This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/efh4js39DAepdcGf-XgcFtA9I2A.roa File: efh4js39DAepdcGf-XgcFtA9I2A.roa (raw, json) Hash identifier: Wr//dqxMLdlf0wzZxtHqzTDoNgxS29rM1ry+hkHHkYc= Subject key identifier: 79:F8:78:8E:CD:FD:0C:07:A9:75:C1:9F:F9:78:1C:16:D0:3D:23:60 Certificate issuer: /CN=96344400396d0af4cb79e3c94666671b7b391f55 Certificate serial: 019B7FF19FE46C5A1B9F63A1250811B653C2 Authority key identifier: 96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/efh4js39DAepdcGf-XgcFtA9I2A.roa Signing time: Fri 02 Jan 2026 18:21:40 +0000 ROA not before: Fri 02 Jan 2026 18:21:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16089 IP address blocks: 45.88.58.0/24 maxlen: 24 79.110.60.0/24 maxlen: 24 91.209.79.0/24 maxlen: 24 2a0c:3bc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.mft rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:9f:e4:6c:5a:1b:9f:63:a1:25:08:11:b6:53:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96344400396d0af4cb79e3c94666671b7b391f55 Validity Not Before: Jan 2 18:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79f8788ecdfd0c07a975c19ff9781c16d03d2360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ee:f4:e6:5f:9e:f3:c2:b2:bb:ab:78:e1:11: d8:f5:c7:36:c5:24:ad:8e:57:2f:68:7b:21:2b:8d: 3d:76:44:2a:d8:d3:c7:1c:1c:ba:a4:a4:d8:1d:65: a9:3c:70:14:8c:88:bc:5e:ad:6d:44:ae:36:5c:33: 52:4d:75:88:20:52:d2:3e:0d:f2:03:c6:0e:cd:fb: 36:0a:ea:5f:45:5c:03:6f:ba:f3:cc:32:cf:1e:82: 5e:ad:7a:46:44:dc:3b:71:ed:96:c3:d9:c4:ba:30: b8:59:57:9c:bb:d9:09:eb:71:48:af:56:cf:06:41: a7:47:b8:82:66:fb:69:d8:d1:83:94:fd:9c:87:38: 81:c9:89:94:9b:75:30:3b:75:b4:76:a6:c7:87:c8: e4:0b:05:db:1d:fc:71:e4:3b:1c:da:96:0b:7d:25: 41:eb:55:7c:e7:4d:ad:67:03:85:da:f7:56:18:8c: 65:38:fe:14:91:00:ea:aa:30:2d:f5:a6:46:c1:72: 8b:f7:17:83:c3:53:b0:96:26:18:ae:57:dd:f5:9c: 3d:00:17:14:20:b3:dd:47:60:a2:e2:38:d3:25:5e: ab:a7:76:2b:f4:01:68:4a:e8:e4:cf:2c:ec:5d:0a: 2d:5c:96:b0:80:fb:43:86:b0:76:e8:32:1c:e1:fc: eb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F8:78:8E:CD:FD:0C:07:A9:75:C1:9F:F9:78:1C:16:D0:3D:23:60 X509v3 Authority Key Identifier: keyid:96:34:44:00:39:6D:0A:F4:CB:79:E3:C9:46:66:67:1B:7B:39:1F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljREADltCvTLeePJRmZnG3s5H1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/efh4js39DAepdcGf-XgcFtA9I2A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/02e962-8ff8-416e-b1ba-a1201cc6e01b/1/ljREADltCvTLeePJRmZnG3s5H1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.88.58.0/24 79.110.60.0/24 91.209.79.0/24 IPv6: 2a0c:3bc0::/29 