This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/_vrnY4z9n3eCeCrITmxUO-Pj33Y.roa File: _vrnY4z9n3eCeCrITmxUO-Pj33Y.roa (raw, json) Hash identifier: XGTJ40NaVW8qqI0RUTAw8+XnQAVER3fUng+XIPClp7g= Subject key identifier: FE:FA:E7:63:8C:FD:9F:77:82:78:2A:C8:4E:6C:54:3B:E3:E3:DF:76 Certificate issuer: /CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955 Certificate serial: 019B76EB67760E8814F12F5E9620AB59A512 Authority key identifier: EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/_vrnY4z9n3eCeCrITmxUO-Pj33Y.roa Signing time: Thu 01 Jan 2026 00:18:17 +0000 ROA not before: Thu 01 Jan 2026 00:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43529 IP address blocks: 46.251.16.0/20 maxlen: 20 79.121.0.0/18 maxlen: 18 79.121.64.0/21 maxlen: 21 79.121.88.0/21 maxlen: 21 94.248.128.0/19 maxlen: 19 94.248.192.0/19 maxlen: 19 94.248.240.0/21 maxlen: 21 2a03:bf00:200::/40 maxlen: 40 2a03:bf01::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.mft rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:67:76:0e:88:14:f1:2f:5e:96:20:ab:59:a5:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955 Validity Not Before: Jan 1 00:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fefae7638cfd9f7782782ac84e6c543be3e3df76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ab:7c:48:9e:fa:76:c5:36:45:86:79:38:c8: 36:59:ac:75:58:39:62:32:69:11:4e:53:b9:ee:0c: aa:ec:7d:f6:7a:66:11:e3:32:d5:6d:ff:66:aa:d3: 16:a0:06:3a:72:27:79:64:79:06:c2:ad:a2:72:10: a3:b8:b1:69:3a:22:2c:da:02:7a:a1:4d:ae:0b:77: 31:c2:04:12:b8:4b:a5:d4:4c:2e:d7:3a:aa:af:bc: 68:f3:cc:e3:d3:37:c0:2e:a5:fc:db:fd:db:77:62: 45:81:3b:8a:1f:a4:e5:6e:30:6c:51:08:ac:a7:a2: d5:0b:19:46:77:83:36:59:d0:0e:81:14:78:88:48: 93:89:f6:ee:42:b3:bf:4d:c7:69:e8:0f:33:83:ba: 33:e8:01:6d:c6:13:eb:85:2c:77:29:5a:ac:46:ca: e2:4c:a2:c7:63:8c:9f:22:a8:ed:90:a5:3f:2c:f8: f3:0a:20:83:80:dc:e5:1b:8b:15:c0:1e:da:a2:e6: 68:58:fa:4f:9e:30:92:70:f4:01:4b:af:d5:44:da: f9:22:e7:1f:2e:42:d5:ef:23:34:dc:d4:a3:ae:ad: bd:6a:d2:70:97:d4:00:2e:8e:c2:c8:8e:a7:bf:85: ff:b6:8e:9d:b1:d5:6e:9a:41:66:20:ee:4d:37:9c: c8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:FA:E7:63:8C:FD:9F:77:82:78:2A:C8:4E:6C:54:3B:E3:E3:DF:76 X509v3 Authority Key Identifier: keyid:EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/_vrnY4z9n3eCeCrITmxUO-Pj33Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.251.16.0/20 79.121.0.0-79.121.71.255 79.121.88.0/21 94.248.128.0/19 94.248.192.0/19 94.248.240.0/21 IPv6: 2a03:bf00:200::/40 2a03:bf01::/32 Signature Algorithm: sha256WithRSAEncryption 