This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/B-jtVqVW9M43hbMxN6j_v-hrwB4.roa File: B-jtVqVW9M43hbMxN6j_v-hrwB4.roa (raw, json) Hash identifier: xV6nCB7rwxI+22ZkCjSqm8Ae38pQziS4ET9GFX+UA2o= Subject key identifier: 07:E8:ED:56:A5:56:F4:CE:37:85:B3:31:37:A8:FF:BF:E8:6B:C0:1E Certificate issuer: /CN=614799c67c08547d80bb35d02dae505d5a65dc5b Certificate serial: 019B7758E2455724A9F2D82C3F5868D5EEC9 Authority key identifier: 61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/B-jtVqVW9M43hbMxN6j_v-hrwB4.roa Signing time: Thu 01 Jan 2026 02:17:52 +0000 ROA not before: Thu 01 Jan 2026 02:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47692 IP address blocks: 79.142.188.0/24 maxlen: 24 79.142.189.0/24 maxlen: 24 79.142.190.0/24 maxlen: 24 79.142.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e2:45:57:24:a9:f2:d8:2c:3f:58:68:d5:ee:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614799c67c08547d80bb35d02dae505d5a65dc5b Validity Not Before: Jan 1 02:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07e8ed56a556f4ce3785b33137a8ffbfe86bc01e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:8d:80:72:94:d9:13:e9:d1:d7:ab:4f:0f:77: 23:15:81:ac:a9:3b:a6:a3:54:df:de:7b:3b:24:07: 35:e8:b3:bf:18:29:de:93:8b:9a:ab:88:ef:ed:dd: 8f:0c:78:41:e0:07:7b:03:09:d2:0d:ab:9d:8f:60: df:0c:82:16:f8:83:1c:22:cb:63:7a:9c:04:53:09: 6b:68:6b:0a:8a:c0:7d:87:a2:e0:72:96:e1:4c:fe: 55:2d:42:4c:35:e1:ca:57:20:9a:6c:54:54:f5:74: d7:ad:db:41:25:8a:01:75:b7:a4:80:0f:a9:d3:a8: 8b:6f:55:b1:2a:c9:f5:67:83:1c:ac:00:fa:45:02: 39:00:03:d1:f8:b8:f7:a8:5e:0d:4a:4c:f0:e9:c3: bc:d1:a0:3e:36:44:fd:b1:9c:02:68:cd:e8:05:be: da:77:af:dc:62:c9:0c:6d:84:15:33:69:f3:99:5b: d8:d9:55:f3:87:d4:a6:82:bb:38:67:aa:80:25:86: 9c:07:71:49:81:71:1f:b0:86:d0:18:51:7c:97:23: 56:a7:68:70:67:21:99:63:3c:ae:56:b6:67:5f:5f: 34:37:45:b2:02:00:98:fc:ba:8d:60:38:41:9e:c7: 40:6c:01:b3:17:b1:d3:1c:ca:3e:44:f2:4c:39:b1: 1b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E8:ED:56:A5:56:F4:CE:37:85:B3:31:37:A8:FF:BF:E8:6B:C0:1E X509v3 Authority Key Identifier: keyid:61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/B-jtVqVW9M43hbMxN6j_v-hrwB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.142.188.0/22 Signature Algorithm: sha256WithRSAEncryption 35:9d:e5:fe:e9:8d:ee:61:2c:bf:0d:c9:18:87:1d:e2:71:00: b3:70:02:d0:3b:71:cf:7c:b2:cd:dd:c7:fb:e3:5b:33:b9:9b: 