This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/EFrq_d0PEb8VRZIfuNqJqAIXBNI.roa File: EFrq_d0PEb8VRZIfuNqJqAIXBNI.roa (raw, json) Hash identifier: GQErCRLgtsNLuPVfFh+ekGren6oKGfK322nyL4XlzQk= Subject key identifier: 10:5A:EA:FD:DD:0F:11:BF:15:45:92:1F:B8:DA:89:A8:02:17:04:D2 Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019B990CD839AD8BD95D7C5AE39011BFB6FA Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/EFrq_d0PEb8VRZIfuNqJqAIXBNI.roa Signing time: Wed 07 Jan 2026 15:21:54 +0000 ROA not before: Wed 07 Jan 2026 15:21:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209371 IP address blocks: 185.88.175.0/24 maxlen: 24 185.243.181.0/24 maxlen: 24 193.160.140.0/24 maxlen: 24 193.223.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:99:0c:d8:39:ad:8b:d9:5d:7c:5a:e3:90:11:bf:b6:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 7 15:21:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=105aeafddd0f11bf1545921fb8da89a8021704d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:11:2c:ef:57:a3:cf:ec:ac:04:e9:72:cf:a5: 48:7e:a3:ed:fc:21:a2:af:56:e0:4f:68:35:02:e4: 7f:3e:f8:8d:df:83:86:07:d2:69:28:b5:cf:c1:e6: f2:00:7f:e2:ff:cb:86:eb:9a:0b:fa:7d:ef:3c:33: d1:54:ec:71:67:f8:8b:e0:1f:6c:f1:11:e3:d7:0b: 1e:f4:12:6e:5a:77:ec:54:6e:d6:77:34:9b:e9:a8: f9:4e:f3:77:8c:11:f8:1e:a1:f4:c6:e5:a1:c1:b0: 62:90:3a:8c:1a:0e:08:a0:75:e4:2f:ac:c8:63:1d: 75:7f:7a:1f:61:c8:c6:81:e1:b5:52:2e:df:77:1e: 6c:44:e0:75:61:d5:2d:60:ee:63:c6:2a:16:3d:bd: cc:fe:26:15:07:f1:e0:23:27:b3:36:b8:00:6a:95: 1c:33:a5:d9:db:e7:0a:e9:22:e8:48:10:50:0c:5b: de:94:c5:0c:7d:1d:86:9c:40:5c:3e:76:17:d0:6c: c2:a7:6b:d0:a1:90:2c:22:35:64:b8:6b:55:af:4b: d1:2d:90:da:da:fa:90:76:88:15:42:23:ba:0e:4e: da:19:8c:e4:e9:f4:f4:14:5a:3f:43:48:cd:4a:f0: a3:44:d1:3e:f8:df:e9:a7:77:77:88:cf:19:4d:90: dc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:5A:EA:FD:DD:0F:11:BF:15:45:92:1F:B8:DA:89:A8:02:17:04:D2 X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/EFrq_d0PEb8VRZIfuNqJqAIXBNI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.88.175.0/24 185.243.181.0/24 193.160.140.0/24 193.223.106.0/24 Signature Algorithm: sha256WithRSAEncryption 43:9a:74:0f:af:3b:56:5c:b7:0b:c2:7b:34:f4:05:a4:61:44: 93:be:4b:8b:a8:a0:02:a9:e6:b8:69:e1:22:07:0d:ae:8e:ee: 6c:2a:ec:fb:e3:33:bd:80:ea:12:b4:17:6d:0b:c1:79:b5:dc: 07:f2:80:d1:d5:ff:6b:fb:9c:21:4e:4a:59:fb:6e:76:7c:c9: 90:3a:bc:26:df:b5:23:d5:5d:42:5e:08:c5:c8:fa:c0:e2:4b: 8a:f5:7b:60:68:fd:8e:be:da:90:01:95:3a:77:b9:ab:49:89: 8a:d0:e4:17:fe:45:8e:c5:60:3d:39:73:62:49:65:b1:a3:79: b6:c6:2e:6f:ed:eb:dd:12:9a:98:52:9b:9d:0f:49:c8:66:47: e1:45:c9:11:81:a4:93:70:a3:b1:69:ff:17:c0:51:9e:62:40: 3e:db:9f:9b:82:66:02:d7:16:12:46:76:c6:03:be:95:e1:ec: 0f:48:9b:51:fe:02:ea:ff:e4:71:6f:6b:06:8c:ce:60:1b:8c: 01:93:3a:b6:5d:6d:38:17:14:cf:ec:66:54:3e:b4:32:13:95: 78:31:a7:70:fa:06:7e:e1:34:1d:83:bc:70:7c:d3:c3:bb:a0: 96:25:68:e0:b6:09:a7:0c:be:dd:fb:c9:b8:34:0c:4f:a7:16: 5d:57:12:cf -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZuZDNg5rYvZXXxa45ARv7b6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTA3MTUyMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDVhZWFmZGRkMGYxMWJmMTU0NTkyMWZiOGRhODlhODAyMTcwNGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArREs71ejz+ysBOlyz6VIfqPt/CGi r1bgT2g1AuR/PviN34OGB9JpKLXPwebyAH/i/8uG65oL+n3vPDPRVOxxZ/iL4B9s 8RHj1wse9BJuWnfsVG7WdzSb6aj5TvN3jBH4HqH0xuWhwbBikDqMGg4IoHXkL6zI Yx11f3ofYcjGgeG1Ui7fdx5sROB1YdUtYO5jxioWPb3M/iYVB/HgIyezNrgAapUc M6XZ2+cK6SLoSBBQDFvelMUMfR2GnEBcPnYX0GzCp2vQoZAsIjVkuGtVr0vRLZDa 2vqQdogVQiO6Dk7aGYzk6fT0FFo/Q0jNSvCjRNE++N/pp3d3iM8ZTZDcNwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFBBa6v3dDxG/FUWSH7jaiagCFwTSMB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvRUZycV9kMFBFYjhWUlpJZnVOcUpxQUlYQk5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuVivAwQA ufO1AwQAwaCMAwQAwd9qMA0GCSqGSIb3DQEBCwUAA4IBAQBDmnQPrztWXLcLwns0 9AWkYUSTvkuLqKACqea4aeEiBw2uju5sKuz74zO9gOoStBdtC8F5tdwH8oDR1f9r +5whTkpZ+252fMmQOrwm37Uj1V1CXgjFyPrA4kuK9XtgaP2OvtqQAZU6d7mrSYmK 0OQX/kWOxWA9OXNiSWWxo3m2xi5v7evdEpqYUpudD0nIZkfhRckRgaSTcKOxaf8X wFGeYkA+25+bgmYC1xYSRnbGA76V4ewPSJtR/gLq/+Rxb2sGjM5gG4wBkzq2XW04 FxTP7GZUPrQyE5V4Madw+gZ+4TQdg7xwfNPDu6CWJWjgtgmnDL7d+8m4NAxPpxZd VxLP -----END CERTIFICATE-----Generated at Wed Jan 21 14:11:46 2026 by rpki-client