This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/EFQb-DdMIUfYk8otFJG8FPsYqSg.roa File: EFQb-DdMIUfYk8otFJG8FPsYqSg.roa (raw, json) Hash identifier: xz8HTmmrpuajVW7QayylP4C5tRbZcnyfwKq4BdsJEEg= Subject key identifier: 10:54:1B:F8:37:4C:21:47:D8:93:CA:2D:14:91:BC:14:FB:18:A9:28 Certificate issuer: /CN=5f673d2f621ae31407001748bbde638acbd86050 Certificate serial: 019B7F85286BF5FCD1FB50004CCECDF37239 Authority key identifier: 5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/EFQb-DdMIUfYk8otFJG8FPsYqSg.roa Signing time: Fri 02 Jan 2026 16:23:11 +0000 ROA not before: Fri 02 Jan 2026 16:23:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12650 IP address blocks: 212.45.96.0/21 maxlen: 21 212.45.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:28:6b:f5:fc:d1:fb:50:00:4c:ce:cd:f3:72:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f673d2f621ae31407001748bbde638acbd86050 Validity Not Before: Jan 2 16:23:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10541bf8374c2147d893ca2d1491bc14fb18a928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:37:b5:2c:d3:a9:b4:1a:a6:89:0c:99:7f:f8: 46:94:d7:88:2c:42:4b:9d:be:ab:48:49:16:10:55: a0:78:e6:48:df:c3:fd:16:3b:ae:1e:e7:47:5a:21: ca:75:35:b8:9d:ac:06:01:41:2c:75:3b:f8:c0:69: 1d:1f:5d:6e:bf:b2:3d:61:b1:2d:7d:4d:de:39:fe: 83:f5:92:46:ca:3d:df:aa:c9:a5:33:b2:06:da:24: 3c:42:0f:eb:04:4e:c3:ff:78:20:8f:9f:4c:70:22: 15:62:59:dc:01:2e:b1:c3:bc:8d:a3:fc:5e:02:c4: 6a:81:7b:79:ca:14:41:05:7e:5b:33:36:50:55:c0: 34:ce:89:34:9e:39:ed:05:5f:82:fb:9b:a9:d8:eb: 29:ea:b6:03:96:31:19:4d:74:c1:6d:2d:24:3a:c9: 05:c3:98:6d:e8:72:d2:b4:48:db:0c:01:5a:a7:e6: 95:04:f9:23:f2:fc:ce:ed:42:d9:88:c8:50:36:f4: d2:ae:b9:bc:33:fd:7d:c8:1b:e8:11:cd:7c:13:60: b5:dd:b4:6f:1d:a9:29:02:13:67:8c:66:9d:3e:cc: 32:a5:84:11:68:a5:e6:5a:0b:ff:84:51:a7:08:65: f5:e5:43:67:a2:57:c5:e0:df:e0:84:af:f5:04:fa: 52:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:54:1B:F8:37:4C:21:47:D8:93:CA:2D:14:91:BC:14:FB:18:A9:28 X509v3 Authority Key Identifier: keyid:5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/EFQb-DdMIUfYk8otFJG8FPsYqSg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.45.96.0/21 Signature Algorithm: sha256WithRSAEncryption aa:1d:6d:a0:02:46:9e:19:36:fb:b5:a9:27:a0:f7:a0:4e:f9: ea:8a:09:ae:a3:e8:60:b2:9f:cf:30:56:b9:e4:30:13:8c:e4: bf:0a:18:82:d0:45:dd:50:6a:4f:c4:e3:32:ec:96:6f:fa:3d: 