This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/EXFU73rH1Gc1eVRDfvuScYJlzGs.roa File: EXFU73rH1Gc1eVRDfvuScYJlzGs.roa (raw, json) Hash identifier: OuCZzos3D1mTnexc0/u8FlcZVoi8DzCDiFFLd+iZReo= Subject key identifier: 11:71:54:EF:7A:C7:D4:67:35:79:54:43:7E:FB:92:71:82:65:CC:6B Certificate issuer: /CN=ea93edfc2aa748e4981050ec06e3a66920265e17 Certificate serial: 019C037E3BDAD8B96343001EC7DC30DD2BF2 Authority key identifier: EA:93:ED:FC:2A:A7:48:E4:98:10:50:EC:06:E3:A6:69:20:26:5E:17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/EXFU73rH1Gc1eVRDfvuScYJlzGs.roa Signing time: Wed 28 Jan 2026 07:25:30 +0000 ROA not before: Wed 28 Jan 2026 07:25:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 378 IP address blocks: 132.72.0.0/15 maxlen: 24 132.72.0.0/16 maxlen: 24 132.73.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.mft rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 10:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:03:7e:3b:da:d8:b9:63:43:00:1e:c7:dc:30:dd:2b:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea93edfc2aa748e4981050ec06e3a66920265e17 Validity Not Before: Jan 28 07:25:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=117154ef7ac7d467357954437efb92718265cc6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:81:cd:31:4f:be:91:5b:88:bc:dd:77:6f:05: ec:6a:a1:72:0c:7f:10:00:cf:f7:e0:62:94:c7:52: 1a:4b:0b:de:49:d4:dd:84:87:e5:98:82:68:7d:3c: cf:fb:0f:14:58:d2:9c:10:ff:73:86:d7:1f:67:3a: 4a:52:98:68:1b:30:bd:0c:6b:e3:05:4f:38:69:cd: 50:b1:e3:73:ea:37:e4:33:92:f7:17:bf:53:4f:64: bd:3a:9e:c8:f2:a4:9d:67:26:0e:cb:06:ea:b0:c5: c3:53:d1:6a:7b:7f:64:3a:17:67:a5:ad:4f:2e:c6: 95:a0:a1:bd:8e:46:80:5c:d4:71:fb:01:76:bc:f2: df:8a:c1:24:21:0c:0b:7f:5c:45:86:56:8b:15:4b: 55:37:ac:97:7a:91:4e:0d:07:56:a3:57:83:fe:c0: a4:a8:39:ee:f5:a2:be:69:87:83:33:55:b9:28:96: 6e:14:b4:0c:7a:9e:c2:ff:e9:ee:0f:a1:40:e5:b6: c8:4f:18:1b:18:09:0d:b5:b0:a1:e0:c2:21:fa:89: 4b:0a:20:fc:57:b8:64:ef:50:d6:4d:b0:85:a6:24: b2:1b:8e:0d:72:d1:e2:89:28:60:a9:de:12:0b:15: 07:9a:a6:61:71:a1:bd:70:e2:ec:8e:56:f2:fa:a8: 2d:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:71:54:EF:7A:C7:D4:67:35:79:54:43:7E:FB:92:71:82:65:CC:6B X509v3 Authority Key Identifier: keyid:EA:93:ED:FC:2A:A7:48:E4:98:10:50:EC:06:E3:A6:69:20:26:5E:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6pPt_CqnSOSYEFDsBuOmaSAmXhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/EXFU73rH1Gc1eVRDfvuScYJlzGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0fd5f4-56c0-48ba-b02b-d138a9c4e43f/1/6pPt_CqnSOSYEFDsBuOmaSAmXhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 