This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/enhLIeFFNjBBa_s5O_0YkpdyYhw.roa File: enhLIeFFNjBBa_s5O_0YkpdyYhw.roa (raw, json) Hash identifier: QCVHyVf9CKwmcfPHoXbT0EWpP5O5Sd2HzcxdrqVaxxg= Subject key identifier: 7A:78:4B:21:E1:45:36:30:41:6B:FB:39:3B:FD:18:92:97:72:62:1C Certificate issuer: /CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Certificate serial: 019AD7D210807CADAAF638E19A56D656E9BB Authority key identifier: 25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/enhLIeFFNjBBa_s5O_0YkpdyYhw.roa Signing time: Mon 01 Dec 2025 02:50:59 +0000 ROA not before: Mon 01 Dec 2025 02:50:59 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 29752 IP address blocks: 104.166.158.0/24 maxlen: 24 2a0b:21c1:601c::/48 maxlen: 48 2a0b:21c1:602a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.mft rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d7:d2:10:80:7c:ad:aa:f6:38:e1:9a:56:d6:56:e9:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25776c77f8ebe7094ca007ace1a9c0bfdc2b3aec Validity Not Before: Dec 1 02:50:59 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7a784b21e1453630416bfb393bfd18929772621c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0f:c8:f2:7b:1e:47:89:66:06:71:d1:5f:1d: 9d:c1:4b:38:b8:6d:a2:49:89:7b:75:2d:c4:81:66: 1d:b8:0b:a9:a0:05:c3:30:9d:f7:1d:cf:d3:02:ab: aa:6c:00:a2:d1:fb:40:2f:9b:34:5a:fe:92:5d:ea: 2f:c2:d9:94:84:57:aa:c3:e7:7d:50:e3:11:ae:9b: c5:af:83:f9:35:8e:99:55:e0:3a:00:3b:48:14:0a: af:46:cc:40:29:f7:45:db:3a:75:55:10:ec:9b:56: 41:1c:f2:77:fc:0e:20:36:5f:dc:26:f5:58:8e:04: 24:a4:5b:a8:e1:15:de:c6:d4:00:a2:c5:65:fa:f9: 51:72:22:30:47:44:25:e1:c4:08:fa:9d:bb:4f:41: 5b:c4:07:71:a8:a4:57:0e:93:d1:13:fb:7f:47:27: 0f:6b:7a:11:e2:03:3f:5a:45:5a:5d:94:32:19:c7: dd:01:93:a1:47:3d:bd:53:c3:a3:02:ab:28:da:83: 6b:ae:9a:08:01:67:ec:dc:95:90:bc:cf:b9:fd:d3: 35:b7:ce:1a:1e:c7:c0:3e:a3:da:76:d8:3e:af:21: 0d:42:d6:89:09:40:39:63:c6:b6:f1:69:a5:ae:76: c4:11:09:73:57:9b:02:64:1a:1d:c9:4b:80:6d:ba: 23:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:78:4B:21:E1:45:36:30:41:6B:FB:39:3B:FD:18:92:97:72:62:1C X509v3 Authority Key Identifier: keyid:25:77:6C:77:F8:EB:E7:09:4C:A0:07:AC:E1:A9:C0:BF:DC:2B:3A:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JXdsd_jr5wlMoAes4anAv9wrOuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/enhLIeFFNjBBa_s5O_0YkpdyYhw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/57e08c-ca3a-4099-ae74-e7daec194a69/1/JXdsd_jr5wlMoAes4anAv9wrOuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 