier: QoqgsrUKNtQmX6VXxOJGcohI9DGk9cLmQATRa7CEazs= Subject key identifier: 12:7F:2B:A6:5F:8B:35:A0:2A:DD:FF:00:B3:28:D6:37:9B:A5:B1:7A Certificate issuer: /CN=460d3149fc50ca9797f50fde9e02a083134c5019 Certificate serial: 019B09E87C5B12180EAD90D23E36EA44002D Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/En8rpl-LNaAq3f8AsyjWN5ulsXo.roa Signing time: Wed 10 Dec 2025 20:16:29 +0000 ROA not before: Wed 10 Dec 2025 20:16:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 56563 IP address blocks: 45.154.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:09:e8:7c:5b:12:18:0e:ad:90:d2:3e:36:ea:44:00:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019 Validity Not Before: Dec 10 20:16:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=127f2ba65f8b35a02addff00b328d6379ba5b17a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:60:51:6d:f9:45:8c:98:80:4a:8a:5e:e0:d0: f6:79:f0:c5:82:fb:de:eb:97:57:06:e4:b3:53:2e: cb:c8:0d:ea:13:ec:8a:51:e9:9b:d1:ca:7c:ed:91: 44:ca:31:37:2d:fb:52:ec:1d:4f:44:e3:3c:dc:5e: 5d:86:b1:d0:f8:c3:a6:1d:0e:7e:d4:79:06:7a:76: 07:91:c6:00:c5:50:0c:bc:b7:96:6c:f0:1c:f1:a2: e8:ea:1d:dd:df:2d:1c:f1:44:f9:91:35:26:62:ba: 62:3e:b2:e2:6c:c9:37:02:ee:8b:d3:26:d3:30:2f: eb:55:0d:83:1c:9e:08:cc:b7:68:e3:19:e5:ff:6c: ae:80:97:d2:cd:70:bf:45:48:d2:d4:41:81:11:c6: 7e:68:bc:00:98:2c:cf:14:0d:7a:c3:b8:29:c9:4c: a2:93:d4:20:f5:f0:4b:f6:16:54:53:30:b6:b8:1f: 9d:34:3e:33:3c:68:f2:dd:d7:a5:a3:fb:96:16:6a: 9f:4a:67:b6:ce:8f:8c:85:d5:86:70:c0:b1:fd:cf: 62:52:f8:c4:f7:5f:5d:ce:6f:be:7e:48:30:b9:61: ae:6b:c2:b5:33:dc:cd:45:6d:81:52:7f:d3:ff:4a: 14:22:d1:66:7b:17:fb:a2:23:d9:db:66:de:ff:be: f5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:7F:2B:A6:5F:8B:35:A0:2A:DD:FF:00:B3:28:D6:37:9B:A5:B1:7A X509v3 Authority Key Identifier: keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/En8rpl-LNaAq3f8AsyjWN5ulsXo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.154.31.0/24 Signature Algorithm: sha256WithRSAEncryption 69:aa:7b:e9:2f:65:e8:6f:e4:e8:08:8c:e7:40:d7:28:41:60: d3:12:f9:55:f3:be:dc:9b:09:29:9a:00:76:46:a0:b7:75:82: b9:d7:f3:6b:d1:11:a0:51:5b:e8:d9:06:47:83:44:b4:a4:9d: d8:e7:85:ee:a0:84:af:da:50:7b:4e:03:8a:d7:d9:b5:db:f2: 7e:a0:f1:1f:5f:ae:e9:e0:50:5d:cb:e6:43:c4:47:73:fd:74: 36:76:40:7f:26:18:2d:33:40:79:12:56:0b:f9:eb:4c:68:0a: 45:d3:4a:08:2c:e8:2e:1a:3f:94:2a:de:6f:6a:b4:41:5a:b9: dd:24:80:74:80:24:b6:be:8f:06:ae:65:a0:9d:bd:9e:19:a1: 7a:70:55:0c:13:fc:9d:6e:8c:b1:f9:f4:38:db:0b:6d:aa:93: 4b:58:7e:ab:be:70:e0:94:fe:bf:8f:61:ff:8a:59:c4:8d:99: 53:ad:42:77:27:c1:1c:2b:cd:a2:22:53:cf:41:be:03:5b:c9: 3c:bf:44:14:d9:79:7a:8b:e3:39:ca:b8:4d:d1:9e:ce:2e:6f: 6a:5e:f0:76:3a:31:e4:b3:b3:13:bf:ea:0c:69:e8:4d:d6:c9: f7:d5:ba:d0:30:41:30:36:0f:98:1d:84:77:bb:3f:ff:7d:16: 43:04:77:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsJ6HxbEhgOrZDSPjbqRAAtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MGQzMTQ5ZmM1MGNhOTc5N2Y1MGZkZTllMDJhMDgzMTM0 YzUwMTkwHhcNMjUxMjEwMjAxNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjdmMmJhNjVmOGIzNWEwMmFkZGZmMDBiMzI4ZDYzNzliYTViMTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2BRbflFjJiASope4ND2efDFgvve 65dXBuSzUy7LyA3qE+yKUemb0cp87ZFEyjE3LftS7B1PROM83F5dhrHQ+MOmHQ5+ 1HkGenYHkcYAxVAMvLeWbPAc8aLo6h3d3y0c8UT5kTUmYrpiPrLibMk3Au6L0ybT MC/rVQ2DHJ4IzLdo4xnl/2yugJfSzXC/RUjS1EGBEcZ+aLwAmCzPFA16w7gpyUyi k9Qg9fBL9hZUUzC2uB+dND4zPGjy3delo/uWFmqfSme2zo+MhdWGcMCx/c9iUvjE 919dzm++fkgwuWGua8K1M9zNRW2BUn/T/0oUItFmexf7oiPZ22be/7714QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBJ/K6ZfizWgKt3/ALMo1jebpbF6MB8GA1UdIwQY MBaAFEYNMUn8UMqXl/UP3p4CoIMTTFAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wMTYyNDYtMzc2Yy00NzI1LTgwYWUt NzViZDk0NmE3MzU1LzEvRW44cnBsLUxOYUFxM2Y4QXN5aldONXVsc1hvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wMTYyNDYtMzc2Yy00NzI1LTgwYWUtNzViZDk0NmE3MzU1 LzEvUmcweFNmeFF5cGVYOVFfZW5nS2dneE5NVUJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZofMA0G CSqGSIb3DQEBCwUAA4IBAQBpqnvpL2Xob+ToCIznQNcoQWDTEvlV877cmwkpmgB2 RqC3dYK51/Nr0RGgUVvo2QZHg0S0pJ3Y54XuoISv2lB7TgOK19m12/J+oPEfX67p 4FBdy+ZDxEdz/XQ2dkB/JhgtM0B5ElYL+etMaApF00oILOguGj+UKt5varRBWrnd JIB0gCS2vo8GrmWgnb2eGaF6cFUME/ydboyx+fQ42wttqpNLWH6rvnDglP6/j2H/ ilnEjZlTrUJ3J8EcK82iIlPPQb4DW8k8v0QU2Xl6i+M5yrhN0Z7OLm9qXvB2OjHk s7MTv+oMaehN1sn31brQMEEwNg+YHYR3uz//fRZDBHeI -----END CERTIFICATE-----Generated at Mon Dec 15 17:02:38 2025 by rpki-client