1e:3a:87:36:85:b7:40:54:ed:df:14:96:cc:b9:09:6d:4b:f0: 34:8f:20:24:31:43:c7:ec:6c:b4:e9:1a:22:3e:5b:cf:ca:67: 25:68:69:2d:21:52:30:1b:b7:e3:4f:44:25:6c:f6:96:0b:b0: b7:a1:aa:f9:4f:44:61:92:50:83:1d:65:8a:bf:48:b2:2f:60: 7d:a7:a2:8e:a5:bf:1f:ce:aa:07:7e:94:c6:cf:6e:7d:77:6e: bd:03:d9:84:54:be:fd:c1:4d:a9:23:87:5f:a9:ff:86:5b:79: 09:7c:52:37:02:f4:a3:c7:de:5d:cb:4b:4d:63:15:7e:06:3d: 03:3f:51:8f:6d:43:1d:dd:33:bb:ab:08:5b:03:46:41:cd:9e: 9c:ba:7d:72:55:a8:f0:6e:07:1a:87:a0:19:79:32:92:09:6f: 0f:dc:44:e6:48:2d:08:0a:1a:5d:51:35:73:f6:a2:74:e4:d7: 59:08:e3:20:6e:03:fb:96:1b:8c:81:de:88:e9:6a:4d:d8:2e: 74:3c:09:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hShr9fzR+1AATM7N83I5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNjczZDJmNjIxYWUzMTQwNzAwMTc0OGJiZGU2MzhhY2Jk ODYwNTAwHhcNMjYwMTAyMTYyMzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMDU0MWJmODM3NGMyMTQ3ZDg5M2NhMmQxNDkxYmMxNGZiMThhOTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5je1LNOptBqmiQyZf/hGlNeILEJL nb6rSEkWEFWgeOZI38P9FjuuHudHWiHKdTW4nawGAUEsdTv4wGkdH11uv7I9YbEt fU3eOf6D9ZJGyj3fqsmlM7IG2iQ8Qg/rBE7D/3ggj59McCIVYlncAS6xw7yNo/xe AsRqgXt5yhRBBX5bMzZQVcA0zok0njntBV+C+5up2Osp6rYDljEZTXTBbS0kOskF w5ht6HLStEjbDAFap+aVBPkj8vzO7ULZiMhQNvTSrrm8M/19yBvoEc18E2C13bRv HakpAhNnjGadPswypYQRaKXmWgv/hFGnCGX15UNnolfF4N/ghK/1BPpSFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBBUG/g3TCFH2JPKLRSRvBT7GKkoMB8GA1UdIwQY MBaAFF9nPS9iGuMUBwAXSLveY4rL2GBQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDJjOUwySWE0eFFIQUJkSXU5NWppc3ZZWUZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82NTI3ODAtM2VhMS00MTVlLTgzOWUt ODQ0NzI5MTM3ZWU1LzEvRUZRYi1EZE1JVWZZazhvdEZKRzhGUHNZcVNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC82NTI3ODAtM2VhMS00MTVlLTgzOWUtODQ0NzI5MTM3ZWU1 LzEvWDJjOUwySWE0eFFIQUJkSXU5NWppc3ZZWUZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD1C1gMA0G CSqGSIb3DQEBCwUAA4IBAQCqHW2gAkaeGTb7taknoPegTvnqigmuo+hgsp/PMFa5 5DATjOS/ChiC0EXdUGpPxOMy7JZv+j0eOoc2hbdAVO3fFJbMuQltS/A0jyAkMUPH 7Gy06RoiPlvPymclaGktIVIwG7fjT0QlbPaWC7C3oar5T0RhklCDHWWKv0iyL2B9 p6KOpb8fzqoHfpTGz259d269A9mEVL79wU2pI4dfqf+GW3kJfFI3AvSjx95dy0tN YxV+Bj0DP1GPbUMd3TO7qwhbA0ZBzZ6cun1yVajwbgcah6AZeTKSCW8P3ETmSC0I ChpdUTVz9qJ05NdZCOMgbgP7lhuMgd6I6WpN2C50PAkR -----END CERTIFICATE-----Generated at Tue Feb 10 04:53:37 2026 by rpki-client