This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/EfZsQaoIf8J8bD_DTWAkF4-4WvY.roa File: EfZsQaoIf8J8bD_DTWAkF4-4WvY.roa (raw, json) Hash identifier: ZJAEhbG64a9keH57hooL+GRwWBCFlIxTwwhv09FZ6zU= Subject key identifier: 11:F6:6C:41:AA:08:7F:C2:7C:6C:3F:C3:4D:60:24:17:8F:B8:5A:F6 Certificate issuer: /CN=b02aa961b477d5423d85b7d43f3efa26326d7090 Certificate serial: 019B79ECD3FBD37F0E806EF6BEDCC6EA0E22 Authority key identifier: B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/EfZsQaoIf8J8bD_DTWAkF4-4WvY.roa Signing time: Thu 01 Jan 2026 14:18:42 +0000 ROA not before: Thu 01 Jan 2026 14:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15373 IP address blocks: 212.87.224.0/21 maxlen: 21 212.87.232.0/23 maxlen: 23 212.87.234.0/23 maxlen: 23 212.87.236.0/23 maxlen: 23 212.87.238.0/23 maxlen: 23 212.87.251.0/24 maxlen: 24 212.87.253.0/24 maxlen: 24 2a01:698::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.mft rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:d3:fb:d3:7f:0e:80:6e:f6:be:dc:c6:ea:0e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02aa961b477d5423d85b7d43f3efa26326d7090 Validity Not Before: Jan 1 14:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11f66c41aa087fc27c6c3fc34d6024178fb85af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:00:b3:bb:6d:d1:d4:2a:42:53:22:9b:f8:d1: 77:cd:83:06:b7:11:dd:fb:de:e3:11:7e:e4:47:d6: 99:4d:9d:56:67:7f:f8:55:b9:0c:4e:ab:f2:f8:59: 79:f3:9b:37:0d:b7:7e:2a:67:37:4b:a1:17:d0:8d: 76:df:61:97:ee:2d:21:bf:c7:17:4e:1d:c3:1e:dc: 1a:3c:e1:f2:7b:76:9e:86:fb:c9:73:81:4b:5b:21: 5b:fe:63:c1:c5:8d:59:47:81:9c:d8:0f:77:6c:26: a7:f2:df:52:ee:d4:ce:86:d5:23:ad:08:be:1e:3a: 69:79:e8:c8:c1:bd:62:0a:49:c6:e2:f9:66:cf:59: 59:22:c6:4d:63:49:4f:6e:6f:33:da:aa:64:f6:1a: a0:d1:26:3b:7f:72:50:c3:ce:64:d2:e1:dd:01:d6: eb:aa:43:c5:fb:7c:6d:53:ed:12:f5:52:5a:b7:43: 7d:0f:e0:a0:60:d5:86:81:0d:73:98:a6:f9:6a:f6: 80:36:f2:3d:2f:8a:ed:a5:c1:3f:78:1e:61:31:fc: 03:68:a6:6d:87:1d:db:14:f8:5b:10:7d:55:57:e3: 8c:70:40:07:79:f1:82:e9:90:17:80:23:32:67:d6: 17:bf:2d:8d:85:e1:17:b4:d4:8c:c8:6e:11:f6:8c: 63:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F6:6C:41:AA:08:7F:C2:7C:6C:3F:C3:4D:60:24:17:8F:B8:5A:F6 X509v3 Authority Key Identifier: keyid:B0:2A:A9:61:B4:77:D5:42:3D:85:B7:D4:3F:3E:FA:26:32:6D:70:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCqpYbR31UI9hbfUPz76JjJtcJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/EfZsQaoIf8J8bD_DTWAkF4-4WvY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/01484c-5f28-42f5-b9ea-0787a503ca69/1/sCqpYbR31UI9hbfUPz76JjJtcJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.87.224.0/20 