This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/eFHhAwYmu7k_SZF7KBYCjSI_VRQ.roa File: eFHhAwYmu7k_SZF7KBYCjSI_VRQ.roa (raw, json) Hash identifier: YSq+JM4wY/n6/47XuDVTyxTLFJSe/fMpCxRnSCbLex0= Subject key identifier: 78:51:E1:03:06:26:BB:B9:3F:49:91:7B:28:16:02:8D:22:3F:55:14 Certificate issuer: /CN=afec4f4a16cc51bd51621011539ceb574ac15d02 Certificate serial: 019B797EEA612F68D76F8D9749532416B8A5 Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/eFHhAwYmu7k_SZF7KBYCjSI_VRQ.roa Signing time: Thu 01 Jan 2026 12:18:39 +0000 ROA not before: Thu 01 Jan 2026 12:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198385 IP address blocks: 5.1.96.0/21 maxlen: 21 37.35.104.0/21 maxlen: 21 89.249.40.0/23 maxlen: 23 185.50.188.0/22 maxlen: 24 185.63.36.0/22 maxlen: 22 185.75.32.0/22 maxlen: 22 2a00:e6c0::/32 maxlen: 32 2a03:2040::/29 maxlen: 29 2a03:2040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:ea:61:2f:68:d7:6f:8d:97:49:53:24:16:b8:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02 Validity Not Before: Jan 1 12:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7851e1030626bbb93f49917b2816028d223f5514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e0:87:7c:3a:c2:6d:18:78:94:6b:2a:b7:3b: 7a:d0:17:a5:a0:d2:65:21:c1:f6:03:13:78:9b:90: 66:0c:41:3a:4a:7e:d4:3e:9e:34:43:cb:8b:4f:8e: 98:32:f8:be:60:0a:35:59:23:70:34:6b:39:d4:27: 39:dc:0b:36:26:20:1a:3c:fc:94:a8:3e:f9:2a:0f: 42:0c:28:9a:ba:9f:b9:cc:2a:88:8b:95:96:32:85: 51:4a:27:40:03:1f:e7:6e:3b:28:10:b2:49:88:2d: e7:77:42:8b:5e:0e:7c:e1:da:ac:f7:48:1a:d2:85: 6c:09:a7:bd:86:8f:69:e7:84:a9:84:74:c3:da:79: 7c:ea:19:8b:9f:99:07:a0:51:db:ac:d2:fc:99:d8: b5:29:10:51:a1:15:83:18:64:b7:d8:9f:6b:e4:34: db:a7:39:19:a8:75:5a:2e:45:cc:ac:d7:c3:f6:d3: 1e:8c:c9:2b:08:46:dd:92:b4:8c:41:69:06:aa:b9: 0d:9b:90:0d:c3:d5:00:1e:2b:b9:1f:00:cb:8d:47: 4a:ec:97:e2:1a:87:65:6d:12:0c:8d:03:af:76:b2: 4d:a8:02:3c:21:ae:bc:05:e7:17:83:2b:a5:e8:e0: 23:5b:0e:fc:99:e1:1c:5d:f7:86:d2:38:85:94:59: 9e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:51:E1:03:06:26:BB:B9:3F:49:91:7B:28:16:02:8D:22:3F:55:14 X509v3 Authority Key Identifier: keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/eFHhAwYmu7k_SZF7KBYCjSI_VRQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.96.0/21 37.35.104.0/21 89.249.40.0/23 185.50.188.0/22 185.63.36.0/22 185.75.32.0/22 IPv6: 2a00:e6c0::/32 2a03:2040::/29 Signature Algorithm: sha256WithRSAEncryption 4e:c2:4a:c9:f2:fa:4c:a1:d5:fa:c1:b5:f5:7b:9e:e9:72:45: 