02:a5:0d:e9:dc:c6:9d:a4:28:cc:ac:1a:18:7f:03:e1:dd:c2: ab:86:75:bc:97:1a:18:a6:2e:f4:b6:e4:68:19:85:2c:59:55: 60:ce:c5:9e:ee:47:61:79:50:31:c6:97:ab:74:17:38:29:f9: 3a:19:54:ad:f4:42:26:68:f1:b1:4e:4c:5a:92:9c:e6:f6:0f: c3:be:73:14:fb:69:a5:1c:2d:eb:3c:5d:22:0b:39:3e:f5:03: 48:8f:bc:81:5e:cc:a6:0f:da:7b:99:b3:36:26:bf:d6:11:e1: 1e:d3:f7:59:a4:a8:95:6a:8c:8b:be:a4:95:1d:f3:01:64:81: f0:b0:72:6c:f5:cf:6c:0b:66:fd:b0:a6:fe:0a:e9:be:21:c7: 2a:bd:9b:36:0a:75:6d:08:ed:57:4d:e7:e4:a4:be:d8:82:2f: ae:e6:27:84:19:03:e6:45:89:f3:fb:a9:6e:4c:a2:b7:6d:14: 3b:05:3d:23:1d:4a:24:c1:ec:15:ac:7c:c3:89:48:62:bf:cd: 65:73:83:ba:79:bb:e0:97:68:62:74:56:e0:c1:15:4d:3b:05: 33:f4:34:c5:07:16:24:ae:ac:2b:7a:ad:29:97:74:3b:c3:1d: 37:80:48:63:3e:e3:fc:46:ea:8d:1a:d7:da:b3:40:01:a3:52: 18:86:c9:2a -----BEGIN CERTIFICATE----- MIIFOTCCBCGgAwIBAgISAZt262d2DogU8S9eliCrWaUSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMGVmZDVkZTc4ZjkzYmNhZWFkMTVlMTRjMDA2ZWRiYmQx YjU5NTUwHhcNMjYwMTAxMDAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWZhZTc2MzhjZmQ5Zjc3ODI3ODJhYzg0ZTZjNTQzYmUzZTNkZjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qt8SJ76dsU2RYZ5OMg2Wax1WDli MmkRTlO57gyq7H32emYR4zLVbf9mqtMWoAY6cid5ZHkGwq2ichCjuLFpOiIs2gJ6 oU2uC3cxwgQSuEul1Ewu1zqqr7xo88zj0zfALqX82/3bd2JFgTuKH6TlbjBsUQis p6LVCxlGd4M2WdAOgRR4iEiTifbuQrO/Tcdp6A8zg7oz6AFtxhPrhSx3KVqsRsri TKLHY4yfIqjtkKU/LPjzCiCDgNzlG4sVwB7aouZoWPpPnjCScPQBS6/VRNr5Iucf LkLV7yM03NSjrq29atJwl9QALo7CyI6nv4X/to6dsdVumkFmIO5NN5zIgQIDAQAB o4ICRTCCAkEwHQYDVR0OBBYEFP7652OM/Z93gngqyE5sVDvj4992MB8GA1UdIwQY MBaAFO8O/V3nj5O8rq0V4UwAbtu9G1lVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3c3OVhlZVBrN3l1clJYaFRBQnUyNzBiV1ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lMGY5ZTYtZDY1NS00Mzc3LThkMDkt ZWE4NjUwOWMzYjMwLzEvX3Zyblk0ejluM2VDZUNySVRteFVPLVBqMzNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9lMGY5ZTYtZDY1NS00Mzc3LThkMDktZWE4NjUwOWMzYjMw LzEvN3c3OVhlZVBrN3l1clJYaFRBQnUyNzBiV1ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjAxBAIAATArAwQELvsQMAsD AwBPeQMEA095QAMEA095WAMEBV74gAMEBV74wAMEA1748DAVBAIAAjAPAwYAKgO/ AAIDBQAqA78BMA0GCSqGSIb3DQEBCwUAA4IBAQACpQ3p3MadpCjMrBoYfwPh3cKr hnW8lxoYpi70tuRoGYUsWVVgzsWe7kdheVAxxperdBc4Kfk6GVSt9EImaPGxTkxa kpzm9g/DvnMU+2mlHC3rPF0iCzk+9QNIj7yBXsymD9p7mbM2Jr/WEeEe0/dZpKiV aoyLvqSVHfMBZIHwsHJs9c9sC2b9sKb+Cum+IccqvZs2CnVtCO1XTefkpL7Ygi+u 5ieEGQPmRYnz+6luTKK3bRQ7BT0jHUokwewVrHzDiUhiv81lc4O6ebvgl2hidFbg wRVNOwUz9DTFBxYkrqwreq0pl3Q7wx03gEhjPuP8RuqNGtfas0ABo1IYhskq -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:24 2026 by rpki-client