This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/efFZNkV_9R76LBUEiCt9lJ0sXAw.roa File: efFZNkV_9R76LBUEiCt9lJ0sXAw.roa (raw, json) Hash identifier: EcZHGVhV5rtZW2h/D/nkyrejk12jAAWi5WJT/KtNz9o= Subject key identifier: 79:F1:59:36:45:7F:F5:1E:FA:2C:15:04:88:2B:7D:94:9D:2C:5C:0C Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c Certificate serial: 019B7C7F49508DDC446ED5DA00090818B2C3 Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/efFZNkV_9R76LBUEiCt9lJ0sXAw.roa Signing time: Fri 02 Jan 2026 02:17:55 +0000 ROA not before: Fri 02 Jan 2026 02:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208794 IP address blocks: 193.43.139.0/24 maxlen: 24 2a0e:b280::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:49:50:8d:dc:44:6e:d5:da:00:09:08:18:b2:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c Validity Not Before: Jan 2 02:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79f15936457ff51efa2c1504882b7d949d2c5c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9e:07:a9:98:30:17:7a:88:a5:53:16:44:04: 1d:8e:37:32:67:60:a6:33:02:fd:9f:73:61:56:7b: 7f:2d:37:13:2b:bb:17:ef:06:f6:d9:e8:0e:9e:4b: e1:3a:d4:aa:8d:d9:90:bd:aa:81:38:af:db:80:e3: 9c:3d:01:cc:ce:5e:e5:79:6b:ac:5e:82:75:31:3f: 35:39:44:98:17:cf:6d:30:b4:51:70:fc:6b:a9:25: 66:99:fd:e2:d0:10:14:f3:8c:60:ae:27:25:79:07: 3b:b6:95:4b:cf:e8:98:30:dc:1a:c0:4b:b3:c1:65: b0:d5:54:9f:9d:05:3b:b9:29:7d:a7:15:1b:2f:2a: 0b:23:f8:18:a4:eb:1e:5c:9b:79:c0:c3:13:0b:9b: d1:4e:2c:f1:ee:53:10:eb:0c:09:4b:37:71:20:7e: 06:b2:3f:38:fc:5e:0b:9a:72:00:9e:f9:e8:4a:c3: f8:2e:c8:d2:c3:e9:79:97:72:a4:1e:e6:ee:b9:60: b5:e3:69:39:83:0f:e3:69:cd:dc:39:8d:e9:2c:ca: 42:aa:3c:93:f2:b0:42:c3:03:6c:23:e0:f0:d3:0e: f9:14:a1:34:95:38:b4:50:b6:3a:50:f9:c7:3a:d9: 93:d2:24:c7:61:8c:0f:15:f2:7d:4a:96:4f:b3:a1: bf:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:F1:59:36:45:7F:F5:1E:FA:2C:15:04:88:2B:7D:94:9D:2C:5C:0C X509v3 Authority Key Identifier: keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/efFZNkV_9R76LBUEiCt9lJ0sXAw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.43.139.0/24 IPv6: 2a0e:b280::/29 Signature Algorithm: sha256WithRSAEncryption 2c:a1:0e:68:b2:51:aa:c8:b9:96:c5:a3:f4:5d:1c:6a:86:ed: 13:70:94:57:20:e9:7b:10:0b:6c:09:4d:2d:e4:a8:58:88:ad: bd:98:6d:b7:56:42:34:74:7c:be:67:08:84:25:a8:d1:13:9b: 52:4d:7b:62:81:31:29:84:78:12:d5:f4:ec:f5:b6:f6:67:53: dc:80:0c:bc:00:74:0c:74:d9:4d:22:42:9a:3c:5a:1c:ef:24: 7f:e0:ed:ff:0c:5a:53:fd:7d:cc:63:e9:8e:c0:02:96:e8:c7: 25:b6:81:b8:2b:1a:77:d4:78:c8:72:be:a0:b8:e1:75:19:10: e0:78:c0:ad:c0:aa:f7:80:36:94:81:5e:ef:8f:5a:08:9a:c4: dc:16:30:02:6b:5c:e2:0d:5e:7c:cd:a6:b6:35:31:51:3f:0c: 66:7a:3d:34:64:82:b9:3d:6e:22:f7:6d:d7:48:d8:83:fb:6d: 1f:d7:14:41:3e:7d:2c:ad:5d:42:8b:c7:e7:32:63:25:bd:91: 2c:9a:4c:0c:e3:4b:2b:ef:45:c1:01:91:d6:a3:45:cf:44:5d: 9c:7f:2f:b0:4a:c5:f9:40:60:ce:e4:2e:92:f3:82:f7:5c:d4: 60:6e:ce:4f:15:6d:9a:55:b3:8f:22:22:4a:46:d4:1e:4f:53: 85:1c:1e:f7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8f0lQjdxEbtXaAAkIGLLDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZmM4ODdjOTc3MzkzNTc1ZGU2MjU3ZTc1ZmE5OWNkZTIw MzdjNmMwHhcNMjYwMTAyMDIxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWYxNTkzNjQ1N2ZmNTFlZmEyYzE1MDQ4ODJiN2Q5NDlkMmM1YzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp54HqZgwF3qIpVMWRAQdjjcyZ2Cm MwL9n3NhVnt/LTcTK7sX7wb22egOnkvhOtSqjdmQvaqBOK/bgOOcPQHMzl7leWus XoJ1MT81OUSYF89tMLRRcPxrqSVmmf3i0BAU84xgricleQc7tpVLz+iYMNwawEuz wWWw1VSfnQU7uSl9pxUbLyoLI/gYpOseXJt5wMMTC5vRTizx7lMQ6wwJSzdxIH4G sj84/F4LmnIAnvnoSsP4LsjSw+l5l3KkHubuuWC142k5gw/jac3cOY3pLMpCqjyT 8rBCwwNsI+Dw0w75FKE0lTi0ULY6UPnHOtmT0iTHYYwPFfJ9SpZPs6G/tQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHnxWTZFf/Ue+iwVBIgrfZSdLFwMMB8GA1UdIwQY MBaAFET8iHyXc5NXXeYlfnX6mc3iA3xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMt YzM2OWMxZDRjMzM3LzEvZWZGWk5rVl85Ujc2TEJVRWlDdDlsSjBzWEF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMtYzM2OWMxZDRjMzM3 LzEvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwSuLMA0E AgACMAcDBQMqDrKAMA0GCSqGSIb3DQEBCwUAA4IBAQAsoQ5oslGqyLmWxaP0XRxq hu0TcJRXIOl7EAtsCU0t5KhYiK29mG23VkI0dHy+ZwiEJajRE5tSTXtigTEphHgS 1fTs9bb2Z1PcgAy8AHQMdNlNIkKaPFoc7yR/4O3/DFpT/X3MY+mOwAKW6McltoG4 Kxp31HjIcr6guOF1GRDgeMCtwKr3gDaUgV7vj1oImsTcFjACa1ziDV58zaa2NTFR Pwxmej00ZIK5PW4i923XSNiD+20f1xRBPn0srV1Ci8fnMmMlvZEsmkwM40sr70XB AZHWo0XPRF2cfy+wSsX5QGDO5C6S84L3XNRgbs5PFW2aVbOPIiJKRtQeT1OFHB73 -----END CERTIFICATE-----Generated at Sun Jan 11 17:05:27 2026 by rpki-client