This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/FiWAWUaA9PAq7EYCucRhI4X4OjA.roa File: FiWAWUaA9PAq7EYCucRhI4X4OjA.roa (raw, json) Hash identifier: LrZbMygKaTHugy/xr017bsHS1FYdSALcrqp7tkKb3CA= Subject key identifier: 16:25:80:59:46:80:F4:F0:2A:EC:46:02:B9:C4:61:23:85:F8:3A:30 Certificate issuer: /CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955 Certificate serial: 019B76EB6703AA9D01D2243D3A38B807126B Authority key identifier: EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/FiWAWUaA9PAq7EYCucRhI4X4OjA.roa Signing time: Thu 01 Jan 2026 00:18:17 +0000 ROA not before: Thu 01 Jan 2026 00:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42232 IP address blocks: 46.251.0.0/21 maxlen: 21 79.121.82.0/23 maxlen: 23 88.87.248.0/22 maxlen: 22 88.87.252.0/22 maxlen: 22 91.147.200.0/22 maxlen: 22 91.147.204.0/22 maxlen: 22 91.147.224.0/21 maxlen: 21 91.147.248.0/22 maxlen: 22 91.147.252.0/22 maxlen: 22 94.248.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.mft rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:67:03:aa:9d:01:d2:24:3d:3a:38:b8:07:12:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955 Validity Not Before: Jan 1 00:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=162580594680f4f02aec4602b9c4612385f83a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d6:65:e4:20:ed:40:87:de:72:90:26:f8:92: 54:a9:58:b5:7e:44:d8:25:81:4b:a4:44:ef:b9:9d: 6d:7f:85:41:fa:a0:f5:ee:35:b7:4e:9f:27:fd:05: 41:f3:dc:e0:aa:14:d3:87:47:f7:6e:02:a2:e6:ca: c4:06:4b:92:81:ca:18:60:8d:00:b1:7a:63:9e:a3: e1:9b:93:30:94:20:0b:7d:25:81:57:08:66:6d:12: 87:15:96:d2:2d:00:ab:f3:00:a2:5f:a8:a0:67:07: 52:4c:44:d0:2a:d9:7a:db:57:1a:87:e3:90:12:2e: 6f:d0:85:57:1e:ee:d4:0d:bd:1b:72:90:b4:9d:6e: 4e:70:f6:be:19:6b:e4:f6:dd:16:62:ec:5d:e3:db: f1:b3:18:68:d7:3f:26:0a:7c:8e:9a:12:cb:d5:b8: 7e:9e:06:68:78:d8:03:72:7e:55:41:56:c5:77:49: d3:86:83:cc:74:8b:a0:dd:20:4a:13:66:68:76:98: 9a:e3:03:98:93:a1:4c:96:70:b8:0e:44:21:23:e7: e6:0d:57:bb:55:d7:39:04:33:be:d4:86:30:bb:dd: f0:d1:fb:08:d6:dc:1a:53:84:12:a1:ee:f2:e3:09: d7:03:9a:ef:9c:7e:80:82:c3:a6:d7:95:3e:af:61: d4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:25:80:59:46:80:F4:F0:2A:EC:46:02:B9:C4:61:23:85:F8:3A:30 X509v3 Authority Key Identifier: keyid:EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/FiWAWUaA9PAq7EYCucRhI4X4OjA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.251.0.0/21 79.121.82.0/23 88.87.248.0/21 91.147.200.0/21 91.147.224.0/21 91.147.248.0/21 94.248.160.0/21 Signature Algorithm: sha256WithRSAEncryption 