This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/efptImD_TpkXZ0HvFXCba5sHj3E.roa File: efptImD_TpkXZ0HvFXCba5sHj3E.roa (raw, json) Hash identifier: wBmqE8ohvjFZts4QshaEu8H7uZA38AN2a3RRcLvuOgA= Subject key identifier: 79:FA:6D:22:60:FF:4E:99:17:67:41:EF:15:70:9B:6B:9B:07:8F:71 Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d Certificate serial: 019B77587B294277616A32894A3EF729393A Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/efptImD_TpkXZ0HvFXCba5sHj3E.roa Signing time: Thu 01 Jan 2026 02:17:25 +0000 ROA not before: Thu 01 Jan 2026 02:17:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51088 IP address blocks: 185.37.4.0/23 maxlen: 23 185.37.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:7b:29:42:77:61:6a:32:89:4a:3e:f7:29:39:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d Validity Not Before: Jan 1 02:17:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79fa6d2260ff4e99176741ef15709b6b9b078f71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ed:af:c8:95:97:89:d8:7b:c5:a8:10:69:90: 73:93:3e:8d:54:c8:b7:ab:8b:aa:f7:b7:96:82:a6: ae:47:4e:5d:78:60:d2:be:de:50:2c:2e:15:db:ab: 39:36:d3:85:dc:ce:49:74:0f:fa:07:22:2e:59:ec: c6:fa:7a:67:46:f6:34:96:f4:cc:d7:50:60:a8:7c: 85:e5:0a:62:c6:04:42:8d:ad:cf:57:7a:3b:b3:af: 85:ba:16:dd:83:b0:1d:c8:de:51:63:de:89:10:fa: d6:be:81:fa:e8:20:30:7d:90:75:f7:42:65:8c:33: 56:55:0c:73:1c:e1:92:81:fd:b3:b5:9e:8d:19:68: 18:c9:33:6a:37:b7:2e:4d:d3:07:d3:08:5a:52:0f: db:6a:dc:09:a3:0d:e5:75:9d:6f:8f:3c:63:18:91: 91:5c:79:56:57:45:5c:f1:b8:99:68:e5:05:40:70: 69:e1:86:02:c2:65:77:61:52:6d:e3:80:a4:c2:4f: 59:fd:4c:d1:80:cb:0b:02:f7:ef:f3:58:9c:72:bf: 18:a8:36:89:cf:94:02:86:1a:cf:1d:b8:94:93:fd: 0e:8f:e0:b7:61:dd:e5:b7:a5:20:98:0f:3b:db:5c: 2a:86:9e:0b:fe:92:1f:24:ff:52:f4:6f:31:6d:32: 49:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FA:6D:22:60:FF:4E:99:17:67:41:EF:15:70:9B:6B:9B:07:8F:71 X509v3 Authority Key Identifier: keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/efptImD_TpkXZ0HvFXCba5sHj3E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.37.4.0-185.37.6.255 Signature Algorithm: sha256WithRSAEncryption 73:01:93:fd:9f:f7:1c:54:7e:0d:ce:83:fa:77:02:10:5c:08: ef:ee:54:cd:13:98:68:70:76:5a:93:8f:23:95:a3:3e:b9:92: 7c:35:f2:8c:c1:d4:bd:2b:52:4f:96:8e:b2:ba:60:4b:58:43: ca:e0:43:44:a9:92:d3:59:18:fc:7c:2d:3f:40:0d:ce:c3:31: 3b:81:3f:47:ac:61:c5:0f:8f:23:51:28:d1:7e:f9:09:3a:ff: 9b:bd:fa:ac:bc:d4:17:61:e6:db:48:ac:3b:96:6b:4c:f6:19: 65:ed:50:af:75:e1:db:07:5d:3c:54:4d:89:f2:c0:ee:a5:2f: 00:cf:7f:a6:05:95:55:74:6a:4e:38:d2:43:4d:97:fb:37:c0: 5b:f6:43:4a:71:2b:f9:ae:78:0d:6d:a3:7e:11:bf:45:68:ad: 8b:85:58:00:c7:12:8b:e6:88:a8:8c:d3:c9:03:c4:7a:d8:44: 30:6b:70:15:a7:5b:bf:69:1d:f9:36:f4:ee:9d:b2:cd:9e:95: 08:2f:3f:41:ea:85:a9:2a:81:a7:18:94:d3:db:58:56:db:7c: 20:7f:dd:92:f9:0f:25:5a:a8:31:da:e6:b4:76:56:ca:82:75: 40:fa:9b:8c:a5:9c:c4:13:41:9a:03:d8:7d:13:0a:95:28:3f: a6:81:70:c6 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3WHspQndhajKJSj73KTk6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZjc3NDFjZDFhZjJiYjM0Yzg2YzczZWEzYmQ2Yzc2ZDk5 NjhkMGQwHhcNMjYwMTAxMDIxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWZhNmQyMjYwZmY0ZTk5MTc2NzQxZWYxNTcwOWI2YjliMDc4ZjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe2vyJWXidh7xagQaZBzkz6NVMi3 q4uq97eWgqauR05deGDSvt5QLC4V26s5NtOF3M5JdA/6ByIuWezG+npnRvY0lvTM 11BgqHyF5QpixgRCja3PV3o7s6+Fuhbdg7AdyN5RY96JEPrWvoH66CAwfZB190Jl jDNWVQxzHOGSgf2ztZ6NGWgYyTNqN7cuTdMH0whaUg/batwJow3ldZ1vjzxjGJGR XHlWV0Vc8biZaOUFQHBp4YYCwmV3YVJt44Ckwk9Z/UzRgMsLAvfv81iccr8YqDaJ z5QChhrPHbiUk/0Oj+C3Yd3lt6UgmA8721wqhp4L/pIfJP9S9G8xbTJJKwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHn6bSJg/06ZF2dB7xVwm2ubB49xMB8GA1UdIwQY MBaAFBD3dBzRryuzTIbHPqO9bHbZlo0NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVBkMEhOR3ZLN05NaHNjLW83MXNkdG1XalEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZWY3Y2UtMjVkNC00M2MxLThlYWUt MWE2NGNmMjFhNjA0LzEvZWZwdEltRF9UcGtYWjBIdkZYQ2JhNXNIajNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kZWY3Y2UtMjVkNC00M2MxLThlYWUtMWE2NGNmMjFhNjA0 LzEvRVBkMEhOR3ZLN05NaHNjLW83MXNkdG1XalEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAK5JQQD BAC5JQYwDQYJKoZIhvcNAQELBQADggEBAHMBk/2f9xxUfg3Og/p3AhBcCO/uVM0T mGhwdlqTjyOVoz65knw18ozB1L0rUk+WjrK6YEtYQ8rgQ0SpktNZGPx8LT9ADc7D MTuBP0esYcUPjyNRKNF++Qk6/5u9+qy81Bdh5ttIrDuWa0z2GWXtUK914dsHXTxU TYnywO6lLwDPf6YFlVV0ak440kNNl/s3wFv2Q0pxK/mueA1to34Rv0VorYuFWADH EovmiKiM08kDxHrYRDBrcBWnW79pHfk29O6dss2elQgvP0HqhakqgacYlNPbWFbb fCB/3ZL5DyVaqDHa5rR2VsqCdUD6m4ylnMQTQZoD2H0TCpUoP6aBcMY= -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:29 2026 by rpki-client