This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EfVjR2ofqGY2zGy44N2G0fFUbbA.roa File: EfVjR2ofqGY2zGy44N2G0fFUbbA.roa (raw, json) Hash identifier: qTaB1KduLnD5IFGh9kuXECWmYjVGWFDbqNrZE4lwspo= Subject key identifier: 11:F5:63:47:6A:1F:A8:66:36:CC:6C:B8:E0:DD:86:D1:F1:54:6D:B0 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F855F92BC3493170D2E82B3BF69C015 Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EfVjR2ofqGY2zGy44N2G0fFUbbA.roa Signing time: Fri 02 Jan 2026 16:23:25 +0000 ROA not before: Fri 02 Jan 2026 16:23:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200239 IP address blocks: 194.87.64.0/24 maxlen: 24 194.87.91.0/24 maxlen: 24 194.87.188.0/24 maxlen: 24 195.58.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:5f:92:bc:34:93:17:0d:2e:82:b3:bf:69:c0:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11f563476a1fa86636cc6cb8e0dd86d1f1546db0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:75:6e:65:8a:ae:e5:7f:8c:e1:fe:26:1d:fd: 27:03:13:92:14:89:20:4c:75:30:18:81:ac:3d:76: 4c:18:5e:eb:64:4a:37:f3:63:27:b9:01:7b:7c:53: 6b:ac:08:e7:ec:9c:22:da:cb:53:43:99:b2:b2:f0: 3c:01:d5:a1:29:bc:dc:92:09:cb:f9:11:72:5a:66: 5c:14:7f:4b:22:a7:f0:17:84:ff:cc:f6:56:cf:c1: 0a:2a:cf:1b:7c:d9:90:5a:1d:2e:11:96:3c:09:09: 89:53:00:b7:ce:0b:9b:ba:a2:f6:61:a0:b2:da:29: 13:cb:68:4f:5b:a7:46:3c:82:6b:fb:4e:57:f0:88: 22:1a:bb:86:a6:10:a9:15:d6:8a:b0:97:5b:38:ee: 83:55:6d:57:9d:aa:36:1a:08:ac:9f:a6:7e:e9:10: b6:b3:26:9b:ae:dd:ae:17:c5:33:c8:6e:c1:dd:0b: 3f:64:b0:f6:a9:cc:1b:53:5d:c0:c5:6c:32:17:33: 73:b3:20:eb:d8:49:f8:e9:f7:50:ce:32:bc:01:f7: e7:52:32:b6:a3:27:dd:b7:37:2d:46:23:41:3b:06: 82:e2:84:d0:40:ff:09:40:c3:93:f1:00:57:b7:24: 3c:27:72:75:cb:e1:9a:82:fb:5e:ea:bc:fa:03:7f: 4b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F5:63:47:6A:1F:A8:66:36:CC:6C:B8:E0:DD:86:D1:F1:54:6D:B0 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EfVjR2ofqGY2zGy44N2G0fFUbbA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.87.64.0/24 194.87.91.0/24 194.87.188.0/24 195.58.63.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:ca:39:8e:71:95:e1:82:be:25:3a:6b:b1:ed:90:60:8b:4e: 0b:7c:9a:39:67:21:d2:10:c7:82:fc:2d:5f:a3:f3:a5:28:d7: 11:66:8f:d4:8e:fe:41:83:aa:e2:db:f5:d6:06:e4:39:cd:89: 7c:c9:0b:a0:4d:3f:9a:81:4b:b9:c1:78:11:bc:f9:12:ce:7c: cd:d1:07:73:2e:06:38:07:2a:18:c7:a8:77:02:a5:62:59:13: f1:2c:29:63:8b:76:99:a3:6e:26:19:f4:81:67:46:36:78:bc: 07:d0:25:3e:8d:6b:32:6d:e4:8c:d8:50:f7:c4:91:4c:3b:84: 6a:b6:ca:6d:dd:d6:4c:e1:e5:82:d7:1c:c1:51:34:6a:94:18: d6:bf:46:73:d6:c8:84:4c:a6:32:08:a4:22:ab:27:6f:2f:82: 5b:e5:13:0b:a8:e7:ed:c0:4e:5a:47:54:6a:da:a5:cf:f0:10: 72:36:c9:bf:64:3b:c2:0c:c3:a0:24:55:cd:73:6f:02:0b:8d: 27:33:66:98:89:93:67:17:0c:2f:aa:f8:4d:a4:ad:6f:33:ad: 3c:4b:93:7b:db:00:cd:b5:e3:67:33:7d:00:b7:ba:c1:eb:4e: 01:ca:04:18:c3:fd:1a:21:5d:1a:b1:4b:b8:1e:ef:4a:3c:82: b6:40:4f:c9 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/hV+SvDSTFw0ugrO/acAVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWY1NjM0NzZhMWZhODY2MzZjYzZjYjhlMGRkODZkMWYxNTQ2ZGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnVuZYqu5X+M4f4mHf0nAxOSFIkg THUwGIGsPXZMGF7rZEo382MnuQF7fFNrrAjn7Jwi2stTQ5mysvA8AdWhKbzckgnL +RFyWmZcFH9LIqfwF4T/zPZWz8EKKs8bfNmQWh0uEZY8CQmJUwC3zgubuqL2YaCy 2ikTy2hPW6dGPIJr+05X8IgiGruGphCpFdaKsJdbOO6DVW1Xnao2Ggisn6Z+6RC2 syabrt2uF8UzyG7B3Qs/ZLD2qcwbU13AxWwyFzNzsyDr2En46fdQzjK8AffnUjK2 oyfdtzctRiNBOwaC4oTQQP8JQMOT8QBXtyQ8J3J1y+Gagvte6rz6A39LXwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFBH1Y0dqH6hmNsxsuODdhtHxVG2wMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvRWZWalIyb2ZxR1kyekd5NDROMkcwZkZVYmJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwldAAwQA wldbAwQAwle8AwQAwzo/MA0GCSqGSIb3DQEBCwUAA4IBAQBOyjmOcZXhgr4lOmux 7ZBgi04LfJo5ZyHSEMeC/C1fo/OlKNcRZo/Ujv5Bg6ri2/XWBuQ5zYl8yQugTT+a gUu5wXgRvPkSznzN0QdzLgY4ByoYx6h3AqViWRPxLClji3aZo24mGfSBZ0Y2eLwH 0CU+jWsybeSM2FD3xJFMO4Rqtspt3dZM4eWC1xzBUTRqlBjWv0Zz1siETKYyCKQi qydvL4Jb5RMLqOftwE5aR1Rq2qXP8BByNsm/ZDvCDMOgJFXNc28CC40nM2aYiZNn FwwvqvhNpK1vM608S5N72wDNteNnM30At7rB604BygQYw/0aIV0asUu4Hu9KPIK2 QE/J -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:18 2026 by rpki-client