This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/efbWzI4vLv7w9yymutpUYEoHmxQ.roa File: efbWzI4vLv7w9yymutpUYEoHmxQ.roa (raw, json) Hash identifier: sVnY8aUse9bK6BiMPQOWMiXwRdNobutAUkIY5Vkz5Cc= Subject key identifier: 79:F6:D6:CC:8E:2F:2E:FE:F0:F7:2C:A6:BA:DA:54:60:4A:07:9B:14 Certificate issuer: /CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d Certificate serial: 019B7EA74392817FF34650C7111C29CAF270 Authority key identifier: 17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/efbWzI4vLv7w9yymutpUYEoHmxQ.roa Signing time: Fri 02 Jan 2026 12:20:49 +0000 ROA not before: Fri 02 Jan 2026 12:20:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199250 IP address blocks: 91.200.68.0/24 maxlen: 24 91.200.69.0/24 maxlen: 24 185.21.36.0/22 maxlen: 24 185.21.37.0/24 maxlen: 24 185.21.38.0/24 maxlen: 24 185.21.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.mft rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:43:92:81:7f:f3:46:50:c7:11:1c:29:ca:f2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17b8beb555dafa82c3d6aa336909ae5ade35a83d Validity Not Before: Jan 2 12:20:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79f6d6cc8e2f2efef0f72ca6bada54604a079b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:00:fe:50:07:b5:8a:c4:b1:3c:03:36:1f:08: 5f:2d:dc:fa:76:7d:1a:9c:68:41:3d:6d:d3:79:17: 51:7a:52:68:f9:82:f0:4a:a7:6e:18:e2:75:f8:38: a2:66:b8:27:90:34:ac:d0:71:43:a2:4d:dd:64:d7: 7d:c9:70:36:bf:61:0e:da:52:e6:f0:ca:7a:f4:a7: 51:c9:d8:60:2e:6f:e4:27:ee:a9:38:7f:d6:37:2b: e5:b9:71:33:72:e2:4f:3b:11:ee:ad:de:aa:1d:ae: a5:57:34:bf:63:cb:63:b4:a5:ad:47:c0:1d:56:ba: 5a:0c:f7:e7:37:a4:2b:e7:c2:a9:9f:d5:5c:a5:d4: 1a:a1:7a:a3:70:47:fb:9f:fe:7b:e0:0a:80:01:10: de:45:47:d0:c1:21:4f:5e:9b:56:91:75:87:28:a5: 8b:45:d1:24:58:50:02:ec:e9:89:38:03:61:7d:2c: 0c:49:18:5b:25:4d:de:6b:c9:8d:c1:4a:be:41:37: 6e:2f:94:c4:53:40:7d:be:9e:6b:8c:67:d5:91:84: 76:97:cd:25:8c:30:cf:e5:97:33:2c:14:da:b8:be: 92:c4:c0:bc:84:bb:af:5a:c0:d1:5f:03:e5:57:8d: 25:3b:b6:18:14:9f:02:a3:63:f8:e7:c4:99:53:32: 1b:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F6:D6:CC:8E:2F:2E:FE:F0:F7:2C:A6:BA:DA:54:60:4A:07:9B:14 X509v3 Authority Key Identifier: keyid:17:B8:BE:B5:55:DA:FA:82:C3:D6:AA:33:69:09:AE:5A:DE:35:A8:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7i-tVXa-oLD1qozaQmuWt41qD0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/efbWzI4vLv7w9yymutpUYEoHmxQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/51519c-1e93-44a9-ac70-7e242674defc/1/F7i-tVXa-oLD1qozaQmuWt41qD0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.200.68.0/23 185.21.36.