This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/79yWfe1C0oJyorvH1Ndj5_ksS2E.roa File: 79yWfe1C0oJyorvH1Ndj5_ksS2E.roa (raw, json) Hash identifier: VEEzicoUwIVdfyy7u/W5/zZAs5snmAOXbsnXFY4gVR0= Subject key identifier: EF:DC:96:7D:ED:42:D2:82:72:A2:BB:C7:D4:D7:63:E7:F9:2C:4B:61 Certificate issuer: /CN=0f521d269526c7aee38e4fb2454b2f087f69feb7 Certificate serial: 019B79ED27EED296A36431CE89625298E332 Authority key identifier: 0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/79yWfe1C0oJyorvH1Ndj5_ksS2E.roa Signing time: Thu 01 Jan 2026 14:19:03 +0000 ROA not before: Thu 01 Jan 2026 14:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16371 IP address blocks: 193.3.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:27:ee:d2:96:a3:64:31:ce:89:62:52:98:e3:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f521d269526c7aee38e4fb2454b2f087f69feb7 Validity Not Before: Jan 1 14:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efdc967ded42d28272a2bbc7d4d763e7f92c4b61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:10:ca:71:11:29:9c:b7:74:35:24:4d:7b:fa: 7e:8a:d9:8f:b6:e9:f0:c0:73:ed:ba:e1:17:db:a8: 56:23:02:8f:61:d5:98:de:e9:92:1d:d7:d7:ec:7a: 08:0e:30:77:c6:b4:69:0a:7e:e2:87:7e:21:35:7b: 42:f3:b7:40:d4:ab:1d:f6:32:f3:b3:42:93:35:e8: f0:45:c8:b7:89:d9:91:16:00:28:e7:8e:35:9d:4e: 5d:7a:46:0e:ab:5e:64:0f:76:08:35:74:a9:02:f2: 46:26:00:cf:a8:ce:ed:8c:e8:99:3b:72:5d:8f:bf: 32:a7:b7:e2:61:c4:0a:7b:5d:b0:d0:81:7e:17:5c: ec:c2:94:f1:c5:56:25:99:93:8e:77:8b:71:14:c3: e2:11:13:3d:a2:03:7b:e9:98:84:3d:a7:7d:17:22: 24:eb:b6:18:ba:17:ab:ad:dd:ad:74:89:22:4b:f8: f9:40:14:16:df:be:5b:a8:4f:c2:24:a5:fb:2e:c3: e4:f7:56:3c:e5:da:9a:bc:56:e1:91:89:94:92:92: cd:91:df:89:0b:dc:25:66:7f:a5:7a:d8:38:08:ea: 0a:fd:c0:bb:af:eb:ce:3c:14:77:43:0f:88:bf:8f: 88:23:7f:ed:77:fa:04:52:cf:a4:f7:41:99:18:ff: df:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:DC:96:7D:ED:42:D2:82:72:A2:BB:C7:D4:D7:63:E7:F9:2C:4B:61 X509v3 Authority Key Identifier: keyid:0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/79yWfe1C0oJyorvH1Ndj5_ksS2E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.3.48.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:0d:52:70:41:36:ec:87:b6:80:43:2b:40:fc:14:9f:62:47: 0a:43:70:f9:7e:42:e6:65:69:71:6a:dc:dc:83:d2:9e:ae:2f: dc:68:0e:01:ad:0d:e0:5a:47:1e:5b:81:5f:52:7a:cc:79:83: 9e:24:df:11:8b:cf:29:b2:51:a7:14:7f:8d:b7:01:1d:e7:db: be:50:25:14:c2:6c:cf:de:50:55:f7:04:3d:ed:65:a3:a8:7f: 52:81:03:c5:88:53:fd:f0:b7:9b:d2:38:eb:95:41:f4:46:7a: 2a:20:5b:1c:fe:22:48:44:b4:05:61:f9:b0:23:ad:dd:99:1f: 11:59:7d:a9:63:8b:46:0b:65:98:08:b2:dc:05:0a:ad:f9:ec: 44:25:5f:44:2c:82:82:14:e0:29:99:f8:64:67:fc:c9:3a:8a: 95:d4:86:33:d9:c3:68:79:1f:29:5b:e2:7c:bd:31:61:13:c2: 14:2c:bc:52:3a:c2:2a:16:09:20:32:12:b1:26:03:c7:2a:88: da:bf:c3:8b:00:69:be:35:76:9f:29:34:8a:aa:03:f2:19:91: 06:db:89:d0:1f:8d:fb:ab:a0:77:2f:d4:78:5a:a2:be:b6:32: 41:7d:b4:8a:10:69:96:cd:16:f8:15:34:c8:22:3c:10:25:29: 31:49:ef:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Sfu0pajZDHOiWJSmOMyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNTIxZDI2OTUyNmM3YWVlMzhlNGZiMjQ1NGIyZjA4N2Y2 OWZlYjcwHhcNMjYwMTAxMTQxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmRjOTY3ZGVkNDJkMjgyNzJhMmJiYzdkNGQ3NjNlN2Y5MmM0YjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxDKcREpnLd0NSRNe/p+itmPtunw wHPtuuEX26hWIwKPYdWY3umSHdfX7HoIDjB3xrRpCn7ih34hNXtC87dA1Ksd9jLz s0KTNejwRci3idmRFgAo5441nU5dekYOq15kD3YINXSpAvJGJgDPqM7tjOiZO3Jd j78yp7fiYcQKe12w0IF+F1zswpTxxVYlmZOOd4txFMPiERM9ogN76ZiEPad9FyIk 67YYuherrd2tdIkiS/j5QBQW375bqE/CJKX7LsPk91Y85dqavFbhkYmUkpLNkd+J C9wlZn+letg4COoK/cC7r+vOPBR3Qw+Iv4+II3/td/oEUs+k90GZGP/fKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO/cln3tQtKCcqK7x9TXY+f5LEthMB8GA1UdIwQY MBaAFA9SHSaVJseu445PskVLLwh/af63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDFJZEpwVW14NjdqamsteVJVc3ZDSDlwX3JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8zMDdiZmYtMWViMS00NzAxLWFjNmIt YzFlYjAxMTBiZDNhLzEvNzl5V2ZlMUMwb0p5b3J2SDFOZGo1X2tzUzJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8zMDdiZmYtMWViMS00NzAxLWFjNmItYzFlYjAxMTBiZDNh LzEvRDFJZEpwVW14NjdqamsteVJVc3ZDSDlwX3JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQMwMA0G CSqGSIb3DQEBCwUAA4IBAQBcDVJwQTbsh7aAQytA/BSfYkcKQ3D5fkLmZWlxatzc g9Keri/caA4BrQ3gWkceW4FfUnrMeYOeJN8Ri88pslGnFH+NtwEd59u+UCUUwmzP 3lBV9wQ97WWjqH9SgQPFiFP98Leb0jjrlUH0RnoqIFsc/iJIRLQFYfmwI63dmR8R WX2pY4tGC2WYCLLcBQqt+exEJV9ELIKCFOApmfhkZ/zJOoqV1IYz2cNoeR8pW+J8 vTFhE8IULLxSOsIqFgkgMhKxJgPHKojav8OLAGm+NXafKTSKqgPyGZEG24nQH437 q6B3L9R4WqK+tjJBfbSKEGmWzRb4FTTIIjwQJSkxSe8l -----END CERTIFICATE-----Generated at Mon Jan 26 04:41:58 2026 by rpki-client