This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/wF4dYnSli8MvKSkaalmJxK3BUuE.roa File: wF4dYnSli8MvKSkaalmJxK3BUuE.roa (raw, json) Hash identifier: bRgCLzwSPr+zj8E46tEdf2riioRemK4V+6Zr2lWh/tY= Subject key identifier: C0:5E:1D:62:74:A5:8B:C3:2F:29:29:1A:6A:59:89:C4:AD:C1:52:E1 Certificate issuer: /CN=0c7887582d83d3f087682af8780a324a353ce782 Certificate serial: 019B7758AD8FFBC90BF721DBB7FF5421919F Authority key identifier: 0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/wF4dYnSli8MvKSkaalmJxK3BUuE.roa Signing time: Thu 01 Jan 2026 02:17:38 +0000 ROA not before: Thu 01 Jan 2026 02:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60175 IP address blocks: 213.179.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.mft rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ad:8f:fb:c9:0b:f7:21:db:b7:ff:54:21:91:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c7887582d83d3f087682af8780a324a353ce782 Validity Not Before: Jan 1 02:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c05e1d6274a58bc32f29291a6a5989c4adc152e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:df:ac:b2:82:5f:4d:37:ce:7e:f7:2b:6b:5f: 3e:f9:1b:d9:98:09:e4:47:b6:d6:f3:ab:20:c2:51: 28:72:09:9f:17:b1:34:a2:0a:e3:56:c6:7d:c0:a1: 09:b8:b1:3b:e0:72:dd:05:6e:ae:2a:d7:f1:dd:82: 88:1e:06:5e:18:ad:a8:71:25:be:61:c5:3b:90:06: f0:71:ac:7f:f0:a7:dd:c5:06:4b:4d:f7:df:82:2e: e4:39:b2:5d:81:41:9b:02:58:bf:ae:66:c2:2d:df: 2b:73:6b:a1:d6:1e:9f:ec:8a:09:c7:4f:dc:2d:c4: 3e:f2:66:2e:c9:bf:48:7f:fb:25:0b:76:3d:63:7c: cd:24:e7:b9:71:7a:ce:8e:2c:b2:14:9a:a7:97:87: 7a:de:ca:ce:65:dc:24:81:bf:b0:9b:c4:5b:f8:5b: 2a:89:03:b2:a6:a2:bd:52:d6:61:3c:42:d8:cc:69: 84:94:7f:5a:5d:1c:09:4e:dd:3c:51:a9:cd:c3:da: dc:92:4d:e4:ca:b7:b3:58:d9:c2:17:eb:4a:08:d0: 1c:5c:c6:08:74:54:3b:3a:b5:de:fa:ae:e7:2d:e7: e2:a7:d4:59:af:1f:16:63:68:38:b2:81:f5:0e:04: 4c:de:75:a5:3c:c2:b9:82:86:f5:0a:3c:91:d0:e8: 59:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:5E:1D:62:74:A5:8B:C3:2F:29:29:1A:6A:59:89:C4:AD:C1:52:E1 X509v3 Authority Key Identifier: keyid:0C:78:87:58:2D:83:D3:F0:87:68:2A:F8:78:0A:32:4A:35:3C:E7:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHiHWC2D0_CHaCr4eAoySjU854I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/wF4dYnSli8MvKSkaalmJxK3BUuE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bff48f-0a30-478d-b2db-ad4a1da393a1/1/DHiHWC2D0_CHaCr4eAoySjU854I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.179.71.