This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/EfsvGGiWagU_0mzeylXRaksRn_8.roa File: EfsvGGiWagU_0mzeylXRaksRn_8.roa (raw, json) Hash identifier: KEPOuFM2LSKDwp8tR2Mp0dmeSc6fJlmHWiPoO6jvt04= Subject key identifier: 11:FB:2F:18:68:96:6A:05:3F:D2:6C:DE:CA:55:D1:6A:4B:11:9F:FF Certificate issuer: /CN=4722aea0ef4c0667db819f5d5a3daea6399f038c Certificate serial: 019B7EA58618ADF1077DAAFDEE4679757498 Authority key identifier: 47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/EfsvGGiWagU_0mzeylXRaksRn_8.roa Signing time: Fri 02 Jan 2026 12:18:55 +0000 ROA not before: Fri 02 Jan 2026 12:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47343 IP address blocks: 2a07:c281::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.mft rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:86:18:ad:f1:07:7d:aa:fd:ee:46:79:75:74:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4722aea0ef4c0667db819f5d5a3daea6399f038c Validity Not Before: Jan 2 12:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11fb2f1868966a053fd26cdeca55d16a4b119fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c8:59:ec:89:27:ca:61:55:75:55:ed:f9:25: b8:4d:57:d8:2d:af:3e:4d:9c:13:9f:bd:94:5c:e2: 1d:d5:95:78:d4:cd:8a:6f:8a:3b:2f:18:e5:13:0d: 52:5d:74:38:25:4c:9e:bb:c5:41:49:c0:e4:29:01: 0e:26:1c:9f:08:d6:b7:d3:21:63:35:e5:dd:da:56: 10:20:97:9a:f5:86:57:4f:5e:85:1c:6a:e9:f8:8b: b2:91:af:25:0b:66:cd:b7:53:13:06:9f:be:df:a3: f1:12:b6:ef:78:74:36:17:09:3f:41:f4:2c:c2:5a: 1f:9a:75:28:da:24:38:68:b6:cf:dc:5a:df:25:3d: ce:25:c9:f3:40:f2:84:3c:d9:48:3a:16:80:83:0a: 48:05:f1:31:8b:ba:3a:46:c4:bb:55:01:ab:3b:4d: 47:8f:c6:66:af:22:83:5f:d2:d3:b9:91:84:8e:b8: 6a:d1:8f:b3:47:c0:cd:a2:a6:16:35:ee:0f:0a:49: 4e:83:3e:e5:a1:38:3b:7c:73:7c:a0:e4:04:67:f6: 3a:41:15:0c:e6:bf:45:72:d2:e5:5f:73:8b:2f:17: ba:f1:7b:ac:8b:74:10:fc:6d:16:a8:ff:7c:8b:43: fe:ce:a3:b3:56:44:9c:d4:de:a5:e0:7c:a1:12:b6: 08:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:FB:2F:18:68:96:6A:05:3F:D2:6C:DE:CA:55:D1:6A:4B:11:9F:FF X509v3 Authority Key Identifier: keyid:47:22:AE:A0:EF:4C:06:67:DB:81:9F:5D:5A:3D:AE:A6:39:9F:03:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RyKuoO9MBmfbgZ9dWj2upjmfA4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/EfsvGGiWagU_0mzeylXRaksRn_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/80c387-b20b-430a-a5e6-6e3074c6c663/1/RyKuoO9MBmfbgZ9dWj2upjmfA4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a07:c281::/32 Signature Algorithm: sha256WithRSAEncryption