This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/EfB0MxJFEM8P-mBHWzWP2g-vuRg.roa File: EfB0MxJFEM8P-mBHWzWP2g-vuRg.roa (raw, json) Hash identifier: 5I3dde4Z0pGqorT+Es4EH70Wh9X5Be4WVxahJvSkgLw= Subject key identifier: 11:F0:74:33:12:45:10:CF:0F:FA:60:47:5B:35:8F:DA:0F:AF:B9:18 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019B77C7261C72D344C3839A69294665B260 Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/EfB0MxJFEM8P-mBHWzWP2g-vuRg.roa Signing time: Thu 01 Jan 2026 04:18:18 +0000 ROA not before: Thu 01 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30344 IP address blocks: 138.124.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:26:1c:72:d3:44:c3:83:9a:69:29:46:65:b2:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Jan 1 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11f07433124510cf0ffa60475b358fda0fafb918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:70:cf:20:9a:15:6f:a8:59:e0:32:d5:f7:eb: a7:f6:40:ab:c1:7f:d5:6d:48:8f:cb:85:e4:e1:81: a6:18:c2:4d:3b:ec:d2:1d:62:e5:e4:50:67:5f:bd: 01:67:ca:59:88:f2:98:9e:4c:6c:14:c9:aa:4f:95: 4e:0e:e5:d8:b5:5f:c2:dd:92:e0:2b:78:6a:39:56: 2b:51:95:c1:ec:97:8e:39:f6:1d:28:42:72:58:90: b3:be:c4:57:ca:04:8b:ba:3e:56:2d:d5:01:27:6b: 91:4f:df:9b:26:d1:9b:b8:0f:62:78:81:51:71:6a: 5f:85:bb:63:01:6c:18:ef:ed:ee:de:b9:a6:14:d9: 48:1c:74:1c:2e:17:e2:01:a9:18:d0:27:d1:db:eb: 73:a3:d8:72:69:cd:f6:f8:d4:ff:7b:a0:e9:ad:ac: b7:f1:a1:8e:32:a9:0d:0d:12:6f:44:c6:ee:51:d3: 43:0a:14:3b:89:9f:05:9a:33:62:9a:80:ca:fe:06: 44:dc:1f:c3:77:71:52:9f:d7:07:77:8a:8d:24:a3: 32:f6:fb:13:86:e6:ec:ba:49:af:54:69:ad:40:18: 38:2e:3f:c1:fa:80:c0:a9:5f:27:aa:02:1f:04:f7: ba:25:74:45:a1:d2:f6:7a:d3:c1:a1:e4:b8:ea:75: 45:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F0:74:33:12:45:10:CF:0F:FA:60:47:5B:35:8F:DA:0F:AF:B9:18 X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/EfB0MxJFEM8P-mBHWzWP2g-vuRg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.124.187.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:fe:32:aa:19:b0:ce:b2:1e:eb:19:53:bc:42:36:5e:81:e6: 8c:9e:1d:96:eb:35:94:1c:2a:3a:d5:ce:94:c6:ae:56:b4:45: c5:92:6d:d7:12:bf:15:cb:32:e8:82:d4:45:10:47:35:98:60: 3d:9a:8e:92:47:47:d4:7b:10:2f:c9:20:d7:20:45:7e:30:70: b9:a8:2d:e7:74:ed:a2:04:9c:83:fd:85:68:df:cc:1a:71:6b: e6:66:46:b1:f1:65:7c:8b:a5:ba:c5:d6:31:a1:8c:3a:c1:2a: a0:be:38:c3:58:81:07:8b:f9:ad:f7:82:0e:aa:e8:62:c8:7c: 6b:d5:ab:ae:b9:8c:87:64:34:5f:96:f3:d9:d6:9f:b9:91:31: b3:65:89:99:c8:2b:df:87:26:d1:61:d5:e6:8f:12:7c:49:de: c8:26:68:f1:1b:00:ca:0e:b4:14:93:08:e6:35:7a:f9:04:25: 68:4e:db:0e:ab:8e:b9:bb:f2:6c:7b:f1:e7:78:10:a8:77:df: 6e:06:53:49:c5:95:bf:98:6e:f1:0a:d8:9d:8c:a6:39:3c:1a: 89:8f:32:cc:48:04:8f:a0:4b:2a:5f:df:ec:1a:61:67:df:b6: 27:2b:03:8b:a6:25:d1:54:15:bd:d2:76:de:0d:f1:ea:80:a8: 94:bc:53:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xyYcctNEw4OaaSlGZbJgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjYwMTAxMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWYwNzQzMzEyNDUxMGNmMGZmYTYwNDc1YjM1OGZkYTBmYWZiOTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHDPIJoVb6hZ4DLV9+un9kCrwX/V bUiPy4Xk4YGmGMJNO+zSHWLl5FBnX70BZ8pZiPKYnkxsFMmqT5VODuXYtV/C3ZLg K3hqOVYrUZXB7JeOOfYdKEJyWJCzvsRXygSLuj5WLdUBJ2uRT9+bJtGbuA9ieIFR cWpfhbtjAWwY7+3u3rmmFNlIHHQcLhfiAakY0CfR2+tzo9hyac32+NT/e6Dpray3 8aGOMqkNDRJvRMbuUdNDChQ7iZ8FmjNimoDK/gZE3B/Dd3FSn9cHd4qNJKMy9vsT hubsukmvVGmtQBg4Lj/B+oDAqV8nqgIfBPe6JXRFodL2etPBoeS46nVFEwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBHwdDMSRRDPD/pgR1s1j9oPr7kYMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvRWZCME14SkZFTThQLW1CSFd6V1AyZy12dVJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiny7MA0G CSqGSIb3DQEBCwUAA4IBAQB//jKqGbDOsh7rGVO8QjZegeaMnh2W6zWUHCo61c6U xq5WtEXFkm3XEr8VyzLogtRFEEc1mGA9mo6SR0fUexAvySDXIEV+MHC5qC3ndO2i BJyD/YVo38wacWvmZkax8WV8i6W6xdYxoYw6wSqgvjjDWIEHi/mt94IOquhiyHxr 1auuuYyHZDRflvPZ1p+5kTGzZYmZyCvfhybRYdXmjxJ8Sd7IJmjxGwDKDrQUkwjm NXr5BCVoTtsOq465u/Jse/HneBCod99uBlNJxZW/mG7xCtidjKY5PBqJjzLMSASP oEsqX9/sGmFn37YnKwOLpiXRVBW90nbeDfHqgKiUvFOs -----END CERTIFICATE-----Generated at Wed Jan 21 06:47:35 2026 by rpki-client