This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/B8mKcjnkQ06bQ0cYOYl4NuSVaMg.roa File: B8mKcjnkQ06bQ0cYOYl4NuSVaMg.roa (raw, json) Hash identifier: BHHwvopeV4L0Tgx1rARSKD5k/JLb/fI5L/vuVF66caI= Subject key identifier: 07:C9:8A:72:39:E4:43:4E:9B:43:47:18:39:89:78:36:E4:95:68:C8 Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 019B7BA3E5FD67C1398117AEF09E59CAA5AA Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/B8mKcjnkQ06bQ0cYOYl4NuSVaMg.roa Signing time: Thu 01 Jan 2026 22:18:17 +0000 ROA not before: Thu 01 Jan 2026 22:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197886 IP address blocks: 79.120.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:e5:fd:67:c1:39:81:17:ae:f0:9e:59:ca:a5:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Jan 1 22:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07c98a7239e4434e9b43471839897836e49568c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b1:2e:2f:36:28:9a:2c:ee:5c:a0:fb:e8:17: 3b:a4:2e:c9:a8:d2:04:ea:23:87:58:8f:5c:13:5e: 23:1c:57:85:7f:ef:37:b9:94:40:a6:5f:68:56:70: 35:63:50:08:a7:bd:e8:94:d9:54:25:d9:3b:75:e6: 4d:03:53:e6:0b:ca:3f:20:5d:0c:b3:c4:51:09:2b: 42:37:f0:86:a0:c5:ed:54:7d:b1:ed:aa:db:37:e6: f2:b0:a1:c3:0f:8d:02:8c:ea:fc:f8:49:96:af:81: 1f:b5:02:4d:57:ea:02:44:ef:1c:95:11:8b:66:7d: 04:fe:e9:9c:60:7d:50:5d:82:0c:a5:fd:ba:c4:b9: 23:3d:40:89:3d:a5:1e:e5:ff:05:1d:3d:b7:30:d2: 7d:78:2e:87:08:cc:e5:ba:9f:0f:d2:e5:f9:27:d8: f9:95:d0:bb:34:be:b0:10:dd:62:05:7b:8e:c7:96: ec:5f:57:2b:bc:39:7f:cb:1f:45:24:48:f1:f3:14: 09:48:65:92:a7:67:d6:8f:65:86:34:50:a6:02:73: 74:06:90:91:1d:8f:03:e7:d4:86:bb:94:b4:d9:a5: cf:02:6b:89:8e:a6:9c:ae:71:d9:19:ac:e0:e0:64: 93:38:7e:7a:97:01:84:09:5a:60:1f:69:a9:51:01: 53:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C9:8A:72:39:E4:43:4E:9B:43:47:18:39:89:78:36:E4:95:68:C8 X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/B8mKcjnkQ06bQ0cYOYl4NuSVaMg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.120.244.0/23 Signature Algorithm: sha256WithRSAEncryption 34:e0:80:f8:d1:07:06:5b:f1:bd:90:2a:48:45:81:14:21:70: 42:4f:0f:c3:14:c7:fc:ac:32:7e:68:a3:37:72:53:67:99:3f: d5:c1:74:62:37:72:f9:d5:c5:9e:33:cb:93:5e:5b:b5:c0:69: 65:c1:d8:f1:7b:3e:8b:17:64:b0:aa:11:e1:95:f2:89:38:4d: 96:3a:3a:bf:4d:08:19:96:2b:11:71:c4:00:68:9f:09:74:f5: af:00:6b:63:ca:9a:27:42:ab:a0:11:cc:e1:1b:a0:d4:d1:02: 10:3b:38:86:dd:ec:51:ec:02:c8:44:bf:d7:9f:de:94:42:19: 10:06:75:57:aa:8f:88:4b:9f:dc:76:ac:7f:bd:85:3c:8f:b8: 1c:34:96:73:d4:33:42:cf:a0:a5:f8:f5:09:63:c9:60:15:4f: 15:b0:06:03:73:71:ae:0f:fe:d8:bf:d5:49:b3:52:93:f4:8e: f9:6e:5a:7e:c2:25:07:dd:ee:60:95:74:5c:ef:a4:d6:cf:8f: bd:29:e2:6a:15:b6:1d:6f:e0:79:12:cd:32:20:d7:54:2b:71: 04:63:7f:e9:05:5a:44:f2:1a:fe:7c:50:92:90:49:00:75:34: 93:8b:7a:2a:63:80:da:ee:77:41:12:af:01:ed:bf:ca:d8:32: 72:0c:bc:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o+X9Z8E5gReu8J5ZyqWqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjYwMTAxMjIxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2M5OGE3MjM5ZTQ0MzRlOWI0MzQ3MTgzOTg5NzgzNmU0OTU2OGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7EuLzYomizuXKD76Bc7pC7JqNIE 6iOHWI9cE14jHFeFf+83uZRApl9oVnA1Y1AIp73olNlUJdk7deZNA1PmC8o/IF0M s8RRCStCN/CGoMXtVH2x7arbN+bysKHDD40CjOr8+EmWr4EftQJNV+oCRO8clRGL Zn0E/umcYH1QXYIMpf26xLkjPUCJPaUe5f8FHT23MNJ9eC6HCMzlup8P0uX5J9j5 ldC7NL6wEN1iBXuOx5bsX1crvDl/yx9FJEjx8xQJSGWSp2fWj2WGNFCmAnN0BpCR HY8D59SGu5S02aXPAmuJjqacrnHZGazg4GSTOH56lwGECVpgH2mpUQFTuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAfJinI55ENOm0NHGDmJeDbklWjIMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvQjhtS2NqbmtRMDZiUTBjWU9ZbDROdVNWYU1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBT3j0MA0G CSqGSIb3DQEBCwUAA4IBAQA04ID40QcGW/G9kCpIRYEUIXBCTw/DFMf8rDJ+aKM3 clNnmT/VwXRiN3L51cWeM8uTXlu1wGllwdjxez6LF2SwqhHhlfKJOE2WOjq/TQgZ lisRccQAaJ8JdPWvAGtjyponQqugEczhG6DU0QIQOziG3exR7ALIRL/Xn96UQhkQ BnVXqo+IS5/cdqx/vYU8j7gcNJZz1DNCz6Cl+PUJY8lgFU8VsAYDc3GuD/7Yv9VJ s1KT9I75blp+wiUH3e5glXRc76TWz4+9KeJqFbYdb+B5Es0yINdUK3EEY3/pBVpE 8hr+fFCSkEkAdTSTi3oqY4Da7ndBEq8B7b/K2DJyDLzB -----END CERTIFICATE-----Generated at Sun Jan 25 12:18:09 2026 by rpki-client