This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eff4csGpkHQKYej5CR1IWDQIjcA.roa File: eff4csGpkHQKYej5CR1IWDQIjcA.roa (raw, json) Hash identifier: NWZcW8FzwUjz1q6/gwE9OtLfoVueuurwtqMBHZzqwg8= Subject key identifier: 79:F7:F8:72:C1:A9:90:74:0A:61:E8:F9:09:1D:48:58:34:08:8D:C0 Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362 Certificate serial: 019ABC01584D716A39008B1A5EC0BF41870F Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eff4csGpkHQKYej5CR1IWDQIjcA.roa Signing time: Tue 25 Nov 2025 17:13:16 +0000 ROA not before: Tue 25 Nov 2025 17:13:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 24875 IP address blocks: 5.231.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:bc:01:58:4d:71:6a:39:00:8b:1a:5e:c0:bf:41:87:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362 Validity Not Before: Nov 25 17:13:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=79f7f872c1a990740a61e8f9091d485834088dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:43:73:33:92:66:5f:9c:d3:bd:bc:35:11:de: 9f:36:78:01:9c:0d:dd:0c:49:8f:09:2e:d2:ed:fd: 94:1d:3e:8e:8d:08:3a:55:87:68:63:2a:9e:1b:b1: bf:de:aa:d3:b4:87:a5:ca:c4:8a:66:43:4c:3b:17: 4a:98:a3:93:68:aa:56:96:a9:df:40:08:e9:52:32: 23:b0:42:77:aa:2a:8d:7f:9f:72:4c:19:f7:34:c9: 02:b1:f5:0c:ba:c0:86:f5:2c:db:e3:59:8e:e4:a7: 60:e2:5e:c0:ec:02:07:c5:1f:aa:1e:1f:ca:29:48: 1e:d2:83:6b:8f:81:da:84:fd:50:94:2b:ac:e9:28: e6:25:91:1f:78:c0:4d:5c:5b:ad:c1:68:5c:52:b6: 0e:0f:cd:f2:50:9e:10:4a:cc:75:3d:de:1d:e5:b4: b6:b4:73:48:6d:c1:4f:36:65:93:10:77:e5:43:31: de:e0:05:62:ae:1f:e6:1f:5b:cc:f2:ac:83:dd:d3: dd:f3:8a:11:c7:54:a2:6b:b9:ff:6f:e4:af:0d:77: 63:29:ab:14:89:29:4d:8d:f7:cb:df:7d:93:e8:94: b2:8b:fe:43:2c:dd:1a:d0:4c:99:bd:bd:85:63:85: a7:f4:be:a9:25:f9:82:b7:77:0f:7f:59:94:ce:42: 49:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F7:F8:72:C1:A9:90:74:0A:61:E8:F9:09:1D:48:58:34:08:8D:C0 X509v3 Authority Key Identifier: keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/eff4csGpkHQKYej5CR1IWDQIjcA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.231.58.0/24 Signature Algorithm: sha256WithRSAEncryption ab:ad:9a:82:6e:e7:af:33:9b:e2:d8:67:12:17:a8:2a:28:7f: c6:91:cc:cd:2e:3a:52:3a:04:5b:f2:e2:e6:3c:6a:75:bd:a1: 0e:14:28:fe:1f:dd:2f:4e:3a:1e:4d:bd:80:81:8a:c2:8e:f0: c5:6e:83:9a:23:05:31:66:4b:6e:83:9f:84:b4:93:19:5c:aa: b9:5d:a0:74:7d:11:de:71:9f:28:3c:3c:bc:7e:ef:ee:d8:bc: 16:aa:67:f2:33:3a:86:13:90:c7:9b:16:92:b2:4c:9b:54:79: 58:b7:8b:40:27:8e:21:11:77:10:3e:e8:06:b7:55:ee:26:96: 7f:c6:b5:61:f0:75:44:00:44:07:3b:6c:02:a7:47:8c:70:85: ce:52:40:85:6e:91:60:5c:fa:f6:91:d3:ce:6e:fe:79:69:36: c1:b6:e1:71:06:c8:c6:a8:e0:3e:9f:73:e7:cd:9b:07:c1:96: 03:bf:af:b8:4f:12:c0:16:16:36:2e:29:73:51:60:02:8c:d6: 36:48:17:df:f1:69:b1:03:39:42:4c:73:c0:22:b8:fc:fe:c6: 69:79:60:ce:1b:40:d2:e2:b5:c5:00:8f:eb:d5:89:78:57:37: 4e:68:98:db:03:4b:96:a9:de:2c:94:35:31:eb:b7:33:aa:98: 45:4b:a0:d8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZq8AVhNcWo5AIsaXsC/QYcPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlNjA5NzY5ODY4NmUxNTU1ZjUxZjZjODgzYmM1YTU4NTQ5 YjIzNjIwHhcNMjUxMTI1MTcxMzE2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWY3Zjg3MmMxYTk5MDc0MGE2MWU4ZjkwOTFkNDg1ODM0MDg4ZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvENzM5JmX5zTvbw1Ed6fNngBnA3d DEmPCS7S7f2UHT6OjQg6VYdoYyqeG7G/3qrTtIelysSKZkNMOxdKmKOTaKpWlqnf QAjpUjIjsEJ3qiqNf59yTBn3NMkCsfUMusCG9Szb41mO5Kdg4l7A7AIHxR+qHh/K KUge0oNrj4HahP1QlCus6SjmJZEfeMBNXFutwWhcUrYOD83yUJ4QSsx1Pd4d5bS2 tHNIbcFPNmWTEHflQzHe4AVirh/mH1vM8qyD3dPd84oRx1Sia7n/b+SvDXdjKasU iSlNjffL332T6JSyi/5DLN0a0EyZvb2FY4Wn9L6pJfmCt3cPf1mUzkJJpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHn3+HLBqZB0CmHo+QkdSFg0CI3AMB8GA1UdIwQY MBaAFD5gl2mGhuFVX1H2yIO8WlhUmyNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGIt ZTFiZDg4ZDNmZDA3LzEvZWZmNGNzR3BrSFFLWWVqNUNSMUlXRFFJamNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC85NjU4MzctNTJjYi00NmI0LWFlZGItZTFiZDg4ZDNmZDA3 LzEvUG1DWGFZYUc0VlZmVWZiSWc3eGFXRlNiSTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABec6MA0G CSqGSIb3DQEBCwUAA4IBAQCrrZqCbuevM5vi2GcSF6gqKH/GkczNLjpSOgRb8uLm PGp1vaEOFCj+H90vTjoeTb2AgYrCjvDFboOaIwUxZktug5+EtJMZXKq5XaB0fRHe cZ8oPDy8fu/u2LwWqmfyMzqGE5DHmxaSskybVHlYt4tAJ44hEXcQPugGt1XuJpZ/ xrVh8HVEAEQHO2wCp0eMcIXOUkCFbpFgXPr2kdPObv55aTbBtuFxBsjGqOA+n3Pn zZsHwZYDv6+4TxLAFhY2LilzUWACjNY2SBff8WmxAzlCTHPAIrj8/sZpeWDOG0DS 4rXFAI/r1Yl4VzdOaJjbA0uWqd4slDUx67czqphFS6DY -----END CERTIFICATE-----Generated at Fri Dec 5 17:04:41 2025 by rpki-client