This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/EfQhJb5jQIQkAsMs6MsNrHJpGtM.roa File: EfQhJb5jQIQkAsMs6MsNrHJpGtM.roa (raw, json) Hash identifier: Ju4zKmRJh/EbFKeLrhI6L7JYjbJ+gosDVEmrn3gTxds= Subject key identifier: 11:F4:21:25:BE:63:40:84:24:02:C3:2C:E8:CB:0D:AC:72:69:1A:D3 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 019AC9508362CBCF7FBFDA0426F3F2586308 Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/EfQhJb5jQIQkAsMs6MsNrHJpGtM.roa Signing time: Fri 28 Nov 2025 07:14:48 +0000 ROA not before: Fri 28 Nov 2025 07:14:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 54252 IP address blocks: 104.160.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:c9:50:83:62:cb:cf:7f:bf:da:04:26:f3:f2:58:63:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Nov 28 07:14:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=11f42125be6340842402c32ce8cb0dac72691ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8f:7b:b0:95:3a:94:c3:1f:63:c3:68:43:d7: c6:df:e0:81:b7:1d:f8:cb:f5:24:2d:32:4f:8f:1d: e5:be:37:a7:39:70:64:e6:8d:1e:83:b4:ad:f9:c8: e3:fe:70:2b:d1:ba:51:ee:19:5f:7c:f4:0b:e6:dc: 24:93:e9:48:6a:49:49:f2:b9:96:27:55:cb:70:2e: 4d:38:7d:c1:f0:cf:eb:8d:56:72:80:15:cd:b1:cb: b6:75:10:e3:3c:a6:69:64:a8:1d:d8:a1:7b:6e:69: 7f:6f:34:aa:2a:a5:53:59:56:cd:fa:29:23:9a:13: 77:4b:88:c9:5f:b5:19:75:ad:dc:8c:51:d9:bb:5c: 8d:55:63:ac:76:58:d2:25:5f:67:d4:25:df:9f:59: 14:ca:b1:45:df:4c:87:27:a6:fc:db:28:4b:0a:70: 6d:b2:32:04:6b:2d:20:91:1d:75:9a:e7:05:18:48: 6c:bd:40:dc:8f:41:ab:8f:80:b2:fb:10:48:c7:6b: a8:6b:00:33:98:ab:d9:d6:af:36:bc:e9:ee:7c:05: cd:c4:c3:c9:7c:9f:d9:72:34:39:d7:1f:24:db:a5: 82:53:02:65:af:c6:ea:e6:ce:ea:54:a5:89:38:f9: a9:be:a7:d4:b7:53:88:2a:77:b5:f4:2f:60:62:08: cf:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F4:21:25:BE:63:40:84:24:02:C3:2C:E8:CB:0D:AC:72:69:1A:D3 X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/EfQhJb5jQIQkAsMs6MsNrHJpGtM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.160.3.0/24 Signature Algorithm: sha256WithRSAEncryption 83:05:03:d9:33:01:4e:44:26:37:85:9a:03:b2:68:a8:76:5b: 02:57:2b:01:07:4e:1a:45:83:f3:97:d8:aa:88:cb:6d:96:02: 30:3e:59:d8:21:6f:27:7a:d5:24:3c:8d:ca:85:c8:1e:c8:90: 5c:ab:48:0f:ae:b8:d5:b6:c5:8e:85:93:54:2d:69:34:d2:b0: 85:93:13:c8:8b:c3:1f:aa:0e:6a:84:38:e4:7f:5b:9c:dc:a0: ab:46:81:fa:13:4c:30:f6:52:3f:71:be:23:22:ff:7e:65:52: 91:57:88:79:91:5c:40:cf:91:b8:91:43:bd:e5:a2:67:8d:7f: 42:c0:95:48:1a:b0:e7:9b:2a:7a:ce:4e:85:db:96:88:b3:b7: 5b:ef:67:b1:b7:f1:2d:ce:0a:c7:11:a7:b8:bf:0a:95:c8:94: e6:63:f5:2e:ed:47:06:30:90:1e:38:74:9f:61:4a:33:2c:96: d2:be:8b:3a:54:5d:98:2f:4b:60:3f:ca:21:86:3b:ad:66:85: f3:00:dd:88:d3:d2:01:83:66:af:95:3e:03:af:c1:58:fa:3b: 1b:ee:d2:a1:70:c8:08:98:46:00:d7:27:fa:bd:ed:0b:41:20: 56:e0:2d:d1:a4:80:dc:01:a4:32:7a:59:23:3c:9a:26:3c:ff: dc:c5:bc:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrJUINiy89/v9oEJvPyWGMIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjUxMTI4MDcxNDQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWY0MjEyNWJlNjM0MDg0MjQwMmMzMmNlOGNiMGRhYzcyNjkxYWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY97sJU6lMMfY8NoQ9fG3+CBtx34 y/UkLTJPjx3lvjenOXBk5o0eg7St+cjj/nAr0bpR7hlffPQL5twkk+lIaklJ8rmW J1XLcC5NOH3B8M/rjVZygBXNscu2dRDjPKZpZKgd2KF7bml/bzSqKqVTWVbN+ikj mhN3S4jJX7UZda3cjFHZu1yNVWOsdljSJV9n1CXfn1kUyrFF30yHJ6b82yhLCnBt sjIEay0gkR11mucFGEhsvUDcj0Grj4Cy+xBIx2uoawAzmKvZ1q82vOnufAXNxMPJ fJ/ZcjQ51x8k26WCUwJlr8bq5s7qVKWJOPmpvqfUt1OIKne19C9gYgjPwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBH0ISW+Y0CEJALDLOjLDaxyaRrTMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvRWZRaEpiNWpRSVFrQXNNczZNc05ySEpwR3RNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaKADMA0G CSqGSIb3DQEBCwUAA4IBAQCDBQPZMwFORCY3hZoDsmiodlsCVysBB04aRYPzl9iq iMttlgIwPlnYIW8netUkPI3KhcgeyJBcq0gPrrjVtsWOhZNULWk00rCFkxPIi8Mf qg5qhDjkf1uc3KCrRoH6E0ww9lI/cb4jIv9+ZVKRV4h5kVxAz5G4kUO95aJnjX9C wJVIGrDnmyp6zk6F25aIs7db72ext/EtzgrHEae4vwqVyJTmY/Uu7UcGMJAeOHSf YUozLJbSvos6VF2YL0tgP8ohhjutZoXzAN2I09IBg2avlT4Dr8FY+jsb7tKhcMgI mEYA1yf6ve0LQSBW4C3RpIDcAaQyelkjPJomPP/cxbzr -----END CERTIFICATE-----Generated at Sat Dec 6 23:31:03 2025 by rpki-client