This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/Ef6YD8BcZephOBKL_Af_JtVWwVQ.roa File: Ef6YD8BcZephOBKL_Af_JtVWwVQ.roa (raw, json) Hash identifier: DuYV9Jw3WnzlLPMbHeqIhbHSehBiGNJ5e+2xEYBYW3w= Subject key identifier: 11:FE:98:0F:C0:5C:65:EA:61:38:12:8B:FC:07:FF:26:D5:56:C1:54 Certificate issuer: /CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24 Certificate serial: 019B7EA57E06D42DB1300401DE4A62668A33 Authority key identifier: 70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/Ef6YD8BcZephOBKL_Af_JtVWwVQ.roa Signing time: Fri 02 Jan 2026 12:18:53 +0000 ROA not before: Fri 02 Jan 2026 12:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47329 IP address blocks: 79.139.48.0/22 maxlen: 22 79.139.112.0/22 maxlen: 22 185.39.160.0/22 maxlen: 22 185.39.161.0/24 maxlen: 24 185.39.163.0/24 maxlen: 24 185.63.108.0/22 maxlen: 22 185.63.200.0/22 maxlen: 22 185.67.8.0/22 maxlen: 22 185.67.68.0/22 maxlen: 22 185.116.252.0/24 maxlen: 24 185.116.253.0/24 maxlen: 24 185.116.254.0/24 maxlen: 24 185.116.255.0/24 maxlen: 24 195.62.64.0/23 maxlen: 23 195.62.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:7e:06:d4:2d:b1:30:04:01:de:4a:62:66:8a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=701624ffc5721c158e4cc9bb071eb4fb87d88c24 Validity Not Before: Jan 2 12:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11fe980fc05c65ea6138128bfc07ff26d556c154 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:4f:db:a6:4c:11:3f:e1:e2:04:7a:fe:0d:0c: 94:61:dc:57:a6:74:af:0c:3a:f5:f9:d1:8c:4f:15: 91:f4:30:fe:7c:f7:0b:d0:26:7b:af:d5:7c:13:b6: de:88:dd:df:1e:ac:ea:1f:8f:cf:57:33:2e:64:9f: 76:63:49:fa:6a:49:33:ce:5a:aa:10:40:73:62:2a: be:50:00:e8:4d:2e:6e:f2:ae:76:72:e7:a1:90:58: 59:3a:b6:43:32:f9:e4:86:d8:97:a8:b2:cf:e9:fd: 77:0c:1e:42:dd:32:7e:5c:b9:48:e5:d6:42:d5:f8: b7:74:98:a1:d7:4d:a0:8e:45:f5:d5:9d:00:95:92: bc:8b:16:1d:8b:1b:ba:51:3e:26:2c:72:63:9f:7e: 01:59:10:e1:b6:b9:dc:ee:8c:e0:ca:10:ae:2e:85: 7f:0d:25:9d:9a:69:6b:99:45:64:a8:82:5c:a5:4c: 82:cf:6e:17:46:28:89:c4:12:78:fd:5b:a2:b1:fe: d6:6e:14:3c:57:2e:ee:87:64:7a:76:ec:87:99:e7: 0d:c0:8b:9f:3f:1b:3f:fb:d7:e9:08:7c:ac:49:07: 5b:a9:72:b7:35:04:14:d6:8d:53:4f:87:63:ae:05: 1e:f9:06:a5:52:ad:ab:aa:6c:bf:4b:04:11:87:ea: c4:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FE:98:0F:C0:5C:65:EA:61:38:12:8B:FC:07:FF:26:D5:56:C1:54 X509v3 Authority Key Identifier: keyid:70:16:24:FF:C5:72:1C:15:8E:4C:C9:BB:07:1E:B4:FB:87:D8:8C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/Ef6YD8BcZephOBKL_Af_JtVWwVQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fb5abe-6a3a-4d37-bf61-63e75e953a93/1/cBYk_8VyHBWOTMm7Bx60-4fYjCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.139.48.0/22 79.139.112.0/22 