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:23:25:05:05:c3:f0:05:53:36:88:19:20:52:0c:23:f5:0c: 88:4d:11:96:a7:75:ac:13:ca:c4:77:f9:80:78:12:6d:99:d7: 84:a8:09:69:3a:3c:48:9f:48:72:9e:00:ec:a8:df:00:16:3a: 10:01:ba:e7:e0:36:a9:e8:1e:29:f9:26:34:a3:0d:6d:df:6c: bc:d3:6f:a8:8f:a9:0a:c5:e4:cf:94:8b:6d:e5:5d:62:df:ba: b9:28:d9:3a:b5:f2:9e:8b:8c:58:33:09:82:35:4e:f4:fb:ed: 88:bf:54:7b:41:24:c2:d3:19:6e:d5:27:ad:6d:5e:42:f0:34: 37:cf:4d:f7:f3:c7:da:8b:0d:37:ef:4a:1a:50:0d:09:13:01: 27:c3:6b:47:81:c9:39:aa:33:af:6e:96:41:01:1a:95:db:af: 49:82:60:26:cb:83:37:b0:68:1f:81:e1:8a:a8:e3:9f:40:88: 7f:75:72:90:22:1c:18:a0:cb:92:2e:30:6e:2c:67:8d:a8:5a: b8:49:4b:2f:6b:73:3c:a0:ea:d4:6a:93:70:2a:f4:c9:bf:fa: 3c:74:6a:cf:61:01:e5:dc:66:a5:f6:e9:07:b3:e5:33:44:02: 2d:5e:b0:05:8c:4a:92:b3:e2:17:c1:1b:bc:29:38:4e:2a:82: eb:60:a2:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WK2P+8kL9yHbt/9UIZGfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNzg4NzU4MmQ4M2QzZjA4NzY4MmFmODc4MGEzMjRhMzUz Y2U3ODIwHhcNMjYwMTAxMDIxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDVlMWQ2Mjc0YTU4YmMzMmYyOTI5MWE2YTU5ODljNGFkYzE1MmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69+ssoJfTTfOfvcra18++RvZmAnk R7bW86sgwlEocgmfF7E0ogrjVsZ9wKEJuLE74HLdBW6uKtfx3YKIHgZeGK2ocSW+ YcU7kAbwcax/8KfdxQZLTfffgi7kObJdgUGbAli/rmbCLd8rc2uh1h6f7IoJx0/c LcQ+8mYuyb9If/slC3Y9Y3zNJOe5cXrOjiyyFJqnl4d63srOZdwkgb+wm8Rb+Fsq iQOypqK9UtZhPELYzGmElH9aXRwJTt08UanNw9rckk3kyrezWNnCF+tKCNAcXMYI dFQ7OrXe+q7nLefip9RZrx8WY2g4soH1DgRM3nWlPMK5gob1CjyR0OhZlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMBeHWJ0pYvDLykpGmpZicStwVLhMB8GA1UdIwQY MBaAFAx4h1gtg9Pwh2gq+HgKMko1POeCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREhpSFdDMkQwX0NIYUNyNGVBb3lTalU4NTRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iZmY0OGYtMGEzMC00NzhkLWIyZGIt YWQ0YTFkYTM5M2ExLzEvd0Y0ZFluU2xpOE12S1NrYWFsbUp4SzNCVXVFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9iZmY0OGYtMGEzMC00NzhkLWIyZGItYWQ0YTFkYTM5M2Ex LzEvREhpSFdDMkQwX0NIYUNyNGVBb3lTalU4NTRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1bNHMA0G CSqGSIb3DQEBCwUAA4IBAQBcIyUFBcPwBVM2iBkgUgwj9QyITRGWp3WsE8rEd/mA eBJtmdeEqAlpOjxIn0hyngDsqN8AFjoQAbrn4Dap6B4p+SY0ow1t32y802+oj6kK xeTPlItt5V1i37q5KNk6tfKei4xYMwmCNU70++2Iv1R7QSTC0xlu1SetbV5C8DQ3 z03388faiw0370oaUA0JEwEnw2tHgck5qjOvbpZBARqV269JgmAmy4M3sGgfgeGK qOOfQIh/dXKQIhwYoMuSLjBuLGeNqFq4SUsva3M8oOrUapNwKvTJv/o8dGrPYQHl 3Gal9ukHs+UzRAItXrAFjEqSs+IXwRu8KThOKoLrYKIH -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:45 2026 by rpki-client