This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/4Ozn4Unrsy8Tgxp91WwiFZKytkU.roa File: 4Ozn4Unrsy8Tgxp91WwiFZKytkU.roa (raw, json) Hash identifier: Rohs1aSjVXWL0rCfUlHjGhKgh4NddWQEmfzTXXTVjxE= Subject key identifier: E0:EC:E7:E1:49:EB:B3:2F:13:83:1A:7D:D5:6C:22:15:92:B2:B6:45 Certificate issuer: /CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8 Certificate serial: 019B78A3283E2405BE6DC5A911E7CC5FB6EB Authority key identifier: EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/4Ozn4Unrsy8Tgxp91WwiFZKytkU.roa Signing time: Thu 01 Jan 2026 08:18:37 +0000 ROA not before: Thu 01 Jan 2026 08:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42459 IP address blocks: 79.134.48.0/20 maxlen: 32 79.134.56.0/21 maxlen: 24 193.32.0.0/23 maxlen: 23 193.32.4.0/23 maxlen: 23 212.45.64.0/20 maxlen: 32 212.45.64.0/21 maxlen: 24 212.45.65.0/24 maxlen: 24 212.45.67.0/24 maxlen: 24 212.45.72.0/21 maxlen: 24 2a02:2660::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.crl rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:28:3e:24:05:be:6d:c5:a9:11:e7:cc:5f:b6:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8 Validity Not Before: Jan 1 08:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0ece7e149ebb32f13831a7dd56c221592b2b645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:44:65:b9:14:9c:ed:e3:7a:c4:19:25:b7:8b: 46:37:7e:43:fa:4a:01:31:b1:36:01:62:86:6c:e8: 8f:12:63:20:b6:4c:e4:b1:0e:54:77:d8:06:e0:d2: 8b:7f:ea:25:af:c3:10:01:8d:1b:82:67:a9:80:e5: e1:fb:46:06:6e:17:b3:02:0c:84:e7:2b:2d:01:df: 9a:2d:a9:7c:a5:fe:46:6d:8f:cb:be:fb:57:95:a1: 7a:22:c5:8b:f9:d0:51:e9:bf:08:04:12:01:ce:f6: d3:43:0c:ce:02:50:84:4a:70:28:4a:a3:5a:5d:ba: 0d:55:15:33:7d:9d:ff:ef:7f:d5:fd:22:4b:7a:8c: 46:82:78:c7:52:36:36:c9:39:b0:15:5a:af:d5:16: 80:bf:16:5b:a2:23:a9:04:9a:5b:89:13:83:20:51: 77:30:66:99:ac:27:19:07:f4:11:8f:64:26:34:d7: 16:fc:ae:0e:eb:4a:8f:22:9a:1d:c6:80:64:78:19: 14:1c:97:3e:6a:88:97:68:80:20:17:42:7e:2c:57: 73:04:6f:83:ce:ef:76:32:e8:41:96:bd:fb:b8:48: 92:3e:92:d7:03:ec:57:75:26:74:77:51:0f:17:7e: b3:3d:72:5f:58:7e:df:67:f8:d7:be:e8:b6:88:81: 22:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EC:E7:E1:49:EB:B3:2F:13:83:1A:7D:D5:6C:22:15:92:B2:B6:45 X509v3 Authority Key Identifier: keyid:EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/4Ozn4Unrsy8Tgxp91WwiFZKytkU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.134.48.0/20 193.32.0.0/23 193.32.4.0/23 212.45.64.0/20 IPv6: 2a02:2660::/32 Signature Algorithm: sha256WithRSAEncryption 