77:31:a9:f1:d7:6c:68:3e:10:9b:90:96:fa:f6:ce:4f:ec:e0: b0:89:5f:4f:72:fa:ae:f3:9d:bf:88:35:17:54:d4:6b:17:32: a8:d4:3b:9f:1f:bc:fe:79:70:6d:04:5d:99:b9:83:c7:25:e1: 4d:e9:56:68:8c:8c:5e:d6:bf:db:e0:29:5a:99:2f:95:41:8c: 0e:ad:13:85:13:48:3d:3f:cd:48:da:3f:6e:af:02:7e:95:7d: a7:04:8b:59:94:0e:b5:b7:df:4e:6c:c8:35:34:9b:10:72:09: ad:ac:e5:e0:8b:c1:e1:fa:01:e3:4a:ec:9b:52:0b:4f:ae:81: 2a:16:39:9b:7d:8b:65:0e:d9:50:51:d7:33:76:c5:d7:8c:0f: 16:ab:c6:7c:45:36:d9:db:8f:68:5a:8b:f6:8d:38:29:f3:e5: 1f:c7:82:7a:45:74:95:44:e3:b6:3f:01:c2:49:db:d8:cd:8b: b4:0d:4e:3a:60:0d:c9:f2:99:61:79:de:81:7c:40:68:87:4f: ab:42:9e:de:14:cc:4f:f0:05:17:73:e0:c7:e9:9b:3c:92:6a: 83:92:d3:68:9c:4b:53:d4:46:7c:fc:9e:3c:bf:79:4e:e6:b7: 72:cc:a4:f6:31:ee:19:65:e9:e9:3b:33:b8:cd:d5:f8:db:66: 3d:4e:73:28 -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt262cDqp0B0iQ9Oji4BxJrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMGVmZDVkZTc4ZjkzYmNhZWFkMTVlMTRjMDA2ZWRiYmQx YjU5NTUwHhcNMjYwMTAxMDAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNjI1ODA1OTQ2ODBmNGYwMmFlYzQ2MDJiOWM0NjEyMzg1ZjgzYTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNZl5CDtQIfecpAm+JJUqVi1fkTY JYFLpETvuZ1tf4VB+qD17jW3Tp8n/QVB89zgqhTTh0f3bgKi5srEBkuSgcoYYI0A sXpjnqPhm5MwlCALfSWBVwhmbRKHFZbSLQCr8wCiX6igZwdSTETQKtl621cah+OQ Ei5v0IVXHu7UDb0bcpC0nW5OcPa+GWvk9t0WYuxd49vxsxho1z8mCnyOmhLL1bh+ ngZoeNgDcn5VQVbFd0nThoPMdIug3SBKE2Zodpia4wOYk6FMlnC4DkQhI+fmDVe7 Vdc5BDO+1IYwu93w0fsI1twaU4QSoe7y4wnXA5rvnH6AgsOm15U+r2HUcwIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFBYlgFlGgPTwKuxGArnEYSOF+DowMB8GA1UdIwQY MBaAFO8O/V3nj5O8rq0V4UwAbtu9G1lVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3c3OVhlZVBrN3l1clJYaFRBQnUyNzBiV1ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lMGY5ZTYtZDY1NS00Mzc3LThkMDkt ZWE4NjUwOWMzYjMwLzEvRmlXQVdVYUE5UEFxN0VZQ3VjUmhJNFg0T2pBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9lMGY5ZTYtZDY1NS00Mzc3LThkMDktZWE4NjUwOWMzYjMw LzEvN3c3OVhlZVBrN3l1clJYaFRBQnUyNzBiV1ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQDLvsAAwQB T3lSAwQDWFf4AwQDW5PIAwQDW5PgAwQDW5P4AwQDXvigMA0GCSqGSIb3DQEBCwUA A4IBAQB3Manx12xoPhCbkJb69s5P7OCwiV9Pcvqu852/iDUXVNRrFzKo1DufH7z+ eXBtBF2ZuYPHJeFN6VZojIxe1r/b4ClamS+VQYwOrROFE0g9P81I2j9urwJ+lX2n BItZlA61t99ObMg1NJsQcgmtrOXgi8Hh+gHjSuybUgtProEqFjmbfYtlDtlQUdcz dsXXjA8Wq8Z8RTbZ249oWov2jTgp8+Ufx4J6RXSVROO2PwHCSdvYzYu0DU46YA3J 8plhed6BfEBoh0+rQp7eFMxP8AUXc+DH6Zs8kmqDktNonEtT1EZ8/J48v3lO5rdy zKT2Me4ZZenpOzO4zdX422Y9TnMo -----END CERTIFICATE-----Generated at Sun Jan 25 18:06:23 2026 by rpki-client