This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/effgNJTaC78YiU5Wc-6UU-RccKA.roa File: effgNJTaC78YiU5Wc-6UU-RccKA.roa (raw, json) Hash identifier: zJV8oHT4ZTT/92cXG62GnvPt0ixXf5mqUBEZBkWYMyw= Subject key identifier: 79:F7:E0:34:94:DA:0B:BF:18:89:4E:56:73:EE:94:53:E4:5C:70:A0 Certificate issuer: /CN=a40043b3e13aed397f8932cf5d13ff4f4aafe6ba Certificate serial: 019B7C11B03F35478E74C8302246D94F9054 Authority key identifier: A4:00:43:B3:E1:3A:ED:39:7F:89:32:CF:5D:13:FF:4F:4A:AF:E6:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/effgNJTaC78YiU5Wc-6UU-RccKA.roa Signing time: Fri 02 Jan 2026 00:18:12 +0000 ROA not before: Fri 02 Jan 2026 00:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204285 IP address blocks: 185.254.116.0/24 maxlen: 24 185.254.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.crl rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.mft rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:b0:3f:35:47:8e:74:c8:30:22:46:d9:4f:90:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a40043b3e13aed397f8932cf5d13ff4f4aafe6ba Validity Not Before: Jan 2 00:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79f7e03494da0bbf18894e5673ee9453e45c70a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:12:76:3b:fb:f2:64:33:c0:ca:bc:d5:a9:be: ce:5e:fc:53:92:a5:28:4f:42:31:cb:64:44:fe:aa: 47:62:82:bf:51:b4:e1:e3:dd:9f:08:ba:af:0c:e1: 22:0f:38:2d:5c:c9:64:f5:4d:0c:f9:8b:79:d1:a6: 29:f9:df:00:13:5e:fd:5a:a4:64:b6:5f:d0:d3:29: 09:ae:43:66:fa:96:6e:92:47:d8:c6:b2:d2:49:03: 76:05:de:98:a2:56:00:e8:5e:d3:51:c1:80:55:26: a0:5c:b9:f5:a2:f9:32:c2:65:78:40:f3:89:71:4c: 54:e9:28:af:24:19:a2:10:bc:da:90:fd:2a:63:a4: e5:7f:19:51:d5:a2:5f:1c:03:6c:20:6b:42:cb:c3: 81:54:ff:ca:41:29:65:06:10:1a:4c:62:75:ab:45: 65:6f:ac:6c:87:2f:60:8f:47:9d:fd:5c:81:ed:df: e5:24:ec:03:6e:53:ba:20:4d:e7:09:67:3b:a6:40: e8:f0:45:73:c7:95:6c:49:79:08:ef:e5:7c:16:8b: 76:e5:84:45:54:b9:eb:88:2c:9f:b1:0a:57:40:de: e9:fb:fc:93:fa:5b:ae:fe:93:cd:50:8b:d6:41:29: 12:3f:ae:73:c9:03:a9:33:2b:94:6e:75:45:0d:83: 68:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F7:E0:34:94:DA:0B:BF:18:89:4E:56:73:EE:94:53:E4:5C:70:A0 X509v3 Authority Key Identifier: keyid:A4:00:43:B3:E1:3A:ED:39:7F:89:32:CF:5D:13:FF:4F:4A:AF:E6:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pABDs-E67Tl_iTLPXRP_T0qv5ro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/effgNJTaC78YiU5Wc-6UU-RccKA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/a3d8f5-0d3c-42fa-8c69-b9c0df70ad3f/1/pABDs-E67Tl_iTLPXRP_T0qv5ro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.254.116.