This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/EfrbbVNsRESDxPceTPw-5MN_E7s.roa File: EfrbbVNsRESDxPceTPw-5MN_E7s.roa (raw, json) Hash identifier: 1V7YqzBGw+lW57pDGC7FJ9hb2upKEO6VdoiZzsqxDIs= Subject key identifier: 11:FA:DB:6D:53:6C:44:44:83:C4:F7:1E:4C:FC:3E:E4:C3:7F:13:BB Certificate issuer: /CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0 Certificate serial: 019B7EA5536748DF221377531EDB40EA0E3E Authority key identifier: A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/EfrbbVNsRESDxPceTPw-5MN_E7s.roa Signing time: Fri 02 Jan 2026 12:18:42 +0000 ROA not before: Fri 02 Jan 2026 12:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211606 IP address blocks: 185.254.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.mft rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:53:67:48:df:22:13:77:53:1e:db:40:ea:0e:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a08e41cbfdefad0bb0e297247acc1a201d2df4a0 Validity Not Before: Jan 2 12:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11fadb6d536c444483c4f71e4cfc3ee4c37f13bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ca:05:78:34:de:1f:e3:0b:94:58:98:cc:82: 6e:11:b5:51:11:78:fd:e5:36:b3:b0:cd:d6:30:09: aa:79:3d:1f:37:a3:c2:a3:95:d7:f2:9c:b3:e0:e3: 24:cc:24:66:61:1e:62:92:0e:5c:97:7f:91:49:2b: b6:97:8a:c2:d8:f3:86:7f:fc:69:42:f8:95:6f:3e: 17:a2:0c:be:5e:be:13:bc:e5:46:51:bb:af:a9:0d: 8d:a3:25:50:57:27:a4:40:c8:7f:77:db:ec:b7:d9: b7:1c:b6:29:63:fe:6d:cb:4b:b2:8e:e6:a2:d1:b0: 4b:cf:59:bd:8a:92:38:b3:fb:a9:fd:b3:50:48:e8: 5b:ed:92:00:8a:02:2c:6d:05:53:96:5f:d2:1c:f7: 7e:da:7d:3c:0e:f6:04:6e:26:7c:25:a0:a1:2b:8e: 2c:10:3a:89:97:ec:5e:61:d6:4b:ba:b2:a7:3c:52: 38:59:43:99:8b:b1:1b:00:08:6e:45:72:a5:74:7e: af:cf:c3:ce:ea:f4:ba:f4:17:e4:2b:2f:5b:23:be: 66:8b:67:1f:71:a8:97:85:60:97:85:e3:7f:d7:58: 68:b4:7c:aa:5b:eb:1b:c5:7c:bd:a5:94:08:e5:83: f5:c9:6f:15:9a:83:d8:10:ec:f6:03:df:b4:e6:57: 03:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FA:DB:6D:53:6C:44:44:83:C4:F7:1E:4C:FC:3E:E4:C3:7F:13:BB X509v3 Authority Key Identifier: keyid:A0:8E:41:CB:FD:EF:AD:0B:B0:E2:97:24:7A:CC:1A:20:1D:2D:F4:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oI5By_3vrQuw4pckeswaIB0t9KA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/EfrbbVNsRESDxPceTPw-5MN_E7s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/7a806c-2f08-47d9-9cc9-658d4c4628ad/1/oI5By_3vrQuw4pckeswaIB0t9KA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.254.121.0/24 Signature Algorithm: sha256WithRSAEncryption