de:7b:65:0f:77:94:51:3b:c6:be:f0:50:64:cd:67:f4:0f:fe: 8a:b3:07:36:5a:82:c2:82:e7:a9:9e:c1:89:3d:9c:8e:53:12: 1a:5b:55:a4:25:89:4e:7a:5e:60:a3:aa:89:66:ad:9a:08:81: d4:9e:da:18:c9:03:ab:2d:eb:d4:ee:f3:e6:01:e9:b8:ce:5c: ab:db:a4:9c:3c:2e:25:a4:14:6c:7c:4a:5a:74:38:92:bd:fc: 97:06:d4:8f:9d:e7:3a:8f:5d:cc:14:9b:c1:c1:55:ba:96:40: de:a9:8b:af:11:ff:1c:fd:0e:be:1f:6b:c5:d3:f7:db:31:8d: c5:d0:cb:72:40:e0:29:1f:ae:2e:f6:a7:ce:19:06:72:13:ad: 99:81:71:85:73:93:a8:94:88:6e:a0:b8:88:02:c2:b9:a1:69: 56:f7:92:91:fa:a1:82:fe:83:44:aa:94:29:5b:95:4c:36:aa: 11:04:a3:2c:87:40:83:f3:0b:52:c4:8c:92:52:f5:30:1d:48: 55:e7:9f:9f:74:2d:0e:56:b0:df:e1:12:e5:69:9a:8a:b1:73: 45:a7:f1:24:f4:27:2c:5a:8e:e9:e3:e1:14:f8:34:ca:5c:89: b5:5f:f9:0a:aa:5a:92:f2:a2:66:21:58:b2:ce:6c:a9:da:0d: 17:0c:b4:d7 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+pYYYrfEHfar97kZ5dXSYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MjJhZWEwZWY0YzA2NjdkYjgxOWY1ZDVhM2RhZWE2Mzk5 ZjAzOGMwHhcNMjYwMTAyMTIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWZiMmYxODY4OTY2YTA1M2ZkMjZjZGVjYTU1ZDE2YTRiMTE5ZmZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8hZ7IknymFVdVXt+SW4TVfYLa8+ TZwTn72UXOId1ZV41M2Kb4o7LxjlEw1SXXQ4JUyeu8VBScDkKQEOJhyfCNa30yFj NeXd2lYQIJea9YZXT16FHGrp+Iuyka8lC2bNt1MTBp++36PxErbveHQ2Fwk/QfQs wlofmnUo2iQ4aLbP3FrfJT3OJcnzQPKEPNlIOhaAgwpIBfExi7o6RsS7VQGrO01H j8ZmryKDX9LTuZGEjrhq0Y+zR8DNoqYWNe4PCklOgz7loTg7fHN8oOQEZ/Y6QRUM 5r9FctLlX3OLLxe68Xusi3QQ/G0WqP98i0P+zqOzVkSc1N6l4HyhErYIAQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFBH7LxholmoFP9Js3spV0WpLEZ//MB8GA1UdIwQY MBaAFEcirqDvTAZn24GfXVo9rqY5nwOMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnlLdW9POU1CbWZiZ1o5ZFdqMnVwam1mQTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84MGMzODctYjIwYi00MzBhLWE1ZTYt NmUzMDc0YzZjNjYzLzEvRWZzdkdHaVdhZ1VfMG16ZXlsWFJha3NSbl84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi84MGMzODctYjIwYi00MzBhLWE1ZTYtNmUzMDc0YzZjNjYz LzEvUnlLdW9POU1CbWZiZ1o5ZFdqMnVwam1mQTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgfCgTAN BgkqhkiG9w0BAQsFAAOCAQEA3ntlD3eUUTvGvvBQZM1n9A/+irMHNlqCwoLnqZ7B iT2cjlMSGltVpCWJTnpeYKOqiWatmgiB1J7aGMkDqy3r1O7z5gHpuM5cq9uknDwu JaQUbHxKWnQ4kr38lwbUj53nOo9dzBSbwcFVupZA3qmLrxH/HP0Ovh9rxdP32zGN xdDLckDgKR+uLvanzhkGchOtmYFxhXOTqJSIbqC4iALCuaFpVveSkfqhgv6DRKqU KVuVTDaqEQSjLIdAg/MLUsSMklL1MB1IVeefn3QtDlaw3+ES5WmairFzRafxJPQn LFqO6ePhFPg0ylyJtV/5CqpakvKiZiFYss5sqdoNFwy01w== -----END CERTIFICATE-----Generated at Mon Jan 26 04:22:36 2026 by rpki-client