This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/EwdpgIL9FfCy9ehB3BBTCnpWay4.roa File: EwdpgIL9FfCy9ehB3BBTCnpWay4.roa (raw, json) Hash identifier: Zd/Fab+TtV6L026SR3m6Lr9zmEU3BY+Tmm5k2jzHBGA= Subject key identifier: 13:07:69:80:82:FD:15:F0:B2:F5:E8:41:DC:10:53:0A:7A:56:6B:2E Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 019B7EA731FFDF087784208D9F9E0A569EF9 Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/EwdpgIL9FfCy9ehB3BBTCnpWay4.roa Signing time: Fri 02 Jan 2026 12:20:45 +0000 ROA not before: Fri 02 Jan 2026 12:20:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8342 IP address blocks: 45.151.60.0/24 maxlen: 24 81.17.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:31:ff:df:08:77:84:20:8d:9f:9e:0a:56:9e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Jan 2 12:20:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1307698082fd15f0b2f5e841dc10530a7a566b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a5:b5:5b:a6:9c:f2:31:1b:35:f5:0b:8f:12: db:0f:f2:16:dd:ae:1a:c1:d1:fa:65:a4:d9:8d:0e: 1d:ad:6b:6b:41:1a:8f:6f:d0:dc:de:59:52:d4:17: 51:dc:2f:e6:c7:b2:56:30:87:2e:05:a2:89:11:ca: db:44:ea:af:2a:68:ab:24:5c:bd:85:b8:ad:9b:1d: e8:dd:48:6b:78:9a:5b:4d:03:26:4d:dc:d8:71:42: 1d:1e:c4:94:65:c9:0a:28:76:d8:17:98:b3:f1:ed: 20:3a:43:60:64:84:84:38:76:fc:6d:36:bd:a3:0d: b4:c2:27:2a:f4:19:64:13:8f:06:e5:78:97:9f:59: ab:6b:c9:88:35:c1:37:ae:a5:7d:43:af:3b:8a:b4: e3:d0:e7:68:df:ff:e7:41:5e:cf:d6:24:7c:7c:d1: ea:5c:ba:54:48:df:9f:1f:87:67:0f:7b:d2:c9:ba: 70:dc:df:c8:3c:36:c6:76:35:ee:cd:91:bd:88:ad: 56:01:07:c3:d6:c2:39:26:b5:64:b1:63:7e:f5:e8: 88:35:c6:a8:6e:8a:88:be:28:f0:42:39:82:9a:39: d8:54:04:96:2d:83:1d:4e:68:15:3b:60:46:31:3b: d2:0d:29:d2:18:1e:0a:9d:a3:59:3e:26:35:1f:3e: 7b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:07:69:80:82:FD:15:F0:B2:F5:E8:41:DC:10:53:0A:7A:56:6B:2E X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/EwdpgIL9FfCy9ehB3BBTCnpWay4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.151.60.0/24 81.17.158.0/24 Signature Algorithm: sha256WithRSAEncryption 68:bb:71:5e:17:e2:b6:99:52:7d:d0:6a:7c:b3:74:d9:a1:61: 1a:c1:8e:d2:d5:6b:f1:12:b2:a1:e6:07:d0:e9:cd:54:a2:5b: 14:bd:8a:6a:57:d0:3e:59:ba:f3:8a:66:e1:5f:6a:8a:89:aa: 7b:b9:a6:5f:ef:ed:63:50:2b:60:d4:1a:21:a0:9c:ed:05:67: 55:ab:8d:1d:c8:91:51:2f:c4:fa:81:5d:d4:2f:69:9b:b1:a9: 24:7c:10:1c:15:89:5b:78:c6:22:aa:dd:6b:4f:8d:13:62:20: 10:e0:b9:cb:10:dc:9c:dc:10:75:8b:4a:59:22:22:31:5b:62: bf:ce:94:fc:5a:21:c4:bb:a5:e9:74:a7:7c:b4:48:1f:cf:3e: 95:06:ae:18:a1:45:3b:ef:2e:15:29:43:1c:62:4b:88:ae:ee: 62:ae:c2:1e:f4:25:f5:ff:35:e6:0b:f1:bd:08:39:22:d4:a2: 99:1e:05:0a:a3:47:66:3a:91:15:cc:31:cb:20:f4:d5:aa:ca: 7a:97:dc:b6:0c:6a:22:6c:33:80:22:80:50:1b:5a:ca:9d:04: 17:11:b9:9d:c0:34:ed:5d:a6:67:d9:f0:0a:e5:85:0d:88:7c: 05:3d:b2:3d:64:50:11:27:f1:27:57:ce:67:67:36:18:24:b0: 78:05:48:89 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pzH/3wh3hCCNn54KVp75MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjYwMTAyMTIyMDQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzA3Njk4MDgyZmQxNWYwYjJmNWU4NDFkYzEwNTMwYTdhNTY2YjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKW1W6ac8jEbNfULjxLbD/IW3a4a wdH6ZaTZjQ4drWtrQRqPb9Dc3llS1BdR3C/mx7JWMIcuBaKJEcrbROqvKmirJFy9 hbitmx3o3UhreJpbTQMmTdzYcUIdHsSUZckKKHbYF5iz8e0gOkNgZISEOHb8bTa9 ow20wicq9BlkE48G5XiXn1mra8mINcE3rqV9Q687irTj0Odo3//nQV7P1iR8fNHq XLpUSN+fH4dnD3vSybpw3N/IPDbGdjXuzZG9iK1WAQfD1sI5JrVksWN+9eiINcao boqIvijwQjmCmjnYVASWLYMdTmgVO2BGMTvSDSnSGB4KnaNZPiY1Hz57LwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBMHaYCC/RXwsvXoQdwQUwp6VmsuMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvRXdkcGdJTDlGZkN5OWVoQjNCQlRDbnBXYXk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZc8AwQA URGeMA0GCSqGSIb3DQEBCwUAA4IBAQBou3FeF+K2mVJ90Gp8s3TZoWEawY7S1Wvx ErKh5gfQ6c1UolsUvYpqV9A+WbrzimbhX2qKiap7uaZf7+1jUCtg1BohoJztBWdV q40dyJFRL8T6gV3UL2mbsakkfBAcFYlbeMYiqt1rT40TYiAQ4LnLENyc3BB1i0pZ IiIxW2K/zpT8WiHEu6XpdKd8tEgfzz6VBq4YoUU77y4VKUMcYkuIru5irsIe9CX1 /zXmC/G9CDki1KKZHgUKo0dmOpEVzDHLIPTVqsp6l9y2DGoibDOAIoBQG1rKnQQX EbmdwDTtXaZn2fAK5YUNiHwFPbI9ZFARJ/EnV85nZzYYJLB4BUiJ -----END CERTIFICATE-----Generated at Wed Jan 21 14:10:57 2026 by rpki-client