3b:fd:f0:89:84:b0:37:67:0e:12:bc:ff:57:e6:e7:f8:12:be: 21:5e:10:5f:74:00:60:7f:0b:3a:ea:13:33:70:2b:61:b6:d5: 65:d1:5e:89:e9:c5:c0:83:56:4d:35:2f:35:bd:e6:af:09:99: c8:0d:c3:68:17:48:7a:18:04:c6:e7:40:74:e9:ac:a3:f3:c2: 01:04:18:1c:72:8c:16:25:6c:c3:6e:1f:d8:72:b4:c1:d5:24: 31:da:65:45:88:0c:ec:8b:c8:cb:7c:b0:cf:e6:fc:f0:a0:1b: d3:aa:ef:eb:66:fb:73:c4:05:32:ab:ac:fd:ef:ca:41:ec:4d: 10:4d:e1:f0:ad:37:d5:14:b5:58:ea:17:e1:4a:48:5c:56:9c: a3:05:4a:14:bf:e2:fe:0f:3b:b1:3b:85:ab:fb:9e:d0:c2:f1: ac:e4:09:17:25:2f:c2:d3:02:39:f3:91:3b:37:81:0c:3d:7c: 71:fe:43:38:f1:45:ca:d7:f4:62:8a:1e:d6:2e:26:21:5f:10: ea:a8:61:e5:fd:48:af:43:d7:2a:c1:6e:1e:f2:0b:cc:ef:48: 76:49:38:ae -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WOJFVySp8tgsP1ho1e7JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxNDc5OWM2N2MwODU0N2Q4MGJiMzVkMDJkYWU1MDVkNWE2 NWRjNWIwHhcNMjYwMTAxMDIxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2U4ZWQ1NmE1NTZmNGNlMzc4NWIzMzEzN2E4ZmZiZmU4NmJjMDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoY2AcpTZE+nR16tPD3cjFYGsqTum o1Tf3ns7JAc16LO/GCnek4uaq4jv7d2PDHhB4Ad7AwnSDaudj2DfDIIW+IMcIstj epwEUwlraGsKisB9h6LgcpbhTP5VLUJMNeHKVyCabFRU9XTXrdtBJYoBdbekgA+p 06iLb1WxKsn1Z4McrAD6RQI5AAPR+Lj3qF4NSkzw6cO80aA+NkT9sZwCaM3oBb7a d6/cYskMbYQVM2nzmVvY2VXzh9Smgrs4Z6qAJYacB3FJgXEfsIbQGFF8lyNWp2hw ZyGZYzyuVrZnX180N0WyAgCY/LqNYDhBnsdAbAGzF7HTHMo+RPJMObEbQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAfo7ValVvTON4WzMTeo/7/oa8AeMB8GA1UdIwQY MBaAFGFHmcZ8CFR9gLs10C2uUF1aZdxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVVlWnhud0lWSDJBdXpYUUxhNVFYVnBsM0ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mN2M5ZDEtMGY1Yi00MmY1LTkzMWQt MWRjMGI4NGExYzdlLzEvQi1qdFZxVlc5TTQzaGJNeE42al92LWhyd0I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9mN2M5ZDEtMGY1Yi00MmY1LTkzMWQtMWRjMGI4NGExYzdl LzEvWVVlWnhud0lWSDJBdXpYUUxhNVFYVnBsM0ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCT468MA0G CSqGSIb3DQEBCwUAA4IBAQA1neX+6Y3uYSy/DckYhx3icQCzcALQO3HPfLLN3cf7 41szuZs7/fCJhLA3Zw4SvP9X5uf4Er4hXhBfdABgfws66hMzcCthttVl0V6J6cXA g1ZNNS81veavCZnIDcNoF0h6GATG50B06ayj88IBBBgccowWJWzDbh/YcrTB1SQx 2mVFiAzsi8jLfLDP5vzwoBvTqu/rZvtzxAUyq6z978pB7E0QTeHwrTfVFLVY6hfh SkhcVpyjBUoUv+L+DzuxO4Wr+57QwvGs5AkXJS/C0wI585E7N4EMPXxx/kM48UXK 1/Riih7WLiYhXxDqqGHl/UivQ9cqwW4e8gvM70h2STiu -----END CERTIFICATE-----Generated at Sun Jan 25 17:48:14 2026 by rpki-client