212.87.251.0/24 212.87.253.0/24 IPv6: 2a01:698::/32 Signature Algorithm: sha256WithRSAEncryption 83:50:a6:32:a8:f7:6c:7d:3e:23:8b:f6:22:d8:17:40:be:ed: 5b:7f:11:82:e8:2c:4c:c3:84:3b:44:15:35:d7:b3:bb:f4:12: 96:33:56:0e:20:14:55:98:12:61:f2:38:c8:39:8f:77:d1:14: 81:c2:a6:7c:52:37:96:9a:f7:0e:37:7a:42:5c:7e:1d:ff:ac: 16:7b:d1:3e:b3:6a:1a:f8:55:a9:60:bd:a9:88:3e:34:51:ed: ec:b3:f6:f2:31:04:e9:34:74:6e:e2:30:57:f4:ef:bd:78:be: a9:85:52:94:40:86:68:a5:5c:f2:f4:5f:f0:83:f0:c1:82:bb: ea:6a:7c:7a:76:75:03:d9:16:79:43:23:c6:0a:9b:c2:35:eb: a0:6c:3a:9b:d0:ad:a4:df:af:bd:3f:ba:d5:70:4d:b4:68:90: f3:16:e1:61:63:b0:35:65:ec:ff:12:7b:d8:de:2d:5e:14:6e: 0e:ad:14:2d:67:b1:3f:1e:32:2a:19:3b:36:46:fa:a2:76:d6: b5:93:fd:a2:dd:1f:22:a8:78:27:f5:d3:cf:08:26:db:f1:03: 7c:8b:50:f0:ed:45:d6:87:d6:3d:9e:af:1d:73:68:e0:a1:cc: 19:3e:81:c1:29:7f:67:25:06:84:f4:05:97:97:a4:3e:4c:1f: 89:03:e8:92 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt57NP7038OgG72vtzG6g4iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMmFhOTYxYjQ3N2Q1NDIzZDg1YjdkNDNmM2VmYTI2MzI2 ZDcwOTAwHhcNMjYwMTAxMTQxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWY2NmM0MWFhMDg3ZmMyN2M2YzNmYzM0ZDYwMjQxNzhmYjg1YWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwACzu23R1CpCUyKb+NF3zYMGtxHd +97jEX7kR9aZTZ1WZ3/4VbkMTqvy+Fl585s3Dbd+Kmc3S6EX0I1232GX7i0hv8cX Th3DHtwaPOHye3aehvvJc4FLWyFb/mPBxY1ZR4Gc2A93bCan8t9S7tTOhtUjrQi+ HjppeejIwb1iCknG4vlmz1lZIsZNY0lPbm8z2qpk9hqg0SY7f3JQw85k0uHdAdbr qkPF+3xtU+0S9VJat0N9D+CgYNWGgQ1zmKb5avaANvI9L4rtpcE/eB5hMfwDaKZt hx3bFPhbEH1VV+OMcEAHefGC6ZAXgCMyZ9YXvy2NheEXtNSMyG4R9oxjXQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFBH2bEGqCH/CfGw/w01gJBePuFr2MB8GA1UdIwQY MBaAFLAqqWG0d9VCPYW31D8++iYybXCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0NxcFliUjMxVUk5aGJmVVB6NzZKakp0Y0pBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wMTQ4NGMtNWYyOC00MmY1LWI5ZWEt MDc4N2E1MDNjYTY5LzEvRWZac1Fhb0lmOEo4YkRfRFRXQWtGNC00V3ZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wMTQ4NGMtNWYyOC00MmY1LWI5ZWEtMDc4N2E1MDNjYTY5 LzEvc0NxcFliUjMxVUk5aGJmVVB6NzZKakp0Y0pBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQE1FfgAwQA 1Ff7AwQA1Ff9MA0EAgACMAcDBQAqAQaYMA0GCSqGSIb3DQEBCwUAA4IBAQCDUKYy qPdsfT4ji/Yi2BdAvu1bfxGC6CxMw4Q7RBU117O79BKWM1YOIBRVmBJh8jjIOY93 0RSBwqZ8UjeWmvcON3pCXH4d/6wWe9E+s2oa+FWpYL2piD40Ue3ss/byMQTpNHRu 4jBX9O+9eL6phVKUQIZopVzy9F/wg/DBgrvqanx6dnUD2RZ5QyPGCpvCNeugbDqb 0K2k36+9P7rVcE20aJDzFuFhY7A1Zez/EnvY3i1eFG4OrRQtZ7E/HjIqGTs2Rvqi dta1k/2i3R8iqHgn9dPPCCbb8QN8i1Dw7UXWh9Y9nq8dc2jgocwZPoHBKX9nJQaE 9AWXl6Q+TB+JA+iS -----END CERTIFICATE-----Generated at Mon Feb 9 20:47:19 2026 by rpki-client