This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Un1O1eVRsl-RNFGZVC7Hh1zlUso.roa File: Un1O1eVRsl-RNFGZVC7Hh1zlUso.roa (raw, json) Hash identifier: wb6n3U2bPJOBiqYHITV1Aqlnrh4S2E/QbN0YryOpk2o= Subject key identifier: 52:7D:4E:D5:E5:51:B2:5F:91:34:51:99:54:2E:C7:87:5C:E5:52:CA Certificate issuer: /CN=380099a81b346f9abcaf26056f5b77094d1cf113 Certificate serial: 019B7E392E6C9B0B02884560532CA6EB2F32 Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Un1O1eVRsl-RNFGZVC7Hh1zlUso.roa Signing time: Fri 02 Jan 2026 10:20:35 +0000 ROA not before: Fri 02 Jan 2026 10:20:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31277 IP address blocks: 79.173.74.0/23 maxlen: 23 79.173.76.0/24 maxlen: 24 94.243.220.0/22 maxlen: 22 94.243.220.0/24 maxlen: 24 94.243.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:2e:6c:9b:0b:02:88:45:60:53:2c:a6:eb:2f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113 Validity Not Before: Jan 2 10:20:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=527d4ed5e551b25f91345199542ec7875ce552ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4a:43:6e:a7:b3:d3:16:ae:c9:5d:b3:bc:80: ad:d9:3d:2c:23:a6:66:b7:b3:dc:6e:89:4b:e5:4f: 1f:45:8a:73:68:4d:f0:53:c7:f5:a5:bd:e3:5b:ec: 63:f5:f6:b7:ab:ac:d4:15:68:ad:6f:ab:88:13:f4: 94:72:f1:20:a3:a0:3c:aa:0c:bc:65:78:c2:89:00: 26:0a:c7:1e:1c:98:96:7e:a2:20:96:f1:66:bf:8a: 07:f4:57:04:6b:53:0c:7b:dc:7e:4f:7f:26:5b:e0: 03:66:40:5d:bb:eb:79:f0:0c:1c:e4:dd:2a:64:02: 46:aa:6f:62:1c:71:2a:8e:92:ce:a3:a4:46:44:24: ad:30:76:2e:ab:5f:03:e2:a2:52:af:83:64:a4:74: 6b:fb:64:fd:82:d4:7c:3a:f1:30:7d:71:7f:77:2e: 65:2f:8b:d1:92:69:f0:03:c9:74:3d:ad:fb:e2:f3: 00:62:aa:3f:0b:0c:09:36:fc:cc:98:b8:0a:6f:b8: 5a:b1:cd:05:8f:a3:39:d2:25:c3:2f:72:b9:d7:42: 8d:af:c1:d9:23:9e:dc:33:e5:23:3e:8c:0e:bf:3a: 90:64:d5:d8:5b:3c:d2:2f:eb:05:b0:90:6e:26:1a: 9b:96:7e:df:41:15:a4:ab:33:5c:e8:4d:95:07:d9: a5:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7D:4E:D5:E5:51:B2:5F:91:34:51:99:54:2E:C7:87:5C:E5:52:CA X509v3 Authority Key Identifier: keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/Un1O1eVRsl-RNFGZVC7Hh1zlUso.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.173.74.0-79.173.76.255 94.243.220.