d3:97:fa:75:de:b5:9f:5c:b3:0d:6b:0a:97:21:77:3f:d3:df: f5:78:00:e7:97:86:ab:8a:19:66:2b:31:c2:c6:fa:71:65:3d: 44:4e:27:7e:36:26:e3:43:49:3a:79:8c:28:5f:2c:e5:71:81: e3:7a:3e:6a:a3:52:0a:ff:ae:3a:27:10:97:01:46:8c:d1:84: ca:4a:ca:c2:62:aa:70:7a:93:86:a8:6b:76:9c:bf:5c:4a:99: fd:16:43:63:af:31:c9:44:b9:a8:b8:6e:6d:7d:df:d5:8c:09: 76:cc:e8:0c:00:90:8a:5f:6f:b3:34:d4:85:e3:08:6d:07:ec: 6a:f6:38:31:d0:d2:80:6c:ca:1e:7a:d5:39:38:d8:db:12:74: f2:e1:6a:6b:74:d1:8b:c3:34:a3:42:bd:f0:8c:a5:38:47:ba: 95:e0:a6:51:b4:56:90:4d:f7:62:e5:6f:17:e2:61:ea:45:de: f4:35:03:5d:c0:4b:58:fd:fa:da:46:b5:7e:04:db:d8:fb:61: 9a:5a:36:00:7a:97:db:ab:29:01:a2:c3:b6:71:2a:81:83:61: a7:61:b3:b0:0e:6e:49:40:cc:9f:61:c0:35:ac:d9:c5:8c:30: 39:28:30:5f:d2:46:41:e7:99:00:de:a3:c5:96:a3:43:5f:19: 14:2a:ed:7c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pVNnSN8iE3dTHttA6g4+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOGU0MWNiZmRlZmFkMGJiMGUyOTcyNDdhY2MxYTIwMWQy ZGY0YTAwHhcNMjYwMTAyMTIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWZhZGI2ZDUzNmM0NDQ0ODNjNGY3MWU0Y2ZjM2VlNGMzN2YxM2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysoFeDTeH+MLlFiYzIJuEbVREXj9 5TazsM3WMAmqeT0fN6PCo5XX8pyz4OMkzCRmYR5ikg5cl3+RSSu2l4rC2POGf/xp QviVbz4Xogy+Xr4TvOVGUbuvqQ2NoyVQVyekQMh/d9vst9m3HLYpY/5ty0uyjuai 0bBLz1m9ipI4s/up/bNQSOhb7ZIAigIsbQVTll/SHPd+2n08DvYEbiZ8JaChK44s EDqJl+xeYdZLurKnPFI4WUOZi7EbAAhuRXKldH6vz8PO6vS69BfkKy9bI75mi2cf caiXhWCXheN/11hotHyqW+sbxXy9pZQI5YP1yW8VmoPYEOz2A9+05lcDsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBH6221TbEREg8T3Hkz8PuTDfxO7MB8GA1UdIwQY MBaAFKCOQcv9760LsOKXJHrMGiAdLfSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0k1QnlfM3ZyUXV3NHBja2Vzd2FJQjB0OUtBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC83YTgwNmMtMmYwOC00N2Q5LTljYzkt NjU4ZDRjNDYyOGFkLzEvRWZyYmJWTnNSRVNEeFBjZVRQdy01TU5fRTdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC83YTgwNmMtMmYwOC00N2Q5LTljYzktNjU4ZDRjNDYyOGFk LzEvb0k1QnlfM3ZyUXV3NHBja2Vzd2FJQjB0OUtBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf55MA0G CSqGSIb3DQEBCwUAA4IBAQDTl/p13rWfXLMNawqXIXc/09/1eADnl4arihlmKzHC xvpxZT1ETid+NibjQ0k6eYwoXyzlcYHjej5qo1IK/646JxCXAUaM0YTKSsrCYqpw epOGqGt2nL9cSpn9FkNjrzHJRLmouG5tfd/VjAl2zOgMAJCKX2+zNNSF4whtB+xq 9jgx0NKAbMoeetU5ONjbEnTy4WprdNGLwzSjQr3wjKU4R7qV4KZRtFaQTfdi5W8X 4mHqRd70NQNdwEtY/fraRrV+BNvY+2GaWjYAepfbqykBosO2cSqBg2GnYbOwDm5J QMyfYcA1rNnFjDA5KDBf0kZB55kA3qPFlqNDXxkUKu18 -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:11 2026 by rpki-client