This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ef0q43f7LAeuo-FDNR4YuVz3rVk.roa File: ef0q43f7LAeuo-FDNR4YuVz3rVk.roa (raw, json) Hash identifier: ynkAymfoAKqGAiHb/45NVf5BEsff36expTSHfTcbGpM= Subject key identifier: 79:FD:2A:E3:77:FB:2C:07:AE:A3:E1:43:35:1E:18:B9:5C:F7:AD:59 Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B79102342BFD4E55C2107465A5C7B9A6C Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ef0q43f7LAeuo-FDNR4YuVz3rVk.roa Signing time: Thu 01 Jan 2026 10:17:39 +0000 ROA not before: Thu 01 Jan 2026 10:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397423 IP address blocks: 46.37.100.0/24 maxlen: 24 46.37.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:23:42:bf:d4:e5:5c:21:07:46:5a:5c:7b:9a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79fd2ae377fb2c07aea3e143351e18b95cf7ad59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:db:c5:99:0e:f4:75:f4:70:83:f3:5f:cc:c9: 83:d6:3c:82:4a:61:2f:31:80:2a:6e:a3:76:46:eb: ca:b0:4f:78:40:01:8b:04:1b:fd:58:88:9e:96:d2: d4:c0:67:db:c6:3c:16:4f:95:17:2e:70:bf:c8:16: 50:7d:f4:ed:94:7e:e4:e3:ca:02:6d:9d:0a:87:41: 78:ed:6c:b2:d0:da:d9:60:73:a7:69:6c:a0:8a:14: 08:11:84:b4:aa:a1:82:ca:10:81:a4:c5:97:52:53: dc:e3:81:f0:44:64:2f:44:58:f2:30:a0:52:38:7e: ba:98:70:84:a2:d5:2e:70:a0:3f:61:6d:67:ff:7e: c7:aa:91:21:e1:07:0a:7d:e7:f7:b6:f6:82:86:70: 9b:79:dd:b8:54:e0:36:28:27:d4:33:5f:83:3a:b8: 60:05:c5:c3:ae:54:ce:ef:cf:db:1a:ad:3e:c7:f7: 5d:2a:bf:0d:ff:84:da:04:8f:51:ae:e6:5a:c3:d1: e9:05:31:4f:30:42:df:d8:eb:fc:4a:0d:2d:a3:75: 04:3d:dd:b5:dc:f2:2d:90:ce:9c:9e:bf:fb:3f:1c: 74:e8:4c:c3:9a:f4:eb:e1:64:23:db:27:aa:b7:cc: e3:90:55:2a:a4:1c:0a:32:3e:50:06:70:3a:16:02: 89:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FD:2A:E3:77:FB:2C:07:AE:A3:E1:43:35:1E:18:B9:5C:F7:AD:59 X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ef0q43f7LAeuo-FDNR4YuVz3rVk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.100.0/24 46.37.119.0/24 Signature Algorithm: sha256WithRSAEncryption 04:68:4b:a5:11:21:b9:9e:90:9d:90:df:cd:eb:fe:ae:ad:09: ef:24:25:cb:3b:34:88:55:cb:52:25:48:b6:e0:47:f5:c4:c2: 02:4a:94:38:97:96:34:c0:81:a8:43:d7:b3:4b:48:a8:8d:ba: 42:55:82:ee:a9:52:1f:5f:b8:e2:a9:5b:99:22:7f:af:48:23: 24:70:79:5e:65:b8:b4:59:8c:a2:62:98:b5:11:0b:bb:8a:ed: bc:3b:63:c5:c2:0b:de:2a:83:a5:ec:0a:e0:f4:92:84:d0:a4: 5b:27:7a:f0:f6:04:13:8c:75:7d:87:c3:3b:70:43:6f:08:53: 0e:89:d8:f3:5f:1e:bc:3b:76:59:de:fc:5e:ce:53:ea:fc:ae: bb:01:b2:92:6c:1b:e0:d5:d4:4a:11:38:7c:ad:d0:87:31:30: 17:8d:cf:f9:3b:f6:66:e4:9e:f0:63:ca:14:6c:0b:8f:9d:b9: 1c:b0:76:a5:3c:54:dc:93:be:6b:cc:06:81:86:11:49:6b:1b: 26:91:a8:1e:93:15:26:7c:98:09:13:d3:87:72:68:78:3f:ed: fb:a9:da:fd:9a:60:e9:87:43:b2:45:14:cc:47:e2:2e:32:a5: 15:c2:e0:20:a6:bf:8a:e3:8b:8c:fd:2a:06:aa:8d:31:86:56: 01:67:9f:78 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ECNCv9TlXCEHRlpce5psMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWZkMmFlMzc3ZmIyYzA3YWVhM2UxNDMzNTFlMThiOTVjZjdhZDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9vFmQ70dfRwg/NfzMmD1jyCSmEv MYAqbqN2RuvKsE94QAGLBBv9WIieltLUwGfbxjwWT5UXLnC/yBZQffTtlH7k48oC bZ0Kh0F47Wyy0NrZYHOnaWygihQIEYS0qqGCyhCBpMWXUlPc44HwRGQvRFjyMKBS OH66mHCEotUucKA/YW1n/37HqpEh4QcKfef3tvaChnCbed24VOA2KCfUM1+DOrhg BcXDrlTO78/bGq0+x/ddKr8N/4TaBI9RruZaw9HpBTFPMELf2Ov8Sg0to3UEPd21 3PItkM6cnr/7Pxx06EzDmvTr4WQj2yeqt8zjkFUqpBwKMj5QBnA6FgKJuwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHn9KuN3+ywHrqPhQzUeGLlc961ZMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvZWYwcTQzZjdMQWV1by1GRE5SNFl1VnozclZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALiVkAwQA LiV3MA0GCSqGSIb3DQEBCwUAA4IBAQAEaEulESG5npCdkN/N6/6urQnvJCXLOzSI VctSJUi24Ef1xMICSpQ4l5Y0wIGoQ9ezS0iojbpCVYLuqVIfX7jiqVuZIn+vSCMk cHleZbi0WYyiYpi1EQu7iu28O2PFwgveKoOl7Arg9JKE0KRbJ3rw9gQTjHV9h8M7 cENvCFMOidjzXx68O3ZZ3vxezlPq/K67AbKSbBvg1dRKETh8rdCHMTAXjc/5O/Zm 5J7wY8oUbAuPnbkcsHalPFTck75rzAaBhhFJaxsmkagekxUmfJgJE9OHcmh4P+37 qdr9mmDph0OyRRTMR+IuMqUVwuAgpr+K44uM/SoGqo0xhlYBZ594 -----END CERTIFICATE-----Generated at Sun Jan 25 16:53:42 2026 by rpki-client