This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/rdfW53cfGFv_YgxwDty6e7ihnuY.roa File: rdfW53cfGFv_YgxwDty6e7ihnuY.roa (raw, json) Hash identifier: h3oTAKzXhami9yqYo4w2QzINnY33lJyuys0rpltxvDI= Subject key identifier: AD:D7:D6:E7:77:1F:18:5B:FF:62:0C:70:0E:DC:BA:7B:B8:A1:9E:E6 Certificate issuer: /CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8 Certificate serial: 019B78A327DD107E9DAAF3D5EFD4121972C3 Authority key identifier: EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/rdfW53cfGFv_YgxwDty6e7ihnuY.roa Signing time: Thu 01 Jan 2026 08:18:37 +0000 ROA not before: Thu 01 Jan 2026 08:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25076 IP address blocks: 79.134.48.0/21 maxlen: 24 79.134.58.0/23 maxlen: 24 212.45.72.0/23 maxlen: 23 212.45.74.0/24 maxlen: 24 212.45.75.0/24 maxlen: 24 212.45.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.crl rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:27:dd:10:7e:9d:aa:f3:d5:ef:d4:12:19:72:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8 Validity Not Before: Jan 1 08:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=add7d6e7771f185bff620c700edcba7bb8a19ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:49:c0:28:95:49:d7:ea:c0:03:73:e6:fc:55: 12:12:4a:93:c9:c8:fd:f3:94:16:5d:91:c1:bf:d3: 64:b8:80:11:97:7b:07:b8:90:c9:06:03:36:d2:e8: ac:c5:1f:d5:51:2a:8b:07:c9:36:7c:95:7c:90:f4: 0a:0f:9e:2a:75:b3:1d:7d:69:ce:ae:b8:52:33:0f: 0a:49:5a:7c:41:cc:71:e2:d3:ca:2c:00:5b:af:4b: cc:23:80:f2:90:4a:e3:b4:8a:c0:82:6f:82:92:f4: fd:14:d1:c2:cf:26:46:ba:e8:16:f7:10:b5:14:1d: e8:55:bf:72:b6:70:17:fd:0b:f8:89:2c:26:19:4d: 85:4a:28:a8:72:e3:b2:f1:a3:1c:c2:7e:ee:b2:4e: db:3f:b2:9b:1c:3e:61:51:a1:e0:af:00:00:79:38: 5f:3e:60:75:9a:53:bb:a9:ca:96:94:61:d6:4b:1d: 72:33:54:a4:c0:50:55:3c:19:ea:2b:89:c7:12:f1: 65:90:1a:85:d4:57:00:84:f8:b0:a9:1c:19:e4:de: 85:fd:85:57:93:54:2b:b0:00:34:77:21:ae:43:19: 0a:b9:35:61:c9:cf:d4:06:ef:44:e9:03:d1:ee:47: 79:f7:76:de:d3:5d:d9:ae:a7:0c:e9:75:8e:23:a7: 55:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D7:D6:E7:77:1F:18:5B:FF:62:0C:70:0E:DC:BA:7B:B8:A1:9E:E6 X509v3 Authority Key Identifier: keyid:EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/rdfW53cfGFv_YgxwDty6e7ihnuY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.134.48.0/21 79.134.58.0/23 212.45.72.0/21 Signature Algorithm: sha256WithRSAEncryption 8b:ba:5f:61:bd:0a:6d:61:c2:40:ef:ed:5e:01:11:bc:2c:7e: 