This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/wBSh6gDeV7XNH2X7PQXLFHCUg3I.roa File: wBSh6gDeV7XNH2X7PQXLFHCUg3I.roa (raw, json) Hash identifier: 99JIPx6lgWoxYu0uMeoGJkCqNZKh/023eQvcqtBW/MI= Subject key identifier: C0:14:A1:EA:00:DE:57:B5:CD:1F:65:FB:3D:05:CB:14:70:94:83:72 Certificate issuer: /CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955 Certificate serial: 019B76EB686830468E74E19F0CFA7DE57A6B Authority key identifier: EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/wBSh6gDeV7XNH2X7PQXLFHCUg3I.roa Signing time: Thu 01 Jan 2026 00:18:17 +0000 ROA not before: Thu 01 Jan 2026 00:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47169 IP address blocks: 79.121.73.0/24 maxlen: 24 79.121.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.mft rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:68:68:30:46:8e:74:e1:9f:0c:fa:7d:e5:7a:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955 Validity Not Before: Jan 1 00:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c014a1ea00de57b5cd1f65fb3d05cb1470948372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:05:38:ed:19:97:b0:47:ed:fa:de:cb:f6:49: 2a:ae:db:10:87:0c:c5:97:e7:d1:08:4d:78:3a:33: ec:a9:30:15:cd:6e:0d:fb:c8:09:27:38:22:f0:a9: 36:73:40:69:44:5c:5c:b2:c3:2c:3f:e3:46:9f:3d: 98:05:00:fd:29:f4:68:e3:34:66:7f:09:aa:7b:ee: e6:0e:22:2e:22:7f:ec:10:08:f8:5e:c7:ed:b9:b5: 7e:62:00:5c:27:05:45:85:dd:58:5d:86:0b:20:ea: 9b:36:d0:6e:61:5e:15:83:61:ef:22:96:5e:86:c9: 4a:8c:1c:de:72:65:b2:38:a2:12:3e:6a:28:65:78: 46:2e:a7:40:24:62:3b:68:f9:0c:cb:29:d0:e3:21: b4:ed:06:85:0f:95:30:8c:6f:71:7e:87:ab:6e:ea: cf:e0:7d:24:60:62:ca:45:8c:a0:d5:4f:05:e2:b7: f1:36:ad:c3:45:53:43:e7:9c:fb:c3:0c:66:e9:cc: 7e:6a:a7:d5:6a:0e:03:24:c0:4d:a9:0a:33:b1:0c: 2b:d9:9b:5b:9a:eb:23:b6:71:8b:ef:2b:05:d9:bf: 0c:cd:89:ae:14:b7:89:c0:f2:49:1a:77:53:7a:c1: 54:ff:0a:a0:63:c4:81:f1:49:b7:42:41:1e:55:b6: 14:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:14:A1:EA:00:DE:57:B5:CD:1F:65:FB:3D:05:CB:14:70:94:83:72 X509v3 Authority Key Identifier: keyid:EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/wBSh6gDeV7XNH2X7PQXLFHCUg3I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.121.73.0/24 79.121.81.0/24 Signature Algorithm: sha256WithRSAEncryption 29:6e:94:01:1a:c6:c7:82:2c:bd:9d:49:f5:d4:c1:88:72:84: 17:2a:e3:0a:28:5c:c1:2a:ec:7b:d0:f6:2e:6d:1f:33:47:fc: 9e:7d:45:59:99:f5:86:04:e7:c2:10:3e:8d:90:f2:c4:81:53: 97:70:b7:5e:04:03:d8:e7:35:20:77:c0:48:a5:dd:f2:60:be: 2e:2a:a7:94:e5:02:d7:0f:e4:5e:ed:8d:a2:9e:3e:30:f7:1b: 63:cd:a9:56:7a:db:e6:ad:7e:1a:a7:90:2e:ef:8c:73:e9:98: ff:00:4e:ec:41:34:6d:c6:4c:ee:ce:d0:5e:be:d7:03:06:93: 50:02:df:14:e9:7d:50:e5:78:e2:78:59:0e:5f:34:1e:12:25: 46:8d:97:1c:b2:79:93:32:21:47:1d:9c:e7:43:5d:af:02:5e: fa:69:21:f8:0b:dd:2c:4f:42:cc:77:ac:4f:d9:86:bf:5c:1e: 4c:08:23:09:6e:0c:bd:c3:d8:e8:2a:37:38:4b:d1:0a:c9:2f: 3b:38:d0:a9:c5:49:7f:1d:3d:38:97:ab:ff:0c:f0:bd:02:2b: cd:85:e7:32:c5:cc:76:ea:e1:16:8f:54:44:d4:c1:d0:a9:35: 44:94:7d:b9:83:5a:5f:eb:c0:ce:31:1e:00:ec:0f:57:ec:37: 13:c7:6d:77 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt262hoMEaOdOGfDPp95XprMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMGVmZDVkZTc4ZjkzYmNhZWFkMTVlMTRjMDA2ZWRiYmQx YjU5NTUwHhcNMjYwMTAxMDAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDE0YTFlYTAwZGU1N2I1Y2QxZjY1ZmIzZDA1Y2IxNDcwOTQ4MzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgU47RmXsEft+t7L9kkqrtsQhwzF l+fRCE14OjPsqTAVzW4N+8gJJzgi8Kk2c0BpRFxcssMsP+NGnz2YBQD9KfRo4zRm fwmqe+7mDiIuIn/sEAj4XsftubV+YgBcJwVFhd1YXYYLIOqbNtBuYV4Vg2HvIpZe hslKjBzecmWyOKISPmooZXhGLqdAJGI7aPkMyynQ4yG07QaFD5UwjG9xfoerburP 4H0kYGLKRYyg1U8F4rfxNq3DRVND55z7wwxm6cx+aqfVag4DJMBNqQozsQwr2Ztb musjtnGL7ysF2b8MzYmuFLeJwPJJGndTesFU/wqgY8SB8Um3QkEeVbYUWwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMAUoeoA3le1zR9l+z0FyxRwlINyMB8GA1UdIwQY MBaAFO8O/V3nj5O8rq0V4UwAbtu9G1lVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3c3OVhlZVBrN3l1clJYaFRBQnUyNzBiV1ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lMGY5ZTYtZDY1NS00Mzc3LThkMDkt ZWE4NjUwOWMzYjMwLzEvd0JTaDZnRGVWN1hOSDJYN1BRWExGSENVZzNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9lMGY5ZTYtZDY1NS00Mzc3LThkMDktZWE4NjUwOWMzYjMw LzEvN3c3OVhlZVBrN3l1clJYaFRBQnUyNzBiV1ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT3lJAwQA T3lRMA0GCSqGSIb3DQEBCwUAA4IBAQApbpQBGsbHgiy9nUn11MGIcoQXKuMKKFzB Kux70PYubR8zR/yefUVZmfWGBOfCED6NkPLEgVOXcLdeBAPY5zUgd8BIpd3yYL4u KqeU5QLXD+Re7Y2inj4w9xtjzalWetvmrX4ap5Au74xz6Zj/AE7sQTRtxkzuztBe vtcDBpNQAt8U6X1Q5XjieFkOXzQeEiVGjZccsnmTMiFHHZznQ12vAl76aSH4C90s T0LMd6xP2Ya/XB5MCCMJbgy9w9joKjc4S9EKyS87ONCpxUl/HT04l6v/DPC9AivN hecyxcx26uEWj1RE1MHQqTVElH25g1pf68DOMR4A7A9X7DcTx213 -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:39 2026 by rpki-client