This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/EOjWQSQb7ZQ10u-ZgMDwYKKu1o4.roa File: EOjWQSQb7ZQ10u-ZgMDwYKKu1o4.roa (raw, json) Hash identifier: hrdH4gBWBAuOWZkBtg5Qonx+V+TKKgAG0J50XIArrgE= Subject key identifier: 10:E8:D6:41:24:1B:ED:94:35:D2:EF:99:80:C0:F0:60:A2:AE:D6:8E Certificate issuer: /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e Certificate serial: 019B7B36E3EDFE310B4B9886493EBA36AFA4 Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/EOjWQSQb7ZQ10u-ZgMDwYKKu1o4.roa Signing time: Thu 01 Jan 2026 20:19:13 +0000 ROA not before: Thu 01 Jan 2026 20:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47629 IP address blocks: 79.110.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 14:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:e3:ed:fe:31:0b:4b:98:86:49:3e:ba:36:af:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e Validity Not Before: Jan 1 20:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10e8d641241bed9435d2ef9980c0f060a2aed68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3e:77:ea:6a:74:53:87:83:05:b1:a4:b9:c7: c0:a6:2d:c4:65:dc:4f:80:37:d0:89:32:11:ed:67: 55:16:05:7a:e4:30:77:c7:76:86:3c:87:43:d3:63: b4:62:cf:04:66:84:ae:e9:6e:da:ce:1e:1f:93:fb: 6c:40:e7:15:05:f4:ec:33:96:1a:d7:8d:42:4e:03: 97:e1:f6:87:f2:8e:f7:1a:da:65:ab:97:f9:26:5f: 8c:66:e2:3b:f4:3c:fa:b1:b1:59:b1:84:58:12:04: fd:9c:d1:ce:7f:be:7c:7f:6f:73:68:59:8f:d2:05: b7:9c:7a:50:da:77:be:72:73:d7:7f:6d:78:bf:94: f0:11:56:17:57:d8:be:7a:9d:25:a5:07:32:aa:e5: 37:a8:39:a9:b8:d4:ef:80:7f:93:08:3b:59:16:71: 9d:ed:a7:df:5f:e1:49:e4:b0:cf:c6:bd:b0:27:cb: 80:1f:3f:5d:6d:09:d7:69:45:22:db:f7:ff:e5:d7: 6b:8d:f4:86:32:92:b0:b1:c1:5b:11:ec:0c:03:ba: 0d:3e:61:54:6d:c6:59:93:e7:0c:7b:90:ad:f6:e5: b9:9d:a2:5b:91:5e:43:e1:b1:54:ca:8e:8c:54:a3: c1:df:79:6d:3e:93:c2:97:b3:cc:6a:8c:84:e1:18: ec:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E8:D6:41:24:1B:ED:94:35:D2:EF:99:80:C0:F0:60:A2:AE:D6:8E X509v3 Authority Key Identifier: keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/EOjWQSQb7ZQ10u-ZgMDwYKKu1o4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.110.167.0/24 Signature Algorithm: sha256WithRSAEncryption 35:ff:78:6a:14:b2:9d:e4:bd:f1:f6:0a:e3:3b:c4:0c:8c:f6: 94:4b:be:9b:ba:d8:89:6b:9d:01:12:62:18:99:17:a0:41:82: 66:bb:df:22:ee:ab:78:9e:29:8d:29:4b:60:59:21:41:b0:7f: 87:9c:45:26:83:63:83:18:0e:ee:62:4d:b2:68:ef:d2:84:c5: dd:47:56:79:08:2e:06:06:49:4e:0b:f7:eb:8b:db:45:17:19: c8:1c:f6:b3:74:9e:a6:cc:7c:1a:8a:c5:89:c7:c5:a1:42:d9: b1:3a:4d:3d:ce:b9:f0:13:39:f5:aa:83:a5:ba:c8:0a:db:94: 00:79:71:12:19:09:26:ed:98:48:fc:47:65:ce:e9:12:36:11: 14:b5:e4:41:7d:a8:a2:ee:e9:9e:51:bf:af:f6:9e:4a:41:3f: f3:3c:5b:e1:45:72:bb:e6:86:32:bf:ad:a1:93:64:9d:04:21: 04:c2:38:ca:00:d3:c7:ab:61:b7:9d:05:ff:67:56:57:97:cd: ef:1b:4c:40:83:1d:b9:bf:90:0a:d7:42:aa:97:04:b8:6b:fb: c1:c9:31:8e:35:9c:07:56:ef:ae:b3:b4:bc:ad:50:0f:85:78: 8e:00:a6:27:6d:e3:53:c0:8b:00:73:de:df:3b:a3:47:68:20: 3b:7d:46:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NuPt/jELS5iGST66Nq+kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ODM4NDFiYzA5ZjFmZDRmZTNkZTk5MTAxNmMwYjcxMjZm YmE1MmUwHhcNMjYwMTAxMjAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGU4ZDY0MTI0MWJlZDk0MzVkMmVmOTk4MGMwZjA2MGEyYWVkNjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD536mp0U4eDBbGkucfApi3EZdxP gDfQiTIR7WdVFgV65DB3x3aGPIdD02O0Ys8EZoSu6W7azh4fk/tsQOcVBfTsM5Ya 141CTgOX4faH8o73Gtplq5f5Jl+MZuI79Dz6sbFZsYRYEgT9nNHOf758f29zaFmP 0gW3nHpQ2ne+cnPXf214v5TwEVYXV9i+ep0lpQcyquU3qDmpuNTvgH+TCDtZFnGd 7affX+FJ5LDPxr2wJ8uAHz9dbQnXaUUi2/f/5ddrjfSGMpKwscFbEewMA7oNPmFU bcZZk+cMe5Ct9uW5naJbkV5D4bFUyo6MVKPB33ltPpPCl7PMaoyE4RjsNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBDo1kEkG+2UNdLvmYDA8GCirtaOMB8GA1UdIwQY MBaAFCmDhBvAnx/U/j3pkQFsC3Em+6UuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2It MWRkNWRhYjM2ZjlmLzEvRU9qV1FTUWI3WlExMHUtWmdNRHdZS0t1MW80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2ItMWRkNWRhYjM2Zjlm LzEvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT26nMA0G CSqGSIb3DQEBCwUAA4IBAQA1/3hqFLKd5L3x9grjO8QMjPaUS76butiJa50BEmIY mRegQYJmu98i7qt4nimNKUtgWSFBsH+HnEUmg2ODGA7uYk2yaO/ShMXdR1Z5CC4G BklOC/fri9tFFxnIHPazdJ6mzHwaisWJx8WhQtmxOk09zrnwEzn1qoOlusgK25QA eXESGQkm7ZhI/EdlzukSNhEUteRBfaii7umeUb+v9p5KQT/zPFvhRXK75oYyv62h k2SdBCEEwjjKANPHq2G3nQX/Z1ZXl83vG0xAgx25v5AK10KqlwS4a/vByTGONZwH Vu+us7S8rVAPhXiOAKYnbeNTwIsAc97fO6NHaCA7fUYp -----END CERTIFICATE-----Generated at Sat Jan 10 00:25:43 2026 by rpki-client