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:7f:83:f8:a0:60:c2:f4:c5:36:6b:36:d3:01:14:30:a4:66: 03:fc:5b:56:6a:08:a8:14:72:8c:fa:b8:5a:04:a8:dd:26:b9: 74:c5:21:32:c0:b8:bc:4e:0d:7e:21:62:17:80:cb:16:80:ba: 0c:6c:f2:e6:c3:c6:b0:01:e3:a6:2c:6b:8d:cf:e4:97:03:52: cd:23:a3:41:22:c9:7e:e1:13:cc:62:46:7a:c9:cc:3a:e0:de: 6f:08:5a:a1:35:d9:d1:84:dc:f2:a0:3d:6f:34:30:0c:64:11: 98:77:3c:72:f7:34:03:e6:40:52:bc:60:cc:c6:a0:54:3b:1f: 3f:73:07:ca:f4:3c:30:90:2a:12:7e:55:3d:ae:38:ea:2a:6c: 1c:7c:72:21:4c:e4:79:4b:97:55:bd:6b:80:bc:64:fd:c5:c2: 2c:2e:7c:e6:3c:75:02:a2:73:19:eb:fc:50:45:47:03:db:0f: 38:2f:8d:16:99:fb:f1:a9:82:60:b6:8e:c9:af:cc:fa:63:eb: b3:e8:50:0b:55:f7:3d:2e:14:a3:13:81:2b:b2:e0:63:23:b2: 83:cb:b2:a4:c9:e4:2e:2f:97:63:f8:62:4a:42:8e:41:88:19: ec:4a:2c:42:24:58:f9:82:b2:bd:91:83:6c:3b:58:c2:c7:09: bc:21:72:6e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+p0OSgX/zRlDHERwpyvJwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3YjhiZWI1NTVkYWZhODJjM2Q2YWEzMzY5MDlhZTVhZGUz NWE4M2QwHhcNMjYwMTAyMTIyMDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWY2ZDZjYzhlMmYyZWZlZjBmNzJjYTZiYWRhNTQ2MDRhMDc5YjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQD+UAe1isSxPAM2HwhfLdz6dn0a nGhBPW3TeRdRelJo+YLwSqduGOJ1+DiiZrgnkDSs0HFDok3dZNd9yXA2v2EO2lLm 8Mp69KdRydhgLm/kJ+6pOH/WNyvluXEzcuJPOxHurd6qHa6lVzS/Y8tjtKWtR8Ad VrpaDPfnN6Qr58Kpn9VcpdQaoXqjcEf7n/574AqAARDeRUfQwSFPXptWkXWHKKWL RdEkWFAC7OmJOANhfSwMSRhbJU3ea8mNwUq+QTduL5TEU0B9vp5rjGfVkYR2l80l jDDP5ZczLBTauL6SxMC8hLuvWsDRXwPlV40lO7YYFJ8Co2P458SZUzIbHQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHn21syOLy7+8PcsprraVGBKB5sUMB8GA1UdIwQY MBaAFBe4vrVV2vqCw9aqM2kJrlreNag9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjdpLXRWWGEtb0xEMXFvemFRbXVXdDQxcUQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81MTUxOWMtMWU5My00NGE5LWFjNzAt N2UyNDI2NzRkZWZjLzEvZWZiV3pJNHZMdjd3OXl5bXV0cFVZRW9IbXhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi81MTUxOWMtMWU5My00NGE5LWFjNzAtN2UyNDI2NzRkZWZj LzEvRjdpLXRWWGEtb0xEMXFvemFRbXVXdDQxcUQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW8hEAwQC uRUkMA0GCSqGSIb3DQEBCwUAA4IBAQB8f4P4oGDC9MU2azbTARQwpGYD/FtWagio FHKM+rhaBKjdJrl0xSEywLi8Tg1+IWIXgMsWgLoMbPLmw8awAeOmLGuNz+SXA1LN I6NBIsl+4RPMYkZ6ycw64N5vCFqhNdnRhNzyoD1vNDAMZBGYdzxy9zQD5kBSvGDM xqBUOx8/cwfK9DwwkCoSflU9rjjqKmwcfHIhTOR5S5dVvWuAvGT9xcIsLnzmPHUC onMZ6/xQRUcD2w84L40WmfvxqYJgto7Jr8z6Y+uz6FALVfc9LhSjE4ErsuBjI7KD y7KkyeQuL5dj+GJKQo5BiBnsSixCJFj5grK9kYNsO1jCxwm8IXJu -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:36 2026 by rpki-client