This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/efPNeN_0KirVowyqOO81ber6Zg8.roa File: efPNeN_0KirVowyqOO81ber6Zg8.roa (raw, json) Hash identifier: 0sZnmeXPSX5yamGjUWVvInbw7JdGyiWW9gzFR1D9bNU= Subject key identifier: 79:F3:CD:78:DF:F4:2A:2A:D5:A3:0C:AA:38:EF:35:6D:EA:FA:66:0F Certificate issuer: /CN=cc777a08a4564548b518ec3864b341e1fa5225ea Certificate serial: 019B7F150399642C0635077924BD79633F55 Authority key identifier: CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/efPNeN_0KirVowyqOO81ber6Zg8.roa Signing time: Fri 02 Jan 2026 14:20:42 +0000 ROA not before: Fri 02 Jan 2026 14:20:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202779 IP address blocks: 91.201.220.0/22 maxlen: 24 185.154.156.0/22 maxlen: 24 194.54.128.0/22 maxlen: 24 194.126.184.0/22 maxlen: 24 213.173.96.0/19 maxlen: 24 213.244.248.0/21 maxlen: 24 2a07:8ac0::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.mft rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:03:99:64:2c:06:35:07:79:24:bd:79:63:3f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc777a08a4564548b518ec3864b341e1fa5225ea Validity Not Before: Jan 2 14:20:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79f3cd78dff42a2ad5a30caa38ef356deafa660f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6a:de:c8:a5:86:6b:bd:18:bf:cf:44:73:0b: 2d:49:f4:f1:66:9e:d9:29:47:82:31:a7:73:19:59: 84:7c:80:41:32:53:21:8b:2b:c3:e2:25:30:d7:bd: 45:a9:d1:b6:33:18:3a:17:db:c1:be:ba:57:39:10: f0:82:d0:a3:bf:9a:4b:dc:5f:82:1a:51:47:0c:84: 16:a6:72:c6:ec:bb:0f:ea:6b:cf:e9:b6:40:f1:46: ab:64:9a:c6:13:0e:7b:4f:8f:9c:59:27:c5:28:2e: 54:23:77:80:a0:83:1a:18:b4:37:0e:5a:f3:2f:ea: 2d:14:0a:55:b7:66:8c:ee:45:09:e2:a0:b7:5c:44: ae:d0:52:b1:29:74:13:f3:ef:d2:46:e5:58:3b:5f: 02:af:b2:b7:6b:fd:94:b2:b1:51:c7:b7:07:97:9e: 27:ec:32:df:2d:97:39:39:35:10:97:42:95:8b:4f: 90:5a:cd:c0:6e:ea:a2:07:72:a9:47:ce:bc:3b:b2: e5:f2:c8:81:32:de:ec:61:22:33:45:5b:4e:d1:3a: 70:f9:28:e8:93:e8:5b:ca:c7:8f:a8:97:2a:29:e1: a1:62:13:49:d6:d8:2e:c8:d0:2e:bb:ac:e5:0c:08: b5:7b:85:17:3a:89:9b:f1:ac:24:8f:98:81:a1:24: cc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F3:CD:78:DF:F4:2A:2A:D5:A3:0C:AA:38:EF:35:6D:EA:FA:66:0F X509v3 Authority Key Identifier: keyid:CC:77:7A:08:A4:56:45:48:B5:18:EC:38:64:B3:41:E1:FA:52:25:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/efPNeN_0KirVowyqOO81ber6Zg8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/a72a4b-0693-4d1b-9bfc-767b0cc80c08/1/zHd6CKRWRUi1GOw4ZLNB4fpSJeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.201.220.0/22 185.154.156.0/22 194.54.128.0/22 194.126.184.0/22 213.173.96.0/19 213.244.248.0/21 