This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/6ACIFLqP3u3kY9F8fVzA1UwAzs4.roa File: 6ACIFLqP3u3kY9F8fVzA1UwAzs4.roa (raw, json) Hash identifier: miDGJWAw4E8H7Nz/tiuc73aRtWxu/20E+I7uldsjwpY= Subject key identifier: E8:00:88:14:BA:8F:DE:ED:E4:63:D1:7C:7D:5C:C0:D5:4C:00:CE:CE Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 019A536165D9F1A7EAB476CB3DADCFF2E223 Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/6ACIFLqP3u3kY9F8fVzA1UwAzs4.roa Signing time: Wed 05 Nov 2025 09:38:03 +0000 ROA not before: Wed 05 Nov 2025 09:38:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215590 IP address blocks: 94.141.160.0/24 maxlen: 24 94.141.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:61:65:d9:f1:a7:ea:b4:76:cb:3d:ad:cf:f2:e2:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Nov 5 09:38:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e8008814ba8fdeede463d17c7d5cc0d54c00cece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:93:6b:fb:95:02:22:ae:a2:47:38:a6:82:b8: c5:59:e7:38:b8:36:36:80:85:c3:8a:de:c2:e6:17: 3d:20:b6:37:15:98:ca:3e:2b:12:c0:4e:6c:14:26: d7:32:21:82:34:1a:d7:e4:7c:8b:3e:12:38:d1:c0: 61:f9:7d:5e:2a:bd:37:e6:1a:4b:2f:44:eb:55:84: 81:61:f9:37:ec:4e:01:31:9e:76:c0:e0:8b:0c:89: 7d:44:6a:69:26:b7:16:b7:04:e9:f9:84:c3:0b:b5: 9e:bc:84:32:83:21:e5:6f:0a:2b:82:66:1b:8d:15: 50:1d:21:e3:ef:a0:70:d5:f1:b0:2c:b6:38:a4:c3: 53:2b:2c:dc:b8:c0:02:98:8b:13:67:9d:92:b9:aa: c8:16:39:c4:35:f0:26:92:d7:0d:93:c3:ca:d7:0a: 8b:8c:4b:10:d6:3d:ac:93:ba:5a:b3:36:e5:ef:d0: c8:eb:da:57:75:5b:d0:58:b6:0a:ed:cf:be:0d:46: 46:e1:03:96:f4:24:21:1d:77:34:6e:58:61:22:1d: 70:a5:47:cd:90:70:9b:98:49:85:2a:d6:7c:9d:2c: 50:cf:26:ee:4d:e2:e6:1d:1c:de:93:a3:05:81:7c: 6e:06:a2:1b:d9:cd:0e:c3:0c:97:bd:25:e4:b4:ca: 98:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:00:88:14:BA:8F:DE:ED:E4:63:D1:7C:7D:5C:C0:D5:4C:00:CE:CE X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/6ACIFLqP3u3kY9F8fVzA1UwAzs4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.141.160.0/23 Signature Algorithm: sha256WithRSAEncryption 98:c4:b1:0f:5c:72:56:1b:7c:0a:e6:b9:33:98:d8:e7:92:40: 0e:cb:9f:a3:5c:6e:f9:d9:84:82:22:12:98:cc:46:e1:db:da: 8a:5c:cf:df:2e:c9:3d:5c:0a:b6:fc:db:6c:46:5b:84:26:5a: a6:6f:9f:22:fe:bd:27:01:73:a2:7b:35:79:7d:29:26:2d:f5: 36:49:93:94:57:9f:2b:6a:a8:ea:0e:42:f2:c5:89:1f:03:eb: 80:89:c7:f7:db:d7:68:b0:d8:cd:bd:f9:1b:29:fe:ea:1d:45: 7f:f9:d2:4d:53:89:a4:cc:00:40:71:37:bf:d0:34:c4:75:f7: cc:f9:80:86:86:08:7f:6c:fc:c6:10:46:b5:4b:31:4e:d0:2a: ea:37:c0:bd:a7:5d:cc:d4:ac:e8:ff:2e:e8:1e:c2:2c:0f:db: cd:c5:8a:20:a7:71:2b:d6:f7:d4:d8:4e:8d:6a:fa:21:ee:77: 09:bc:bc:94:dd:bd:4f:69:27:f2:bf:d1:7b:73:ae:d5:dc:e1: cc:e7:25:10:5f:7b:32:a4:fb:33:10:74:24:c6:81:d0:d9:8d: fb:56:c1:90:bc:01:46:4e:36:4f:ba:9b:59:09:58:6b:cc:ce: 68:b1:08:b7:dd:e3:84:02:10:4a:b6:7a:af:c5:5b:08:cb:56: b5:58:aa:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpTYWXZ8afqtHbLPa3P8uIjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjUxMTA1MDkzODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlODAwODgxNGJhOGZkZWVkZTQ2M2QxN2M3ZDVjYzBkNTRjMDBjZWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pNr+5UCIq6iRzimgrjFWec4uDY2 gIXDit7C5hc9ILY3FZjKPisSwE5sFCbXMiGCNBrX5HyLPhI40cBh+X1eKr035hpL L0TrVYSBYfk37E4BMZ52wOCLDIl9RGppJrcWtwTp+YTDC7WevIQygyHlbworgmYb jRVQHSHj76Bw1fGwLLY4pMNTKyzcuMACmIsTZ52SuarIFjnENfAmktcNk8PK1wqL jEsQ1j2sk7paszbl79DI69pXdVvQWLYK7c++DUZG4QOW9CQhHXc0blhhIh1wpUfN kHCbmEmFKtZ8nSxQzybuTeLmHRzek6MFgXxuBqIb2c0OwwyXvSXktMqYDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOgAiBS6j97t5GPRfH1cwNVMAM7OMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvNkFDSUZMcVAzdTNrWTlGOGZWekExVXdBenM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXo2gMA0G CSqGSIb3DQEBCwUAA4IBAQCYxLEPXHJWG3wK5rkzmNjnkkAOy5+jXG752YSCIhKY zEbh29qKXM/fLsk9XAq2/NtsRluEJlqmb58i/r0nAXOiezV5fSkmLfU2SZOUV58r aqjqDkLyxYkfA+uAicf329dosNjNvfkbKf7qHUV/+dJNU4mkzABAcTe/0DTEdffM +YCGhgh/bPzGEEa1SzFO0CrqN8C9p13M1Kzo/y7oHsIsD9vNxYogp3Er1vfU2E6N avoh7ncJvLyU3b1PaSfyv9F7c67V3OHM5yUQX3sypPszEHQkxoHQ2Y37VsGQvAFG TjZPuptZCVhrzM5osQi33eOEAhBKtnqvxVsIy1a1WKos -----END CERTIFICATE-----Generated at Sat Dec 6 16:43:47 2025 by rpki-client