This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/79l3omq8_o54S6Kg8vandlH5J_o.roa File: 79l3omq8_o54S6Kg8vandlH5J_o.roa (raw, json) Hash identifier: KLDOrBiQlVs1TSmknTa83fxTQ2tVpuuxWM3N66P3QGg= Subject key identifier: EF:D9:77:A2:6A:BC:FE:8E:78:4B:A2:A0:F2:F6:A7:76:51:F9:27:FA Certificate issuer: /CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2 Certificate serial: 019B7910B0F51D3622084C931F05BCB64CF6 Authority key identifier: E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/79l3omq8_o54S6Kg8vandlH5J_o.roa Signing time: Thu 01 Jan 2026 10:18:15 +0000 ROA not before: Thu 01 Jan 2026 10:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34354 IP address blocks: 85.158.72.0/23 maxlen: 23 85.158.74.0/23 maxlen: 23 85.158.76.0/23 maxlen: 23 85.158.78.0/23 maxlen: 23 89.221.112.0/23 maxlen: 23 89.221.114.0/23 maxlen: 23 89.221.116.0/23 maxlen: 23 89.221.118.0/23 maxlen: 23 89.221.120.0/23 maxlen: 23 89.221.120.0/24 maxlen: 24 89.221.122.0/23 maxlen: 23 89.221.124.0/23 maxlen: 23 89.221.126.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.mft rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:b0:f5:1d:36:22:08:4c:93:1f:05:bc:b6:4c:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5a1b36552f9daccb92ac5c3b44b426d643749e2 Validity Not Before: Jan 1 10:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efd977a26abcfe8e784ba2a0f2f6a77651f927fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:72:94:1f:a4:13:6d:82:ab:15:11:20:52:16: 26:99:47:72:9e:d7:7a:cb:a4:6d:b3:4a:cd:0a:4d: 78:57:4c:d0:34:26:34:9b:bf:7e:1d:6c:63:0a:7d: fe:d5:af:fe:09:ac:23:1a:de:43:8e:f0:0f:27:53: 15:fc:dd:72:1e:67:3d:d5:99:88:e0:cf:19:76:38: c2:ab:d5:b2:d1:af:cf:ec:a7:25:02:72:63:40:a9: ab:5c:d3:9a:8c:b6:54:b9:8b:f3:38:3b:7e:83:1c: f5:c1:8d:39:ec:d9:78:ef:5e:4d:60:49:8b:41:e9: 27:f1:33:76:93:44:96:44:c6:11:1d:ab:e3:76:3f: 87:79:86:d3:39:1c:68:f3:43:d7:82:b9:42:68:73: fe:2b:2c:0c:5b:4e:cb:46:a9:0e:e6:d7:dd:d2:2f: d0:44:93:ab:30:e2:1d:b9:96:93:17:32:4b:38:cb: c9:a5:a2:f2:b6:ec:e4:01:de:98:d6:62:1e:2a:dd: f7:cb:cb:ae:d1:0c:c6:cb:0a:55:8a:db:d2:3a:c3: c3:bc:11:4b:dd:21:f9:70:f4:78:dc:26:6d:9c:d4: d7:3f:f8:30:23:17:1e:bf:bd:63:41:bf:9f:04:8c: 4c:b3:05:79:70:4e:f3:f2:d0:d5:63:f6:59:46:1c: e5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D9:77:A2:6A:BC:FE:8E:78:4B:A2:A0:F2:F6:A7:76:51:F9:27:FA X509v3 Authority Key Identifier: keyid:E5:A1:B3:65:52:F9:DA:CC:B9:2A:C5:C3:B4:4B:42:6D:64:37:49:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5aGzZVL52sy5KsXDtEtCbWQ3SeI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/79l3omq8_o54S6Kg8vandlH5J_o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/5aGzZVL52sy5KsXDtEtCbWQ3SeI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.158.72.0/21 