Signature Algorithm: sha256WithRSAEncryption 66:76:19:d3:9b:bf:b2:52:39:df:bb:69:03:f6:55:18:94:ca: d7:a6:e7:fb:2e:fb:1d:53:dd:23:58:be:14:57:8b:0b:7f:49: 30:df:cc:70:9a:1b:a9:a9:bd:e7:8a:3c:ab:0b:44:0a:93:7d: e0:21:01:29:f1:29:42:b7:cd:60:cb:09:1d:37:48:b8:df:71: 30:8f:f3:95:69:6c:c8:8b:71:2b:e1:a7:11:2d:8e:01:69:24: ee:2f:70:0f:e0:a1:2a:b8:bc:60:85:d5:d0:34:8d:45:4f:0c: 03:a2:af:ac:71:7d:ee:07:8e:70:dd:37:e7:89:32:d3:20:ac: d6:8d:2c:44:50:22:da:55:d3:f4:f2:2f:dd:a4:87:4d:68:b5: 66:ef:32:62:2b:a3:f0:ff:6e:b1:b6:32:7e:92:ac:66:fb:7d: 73:69:43:d8:3e:de:ec:98:9c:46:85:b8:ce:9f:23:91:d4:c3: f7:d5:45:1e:27:42:6e:92:0a:92:b3:ba:c1:ba:89:3e:98:0b: 9d:93:80:23:8e:20:f7:8d:9c:87:a0:83:14:6e:31:f8:57:6b: fd:5f:db:ef:29:1c:3e:2c:8c:d6:52:db:0f:df:ac:42:88:c5: c4:88:f6:3e:da:d5:a0:1a:9f:4e:8b:48:66:c9:a9:c2:4a:e0: 10:5c:c4:f8 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/8Z/kbFobn2OhJQgRtlPCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2MzQ0NDAwMzk2ZDBhZjRjYjc5ZTNjOTQ2NjY2NzFiN2Iz OTFmNTUwHhcNMjYwMTAyMTgyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWY4Nzg4ZWNkZmQwYzA3YTk3NWMxOWZmOTc4MWMxNmQwM2QyMzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue705l+e88Kyu6t44RHY9cc2xSSt jlcvaHshK409dkQq2NPHHBy6pKTYHWWpPHAUjIi8Xq1tRK42XDNSTXWIIFLSPg3y A8YOzfs2CupfRVwDb7rzzDLPHoJerXpGRNw7ce2Ww9nEujC4WVecu9kJ63FIr1bP BkGnR7iCZvtp2NGDlP2chziByYmUm3UwO3W0dqbHh8jkCwXbHfxx5Dsc2pYLfSVB 61V8502tZwOF2vdWGIxlOP4UkQDqqjAt9aZGwXKL9xeDw1OwliYYrlfd9Zw9ABcU ILPdR2Ci4jjTJV6rp3Yr9AFoSujkzyzsXQotXJawgPtDhrB26DIc4fzr8wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFHn4eI7N/QwHqXXBn/l4HBbQPSNgMB8GA1UdIwQY MBaAFJY0RAA5bQr0y3njyUZmZxt7OR9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGpSRUFEbHRDdlRMZWVQSlJtWm5HM3M1SDFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8wMmU5NjItOGZmOC00MTZlLWIxYmEt YTEyMDFjYzZlMDFiLzEvZWZoNGpzMzlEQWVwZGNHZi1YZ2NGdEE5STJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8wMmU5NjItOGZmOC00MTZlLWIxYmEtYTEyMDFjYzZlMDFi LzEvbGpSRUFEbHRDdlRMZWVQSlJtWm5HM3M1SDFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQALVg6AwQA T248AwQAW9FPMA0EAgACMAcDBQMqDDvAMA0GCSqGSIb3DQEBCwUAA4IBAQBmdhnT m7+yUjnfu2kD9lUYlMrXpuf7LvsdU90jWL4UV4sLf0kw38xwmhupqb3nijyrC0QK k33gIQEp8SlCt81gywkdN0i433Ewj/OVaWzIi3Er4acRLY4BaSTuL3AP4KEquLxg hdXQNI1FTwwDoq+scX3uB45w3TfniTLTIKzWjSxEUCLaVdP08i/dpIdNaLVm7zJi K6Pw/26xtjJ+kqxm+31zaUPYPt7smJxGhbjOnyOR1MP31UUeJ0JukgqSs7rBuok+ mAudk4AjjiD3jZyHoIMUbjH4V2v9X9vvKRw+LIzWUtsP36xCiMXEiPY+2tWgGp9O i0hmyanCSuAQXMT4 -----END CERTIFICATE-----Generated at Mon Feb 9 22:14:58 2026 by rpki-client