This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/x-EfdPPH41fBBpjZ7XVWx9BVt_s.roa File: x-EfdPPH41fBBpjZ7XVWx9BVt_s.roa (raw, json) Hash identifier: GJIuPJGUowMmXdPxeaXLT8tgyWA+GgGHmT3ek3XlWMk= Subject key identifier: C7:E1:1F:74:F3:C7:E3:57:C1:06:98:D9:ED:75:56:C7:D0:55:B7:FB Certificate issuer: /CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e Certificate serial: 019B7B35A12A7CDA18A7E2B4C5B3D2D11D5C Authority key identifier: 8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/x-EfdPPH41fBBpjZ7XVWx9BVt_s.roa Signing time: Thu 01 Jan 2026 20:17:50 +0000 ROA not before: Thu 01 Jan 2026 20:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210393 IP address blocks: 85.31.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.mft rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:a1:2a:7c:da:18:a7:e2:b4:c5:b3:d2:d1:1d:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad240603ec6ebcd62f72d46f1dc00cb7e1f0b2e Validity Not Before: Jan 1 20:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7e11f74f3c7e357c10698d9ed7556c7d055b7fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:32:aa:05:e4:72:1a:ec:46:bf:ba:51:a4:aa: 36:f9:4b:b8:5e:27:90:c9:a7:58:39:9b:1f:0c:6e: 95:2f:bd:db:33:0d:d2:f7:4b:22:c8:4c:91:f1:59: d7:a7:ee:a8:f7:96:3d:93:24:94:b8:a5:04:bf:cf: 21:d9:ab:03:62:62:70:d0:c2:b1:4c:16:9e:7a:c5: e8:00:34:df:fb:66:b7:e6:c3:b7:4b:ec:de:75:1e: 21:48:04:bb:66:d4:69:ec:69:02:8f:0a:3a:c6:78: cb:93:53:c9:c4:e8:f9:09:b3:44:f3:4c:d2:bd:ae: 9f:85:f3:c4:94:b5:82:3e:7f:c2:bd:44:b7:8e:49: ab:6c:18:0d:74:cf:41:98:42:4c:b3:26:a4:f5:30: f1:3b:3a:07:5c:61:b0:41:c8:9b:c0:28:be:99:4a: 83:b9:e5:3d:8d:82:0e:28:9e:18:25:ae:8c:3e:72: 0b:b1:fa:04:1a:de:a5:29:9d:3c:1a:4b:aa:30:d5: eb:c9:c5:b3:d0:0f:ba:fb:54:2a:bd:29:a7:a1:e1: 88:91:b3:72:af:81:40:55:46:97:aa:97:73:a2:0b: 07:eb:88:0b:8a:3d:a0:ab:6b:c5:62:11:6a:73:a6: 3b:98:25:77:f0:a8:a6:93:d6:db:a6:19:d2:dc:f4: 1d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E1:1F:74:F3:C7:E3:57:C1:06:98:D9:ED:75:56:C7:D0:55:B7:FB X509v3 Authority Key Identifier: keyid:8A:D2:40:60:3E:C6:EB:CD:62:F7:2D:46:F1:DC:00:CB:7E:1F:0B:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itJAYD7G681i9y1G8dwAy34fCy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/x-EfdPPH41fBBpjZ7XVWx9BVt_s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/425149-9c68-41fb-8035-d76c8c739861/1/itJAYD7G681i9y1G8dwAy34fCy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.31.6.