This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/c4LLwoEfa9pmCTCK4YPW9MCfEOQ.roa File: c4LLwoEfa9pmCTCK4YPW9MCfEOQ.roa (raw, json) Hash identifier: 1IshQEb9r0UJ0eRjPea5O5if/+55+/ToEQuT1KCI7/s= Subject key identifier: 73:82:CB:C2:81:1F:6B:DA:66:09:30:8A:E1:83:D6:F4:C0:9F:10:E4 Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Certificate serial: 019B337B63FBA9836DA2E1682FB5F429B7B5 Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/c4LLwoEfa9pmCTCK4YPW9MCfEOQ.roa Signing time: Thu 18 Dec 2025 22:01:23 +0000 ROA not before: Thu 18 Dec 2025 22:01:23 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 174 IP address blocks: 213.145.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:7b:63:fb:a9:83:6d:a2:e1:68:2f:b5:f4:29:b7:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722 Validity Not Before: Dec 18 22:01:23 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=7382cbc2811f6bda6609308ae183d6f4c09f10e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0a:a9:d1:ae:83:f8:93:03:56:27:25:af:cf: ab:46:54:fc:f7:38:61:89:b5:2a:88:e1:81:b1:50: 76:26:4b:35:8b:c9:1e:6f:21:1a:7f:c8:df:4c:a9: 6a:bb:fa:44:74:99:c7:66:f5:39:e6:d0:40:19:31: 40:34:5a:ac:bc:08:cf:9b:d8:cb:f3:3f:ca:18:c8: 89:57:21:69:0e:ba:18:1e:6a:c8:65:d8:90:a4:b5: 0c:4e:98:31:25:3a:ca:44:0b:3f:ab:a4:7f:12:eb: 93:9f:07:b8:f1:90:47:8d:23:33:2c:57:e6:9d:00: 34:4b:0e:60:20:e4:61:15:71:cb:40:8e:29:5b:5b: 02:82:27:94:f9:5b:38:10:8f:89:c6:28:b0:25:97: cb:87:76:43:cd:63:df:4e:08:f4:a1:63:2c:b3:d1: c8:65:64:1b:72:0c:c5:5d:f1:6e:fd:e0:fc:bf:02: 91:54:6c:0b:aa:da:a8:e7:64:d3:bc:3d:a0:90:4c: 5f:2f:29:3e:be:45:82:dd:2c:66:cd:d6:7b:eb:7c: f5:cb:55:c3:c1:f8:64:26:d6:e6:77:2a:39:c3:f5: 8f:31:72:a8:05:24:ed:e8:36:02:91:0e:10:c2:b1: be:10:8f:a3:04:cc:b9:21:6a:98:48:e3:79:1e:65: 96:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:82:CB:C2:81:1F:6B:DA:66:09:30:8A:E1:83:D6:F4:C0:9F:10:E4 X509v3 Authority Key Identifier: keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/c4LLwoEfa9pmCTCK4YPW9MCfEOQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.145.70.0/24 Signature Algorithm: sha256WithRSAEncryption d8:dd:09:d7:f0:8c:81:0b:f3:fb:5f:53:70:ce:ed:32:17:f3: d1:28:49:01:ab:1b:df:02:da:b0:ca:44:2f:fe:ff:7e:52:9c: ed:85:a0:4b:a1:7a:a0:15:40:d4:d2:50:5e:65:e5:11:db:c4: 60:b8:86:6d:2e:a9:a1:05:4f:d8:ec:e6:02:cc:8c:51:ef:e1: 44:f7:8a:9d:32:5a:20:9f:8a:b5:11:23:6b:66:3e:47:7d:7d: 7e:77:d2:ea:03:98:5f:b3:8f:14:e7:1e:76:36:52:cf:66:a8: 65:18:76:35:13:0e:e3:52:e8:a3:52:5c:ba:da:56:16:ae:50: 7a:52:48:06:92:05:a4:c9:95:9a:d6:63:f1:58:31:fe:48:8b: 88:cb:0c:6c:80:93:80:7b:4d:ee:a4:93:71:ee:9b:a4:8b:0c: 01:ac:b3:6b:10:ab:db:0b:dc:89:2d:1f:ce:e8:ee:05:1a:7f: 9c:49:17:59:0a:8c:9b:56:90:35:11:77:58:13:34:f3:c1:8d: 53:da:eb:75:b9:bc:cb:1c:87:54:c8:42:ac:d5:6e:5c:6c:93: 45:63:ae:3e:da:5d:26:ab:ec:c9:97:4e:80:06:cd:45:78:29: 99:f3:af:2c:04:be:db:59:38:29:da:a0:26:41:67:57:0f:5a: 71:7a:f8:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsze2P7qYNtouFoL7X0Kbe1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx ZDA3MjIwHhcNMjUxMjE4MjIwMTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzgyY2JjMjgxMWY2YmRhNjYwOTMwOGFlMTgzZDZmNGMwOWYxMGU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogqp0a6D+JMDViclr8+rRlT89zhh ibUqiOGBsVB2Jks1i8kebyEaf8jfTKlqu/pEdJnHZvU55tBAGTFANFqsvAjPm9jL 8z/KGMiJVyFpDroYHmrIZdiQpLUMTpgxJTrKRAs/q6R/EuuTnwe48ZBHjSMzLFfm nQA0Sw5gIORhFXHLQI4pW1sCgieU+Vs4EI+JxiiwJZfLh3ZDzWPfTgj0oWMss9HI ZWQbcgzFXfFu/eD8vwKRVGwLqtqo52TTvD2gkExfLyk+vkWC3SxmzdZ763z1y1XD wfhkJtbmdyo5w/WPMXKoBSTt6DYCkQ4QwrG+EI+jBMy5IWqYSON5HmWWcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHOCy8KBH2vaZgkwiuGD1vTAnxDkMB8GA1UdIwQY MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt ZDI0MmI2ZjNhOGExLzEvYzRMTHdvRWZhOXBtQ1RDSzRZUFc5TUNmRU9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ZFGMA0G CSqGSIb3DQEBCwUAA4IBAQDY3QnX8IyBC/P7X1Nwzu0yF/PRKEkBqxvfAtqwykQv /v9+UpzthaBLoXqgFUDU0lBeZeUR28RguIZtLqmhBU/Y7OYCzIxR7+FE94qdMlog n4q1ESNrZj5HfX1+d9LqA5hfs48U5x52NlLPZqhlGHY1Ew7jUuijUly62lYWrlB6 UkgGkgWkyZWa1mPxWDH+SIuIywxsgJOAe03upJNx7pukiwwBrLNrEKvbC9yJLR/O 6O4FGn+cSRdZCoybVpA1EXdYEzTzwY1T2ut1ubzLHIdUyEKs1W5cbJNFY64+2l0m q+zJl06ABs1FeCmZ868sBL7bWTgp2qAmQWdXD1pxevib -----END CERTIFICATE-----Generated at Fri Dec 19 23:19:45 2025 by rpki-client