IPv6: 2a07:8ac0::/29 Signature Algorithm: sha256WithRSAEncryption 63:1d:5f:c2:72:f7:91:3c:dd:77:b5:70:4b:b1:b1:21:7a:95: f8:14:81:34:45:a2:2b:32:4e:6a:2a:40:c6:5e:79:d2:60:a6: c3:30:3f:36:f5:fd:8b:c4:ad:a0:63:a0:0a:b3:ad:a4:aa:41: bc:ba:ab:6f:bd:e0:1a:ea:54:81:2f:09:8e:4a:0b:61:37:54: 16:16:81:44:04:a8:fa:c3:06:ab:c5:c8:3f:af:e2:5b:6d:93: 18:db:19:f2:9e:dc:b3:d2:3d:60:e5:ed:1a:c7:66:c0:42:d4: 54:92:2e:0d:d9:75:38:be:46:f4:8a:76:5d:4f:dc:d1:da:b2: ec:b9:de:b7:a3:ae:76:f0:ef:88:8d:b1:ff:8c:35:39:ec:e4: 07:fb:f6:3c:32:94:56:42:ed:40:d7:1d:b0:93:23:d0:b8:08: 4c:85:bd:66:0c:30:eb:3e:28:02:d3:eb:6b:8b:89:0c:01:c6: 6f:13:59:a5:48:b5:dc:89:6c:59:27:f6:66:da:c2:1f:fe:cd: b8:21:55:2d:2f:22:3a:e4:c5:86:c3:f8:03:3e:2c:ea:c1:46: 12:b1:4b:d6:31:fb:66:49:38:63:1c:51:17:3a:07:1c:c4:7b: 73:43:cc:cf:94:dd:b3:fc:06:d2:0f:7d:1b:8b:24:69:a8:c0: b2:8f:f8:ce -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt/FQOZZCwGNQd5JL15Yz9VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNzc3YTA4YTQ1NjQ1NDhiNTE4ZWMzODY0YjM0MWUxZmE1 MjI1ZWEwHhcNMjYwMTAyMTQyMDQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWYzY2Q3OGRmZjQyYTJhZDVhMzBjYWEzOGVmMzU2ZGVhZmE2NjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WreyKWGa70Yv89EcwstSfTxZp7Z KUeCMadzGVmEfIBBMlMhiyvD4iUw171FqdG2Mxg6F9vBvrpXORDwgtCjv5pL3F+C GlFHDIQWpnLG7LsP6mvP6bZA8UarZJrGEw57T4+cWSfFKC5UI3eAoIMaGLQ3Dlrz L+otFApVt2aM7kUJ4qC3XESu0FKxKXQT8+/SRuVYO18Cr7K3a/2UsrFRx7cHl54n 7DLfLZc5OTUQl0KVi0+QWs3AbuqiB3KpR868O7Ll8siBMt7sYSIzRVtO0Tpw+Sjo k+hbysePqJcqKeGhYhNJ1tguyNAuu6zlDAi1e4UXOomb8awkj5iBoSTMMQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFHnzzXjf9Coq1aMMqjjvNW3q+mYPMB8GA1UdIwQY MBaAFMx3egikVkVItRjsOGSzQeH6UiXqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekhkNkNLUldSVWkxR093NFpMTkI0ZnBTSmVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9hNzJhNGItMDY5My00ZDFiLTliZmMt NzY3YjBjYzgwYzA4LzEvZWZQTmVOXzBLaXJWb3d5cU9PODFiZXI2Wmc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9hNzJhNGItMDY5My00ZDFiLTliZmMtNzY3YjBjYzgwYzA4 LzEvekhkNkNLUldSVWkxR093NFpMTkI0ZnBTSmVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCW8ncAwQC uZqcAwQCwjaAAwQCwn64AwQF1a1gAwQD1fT4MA0EAgACMAcDBQMqB4rAMA0GCSqG SIb3DQEBCwUAA4IBAQBjHV/CcveRPN13tXBLsbEhepX4FIE0RaIrMk5qKkDGXnnS YKbDMD829f2LxK2gY6AKs62kqkG8uqtvveAa6lSBLwmOSgthN1QWFoFEBKj6wwar xcg/r+JbbZMY2xnyntyz0j1g5e0ax2bAQtRUki4N2XU4vkb0inZdT9zR2rLsud63 o6528O+IjbH/jDU57OQH+/Y8MpRWQu1A1x2wkyPQuAhMhb1mDDDrPigC0+tri4kM AcZvE1mlSLXciWxZJ/Zm2sIf/s24IVUtLyI65MWGw/gDPizqwUYSsUvWMftmSThj HFEXOgccxHtzQ8zPlN2z/AbSD30biyRpqMCyj/jO -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:26 2026 by rpki-client