132.72.0.0/15 Signature Algorithm: sha256WithRSAEncryption 3f:31:3a:d5:69:65:67:a4:5b:26:3f:d1:2a:aa:4f:dd:3c:29: 69:fa:30:b9:cb:cc:50:23:a7:b0:6e:09:07:6c:82:4e:b0:e1: 83:ac:83:28:ee:d0:92:2e:c3:35:9e:55:49:86:60:3a:5f:12: b4:90:82:1e:4c:4a:16:ba:dd:47:d3:e3:5d:97:7c:6c:4f:c1: 0b:d3:5b:74:3d:58:7e:b7:4d:f3:70:98:91:7a:93:ec:fc:64: e5:b5:00:6a:69:a0:24:be:fd:5e:0d:07:63:06:c3:a1:d9:bd: ac:c4:15:05:5a:21:c8:1d:bc:e6:80:9e:3c:bb:7b:6d:c5:c1: b9:70:af:f8:c3:e5:91:e6:47:d8:67:8c:d7:7f:d8:ab:fd:7d: de:db:21:69:71:de:a7:e7:8e:1c:c1:99:5b:20:5c:ce:21:7b: 76:f3:f1:78:cd:66:27:09:c1:b4:75:4d:dc:0c:42:56:b5:b4: 3a:5f:d8:8b:81:ff:25:2e:aa:1c:a7:83:fe:9b:e5:c7:b0:9c: ef:64:4e:91:5c:5d:4b:df:20:0d:9e:ee:32:a1:e9:1e:8c:6f: 63:86:06:64:52:a9:34:5b:36:e4:ce:1a:73:ca:dc:e9:ee:3e: 21:33:7c:1c:19:8c:d0:da:84:8d:ba:35:45:e7:21:2e:e5:16: b8:1e:5b:f0 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZwDfjva2LljQwAex9ww3SvyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhOTNlZGZjMmFhNzQ4ZTQ5ODEwNTBlYzA2ZTNhNjY5MjAy NjVlMTcwHhcNMjYwMTI4MDcyNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTcxNTRlZjdhYzdkNDY3MzU3OTU0NDM3ZWZiOTI3MTgyNjVjYzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84HNMU++kVuIvN13bwXsaqFyDH8Q AM/34GKUx1IaSwveSdTdhIflmIJofTzP+w8UWNKcEP9zhtcfZzpKUphoGzC9DGvj BU84ac1QseNz6jfkM5L3F79TT2S9Op7I8qSdZyYOywbqsMXDU9Fqe39kOhdnpa1P LsaVoKG9jkaAXNRx+wF2vPLfisEkIQwLf1xFhlaLFUtVN6yXepFODQdWo1eD/sCk qDnu9aK+aYeDM1W5KJZuFLQMep7C/+nuD6FA5bbITxgbGAkNtbCh4MIh+olLCiD8 V7hk71DWTbCFpiSyG44NctHiiShgqd4SCxUHmqZhcaG9cOLsjlby+qgtLwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFBFxVO96x9RnNXlUQ377knGCZcxrMB8GA1UdIwQY MBaAFOqT7fwqp0jkmBBQ7AbjpmkgJl4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnBQdF9DcW5TT1NZRUZEc0J1T21hU0FtWGhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8wZmQ1ZjQtNTZjMC00OGJhLWIwMmIt ZDEzOGE5YzRlNDNmLzEvRVhGVTczckgxR2MxZVZSRGZ2dVNjWUpsekdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8wZmQ1ZjQtNTZjMC00OGJhLWIwMmItZDEzOGE5YzRlNDNm LzEvNnBQdF9DcW5TT1NZRUZEc0J1T21hU0FtWGhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBhEgwDQYJ KoZIhvcNAQELBQADggEBAD8xOtVpZWekWyY/0SqqT908KWn6MLnLzFAjp7BuCQds gk6w4YOsgyju0JIuwzWeVUmGYDpfErSQgh5MSha63UfT412XfGxPwQvTW3Q9WH63 TfNwmJF6k+z8ZOW1AGppoCS+/V4NB2MGw6HZvazEFQVaIcgdvOaAnjy7e23Fwblw r/jD5ZHmR9hnjNd/2Kv9fd7bIWlx3qfnjhzBmVsgXM4he3bz8XjNZicJwbR1TdwM Qla1tDpf2IuB/yUuqhyng/6b5cewnO9kTpFcXUvfIA2e7jKh6R6Mb2OGBmRSqTRb NuTOGnPK3OnuPiEzfBwZjNDahI26NUXnIS7lFrgeW/A= -----END CERTIFICATE-----Generated at Sat Feb 7 20:22:41 2026 by rpki-client