43:72:73:8c:d6:0c:5e:a8:2f:b4:82:4e:41:cc:af:88:90:df: 3f:9e:32:10:20:1e:60:f6:52:76:78:1b:81:8d:78:e9:81:e3: 39:e1:6d:ef:54:10:63:50:76:b3:5e:9d:16:a6:13:08:bd:fe: 3c:5a:43:fd:0a:aa:bb:a8:59:92:0b:71:76:d7:c5:5e:ae:09: 2f:72:df:c5:b6:d7:ad:a4:1d:54:8d:74:6e:82:fc:02:5a:a8: 47:8c:4e:d3:49:ce:26:2d:32:ad:1b:ad:8f:e0:2d:82:c4:85: 8b:1e:35:5e:d6:2a:48:cc:34:3a:44:d2:fc:fe:00:cb:cf:df: f3:9e:d1:8c:b6:9f:ad:04:28:81:27:18:fb:d4:fe:e6:b4:7e: 28:83:7c:db:21:f1:c4:23:ab:ab:7b:ce:93:f7:7c:0e:6a:bc: ab:b9:81:0f:9c:66:bb:0f:5d:97:97:67:a9:3a:31:8a:13:27: 64:9f:98:e2:ed:c6:d8:9b:62:cc:d0:96:a6:9c:4d:ec:5a:ee: 6c:95:44:58:51:12:22:16:66:9b:c3:34:5d:c6:48:36:e8:ec: 43:53:57:23:cd:6c:42:12:95:7d:a9:db:68:c9:48:f6:67:0e: 14:b5:86:35 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4oyfdEH6dqvPV79QSGXLDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYmMwZDYwYmQzYTkwYmQ1ZTMxNTA5ZGVhZGY0NDcwNzZi MDc4ZDgwHhcNMjYwMTAxMDgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGQ3ZDZlNzc3MWYxODViZmY2MjBjNzAwZWRjYmE3YmI4YTE5ZWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEnAKJVJ1+rAA3Pm/FUSEkqTycj9 85QWXZHBv9NkuIARl3sHuJDJBgM20uisxR/VUSqLB8k2fJV8kPQKD54qdbMdfWnO rrhSMw8KSVp8Qcxx4tPKLABbr0vMI4DykErjtIrAgm+CkvT9FNHCzyZGuugW9xC1 FB3oVb9ytnAX/Qv4iSwmGU2FSiiocuOy8aMcwn7usk7bP7KbHD5hUaHgrwAAeThf PmB1mlO7qcqWlGHWSx1yM1SkwFBVPBnqK4nHEvFlkBqF1FcAhPiwqRwZ5N6F/YVX k1QrsAA0dyGuQxkKuTVhyc/UBu9E6QPR7kd593be013ZrqcM6XWOI6dV9QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFK3X1ud3Hxhb/2IMcA7cunu4oZ7mMB8GA1UdIwQY MBaAFOu8DWC9OpC9XjFQnerfRHB2sHjYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjd3TllMMDZrTDFlTVZDZDZ0OUVjSGF3ZU5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wODBhZjYtOGRjNC00OGU2LTljNjMt YTZiOTU5OTFjZDJjLzEvcmRmVzUzY2ZHRnZfWWd4d0R0eTZlN2lobnVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC8wODBhZjYtOGRjNC00OGU2LTljNjMtYTZiOTU5OTFjZDJj LzEvNjd3TllMMDZrTDFlTVZDZDZ0OUVjSGF3ZU5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDT4YwAwQB T4Y6AwQD1C1IMA0GCSqGSIb3DQEBCwUAA4IBAQCLul9hvQptYcJA7+1eARG8LH5D cnOM1gxeqC+0gk5BzK+IkN8/njIQIB5g9lJ2eBuBjXjpgeM54W3vVBBjUHazXp0W phMIvf48WkP9Cqq7qFmSC3F218Vergkvct/FttetpB1UjXRugvwCWqhHjE7TSc4m LTKtG62P4C2CxIWLHjVe1ipIzDQ6RNL8/gDLz9/zntGMtp+tBCiBJxj71P7mtH4o g3zbIfHEI6ure86T93wOaryruYEPnGa7D12Xl2epOjGKEydkn5ji7cbYm2LM0Jam nE3sWu5slURYURIiFmabwzRdxkg26OxDU1cjzWxCEpV9qdtoyUj2Zw4UtYY1 -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:09 2026 by rpki-client