90:be:7f:3d:d2:4f:af:48:45:4f:ef:12:6d:b2:3d:47:22:34: e3:9c:95:70:2c:99:c1:15:32:ce:8a:b8:00:b3:63:2c:27:c2: d2:f0:1e:ab:cc:c4:d6:d3:a3:91:78:9d:bd:6a:95:11:72:d1: e0:4b:2a:48:f0:ca:b5:3a:8e:76:ef:69:3b:16:6f:3a:6a:40: 8f:38:c1:77:11:f0:f1:b0:2b:ed:e8:c0:16:a2:c9:0b:85:a9: f5:2c:6a:2f:ab:80:cf:79:54:a3:8c:2b:6d:5c:06:ef:03:7d: 2d:70:33:0e:f9:15:e7:c9:29:04:6f:84:1b:5a:2f:48:d5:82: a9:9f:f4:81:9b:88:cc:c1:63:51:2c:c8:53:f3:85:ef:91:a2: 48:be:28:5f:7d:15:33:b0:6f:2f:97:83:6f:c9:80:c4:a2:73: c4:61:36:15:78:70:30:7f:0d:16:e6:a1:39:30:02:88:bb:f2: f5:c7:50:49:5d:a5:d8:bf:b2:be:39:a2:4c:9b:92:c9:a5:23: e1:fd:ef:01:c2:83:7b:a7:84:5c:71:c3:bd:ab:c3:31:f7:91: da:1c:f0:98:19:ca:33:e8:45:5a:5a:89:4c:88:18:f8:66:ed: 30:d9:04:a2:9e:04:a7:cf:0f:26:52:a2:ce:c2:7c:ec:48:1f: 94:b6:9b:b2 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt4oyg+JAW+bcWpEefMX7brMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYmMwZDYwYmQzYTkwYmQ1ZTMxNTA5ZGVhZGY0NDcwNzZi MDc4ZDgwHhcNMjYwMTAxMDgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGVjZTdlMTQ5ZWJiMzJmMTM4MzFhN2RkNTZjMjIxNTkyYjJiNjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxURluRSc7eN6xBklt4tGN35D+koB MbE2AWKGbOiPEmMgtkzksQ5Ud9gG4NKLf+olr8MQAY0bgmepgOXh+0YGbhezAgyE 5ystAd+aLal8pf5GbY/LvvtXlaF6IsWL+dBR6b8IBBIBzvbTQwzOAlCESnAoSqNa XboNVRUzfZ3/73/V/SJLeoxGgnjHUjY2yTmwFVqv1RaAvxZboiOpBJpbiRODIFF3 MGaZrCcZB/QRj2QmNNcW/K4O60qPIpodxoBkeBkUHJc+aoiXaIAgF0J+LFdzBG+D zu92MuhBlr37uEiSPpLXA+xXdSZ0d1EPF36zPXJfWH7fZ/jXvui2iIEiLQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFODs5+FJ67MvE4MafdVsIhWSsrZFMB8GA1UdIwQY MBaAFOu8DWC9OpC9XjFQnerfRHB2sHjYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjd3TllMMDZrTDFlTVZDZDZ0OUVjSGF3ZU5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wODBhZjYtOGRjNC00OGU2LTljNjMt YTZiOTU5OTFjZDJjLzEvNE96bjRVbnJzeThUZ3hwOTFXd2lGWkt5dGtVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8wODBhZjYtOGRjNC00OGU2LTljNjMtYTZiOTU5OTFjZDJj LzEvNjd3TllMMDZrTDFlTVZDZDZ0OUVjSGF3ZU5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQET4YwAwQB wSAAAwQBwSAEAwQE1C1AMA0EAgACMAcDBQAqAiZgMA0GCSqGSIb3DQEBCwUAA4IB AQCQvn890k+vSEVP7xJtsj1HIjTjnJVwLJnBFTLOirgAs2MsJ8LS8B6rzMTW06OR eJ29apURctHgSypI8Mq1Oo5272k7Fm86akCPOMF3EfDxsCvt6MAWoskLhan1LGov q4DPeVSjjCttXAbvA30tcDMO+RXnySkEb4QbWi9I1YKpn/SBm4jMwWNRLMhT84Xv kaJIvihffRUzsG8vl4NvyYDEonPEYTYVeHAwfw0W5qE5MAKIu/L1x1BJXaXYv7K+ OaJMm5LJpSPh/e8BwoN7p4RcccO9q8Mx95HaHPCYGcoz6EVaWolMiBj4Zu0w2QSi ngSnzw8mUqLOwnzsSB+Utpuy -----END CERTIFICATE-----Generated at Sun Jan 25 17:35:57 2026 by rpki-client