This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/CsQf4uEGspv_IcbrptvdYC6FW4U.roa File: CsQf4uEGspv_IcbrptvdYC6FW4U.roa (raw, json) Hash identifier: DTdMWaLCP+5k9hnxvlb1jl6IR7GYGn2eFq3euCRFifs= Subject key identifier: 0A:C4:1F:E2:E1:06:B2:9B:FF:21:C6:EB:A6:DB:DD:60:2E:85:5B:85 Certificate issuer: /CN=d48551e26169b3b3e124f6964e2702e95768253e Certificate serial: 019B7EA62E460692EC33435DE1ECA198F382 Authority key identifier: D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/CsQf4uEGspv_IcbrptvdYC6FW4U.roa Signing time: Fri 02 Jan 2026 12:19:38 +0000 ROA not before: Fri 02 Jan 2026 12:19:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60853 IP address blocks: 79.132.255.0/24 maxlen: 24 213.211.190.0/24 maxlen: 24 213.211.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:2e:46:06:92:ec:33:43:5d:e1:ec:a1:98:f3:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48551e26169b3b3e124f6964e2702e95768253e Validity Not Before: Jan 2 12:19:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0ac41fe2e106b29bff21c6eba6dbdd602e855b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e4:e0:65:9a:3d:ad:74:0a:06:9d:ed:75:38: f9:85:89:53:57:e5:ca:3d:f3:90:55:3f:0f:5b:5d: 2c:39:7c:bc:ae:24:c7:38:1b:84:79:3c:8c:75:b5: 95:0c:9e:8a:9c:5e:4e:26:42:6e:76:6b:2b:72:38: 03:9f:4d:c1:93:50:87:ef:f3:e3:a9:86:3e:d4:bb: 8a:55:ee:0e:cb:75:4f:ab:c9:c9:86:51:40:63:c1: 8a:cd:82:b7:1c:3f:bd:9f:00:11:26:89:f9:95:57: be:1d:a9:8d:d2:96:04:87:2f:62:3d:b1:26:32:7e: e9:e4:8e:93:f4:a1:4e:3b:33:a3:e9:20:30:12:68: a9:16:c5:41:ff:96:16:56:70:d2:5f:27:9e:c7:14: 33:ed:ff:9d:15:f4:4a:25:ce:29:7f:b0:c8:b3:5c: 29:e8:b1:e7:9f:04:27:e1:57:96:9b:86:22:78:e2: e9:fe:73:17:66:d6:71:a3:48:cc:66:79:be:c1:8c: f1:b3:30:e4:96:6d:10:7d:9d:0c:6e:14:ea:8c:b6: 16:35:0d:8b:27:5c:3e:89:0b:3a:c6:e6:1c:35:be: aa:68:ef:28:a0:4b:fd:28:65:75:f2:c0:6d:3a:c9: 19:94:c7:17:cd:d7:07:95:d9:e7:61:6f:47:ee:dd: e4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C4:1F:E2:E1:06:B2:9B:FF:21:C6:EB:A6:DB:DD:60:2E:85:5B:85 X509v3 Authority Key Identifier: keyid:D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/CsQf4uEGspv_IcbrptvdYC6FW4U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.132.255.0/24 213.211.190.0/23 Signature Algorithm: sha256WithRSAEncryption 87:d4:4e:6b:d0:a6:cb:65:17:4a:67:ad:44:c4:98:cd:1e:cc: d3:9b:a8:9d:5b:5b:04:58:3f:45:fb:92:4e:5d:f2:d1:7b:ca: 