This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/EfXSoXJaCrM2oY0uZltd_MsMcGg.roa File: EfXSoXJaCrM2oY0uZltd_MsMcGg.roa (raw, json) Hash identifier: UdYFHNky4AHMOhO+Oudhljz1aWNykblXzASt3L7R1FM= Subject key identifier: 11:F5:D2:A1:72:5A:0A:B3:36:A1:8D:2E:66:5B:5D:FC:CB:0C:70:68 Certificate issuer: /CN=627a99509ed51df93a33f2a4e2fd662d1c8d660b Certificate serial: 019B7EA4DB5CDE709646C8C8C3CF0551E0F7 Authority key identifier: 62:7A:99:50:9E:D5:1D:F9:3A:33:F2:A4:E2:FD:66:2D:1C:8D:66:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/EfXSoXJaCrM2oY0uZltd_MsMcGg.roa Signing time: Fri 02 Jan 2026 12:18:11 +0000 ROA not before: Fri 02 Jan 2026 12:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3303 IP address blocks: 194.61.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.mft rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:db:5c:de:70:96:46:c8:c8:c3:cf:05:51:e0:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=627a99509ed51df93a33f2a4e2fd662d1c8d660b Validity Not Before: Jan 2 12:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11f5d2a1725a0ab336a18d2e665b5dfccb0c7068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:36:71:ac:2a:53:b8:b6:26:5a:d9:35:61:0d: c5:58:d1:aa:62:e6:4b:e5:af:92:16:f7:e3:0e:50: 7c:67:37:c6:f8:e7:dc:37:7b:10:22:6f:f2:70:d6: 48:17:9c:ca:e8:d8:26:a2:52:ac:79:98:3b:41:9e: 3b:b6:fc:e5:eb:d4:b2:78:86:ab:23:f9:4c:f8:7d: 33:20:d9:ab:6a:21:e3:6a:d9:34:3c:e4:24:c8:98: 3b:dc:9e:e8:4c:fb:b2:fd:02:5d:4e:bb:9c:b9:8f: 64:01:41:32:7c:41:5f:ec:13:b2:ac:7e:c7:25:8d: 55:85:ad:7a:2c:ee:19:9b:82:2b:1b:ec:f4:c7:75: 02:68:e5:a8:ea:48:1d:c7:9b:90:30:85:25:90:92: 0e:77:a8:5b:4b:d3:7c:ae:86:87:40:d7:13:10:d6: 48:ef:22:64:16:f6:50:01:e0:53:b5:a6:9f:36:ef: 8c:47:d1:4b:4b:90:ad:a0:dd:3d:68:4d:30:a9:35: 1b:18:39:de:bd:03:dd:77:a8:25:60:90:13:d1:f2: 10:1c:8c:f0:32:9a:1d:18:28:24:2c:c4:e9:52:4a: 41:f2:0e:84:b8:e2:55:e5:96:42:2d:32:d1:86:75: df:e2:be:18:10:ef:d0:37:72:99:54:95:d8:d4:b3: e6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F5:D2:A1:72:5A:0A:B3:36:A1:8D:2E:66:5B:5D:FC:CB:0C:70:68 X509v3 Authority Key Identifier: keyid:62:7A:99:50:9E:D5:1D:F9:3A:33:F2:A4:E2:FD:66:2D:1C:8D:66:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/EfXSoXJaCrM2oY0uZltd_MsMcGg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/463666-00e0-492e-a463-0128d97179e8/1/YnqZUJ7VHfk6M_Kk4v1mLRyNZgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.61.2.0/24 Signature Algorithm: sha256WithRSAEncryption 