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:2d:8a:57:1d:da:5c:e7:4d:03:8c:d9:f7:3a:04:32:66:2c: 42:0f:38:38:ec:2a:3f:72:80:a2:fa:3a:0e:d8:e9:98:de:d2: 66:dd:90:27:ad:ad:fb:40:48:70:62:6e:61:23:bb:42:98:7f: a7:3d:90:70:76:0b:ae:50:f9:f7:c0:c4:ae:0f:b7:b8:cb:43: 20:f0:d2:18:74:f8:86:8a:28:b2:1d:a0:c7:96:2a:5b:73:d5: 00:97:da:ed:0b:ef:da:d9:81:15:d2:b9:90:88:5a:09:fd:76: 84:b3:22:f0:e9:5a:cd:c8:5f:72:13:73:7f:39:7f:b9:10:6e: ba:ae:a2:f2:1c:dc:12:45:ee:05:22:7c:64:ec:77:d2:b3:66: 37:99:69:d6:28:15:18:42:25:32:0e:92:8f:fe:d2:60:c6:ea: 73:14:d9:8b:a2:db:c4:85:ad:b6:06:66:7a:2a:85:8d:d7:43: 6c:9e:a9:d7:61:4b:41:98:68:64:cb:00:23:87:7a:8e:af:32: e8:4b:dc:34:37:32:b5:ef:04:9e:48:8f:70:08:1c:3f:95:92: e5:14:9e:17:d8:ad:03:c5:11:8c:ce:e5:cb:58:18:0b:e2:1c: 0e:dd:60:48:01:49:bf:d7:62:a1:47:ac:bf:8f:c9:26:f2:2b: 11:de:2a:e1 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt+OS5smwsCiEVgUyym6y8yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4MDA5OWE4MWIzNDZmOWFiY2FmMjYwNTZmNWI3NzA5NGQx Y2YxMTMwHhcNMjYwMTAyMTAyMDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MjdkNGVkNWU1NTFiMjVmOTEzNDUxOTk1NDJlYzc4NzVjZTU1MmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkpDbqez0xauyV2zvICt2T0sI6Zm t7PcbolL5U8fRYpzaE3wU8f1pb3jW+xj9fa3q6zUFWitb6uIE/SUcvEgo6A8qgy8 ZXjCiQAmCsceHJiWfqIglvFmv4oH9FcEa1MMe9x+T38mW+ADZkBdu+t58Awc5N0q ZAJGqm9iHHEqjpLOo6RGRCStMHYuq18D4qJSr4NkpHRr+2T9gtR8OvEwfXF/dy5l L4vRkmnwA8l0Pa374vMAYqo/CwwJNvzMmLgKb7hasc0Fj6M50iXDL3K510KNr8HZ I57cM+UjPowOvzqQZNXYWzzSL+sFsJBuJhqbln7fQRWkqzNc6E2VB9mlNwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFFJ9TtXlUbJfkTRRmVQux4dc5VLKMB8GA1UdIwQY MBaAFDgAmagbNG+avK8mBW9bdwlNHPETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0FDWnFCczBiNXE4cnlZRmIxdDNDVTBjOFJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84ZTUwMWQtYzA4OC00ODk1LWFlZTMt NDUwZmUzMzU5NWQxLzEvVW4xTzFlVlJzbC1STkZHWlZDN0hoMXpsVXNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My84ZTUwMWQtYzA4OC00ODk1LWFlZTMtNDUwZmUzMzU5NWQx LzEvT0FDWnFCczBiNXE4cnlZRmIxdDNDVTBjOFJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAFPrUoD BABPrUwDBAJe89wwDQYJKoZIhvcNAQELBQADggEBAA4tilcd2lznTQOM2fc6BDJm LEIPODjsKj9ygKL6Og7Y6Zje0mbdkCetrftASHBibmEju0KYf6c9kHB2C65Q+ffA xK4Pt7jLQyDw0hh0+IaKKLIdoMeWKltz1QCX2u0L79rZgRXSuZCIWgn9doSzIvDp Ws3IX3ITc385f7kQbrquovIc3BJF7gUifGTsd9KzZjeZadYoFRhCJTIOko/+0mDG 6nMU2Yui28SFrbYGZnoqhY3XQ2yeqddhS0GYaGTLACOHeo6vMuhL3DQ3MrXvBJ5I j3AIHD+VkuUUnhfYrQPFEYzO5ctYGAviHA7dYEgBSb/XYqFHrL+PySbyKxHeKuE= -----END CERTIFICATE-----Generated at Mon Jan 26 00:59:33 2026 by rpki-client