5c:92:56:f8:d1:ef:6b:60:fe:59:73:13:79:40:4c:6e:12:7a: ba:bf:0d:33:0e:e8:d9:50:13:40:6d:6f:8a:18:de:53:88:3f: eb:0e:f4:a4:b6:26:9c:0f:7a:75:c4:3c:04:df:26:bb:6e:30: e5:d0:eb:22:71:3c:22:58:e6:dd:4f:26:8e:21:4f:f7:fb:31: 67:33:2b:a2:a0:c9:b8:bc:ce:a8:2c:68:0e:19:ed:f4:4a:7e: 73:28:4a:f6:38:2c:56:17:51:08:b5:68:43:1b:56:cc:83:7e: 15:e3:d7:23:b8:83:43:4e:cb:bc:05:cb:fa:8d:47:28:c1:a3: 3f:79:6d:f6:d8:05:00:4a:27:4a:aa:4a:d1:4c:ad:ef:8a:4c: 6d:d9:ee:f4:15:cd:06:53:3b:03:4f:d3:37:3a:53:09:0a:ec: 02:9f:6a:a4:63:2c:3c:44:f0:ef:40:6c:18:b7:cd:5c:ad:3e: 93:d1:29:c6:2d:ae:29:11:7f:16:22:8c:4d:02:be:31:15:ba: 74:fa:c2:26:0e:57:39:fb:6d:b0:02:07:cb:1a:08:6d:51:3f: b3:40:5b:be:fe:1d:97:da:be:59:46:26:cb:d7:6c:9d:ff:14: e0:42:ce:9b -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgISAZt5fuphL2jXb42XSVMkFrilMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZWM0ZjRhMTZjYzUxYmQ1MTYyMTAxMTUzOWNlYjU3NGFj MTVkMDIwHhcNMjYwMTAxMTIxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODUxZTEwMzA2MjZiYmI5M2Y0OTkxN2IyODE2MDI4ZDIyM2Y1NTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuCHfDrCbRh4lGsqtzt60BeloNJl IcH2AxN4m5BmDEE6Sn7UPp40Q8uLT46YMvi+YAo1WSNwNGs51Cc53As2JiAaPPyU qD75Kg9CDCiaup+5zCqIi5WWMoVRSidAAx/nbjsoELJJiC3nd0KLXg584dqs90ga 0oVsCae9ho9p54SphHTD2nl86hmLn5kHoFHbrNL8mdi1KRBRoRWDGGS32J9r5DTb pzkZqHVaLkXMrNfD9tMejMkrCEbdkrSMQWkGqrkNm5ANw9UAHiu5HwDLjUdK7Jfi GodlbRIMjQOvdrJNqAI8Ia68BecXgyul6OAjWw78meEcXfeG0jiFlFme2wIDAQAB o4ICPTCCAjkwHQYDVR0OBBYEFHhR4QMGJru5P0mReygWAo0iP1UUMB8GA1UdIwQY MBaAFK/sT0oWzFG9UWIQEVOc61dKwV0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci14UFNoYk1VYjFSWWhBUlU1enJWMHJCWFFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85ZjdiNmItYjI5ZC00ODZlLTg0Nzgt MjdlZmMxM2FmZjFlLzEvZUZIaEF3WW11N2tfU1pGN0tCWUNqU0lfVlJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85ZjdiNmItYjI5ZC00ODZlLTg0NzgtMjdlZmMxM2FmZjFl LzEvci14UFNoYk1VYjFSWWhBUlU1enJWMHJCWFFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFMGCCsGAQUFBwEHAQH/BEQwQjAqBAIAATAkAwQDBQFgAwQD JSNoAwQBWfkoAwQCuTK8AwQCuT8kAwQCuUsgMBQEAgACMA4DBQAqAObAAwUDKgMg QDANBgkqhkiG9w0BAQsFAAOCAQEATsJKyfL6TKHV+sG19Xue6XJFXJJW+NHva2D+ WXMTeUBMbhJ6ur8NMw7o2VATQG1vihjeU4g/6w70pLYmnA96dcQ8BN8mu24w5dDr InE8Iljm3U8mjiFP9/sxZzMroqDJuLzOqCxoDhnt9Ep+cyhK9jgsVhdRCLVoQxtW zIN+FePXI7iDQ07LvAXL+o1HKMGjP3lt9tgFAEonSqpK0Uyt74pMbdnu9BXNBlM7 A0/TNzpTCQrsAp9qpGMsPETw70BsGLfNXK0+k9Epxi2uKRF/FiKMTQK+MRW6dPrC Jg5XOfttsAIHyxoIbVE/s0Bbvv4dl9q+WUYmy9dsnf8U4ELOmw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:12 2026 by rpki-client