This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/C4lzeE9s0JPh3LMFogAb2-unpfM.roa File: C4lzeE9s0JPh3LMFogAb2-unpfM.roa (raw, json) Hash identifier: B/VA7Y5H146Nk4o0VlZHFllZAXs0gNzPmZMsk3LGaPk= Subject key identifier: 0B:89:73:78:4F:6C:D0:93:E1:DC:B3:05:A2:00:1B:DB:EB:A7:A5:F3 Certificate issuer: /CN=380099a81b346f9abcaf26056f5b77094d1cf113 Certificate serial: 019B7E3931E24717632704FA1665FDD5F471 Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/C4lzeE9s0JPh3LMFogAb2-unpfM.roa Signing time: Fri 02 Jan 2026 10:20:36 +0000 ROA not before: Fri 02 Jan 2026 10:20:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196726 IP address blocks: 79.173.68.0/22 maxlen: 22 94.243.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:31:e2:47:17:63:27:04:fa:16:65:fd:d5:f4:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113 Validity Not Before: Jan 2 10:20:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b8973784f6cd093e1dcb305a2001bdbeba7a5f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e6:9c:78:aa:62:46:db:23:52:7c:b7:3d:7d: 42:e5:96:54:2f:cc:69:de:e0:0b:b0:3f:d8:a0:3c: c0:73:e4:66:cb:ea:99:3f:24:74:81:dc:68:15:a2: a5:c3:e4:54:f0:aa:c6:82:3b:06:94:08:e6:e9:94: c7:c4:4b:35:03:34:5f:ef:f9:45:2c:20:81:72:96: c1:22:e0:41:b1:c9:95:00:53:48:61:be:d0:ea:32: da:83:c7:6e:8c:70:e4:4b:e2:37:96:fd:1b:ce:0f: f7:c0:dc:22:fc:05:ff:9f:42:e7:83:2c:cf:7f:43: b5:18:0a:04:e0:d6:6e:72:9e:61:1c:40:64:d3:7a: a9:9c:eb:8f:d3:ee:67:fc:15:cd:d3:c5:a1:e3:9c: b7:e2:62:d7:54:85:f9:6d:d2:ef:a0:4b:1d:e7:1f: f4:63:37:07:9e:19:0f:ad:5b:89:a3:b8:e6:4c:de: 5c:22:46:d2:62:0b:44:48:da:9d:dc:b9:72:40:f7: b6:4c:59:77:b0:88:01:34:2d:9f:2b:4e:4f:03:49: 2e:1b:17:32:9e:ea:a3:1f:2f:c8:ca:09:6f:a3:cc: 73:00:27:0a:a7:f4:dd:a7:24:ff:2d:d9:5e:b3:1a: 7b:22:96:9c:31:70:af:19:19:65:4b:e9:b9:05:ad: 54:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:89:73:78:4F:6C:D0:93:E1:DC:B3:05:A2:00:1B:DB:EB:A7:A5:F3 X509v3 Authority Key Identifier: keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/C4lzeE9s0JPh3LMFogAb2-unpfM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.173.68.0/22 94.243.216.0/22 Signature Algorithm: sha256WithRSAEncryption 2a:8b:bf:83:7a:83:39:a7:af:52:a6:20:3e:39:23:29:f0:87: 2e:12:09:e8:0f:bf:04:27:c0:bd:23:11:05:5d:03:db:cf:6c: 4f:6a:29:a5:7a:e4:f7:ca:44:00:05:4a:99:b8:a2:e0:c4:a1: 27:51:e8:e2:94:7f:40:37:1c:58:f9:4c:3b:c4:d1:8c:0f:b4: c1:f7:4d:c0:3b:29:e7:2e:bf:78:a8:3f:d5:6c:14:c4:03:0d: 0d:fc:eb:47:ae:59:88:36:c8:6f:3a:23:2c:78:23:c3:c6:d0: 94:d0:6b:3e:ba:e6:a0:b3:c9:0e:8a:61:f1:87:cf:f0:f1:b2: eb:52:93:c0:5c:48:d1:08:49:93:65:64:cb:03:76:ed:64:64: 55:a9:2f:b0:35:a2:ab:0b:b1:a9:88:7f:eb:82:2d:a1:44:49: fe:0d:5b:44:e1:5d:c5:68:51:87:d3:e1:0b:c6:72:6a:49:d6: bc:0c:5a:73:12:3f:56:da:8c:0b:6f:d4:49:60:36:60:91:9c: c8:f2:43:35:1d:e4:a2:46:e9:a9:50:d4:72:b0:21:c7:37:22: d7:56:62:1a:af:e2:a8:4c:2a:a3:a4:da:43:41:2b:34:e2:1c: be:77:92:4f:fe:39:9f:6c:27:15:c2:be:3e:76:24:82:12:83: e8:6a:e8:f7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OTHiRxdjJwT6FmX91fRxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MDA5OWE4MWIzNDZmOWFiY2FmMjYwNTZmNWI3NzA5NGQx Y2YxMTMwHhcNMjYwMTAyMTAyMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjg5NzM3ODRmNmNkMDkzZTFkY2IzMDVhMjAwMWJkYmViYTdhNWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOaceKpiRtsjUny3PX1C5ZZUL8xp 3uALsD/YoDzAc+Rmy+qZPyR0gdxoFaKlw+RU8KrGgjsGlAjm6ZTHxEs1AzRf7/lF LCCBcpbBIuBBscmVAFNIYb7Q6jLag8dujHDkS+I3lv0bzg/3wNwi/AX/n0LngyzP f0O1GAoE4NZucp5hHEBk03qpnOuP0+5n/BXN08Wh45y34mLXVIX5bdLvoEsd5x/0 YzcHnhkPrVuJo7jmTN5cIkbSYgtESNqd3LlyQPe2TFl3sIgBNC2fK05PA0kuGxcy nuqjHy/Iyglvo8xzACcKp/TdpyT/Ldlesxp7IpacMXCvGRllS+m5Ba1UGQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAuJc3hPbNCT4dyzBaIAG9vrp6XzMB8GA1UdIwQY MBaAFDgAmagbNG+avK8mBW9bdwlNHPETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0FDWnFCczBiNXE4cnlZRmIxdDNDVTBjOFJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84ZTUwMWQtYzA4OC00ODk1LWFlZTMt NDUwZmUzMzU5NWQxLzEvQzRsemVFOXMwSlBoM0xNRm9nQWIyLXVucGZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My84ZTUwMWQtYzA4OC00ODk1LWFlZTMtNDUwZmUzMzU5NWQx LzEvT0FDWnFCczBiNXE4cnlZRmIxdDNDVTBjOFJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCT61EAwQC XvPYMA0GCSqGSIb3DQEBCwUAA4IBAQAqi7+DeoM5p69SpiA+OSMp8IcuEgnoD78E J8C9IxEFXQPbz2xPaimleuT3ykQABUqZuKLgxKEnUejilH9ANxxY+Uw7xNGMD7TB 903AOynnLr94qD/VbBTEAw0N/OtHrlmINshvOiMseCPDxtCU0Gs+uuags8kOimHx h8/w8bLrUpPAXEjRCEmTZWTLA3btZGRVqS+wNaKrC7GpiH/rgi2hREn+DVtE4V3F aFGH0+ELxnJqSda8DFpzEj9W2owLb9RJYDZgkZzI8kM1HeSiRumpUNRysCHHNyLX VmIar+KoTCqjpNpDQSs04hy+d5JP/jmfbCcVwr4+diSCEoPoauj3 -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:34 2026 by rpki-client