3c:6c:6b:47:f1:a2:aa:82:d9:4d:b3:27:3b:66:2d:9b:d9:23: 3b:11:ee:e5:f9:40:c9:7c:0e:95:b3:76:03:26:6c:8f:81:d9: ed:df:4e:c1:97:d5:33:e1:b0:ba:86:f1:db:ee:7b:92:c4:bf: 68:e8:d7:41:b3:0d:06:21:8b:15:e3:3f:75:d2:24:94:72:27: 6c:52:b4:5c:77:11:4f:dd:db:e0:42:10:aa:9d:fa:52:39:60: 37:ed:5c:ab:f6:eb:81:af:25:b9:ff:ae:1f:3f:36:dc:a9:33: 85:a4:bb:be:6b:78:37:e4:8b:d4:cb:6f:46:06:47:12:ec:a9: bf:f0:7d:d3:db:33:38:cc:96:3c:44:39:1c:f2:f3:8e:6e:8c: d4:3b:8a:fb:ef:9b:66:d2:f6:99:58:c5:32:45:56:21:10:b1: b5:97:83:38:dc:0b:21:2c:14:d8:c6:6c:c3:1c:d1:cc:d1:f0: a7:9a:e3:20:1f:6e:5f:95:03:c2:92:e5:ba:04:43:39:09:83: e7:17:61:f1:32:07:8c:e3:a7:37:80:9e:82:de:29:67:7b:93: cd:77:f5:28 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pi5GBpLsM0Nd4eyhmPOCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0ODU1MWUyNjE2OWIzYjNlMTI0ZjY5NjRlMjcwMmU5NTc2 ODI1M2UwHhcNMjYwMTAyMTIxOTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWM0MWZlMmUxMDZiMjliZmYyMWM2ZWJhNmRiZGQ2MDJlODU1Yjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOTgZZo9rXQKBp3tdTj5hYlTV+XK PfOQVT8PW10sOXy8riTHOBuEeTyMdbWVDJ6KnF5OJkJudmsrcjgDn03Bk1CH7/Pj qYY+1LuKVe4Oy3VPq8nJhlFAY8GKzYK3HD+9nwARJon5lVe+HamN0pYEhy9iPbEm Mn7p5I6T9KFOOzOj6SAwEmipFsVB/5YWVnDSXyeexxQz7f+dFfRKJc4pf7DIs1wp 6LHnnwQn4VeWm4YieOLp/nMXZtZxo0jMZnm+wYzxszDklm0QfZ0MbhTqjLYWNQ2L J1w+iQs6xuYcNb6qaO8ooEv9KGV18sBtOskZlMcXzdcHldnnYW9H7t3kfQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFArEH+LhBrKb/yHG66bb3WAuhVuFMB8GA1UdIwQY MBaAFNSFUeJhabOz4ST2lk4nAulXaCU+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlWUjRtRnBzN1BoSlBhV1RpY0M2VmRvSlQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lYWQyNzctODRjOS00YjhlLTg3OWUt NWY3MzI2NzEwMmE2LzEvQ3NRZjR1RUdzcHZfSWNicnB0dmRZQzZGVzRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9lYWQyNzctODRjOS00YjhlLTg3OWUtNWY3MzI2NzEwMmE2 LzEvMUlWUjRtRnBzN1BoSlBhV1RpY0M2VmRvSlQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT4T/AwQB 1dO+MA0GCSqGSIb3DQEBCwUAA4IBAQCH1E5r0KbLZRdKZ61ExJjNHszTm6idW1sE WD9F+5JOXfLRe8o8bGtH8aKqgtlNsyc7Zi2b2SM7Ee7l+UDJfA6Vs3YDJmyPgdnt 307Bl9Uz4bC6hvHb7nuSxL9o6NdBsw0GIYsV4z910iSUcidsUrRcdxFP3dvgQhCq nfpSOWA37Vyr9uuBryW5/64fPzbcqTOFpLu+a3g35IvUy29GBkcS7Km/8H3T2zM4 zJY8RDkc8vOObozUO4r775tm0vaZWMUyRVYhELG1l4M43AshLBTYxmzDHNHM0fCn muMgH25flQPCkuW6BEM5CYPnF2HxMgeM46c3gJ6C3ilne5PNd/Uo -----END CERTIFICATE-----Generated at Mon Jan 26 08:57:40 2026 by rpki-client