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:30:29:51:c9:3f:ae:85:4e:6e:df:e9:90:00:52:a1:ae:0e: a9:4f:a7:6d:f7:a5:44:00:ed:32:27:cc:65:59:90:61:5a:8d: d7:99:d3:84:f1:a9:d2:8a:df:a6:21:66:4e:20:f5:e9:8e:24: 66:5d:90:16:47:4f:14:3e:ba:67:3f:10:e8:5b:4c:e9:b1:2b: 88:50:49:29:e0:27:02:b5:a4:37:51:e5:fb:57:19:62:79:17: e4:59:76:89:1a:4d:3c:70:0a:c1:a3:d2:37:d5:7e:5e:91:52: 5a:24:95:ce:4f:64:b9:de:e6:67:91:ea:26:7a:a2:7b:b0:34: ef:5d:20:3e:af:89:91:d8:7f:90:5e:30:e6:c1:f6:18:2b:0b: 1d:c4:1d:41:bb:86:79:76:39:63:89:48:cb:27:ca:a4:9b:26: cb:dd:09:95:92:ee:65:a8:dd:2a:f1:e3:83:78:8a:b2:ed:a1: ed:47:09:32:3f:44:ea:81:c7:80:2a:3f:1b:65:bd:1e:e3:0d: 6a:6d:9b:df:89:39:94:e7:36:ee:27:ea:ee:54:4d:fa:dd:b7: 71:f3:27:e4:c2:84:c6:95:bc:33:a0:63:d4:6d:e7:81:3c:79: 14:2c:cd:11:af:20:0b:e4:ff:70:75:a4:0d:4d:68:dc:0b:e7: b4:73:99:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NaEqfNoYp+K0xbPS0R1cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhZDI0MDYwM2VjNmViY2Q2MmY3MmQ0NmYxZGMwMGNiN2Ux ZjBiMmUwHhcNMjYwMTAxMjAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2UxMWY3NGYzYzdlMzU3YzEwNjk4ZDllZDc1NTZjN2QwNTViN2ZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszKqBeRyGuxGv7pRpKo2+Uu4XieQ yadYOZsfDG6VL73bMw3S90siyEyR8VnXp+6o95Y9kySUuKUEv88h2asDYmJw0MKx TBaeesXoADTf+2a35sO3S+zedR4hSAS7ZtRp7GkCjwo6xnjLk1PJxOj5CbNE80zS va6fhfPElLWCPn/CvUS3jkmrbBgNdM9BmEJMsyak9TDxOzoHXGGwQcibwCi+mUqD ueU9jYIOKJ4YJa6MPnILsfoEGt6lKZ08GkuqMNXrycWz0A+6+1QqvSmnoeGIkbNy r4FAVUaXqpdzogsH64gLij2gq2vFYhFqc6Y7mCV38Kimk9bbphnS3PQdAQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMfhH3Tzx+NXwQaY2e11VsfQVbf7MB8GA1UdIwQY MBaAFIrSQGA+xuvNYvctRvHcAMt+HwsuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy80MjUxNDktOWM2OC00MWZiLTgwMzUt ZDc2YzhjNzM5ODYxLzEveC1FZmRQUEg0MWZCQnBqWjdYVld4OUJWdF9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy80MjUxNDktOWM2OC00MWZiLTgwMzUtZDc2YzhjNzM5ODYx LzEvaXRKQVlEN0c2ODFpOXkxRzhkd0F5MzRmQ3k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVR8GMA0G CSqGSIb3DQEBCwUAA4IBAQAfMClRyT+uhU5u3+mQAFKhrg6pT6dt96VEAO0yJ8xl WZBhWo3XmdOE8anSit+mIWZOIPXpjiRmXZAWR08UPrpnPxDoW0zpsSuIUEkp4CcC taQ3UeX7VxlieRfkWXaJGk08cArBo9I31X5ekVJaJJXOT2S53uZnkeomeqJ7sDTv XSA+r4mR2H+QXjDmwfYYKwsdxB1Bu4Z5djljiUjLJ8qkmybL3QmVku5lqN0q8eOD eIqy7aHtRwkyP0TqgceAKj8bZb0e4w1qbZvfiTmU5zbuJ+ruVE363bdx8yfkwoTG lbwzoGPUbeeBPHkULM0RryAL5P9wdaQNTWjcC+e0c5lJ -----END CERTIFICATE-----Generated at Mon Jan 26 22:37:22 2026 by rpki-client