This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/_neEZrmq0Ct3kFL__C5GyRs4mP0.roa File: _neEZrmq0Ct3kFL__C5GyRs4mP0.roa (raw, json) Hash identifier: 9kAGb49vKmov+gzr6FaaU1iRQWFt3aVXTbBHFybGSGc= Subject key identifier: FE:77:84:66:B9:AA:D0:2B:77:90:52:FF:FC:2E:46:C9:1B:38:98:FD Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 019B7EA738861B163A21F0BD1728EC67C2C7 Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/_neEZrmq0Ct3kFL__C5GyRs4mP0.roa Signing time: Fri 02 Jan 2026 12:20:46 +0000 ROA not before: Fri 02 Jan 2026 12:20:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215590 IP address blocks: 94.141.160.0/24 maxlen: 24 94.141.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:38:86:1b:16:3a:21:f0:bd:17:28:ec:67:c2:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Jan 2 12:20:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe778466b9aad02b779052fffc2e46c91b3898fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d1:59:29:83:70:42:15:17:72:b5:b2:e7:c4: be:3d:67:99:1b:95:14:bf:29:cd:9a:7e:78:e3:73: fc:bb:7b:39:82:29:ee:60:2d:85:8b:38:ce:be:40: 62:d5:0c:5d:df:67:08:9d:36:bb:17:0f:74:f9:6e: fb:4b:ac:19:fb:f6:ef:a2:4a:75:39:ef:c8:f4:6f: 9b:ac:4c:b6:77:21:ac:50:3d:3d:26:9f:33:4e:b9: 82:84:1f:da:c6:8a:cc:cf:6f:01:36:01:91:e2:f3: ff:3b:ff:ab:01:d1:9a:1c:f9:c8:46:56:83:1f:c3: 2c:74:8f:29:b6:17:50:49:c7:12:17:bb:48:ea:13: c5:b2:86:54:e3:3d:3e:e6:9b:a0:b3:0a:7d:12:42: 6f:6e:99:81:ec:b8:77:e7:3f:e4:7f:d4:df:1e:c5: 1d:f0:45:b6:fe:d4:e8:41:52:7b:68:13:83:b9:81: b3:fd:82:eb:7a:a3:d9:f8:a4:ab:f3:8d:3a:3a:68: b3:b5:88:df:0f:26:94:c5:52:4d:58:c7:21:74:3d: 1d:dd:55:34:24:4b:5f:fa:e5:41:c7:ff:71:5f:4d: 8f:3c:ff:b5:e3:75:29:ae:46:2c:18:60:bb:5c:48: cd:52:ac:90:93:cc:2f:09:9b:2e:59:3b:3c:b1:74: 7f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:77:84:66:B9:AA:D0:2B:77:90:52:FF:FC:2E:46:C9:1B:38:98:FD X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/_neEZrmq0Ct3kFL__C5GyRs4mP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.141.160.0/23 Signature Algorithm: sha256WithRSAEncryption cf:f9:8d:26:c2:81:16:36:9a:ed:0b:29:4c:5a:2d:c3:b8:e6: 33:dd:e5:e5:14:74:50:79:fb:a0:09:b1:7b:cb:6b:a3:74:04: 14:63:c5:c8:81:60:72:43:d5:f8:39:39:21:f6:15:b4:51:da: 15:78:33:f6:1d:bb:da:54:df:a0:de:99:06:88:0a:72:49:51: 72:d0:da:49:2e:ef:37:d2:6a:f9:5d:63:0e:78:aa:bc:7f:fd: 07:f3:81:3d:23:02:e4:5f:84:70:a8:d3:78:7d:85:01:91:3a: ab:a7:77:41:51:52:fe:ab:24:4a:f2:53:7b:c6:0f:27:b1:13: 19:99:28:e0:16:5d:b4:0e:21:ab:7c:c4:cb:2f:8e:a4:37:9a: 59:9c:ba:30:af:ef:f6:ee:30:69:fa:b8:76:e9:18:38:64:ac: fa:2b:a5:12:6c:6c:2a:c6:ef:f4:87:a0:59:d6:39:f8:b3:71: 67:f4:e2:01:c3:fa:64:e3:25:5f:cf:08:7d:9a:d8:0e:e8:85: 76:ac:9a:90:20:e0:eb:4e:ad:c2:18:1a:4d:7a:bc:dc:b5:38: ba:00:a4:d2:98:43:46:a9:21:00:15:ef:ac:c4:97:aa:fe:64: 3e:25:12:e8:42:ca:46:16:ff:8f:2c:3f:cb:df:44:f2:e3:ac: 9c:82:ab:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pziGGxY6IfC9FyjsZ8LHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjYwMTAyMTIyMDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTc3ODQ2NmI5YWFkMDJiNzc5MDUyZmZmYzJlNDZjOTFiMzg5OGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydFZKYNwQhUXcrWy58S+PWeZG5UU vynNmn5443P8u3s5ginuYC2FizjOvkBi1Qxd32cInTa7Fw90+W77S6wZ+/bvokp1 Oe/I9G+brEy2dyGsUD09Jp8zTrmChB/axorMz28BNgGR4vP/O/+rAdGaHPnIRlaD H8MsdI8pthdQSccSF7tI6hPFsoZU4z0+5pugswp9EkJvbpmB7Lh35z/kf9TfHsUd 8EW2/tToQVJ7aBODuYGz/YLreqPZ+KSr8406OmiztYjfDyaUxVJNWMchdD0d3VU0 JEtf+uVBx/9xX02PPP+143UprkYsGGC7XEjNUqyQk8wvCZsuWTs8sXR/TQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP53hGa5qtArd5BS//wuRskbOJj9MB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvX25lRVpybXEwQ3Qza0ZMX19DNUd5UnM0bVAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXo2gMA0G CSqGSIb3DQEBCwUAA4IBAQDP+Y0mwoEWNprtCylMWi3DuOYz3eXlFHRQefugCbF7 y2ujdAQUY8XIgWByQ9X4OTkh9hW0UdoVeDP2HbvaVN+g3pkGiApySVFy0NpJLu83 0mr5XWMOeKq8f/0H84E9IwLkX4RwqNN4fYUBkTqrp3dBUVL+qyRK8lN7xg8nsRMZ mSjgFl20DiGrfMTLL46kN5pZnLowr+/27jBp+rh26Rg4ZKz6K6USbGwqxu/0h6BZ 1jn4s3Fn9OIBw/pk4yVfzwh9mtgO6IV2rJqQIODrTq3CGBpNerzctTi6AKTSmENG qSEAFe+sxJeq/mQ+JRLoQspGFv+PLD/L30Ty46ycgqsZ -----END CERTIFICATE-----Generated at Wed Jan 21 14:10:56 2026 by rpki-client