This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/oJ73hXNTI3ql6e9efqOk-gbJ-UY.roa File: oJ73hXNTI3ql6e9efqOk-gbJ-UY.roa (raw, json) Hash identifier: 7RS1/FzkO8/64GmnNWvKz94G3bPh1VWWYxYmkCi0PVE= Subject key identifier: A0:9E:F7:85:73:53:23:7A:A5:E9:EF:5E:7E:A3:A4:FA:06:C9:F9:46 Certificate issuer: /CN=568ae803b9ba38855401827b3eece14505a9c0f6 Certificate serial: 019B7A5ADB930C6963B94C576D0CB8A04108 Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/oJ73hXNTI3ql6e9efqOk-gbJ-UY.roa Signing time: Thu 01 Jan 2026 16:18:53 +0000 ROA not before: Thu 01 Jan 2026 16:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199732 IP address blocks: 79.141.212.0/24 maxlen: 24 81.27.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:db:93:0c:69:63:b9:4c:57:6d:0c:b8:a0:41:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6 Validity Not Before: Jan 1 16:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a09ef7857353237aa5e9ef5e7ea3a4fa06c9f946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:dc:65:0c:07:09:7d:5f:ea:56:ec:ef:bd:72: 70:f9:9d:fa:88:bf:fb:3f:c2:4b:11:04:36:a4:b2: 9d:5f:67:59:f8:5d:08:5c:8c:5e:f2:52:f4:32:45: 5b:a7:62:c8:39:b9:bb:8e:99:d4:d8:e6:99:2c:78: b1:82:22:b4:36:6b:c1:9f:5b:31:07:87:85:a9:f4: 33:a6:ef:ea:af:7e:e2:38:f0:fe:ab:b2:c5:f8:46: 0a:60:78:22:97:99:57:2e:67:f9:00:00:a5:bc:26: 69:62:fc:94:25:62:83:2f:f8:40:60:1d:cf:31:d9: 9a:4a:fd:3d:94:12:df:4d:3a:8b:6d:62:e5:14:01: 46:f7:00:4e:a2:2f:44:e9:63:13:f9:6f:c9:98:88: ad:44:d8:78:9c:4b:25:90:74:22:d1:bb:6b:e2:02: 7f:82:d4:82:b8:3b:97:92:07:8f:4f:ee:de:c8:48: f9:ea:21:06:b2:05:0e:ff:cd:71:ff:58:95:e8:6d: 12:6a:bb:5d:8f:11:1b:23:51:10:de:f0:9b:8c:c2: 85:54:aa:5b:86:d4:69:53:03:ad:c0:27:b9:b8:ca: 09:b5:40:61:2e:61:6d:5a:d1:c8:5e:b6:6d:fa:27: 34:65:a7:5a:d5:61:49:9a:19:ca:a8:54:a9:74:a9: 36:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9E:F7:85:73:53:23:7A:A5:E9:EF:5E:7E:A3:A4:FA:06:C9:F9:46 X509v3 Authority Key Identifier: keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/oJ73hXNTI3ql6e9efqOk-gbJ-UY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.141.212.0/24 81.27.245.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:a1:57:66:30:1b:8f:d9:78:6b:7c:45:b5:4c:38:96:c6:05: d3:2a:dc:4b:1f:0b:c5:50:1a:9a:9a:e1:0d:b7:b0:8b:fc:e2: 09:c3:64:36:5d:d1:19:53:54:7d:6c:56:af:c0:fb:23:f8:1c: 34:e3:47:0c:54:34:2e:d2:35:29:84:6b:c8:43:30:06:7e:8e: b1:e9:51:6c:cc:d1:79:64:cc:48:41:e6:d6:32:f7:34:99:a6: 1f:f6:be:ac:f9:76:62:31:09:90:d2:3c:03:56:39:ab:3e:d7: 6c:35:8a:9a:45:ab:35:41:1d:ea:26:64:24:b0:21:80:7a:8f: 77:19:ac:2d:5f:cc:1b:42:5c:ed:13:0e:39:60:93:b7:bd:bc: 0b:be:4c:c7:9f:74:10:bc:5d:91:b3:f7:8f:31:3e:f8:fe:c0: 03:92:e1:14:d9:d3:87:8a:66:e3:f9:f9:c9:f8:5d:48:6e:2d: a7:52:27:01:a0:49:93:7a:05:87:17:25:54:20:00:70:41:4d: e0:6f:76:c9:88:9c:71:4f:0d:46:30:e8:56:31:f6:93:f8:cf: a0:ec:45:1d:97:b9:8f:8f:c6:23:6a:cc:a6:08:59:52:be:0a: 86:55:8c:4c:e7:1f:39:b3:bb:1c:2c:cc:87:45:c4:5e:ce:da: ce:37:d4:ed -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6WtuTDGljuUxXbQy4oEEIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGFlODAzYjliYTM4ODU1NDAxODI3YjNlZWNlMTQ1MDVh OWMwZjYwHhcNMjYwMTAxMTYxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDllZjc4NTczNTMyMzdhYTVlOWVmNWU3ZWEzYTRmYTA2YzlmOTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49xlDAcJfV/qVuzvvXJw+Z36iL/7 P8JLEQQ2pLKdX2dZ+F0IXIxe8lL0MkVbp2LIObm7jpnU2OaZLHixgiK0NmvBn1sx B4eFqfQzpu/qr37iOPD+q7LF+EYKYHgil5lXLmf5AAClvCZpYvyUJWKDL/hAYB3P MdmaSv09lBLfTTqLbWLlFAFG9wBOoi9E6WMT+W/JmIitRNh4nEslkHQi0btr4gJ/ gtSCuDuXkgePT+7eyEj56iEGsgUO/81x/1iV6G0SartdjxEbI1EQ3vCbjMKFVKpb htRpUwOtwCe5uMoJtUBhLmFtWtHIXrZt+ic0Zada1WFJmhnKqFSpdKk2xwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKCe94VzUyN6penvXn6jpPoGyflGMB8GA1UdIwQY MBaAFFaK6AO5ujiFVAGCez7s4UUFqcD2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9yb0E3bTZPSVZVQVlKN1B1emhSUVdwd1BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yNzhkNWYtOWVlNi00NDc3LTlmZTAt OGVhZThiNzVlOWNhLzEvb0o3M2hYTlRJM3FsNmU5ZWZxT2stZ2JKLVVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS8yNzhkNWYtOWVlNi00NDc3LTlmZTAtOGVhZThiNzVlOWNh LzEvVm9yb0E3bTZPSVZVQVlKN1B1emhSUVdwd1BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT43UAwQA URv1MA0GCSqGSIb3DQEBCwUAA4IBAQA/oVdmMBuP2XhrfEW1TDiWxgXTKtxLHwvF UBqamuENt7CL/OIJw2Q2XdEZU1R9bFavwPsj+Bw040cMVDQu0jUphGvIQzAGfo6x 6VFszNF5ZMxIQebWMvc0maYf9r6s+XZiMQmQ0jwDVjmrPtdsNYqaRas1QR3qJmQk sCGAeo93GawtX8wbQlztEw45YJO3vbwLvkzHn3QQvF2Rs/ePMT74/sADkuEU2dOH imbj+fnJ+F1Ibi2nUicBoEmTegWHFyVUIABwQU3gb3bJiJxxTw1GMOhWMfaT+M+g 7EUdl7mPj8YjasymCFlSvgqGVYxM5x85s7scLMyHRcReztrON9Tt -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:38 2026 by rpki-client