185.39.160.0/22 185.63.108.0/22 185.63.200.0/22 185.67.8.0/22 185.67.68.0/22 185.116.252.0/22 195.62.64.0/23 Signature Algorithm: sha256WithRSAEncryption 70:c2:04:c1:75:b7:df:72:2b:83:be:d0:b2:1a:8d:36:24:a3: ac:81:e4:f3:90:19:d5:a0:26:ee:0e:25:be:7b:d2:bb:65:d0: 55:8f:0a:0c:fd:ce:6c:97:88:7a:80:bd:ae:77:72:08:bb:79: 8a:ec:17:d2:55:f8:a0:72:53:35:36:89:72:79:41:eb:5b:cf: 40:42:d0:ed:8f:d4:fd:aa:8a:05:74:76:ca:7d:dd:ec:41:cf: 71:a6:5f:5a:73:7e:b1:b9:5e:ac:25:43:48:9c:79:80:b5:03: 0f:ba:24:d7:50:96:da:79:6b:fe:d4:6e:b2:8b:46:02:99:97: ea:71:fc:81:84:e6:94:7a:6c:88:03:55:ba:56:29:11:c6:e1: ae:22:b5:fb:f5:5f:7c:55:48:ac:57:0f:8c:cd:43:02:16:82: 7d:00:81:f0:c6:03:d2:4f:84:f3:5a:25:e5:cb:b1:3c:0e:05: 54:4d:95:c9:cb:3c:d5:69:ed:8a:8e:ac:b0:79:90:19:86:ac: 67:b0:41:3b:06:01:f2:71:09:f1:59:68:8c:31:f1:4c:75:26: 39:63:df:d3:0b:3a:7b:8f:81:51:f8:76:56:69:67:ff:f7:4f: 78:30:be:ed:fe:64:6e:29:b7:6a:ea:81:8c:e7:46:18:99:d5: 1d:8a:51:fb -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt+pX4G1C2xMAQB3kpiZoozMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMTYyNGZmYzU3MjFjMTU4ZTRjYzliYjA3MWViNGZiODdk ODhjMjQwHhcNMjYwMTAyMTIxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWZlOTgwZmMwNWM2NWVhNjEzODEyOGJmYzA3ZmYyNmQ1NTZjMTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA50/bpkwRP+HiBHr+DQyUYdxXpnSv DDr1+dGMTxWR9DD+fPcL0CZ7r9V8E7beiN3fHqzqH4/PVzMuZJ92Y0n6akkzzlqq EEBzYiq+UADoTS5u8q52cuehkFhZOrZDMvnkhtiXqLLP6f13DB5C3TJ+XLlI5dZC 1fi3dJih102gjkX11Z0AlZK8ixYdixu6UT4mLHJjn34BWRDhtrnc7ozgyhCuLoV/ DSWdmmlrmUVkqIJcpUyCz24XRiiJxBJ4/Vuisf7WbhQ8Vy7uh2R6duyHmecNwIuf Pxs/+9fpCHysSQdbqXK3NQQU1o1TT4djrgUe+QalUq2rqmy/SwQRh+rEGwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFBH+mA/AXGXqYTgSi/wH/ybVVsFUMB8GA1UdIwQY MBaAFHAWJP/FchwVjkzJuwcetPuH2IwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0JZa184VnlIQldPVE1tN0J4NjAtNGZZakNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mYjVhYmUtNmEzYS00ZDM3LWJmNjEt NjNlNzVlOTUzYTkzLzEvRWY2WUQ4QmNaZXBoT0JLTF9BZl9KdFZXd1ZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9mYjVhYmUtNmEzYS00ZDM3LWJmNjEtNjNlNzVlOTUzYTkz LzEvY0JZa184VnlIQldPVE1tN0J4NjAtNGZZakNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCT4swAwQC T4twAwQCuSegAwQCuT9sAwQCuT/IAwQCuUMIAwQCuUNEAwQCuXT8AwQBwz5AMA0G CSqGSIb3DQEBCwUAA4IBAQBwwgTBdbffciuDvtCyGo02JKOsgeTzkBnVoCbuDiW+ e9K7ZdBVjwoM/c5sl4h6gL2ud3IIu3mK7BfSVfigclM1NolyeUHrW89AQtDtj9T9 qooFdHbKfd3sQc9xpl9ac36xuV6sJUNInHmAtQMPuiTXUJbaeWv+1G6yi0YCmZfq cfyBhOaUemyIA1W6VikRxuGuIrX79V98VUisVw+MzUMCFoJ9AIHwxgPST4TzWiXl y7E8DgVUTZXJyzzVae2KjqyweZAZhqxnsEE7BgHycQnxWWiMMfFMdSY5Y9/TCzp7 j4FR+HZWaWf/9094ML7t/mRuKbdq6oGM50YYmdUdilH7 -----END CERTIFICATE-----Generated at Tue Feb 10 02:29:51 2026 by rpki-client