37:cf:24:58:d5:24:7a:42:58:58:d8:dd:e2:fa:cd:4b:6e:0f: 1d:19:fb:15:88:d9:34:92:2c:f6:d7:99:3a:34:91:f7:61:b7: 71:bc:2b:e9:8f:8a:4c:ff:6c:df:17:f4:76:6e:9e:22:7e:a6: 79:07:1b:3e:cc:43:19:96:5a:83:b4:0c:18:69:7b:2d:b8:5e: 4c:a6:ef:f8:c6:ed:b3:20:c1:e6:1e:50:e9:15:f8:7b:52:29: 8a:bf:b3:e4:73:06:f0:2e:1f:22:c2:73:2c:e6:92:be:1e:43: 20:aa:a5:59:a1:22:6f:2d:40:bb:35:20:a9:3e:62:6b:6f:fc: 6d:87:66:2c:e7:bd:8e:86:7d:e6:68:c9:b6:fe:87:a3:72:51: e0:52:3e:77:69:53:00:3c:d6:c6:7f:ff:35:c1:7e:f9:22:10: f8:43:a3:f1:79:ad:97:48:03:67:c0:2b:34:d0:4f:62:85:0e: 67:1c:0a:d0:a3:7e:42:22:f4:85:c4:2d:1a:92:f1:a7:93:48: 63:80:ed:aa:2f:9d:57:dd:e3:d7:9b:87:9d:27:c9:53:45:9b: 0b:ae:38:ee:5e:46:1c:5f:90:b5:ce:3f:d0:4c:bf:2e:c0:d8: 5b:35:ee:b1:f7:31:7a:2e:67:f6:81:72:05:81:d9:80:3b:78: 63:c0:d0:20 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pNtc3nCWRsjIw88FUeD3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyN2E5OTUwOWVkNTFkZjkzYTMzZjJhNGUyZmQ2NjJkMWM4 ZDY2MGIwHhcNMjYwMTAyMTIxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWY1ZDJhMTcyNWEwYWIzMzZhMThkMmU2NjViNWRmY2NiMGM3MDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzZxrCpTuLYmWtk1YQ3FWNGqYuZL 5a+SFvfjDlB8ZzfG+OfcN3sQIm/ycNZIF5zK6NgmolKseZg7QZ47tvzl69SyeIar I/lM+H0zINmraiHjatk0POQkyJg73J7oTPuy/QJdTrucuY9kAUEyfEFf7BOyrH7H JY1Vha16LO4Zm4IrG+z0x3UCaOWo6kgdx5uQMIUlkJIOd6hbS9N8roaHQNcTENZI 7yJkFvZQAeBTtaafNu+MR9FLS5CtoN09aE0wqTUbGDnevQPdd6glYJAT0fIQHIzw MpodGCgkLMTpUkpB8g6EuOJV5ZZCLTLRhnXf4r4YEO/QN3KZVJXY1LPmQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBH10qFyWgqzNqGNLmZbXfzLDHBoMB8GA1UdIwQY MBaAFGJ6mVCe1R35OjPypOL9Zi0cjWYLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWW5xWlVKN1ZIZms2TV9LazR2MW1MUnlOWmdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy80NjM2NjYtMDBlMC00OTJlLWE0NjMt MDEyOGQ5NzE3OWU4LzEvRWZYU29YSmFDck0yb1kwdVpsdGRfTXNNY0dnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy80NjM2NjYtMDBlMC00OTJlLWE0NjMtMDEyOGQ5NzE3OWU4 LzEvWW5xWlVKN1ZIZms2TV9LazR2MW1MUnlOWmdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj0CMA0G CSqGSIb3DQEBCwUAA4IBAQA3zyRY1SR6QlhY2N3i+s1Lbg8dGfsViNk0kiz215k6 NJH3YbdxvCvpj4pM/2zfF/R2bp4ifqZ5Bxs+zEMZllqDtAwYaXstuF5Mpu/4xu2z IMHmHlDpFfh7UimKv7PkcwbwLh8iwnMs5pK+HkMgqqVZoSJvLUC7NSCpPmJrb/xt h2Ys572Ohn3maMm2/oejclHgUj53aVMAPNbGf/81wX75IhD4Q6Pxea2XSANnwCs0 0E9ihQ5nHArQo35CIvSFxC0akvGnk0hjgO2qL51X3ePXm4edJ8lTRZsLrjjuXkYc X5C1zj/QTL8uwNhbNe6x9zF6Lmf2gXIFgdmAO3hjwNAg -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:11 2026 by rpki-client