104.166.158.0/24 IPv6: 2a0b:21c1:601c::/48 2a0b:21c1:602a::/48 Signature Algorithm: sha256WithRSAEncryption a7:4b:51:1d:6e:73:e9:23:0a:84:bf:0e:c4:f8:55:83:45:b8: a6:c0:80:4f:89:d3:80:f3:9b:2c:c9:19:2f:db:4d:e7:10:5b: 1b:bb:56:e4:03:f8:c7:6a:1a:1c:9b:82:2e:d1:3f:95:40:c7: 81:67:1b:bc:3b:f7:66:13:42:95:ec:7b:7a:e6:97:fc:6a:9a: 5d:10:0c:6e:be:65:3c:54:06:f1:49:f1:fe:50:b7:4c:18:95: 7c:af:c6:32:8f:94:c5:aa:23:65:db:6c:5e:36:27:31:21:ad: 75:35:2f:59:f1:57:70:81:7f:00:b4:d1:09:02:33:da:06:b2: 66:66:67:d8:48:0f:1c:b7:56:2b:ab:ff:dd:63:16:01:19:53: 6a:57:04:6f:3d:4c:94:96:41:c9:6a:ba:94:9b:0c:47:d1:0c: c7:59:51:01:9c:d6:dd:51:26:03:05:e6:fc:c2:96:96:1f:52: f4:f3:46:4a:62:35:66:81:b8:d2:e7:b9:b4:64:8f:e3:56:39: ab:a1:05:71:4a:7c:c8:af:87:8d:9d:50:e3:40:b6:23:89:88: 3d:28:6a:73:3f:6a:bf:be:50:00:86:22:4a:e7:78:88:5e:09: d5:a9:f5:13:fc:64:fe:ec:d6:7e:f5:8d:4a:20:be:6a:dc:fc: 19:f0:a9:2d -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZrX0hCAfK2q9jjhmlbWVum7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI1Nzc2Yzc3ZjhlYmU3MDk0Y2EwMDdhY2UxYTljMGJmZGMy YjNhZWMwHhcNMjUxMjAxMDI1MDU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YTc4NGIyMWUxNDUzNjMwNDE2YmZiMzkzYmZkMTg5Mjk3NzI2MjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Q/I8nseR4lmBnHRXx2dwUs4uG2i SYl7dS3EgWYduAupoAXDMJ33Hc/TAquqbACi0ftAL5s0Wv6SXeovwtmUhFeqw+d9 UOMRrpvFr4P5NY6ZVeA6ADtIFAqvRsxAKfdF2zp1VRDsm1ZBHPJ3/A4gNl/cJvVY jgQkpFuo4RXextQAosVl+vlRciIwR0Ql4cQI+p27T0FbxAdxqKRXDpPRE/t/RycP a3oR4gM/WkVaXZQyGcfdAZOhRz29U8OjAqso2oNrrpoIAWfs3JWQvM+5/dM1t84a HsfAPqPadtg+ryENQtaJCUA5Y8a28WmlrnbEEQlzV5sCZBodyUuAbbojIwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFHp4SyHhRTYwQWv7OTv9GJKXcmIcMB8GA1UdIwQY MBaAFCV3bHf46+cJTKAHrOGpwL/cKzrsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQt ZTdkYWVjMTk0YTY5LzEvZW5oTEllRkZOakJCYV9zNU9fMFlrcGR5WWh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81N2UwOGMtY2EzYS00MDk5LWFlNzQtZTdkYWVjMTk0YTY5 LzEvSlhkc2RfanI1d2xNb0FlczRhbkF2OXdyT3V3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAaKaeMBgE AgACMBIDBwAqCyHBYBwDBwAqCyHBYCowDQYJKoZIhvcNAQELBQADggEBAKdLUR1u c+kjCoS/DsT4VYNFuKbAgE+J04DzmyzJGS/bTecQWxu7VuQD+MdqGhybgi7RP5VA x4FnG7w792YTQpXse3rml/xqml0QDG6+ZTxUBvFJ8f5Qt0wYlXyvxjKPlMWqI2Xb bF42JzEhrXU1L1nxV3CBfwC00QkCM9oGsmZmZ9hIDxy3Viur/91jFgEZU2pXBG89 TJSWQclqupSbDEfRDMdZUQGc1t1RJgMF5vzClpYfUvTzRkpiNWaBuNLnubRkj+NW OauhBXFKfMivh42dUONAtiOJiD0oanM/ar++UACGIkrneIheCdWp9RP8ZP7s1n71 jUogvmrc/BnwqS0= -----END CERTIFICATE-----Generated at Sat Dec 6 17:17:42 2025 by rpki-client