This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/u8oTzaj09fRqdnVbRvvi-8h4a68.roa File: u8oTzaj09fRqdnVbRvvi-8h4a68.roa (raw, json) Hash identifier: EiRdVsWkjlZsvkZEbh4FjO2lNPIwiSmpBdkXLPLVKcE= Subject key identifier: BB:CA:13:CD:A8:F4:F5:F4:6A:76:75:5B:46:FB:E2:FB:C8:78:6B:AF Certificate issuer: /CN=075fdb0de4051347a21e9628ac41736734cb4f2b Certificate serial: 019B7F13A44F018BDA718D651BE3888EA8E6 Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/u8oTzaj09fRqdnVbRvvi-8h4a68.roa Signing time: Fri 02 Jan 2026 14:19:12 +0000 ROA not before: Fri 02 Jan 2026 14:19:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200042 IP address blocks: 79.174.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:a4:4f:01:8b:da:71:8d:65:1b:e3:88:8e:a8:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b Validity Not Before: Jan 2 14:19:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbca13cda8f4f5f46a76755b46fbe2fbc8786baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f5:ca:51:33:f5:2c:01:20:16:7b:79:90:30: 27:ef:12:2f:ac:45:7a:c7:cc:a7:3c:45:50:7f:5f: 30:7e:a9:a6:fe:c9:f3:51:c0:6b:36:81:bd:7c:f9: 6c:48:f6:98:82:08:90:42:91:dd:4e:19:22:11:9e: a6:73:ce:4c:b1:22:cd:24:0c:0c:b6:94:2c:12:0f: 43:93:8e:67:5e:9c:76:d3:e2:8d:1f:90:dd:08:bf: 61:4b:e8:97:e1:d7:75:05:73:e8:6d:44:46:7b:08: 64:ce:d2:01:8c:a0:27:1f:a5:fd:b4:b5:3f:0f:6e: 45:ea:2e:35:aa:48:7a:52:1f:b1:7b:e9:bc:fe:d5: 9c:b6:0b:8b:c6:55:29:69:01:95:4d:73:1c:d1:36: c0:fb:c0:9f:28:9a:80:ca:a6:d9:27:bf:7f:e0:a6: 92:66:be:16:c1:21:40:04:3c:eb:74:49:ce:6b:fe: f4:27:56:83:bb:d5:73:1b:45:1d:94:eb:88:46:11: d1:bc:13:b8:06:61:46:62:11:75:bc:4a:a9:9f:f4: 51:99:47:a1:f3:db:23:36:2d:6f:35:2b:38:a1:7e: 80:03:82:34:47:22:2f:be:9e:af:72:0b:77:72:9f: d6:43:55:58:9b:bc:65:09:f0:83:7c:54:7f:22:f1: be:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CA:13:CD:A8:F4:F5:F4:6A:76:75:5B:46:FB:E2:FB:C8:78:6B:AF X509v3 Authority Key Identifier: keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/u8oTzaj09fRqdnVbRvvi-8h4a68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.174.17.0/24 Signature Algorithm: sha256WithRSAEncryption a4:a7:3d:2a:4b:c7:b9:15:dc:b9:97:5b:17:5a:12:27:1c:09: 49:26:83:58:31:32:92:34:e6:4f:52:4c:60:f4:cb:10:91:7f: f2:b1:ca:8b:f3:4d:f0:85:c8:35:0e:bf:5d:98:59:05:35:41: 02:e6:32:f5:3b:65:c1:16:3c:e8:6d:3a:9d:b7:61:cf:76:f9: 14:62:9d:87:42:ab:e4:4f:5c:87:dd:9d:e2:b2:e4:44:66:db: c1:3a:67:a6:74:47:2b:55:4a:8c:00:a1:9a:52:4a:47:41:d7: b2:88:86:c8:40:c7:2c:4b:f3:91:14:cf:20:bf:61:49:9c:d1: 4f:9f:25:06:de:9d:13:ee:be:d3:35:2a:15:dc:fb:05:45:c3: 11:2e:a2:ef:89:be:1f:43:83:67:bb:8a:5f:01:d4:2f:32:0f: 9b:9c:e8:ef:f5:24:c8:e6:e4:ec:28:ae:9b:2f:f1:0e:76:87: 1b:c9:24:ee:31:a3:84:16:1f:7e:6b:70:48:15:71:9f:3d:12: d5:bf:ab:49:93:d7:1b:54:98:41:15:68:29:f1:d2:fc:09:c8: 22:e0:fc:d8:9f:0d:8c:04:89:5a:e4:24:23:f0:90:4c:6d:a2: e6:bb:5b:25:5f:41:b5:ad:ed:69:8a:55:cc:0f:5b:83:03:bb: f4:f6:d8:5e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E6RPAYvacY1lG+OIjqjmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NWZkYjBkZTQwNTEzNDdhMjFlOTYyOGFjNDE3MzY3MzRj YjRmMmIwHhcNMjYwMTAyMTQxOTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmNhMTNjZGE4ZjRmNWY0NmE3Njc1NWI0NmZiZTJmYmM4Nzg2YmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/XKUTP1LAEgFnt5kDAn7xIvrEV6 x8ynPEVQf18wfqmm/snzUcBrNoG9fPlsSPaYggiQQpHdThkiEZ6mc85MsSLNJAwM tpQsEg9Dk45nXpx20+KNH5DdCL9hS+iX4dd1BXPobURGewhkztIBjKAnH6X9tLU/ D25F6i41qkh6Uh+xe+m8/tWctguLxlUpaQGVTXMc0TbA+8CfKJqAyqbZJ79/4KaS Zr4WwSFABDzrdEnOa/70J1aDu9VzG0UdlOuIRhHRvBO4BmFGYhF1vEqpn/RRmUeh 89sjNi1vNSs4oX6AA4I0RyIvvp6vcgt3cp/WQ1VYm7xlCfCDfFR/IvG+CQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLvKE82o9PX0anZ1W0b74vvIeGuvMB8GA1UdIwQY MBaAFAdf2w3kBRNHoh6WKKxBc2c0y08rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjFfYkRlUUZFMGVpSHBZb3JFRnpaelRMVHlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yZWYwZjEtNTA4Mi00OGRmLTk0ZmUt Zjc1MzFhMmI2MjQ3LzEvdThvVHphajA5ZlJxZG5WYlJ2dmktOGg0YTY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yZWYwZjEtNTA4Mi00OGRmLTk0ZmUtZjc1MzFhMmI2MjQ3 LzEvQjFfYkRlUUZFMGVpSHBZb3JFRnpaelRMVHlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT64RMA0G CSqGSIb3DQEBCwUAA4IBAQCkpz0qS8e5Fdy5l1sXWhInHAlJJoNYMTKSNOZPUkxg 9MsQkX/yscqL803whcg1Dr9dmFkFNUEC5jL1O2XBFjzobTqdt2HPdvkUYp2HQqvk T1yH3Z3isuREZtvBOmemdEcrVUqMAKGaUkpHQdeyiIbIQMcsS/ORFM8gv2FJnNFP nyUG3p0T7r7TNSoV3PsFRcMRLqLvib4fQ4Nnu4pfAdQvMg+bnOjv9STI5uTsKK6b L/EOdocbySTuMaOEFh9+a3BIFXGfPRLVv6tJk9cbVJhBFWgp8dL8Ccgi4PzYnw2M BIla5CQj8JBMbaLmu1slX0G1re1pilXMD1uDA7v09the -----END CERTIFICATE-----Generated at Mon Jan 26 10:28:32 2026 by rpki-client