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:1e:69:a6:f2:3b:5f:99:28:ac:c6:ee:70:54:2f:b0:74:bb: ac:38:fe:58:69:bf:0c:1e:b2:c2:6c:a5:39:db:5b:bb:7b:8b: 04:32:9c:b0:2f:a1:94:be:60:95:de:c4:41:0e:d9:89:52:24: ab:6a:e5:f5:1a:a9:44:94:12:ff:bd:c7:a6:2a:ac:47:95:b1: c5:6b:fa:93:e7:88:80:ec:11:d8:bc:2a:03:1c:59:f1:e1:1f: 7a:3b:67:05:64:c1:30:2f:90:95:d8:40:3c:fe:6d:63:1f:78: cb:63:5b:d9:f6:89:29:40:c3:22:39:fb:62:b4:ba:85:d9:b8: b1:eb:b7:ee:2b:11:bf:85:8d:b7:65:f8:5f:66:13:4b:db:0f: f4:9d:7e:0d:f5:f2:6d:e0:6b:c2:58:f6:1d:73:04:1e:7a:e7: 18:52:45:1b:53:f2:e2:fd:1a:1f:4b:cd:d6:ba:f1:71:67:db: 8f:77:c2:ba:5c:a7:2c:67:2e:51:ad:79:b3:da:9d:9f:c2:b9: e5:1e:cc:a8:9b:99:46:c4:dc:ff:08:5c:9e:e3:a2:fd:09:22: af:fc:63:3b:45:67:2d:0a:03:57:3d:34:ec:ae:19:d4:dc:da: 28:10:6a:fc:f9:ff:d0:1c:fd:58:c7:0f:ed:30:72:45:75:87: bb:1d:3e:72 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EbA/NUeOdMgwIkbZT5BUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0MDA0M2IzZTEzYWVkMzk3Zjg5MzJjZjVkMTNmZjRmNGFh ZmU2YmEwHhcNMjYwMTAyMDAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWY3ZTAzNDk0ZGEwYmJmMTg4OTRlNTY3M2VlOTQ1M2U0NWM3MGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BJ2O/vyZDPAyrzVqb7OXvxTkqUo T0Ixy2RE/qpHYoK/UbTh492fCLqvDOEiDzgtXMlk9U0M+Yt50aYp+d8AE179WqRk tl/Q0ykJrkNm+pZukkfYxrLSSQN2Bd6YolYA6F7TUcGAVSagXLn1ovkywmV4QPOJ cUxU6SivJBmiELzakP0qY6TlfxlR1aJfHANsIGtCy8OBVP/KQSllBhAaTGJ1q0Vl b6xshy9gj0ed/VyB7d/lJOwDblO6IE3nCWc7pkDo8EVzx5VsSXkI7+V8Fot25YRF VLnriCyfsQpXQN7p+/yT+luu/pPNUIvWQSkSP65zyQOpMyuUbnVFDYNoFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHn34DSU2gu/GIlOVnPulFPkXHCgMB8GA1UdIwQY MBaAFKQAQ7PhOu05f4kyz10T/09Kr+a6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEFCRHMtRTY3VGxfaVRMUFhSUF9UMHF2NXJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9hM2Q4ZjUtMGQzYy00MmZhLThjNjkt YjljMGRmNzBhZDNmLzEvZWZmZ05KVGFDNzhZaVU1V2MtNlVVLVJjY0tBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9hM2Q4ZjUtMGQzYy00MmZhLThjNjktYjljMGRmNzBhZDNm LzEvcEFCRHMtRTY3VGxfaVRMUFhSUF9UMHF2NXJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuf50MA0G CSqGSIb3DQEBCwUAA4IBAQAqHmmm8jtfmSisxu5wVC+wdLusOP5Yab8MHrLCbKU5 21u7e4sEMpywL6GUvmCV3sRBDtmJUiSrauX1GqlElBL/vcemKqxHlbHFa/qT54iA 7BHYvCoDHFnx4R96O2cFZMEwL5CV2EA8/m1jH3jLY1vZ9okpQMMiOftitLqF2bix 67fuKxG/hY23ZfhfZhNL2w/0nX4N9fJt4GvCWPYdcwQeeucYUkUbU/Li/RofS83W uvFxZ9uPd8K6XKcsZy5RrXmz2p2fwrnlHsyom5lGxNz/CFye46L9CSKv/GM7RWct CgNXPTTsrhnU3NooEGr8+f/QHP1Yxw/tMHJFdYe7HT5y -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:53 2026 by rpki-client