89.221.112.0/20 Signature Algorithm: sha256WithRSAEncryption 4c:20:3f:1e:cc:53:1e:a0:4e:2e:db:e2:70:1f:84:ad:a1:7d: 88:ca:a0:80:c2:74:de:b2:1f:5d:5f:78:77:0c:7d:e4:92:21: 43:2d:7e:8b:35:10:61:29:66:3f:52:d6:16:f0:fd:ac:af:72: 3d:d2:ee:5a:71:62:ff:55:52:64:8c:6a:a3:0f:c3:88:d2:52: 16:ea:b4:26:f6:7e:43:02:0e:24:aa:3f:25:4a:df:2e:b9:b3: c2:61:6a:9b:74:3d:f9:9f:c6:78:82:6e:d6:37:fc:8b:75:35: 0e:97:97:b4:80:ac:dc:16:ab:b5:b7:63:9b:c8:5b:b1:7d:f0: 12:dc:d3:33:61:2b:60:71:b7:d7:a6:d3:42:dc:7e:f5:4c:50: 16:bf:35:5d:2b:ae:8d:98:29:cd:43:b8:1c:09:47:ed:a0:4f: 5e:5f:b4:7b:6c:c3:bb:ff:d1:9a:3d:bc:64:d4:75:d4:77:0f: de:2a:63:56:ab:ee:65:d4:c4:f2:6e:3d:1d:da:0c:f3:90:72: a2:ef:d3:78:b7:0e:fe:6c:6b:9b:ad:f9:d5:f1:f0:22:41:e2: d2:6b:ea:f2:60:5a:67:3c:13:d1:34:fc:90:63:16:b2:cc:8a: 1a:ac:48:ff:b8:b2:3c:4c:c6:46:0a:dc:85:d0:57:54:e6:f6: 98:0f:ae:6e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ELD1HTYiCEyTHwW8tkz2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YTFiMzY1NTJmOWRhY2NiOTJhYzVjM2I0NGI0MjZkNjQz NzQ5ZTIwHhcNMjYwMTAxMTAxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmQ5NzdhMjZhYmNmZThlNzg0YmEyYTBmMmY2YTc3NjUxZjkyN2ZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnKUH6QTbYKrFREgUhYmmUdyntd6 y6Rts0rNCk14V0zQNCY0m79+HWxjCn3+1a/+CawjGt5DjvAPJ1MV/N1yHmc91ZmI 4M8ZdjjCq9Wy0a/P7KclAnJjQKmrXNOajLZUuYvzODt+gxz1wY057Nl4715NYEmL Qekn8TN2k0SWRMYRHavjdj+HeYbTORxo80PXgrlCaHP+KywMW07LRqkO5tfd0i/Q RJOrMOIduZaTFzJLOMvJpaLytuzkAd6Y1mIeKt33y8uu0QzGywpVitvSOsPDvBFL 3SH5cPR43CZtnNTXP/gwIxcev71jQb+fBIxMswV5cE7z8tDVY/ZZRhzlHwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFO/Zd6JqvP6OeEuioPL2p3ZR+Sf6MB8GA1UdIwQY MBaAFOWhs2VS+drMuSrFw7RLQm1kN0niMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMt YzVlNmQyM2Y4YjA5LzEvNzlsM29tcThfbzU0UzZLZzh2YW5kbEg1Sl9vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMtYzVlNmQyM2Y4YjA5 LzEvNWFHelpWTDUyc3k1S3NYRHRFdENiV1EzU2VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDVZ5IAwQE Wd1wMA0GCSqGSIb3DQEBCwUAA4IBAQBMID8ezFMeoE4u2+JwH4StoX2IyqCAwnTe sh9dX3h3DH3kkiFDLX6LNRBhKWY/UtYW8P2sr3I90u5acWL/VVJkjGqjD8OI0lIW 6rQm9n5DAg4kqj8lSt8uubPCYWqbdD35n8Z4gm7WN/yLdTUOl5e0gKzcFqu1t2Ob yFuxffAS3NMzYStgcbfXptNC3H71TFAWvzVdK66NmCnNQ7gcCUftoE9eX7R7bMO7 /9GaPbxk1HXUdw/eKmNWq+5l1MTybj0d2gzzkHKi79N4tw7+bGubrfnV8fAiQeLS a+ryYFpnPBPRNPyQYxayzIoarEj/uLI8TMZGCtyF0FdU5vaYD65u -----END CERTIFICATE-----Generated at Mon Jan 26 11:44:40 2026 by rpki-client