This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/eFpBdg6bsZMOceMMDBSJPbKerRQ.roa File: eFpBdg6bsZMOceMMDBSJPbKerRQ.roa (raw, json) Hash identifier: 0CNpt//WjjkQ9s80RqkgFSsUKxYW7IA+iSGJkuAzflc= Subject key identifier: 78:5A:41:76:0E:9B:B1:93:0E:71:E3:0C:0C:14:89:3D:B2:9E:AD:14 Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Certificate serial: 019BD60DB821C6D06FA0280BCF685B9915AE Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/eFpBdg6bsZMOceMMDBSJPbKerRQ.roa Signing time: Mon 19 Jan 2026 11:39:41 +0000 ROA not before: Mon 19 Jan 2026 11:39:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48212 IP address blocks: 94.243.60.0/22 maxlen: 22 188.75.192.0/20 maxlen: 20 188.75.192.0/23 maxlen: 23 188.75.194.0/23 maxlen: 23 188.75.205.0/24 maxlen: 24 188.75.207.0/24 maxlen: 24 188.75.220.0/22 maxlen: 22 188.75.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:0d:b8:21:c6:d0:6f:a0:28:0b:cf:68:5b:99:15:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Validity Not Before: Jan 19 11:39:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=785a41760e9bb1930e71e30c0c14893db29ead14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a0:92:67:64:15:85:f5:c8:c7:d0:04:cd:03: f8:cc:dd:15:3d:a6:ee:bc:1f:67:dd:61:0f:69:e4: 1a:97:65:63:bd:92:ec:e3:ee:1e:2b:67:85:89:13: 33:b7:4c:c3:05:fa:63:9b:bb:ad:5f:e2:1b:f9:bc: 7f:d1:b5:01:45:10:13:bd:f6:71:0a:15:7e:84:a6: 76:3a:ee:e0:e5:66:b5:84:8c:2b:31:c2:0c:6f:66: 48:39:b4:6c:53:8f:49:82:fd:13:a6:9f:62:e2:38: 3e:8b:b1:a7:cc:de:93:18:e6:f4:b0:39:78:5b:96: 7c:21:b5:35:7d:fb:6d:5d:7c:90:76:98:97:ab:ba: fd:7f:e8:b0:83:1c:06:8b:b7:2f:af:72:fe:7a:9c: f8:f0:d4:74:01:89:6a:f7:27:f7:f0:55:34:d9:3f: c3:0c:56:9b:ad:e4:2a:ef:bf:5e:67:48:81:28:84: ae:98:ed:0c:d2:c4:b7:c5:83:99:6d:a8:9f:03:6c: c2:98:d2:f9:c4:55:a6:4e:00:a1:b6:d3:7c:62:af: 27:c2:45:9f:09:ee:fd:29:6b:d3:9c:68:be:1a:c6: da:b5:ec:28:23:64:ef:6e:1e:67:af:21:d4:fb:c3: 0b:fa:d7:08:f3:83:61:ed:a3:5c:c4:39:5d:b5:d1: b3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:5A:41:76:0E:9B:B1:93:0E:71:E3:0C:0C:14:89:3D:B2:9E:AD:14 X509v3 Authority Key Identifier: keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/eFpBdg6bsZMOceMMDBSJPbKerRQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.243.60.0/22 188.75.192.0/20 188.75.220.0/22 188.75.252.0/22 Signature Algorithm: sha256WithRSAEncryption 40:fc:f6:a7:f9:c2:bc:29:8e:32:1b:4b:e2:44:fc:b8:8a:db: 8c:32:d3:ff:2c:56:14:b0:5d:1c:9f:ee:26:9b:6d:90:04:bf: 30:a3:c4:c4:4f:41:6a:1b:59:12:31:ca:6b:54:2c:95:aa:ae: 32:5a:95:71:26:1b:f6:f8:42:74:da:58:b3:68:4b:67:8b:b0: 81:ec:10:8d:ec:a7:69:8e:20:f2:96:2c:cd:20:52:2c:f8:79: b5:69:b8:15:86:54:ac:7e:90:c0:f4:7e:ce:9e:a7:52:94:a7: b6:e4:1b:47:c2:80:7c:0c:e2:a1:42:72:2b:69:d2:fd:ce:b9: b3:49:de:db:e2:05:51:fa:cb:b6:c5:ef:ee:3c:c9:cf:93:42: 80:6c:6d:86:f9:35:4e:b2:7f:df:15:38:d7:1e:08:3e:7a:56: eb:54:01:14:2a:1a:9a:d1:7f:73:f3:28:cd:d2:4b:96:aa:39: 0f:e8:a1:99:56:f7:4f:fb:fd:f7:58:81:62:81:75:bc:40:ee: 43:36:8d:44:72:63:46:f6:50:4a:74:a6:13:82:35:f5:a9:b8: d1:94:71:23:0e:b9:18:9d:3b:01:e5:52:31:ea:7b:28:b5:e9: 7e:e5:0d:cb:7b:4f:9f:d1:b4:5b:78:37:34:a4:ba:4d:b9:95: 68:9e:e7:6b -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZvWDbghxtBvoCgLz2hbmRWuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl NmI3ZTUwHhcNMjYwMTE5MTEzOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODVhNDE3NjBlOWJiMTkzMGU3MWUzMGMwYzE0ODkzZGIyOWVhZDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaCSZ2QVhfXIx9AEzQP4zN0VPabu vB9n3WEPaeQal2VjvZLs4+4eK2eFiRMzt0zDBfpjm7utX+Ib+bx/0bUBRRATvfZx ChV+hKZ2Ou7g5Wa1hIwrMcIMb2ZIObRsU49Jgv0Tpp9i4jg+i7GnzN6TGOb0sDl4 W5Z8IbU1ffttXXyQdpiXq7r9f+iwgxwGi7cvr3L+epz48NR0AYlq9yf38FU02T/D DFabreQq779eZ0iBKISumO0M0sS3xYOZbaifA2zCmNL5xFWmTgChttN8Yq8nwkWf Ce79KWvTnGi+GsbatewoI2Tvbh5nryHU+8ML+tcI84Nh7aNcxDldtdGzPQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHhaQXYOm7GTDnHjDAwUiT2ynq0UMB8GA1UdIwQY MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt NDI4NDU4Njc5Y2U0LzEvZUZwQmRnNmJzWk1PY2VNTURCU0pQYktlclJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0 LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCXvM8AwQE vEvAAwQCvEvcAwQCvEv8MA0GCSqGSIb3DQEBCwUAA4IBAQBA/Pan+cK8KY4yG0vi RPy4ituMMtP/LFYUsF0cn+4mm22QBL8wo8TET0FqG1kSMcprVCyVqq4yWpVxJhv2 +EJ02lizaEtni7CB7BCN7KdpjiDylizNIFIs+Hm1abgVhlSsfpDA9H7OnqdSlKe2 5BtHwoB8DOKhQnIradL9zrmzSd7b4gVR+su2xe/uPMnPk0KAbG2G+TVOsn/fFTjX Hgg+elbrVAEUKhqa0X9z8yjN0kuWqjkP6KGZVvdP+/33WIFigXW8QO5DNo1EcmNG 9lBKdKYTgjX1qbjRlHEjDrkYnTsB5VIx6nsotel+5Q3Le0+f0bRbeDc0pLpNuZVo nudr -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:32 2026 by rpki-client