This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/B9bDnFJ0Z_m4nm9NyQ0zVMEbmmA.roa File: B9bDnFJ0Z_m4nm9NyQ0zVMEbmmA.roa (raw, json) Hash identifier: SEltG6CcX4YsTGQ9C3CIwloWPPOisv1HL/KHIEv3qMY= Subject key identifier: 07:D6:C3:9C:52:74:67:F9:B8:9E:6F:4D:C9:0D:33:54:C1:1B:9A:60 Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 019B7D5CFBF78B90E1734F0C9D6AABC92B8B Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/B9bDnFJ0Z_m4nm9NyQ0zVMEbmmA.roa Signing time: Fri 02 Jan 2026 06:20:04 +0000 ROA not before: Fri 02 Jan 2026 06:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34837 IP address blocks: 79.127.65.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:51:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fb:f7:8b:90:e1:73:4f:0c:9d:6a:ab:c9:2b:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Jan 2 06:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07d6c39c527467f9b89e6f4dc90d3354c11b9a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a7:1f:54:ee:88:fc:12:6b:38:01:15:7f:67: c5:96:16:cd:c9:2f:2e:57:f1:ec:a9:86:60:1e:12: 2f:cf:af:45:4c:7f:68:ed:2b:65:af:8c:f2:f0:84: 69:f2:42:59:79:ec:10:8d:e8:d2:29:bf:fe:81:6f: a0:3f:ae:6f:1f:1f:f9:e9:45:76:68:7d:88:64:83: 4b:95:e2:14:77:8b:97:2b:c4:c7:28:27:0f:ac:bc: 76:28:96:fc:94:59:66:df:ab:2f:c2:d9:cc:fc:4a: 23:58:cb:dc:ee:59:a2:01:ab:cf:69:ae:51:eb:26: 9a:55:f6:f6:c3:d8:ef:63:d7:ac:fd:99:d4:f8:02: 4a:bc:eb:1e:05:b8:85:73:d1:bc:ab:7f:e0:ff:3a: 65:a1:fb:ca:31:c2:0c:5e:aa:06:ee:76:56:26:2e: 60:1a:0f:60:08:2c:77:a2:cf:02:c6:fa:5f:4c:67: 5e:2b:48:b3:1e:42:d8:d5:6c:ce:d2:f7:72:c5:22: c5:2b:a4:be:5e:29:e9:be:a3:ff:bf:45:bb:85:ee: 5b:d2:50:11:86:71:0f:ff:89:78:df:a6:a8:76:65: 29:72:fd:19:04:d1:db:8c:af:6d:43:5b:93:6c:2e: ea:b7:34:cb:28:9d:85:52:d2:72:ea:94:48:e8:db: 1a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D6:C3:9C:52:74:67:F9:B8:9E:6F:4D:C9:0D:33:54:C1:1B:9A:60 X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/B9bDnFJ0Z_m4nm9NyQ0zVMEbmmA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.127.65.0/24 Signature Algorithm: sha256WithRSAEncryption c2:fb:41:f4:e3:6e:7a:29:18:0a:3d:cc:0f:57:20:b3:33:f3: 36:92:ab:07:0a:73:dc:36:c4:66:d7:b1:c9:9a:1a:1c:26:6e: 3c:c4:71:f3:b0:1f:b7:30:01:5a:71:b9:cc:0c:b9:69:ce:92: d1:49:14:38:cd:48:b3:2c:7a:e1:2c:fe:65:0c:42:91:6d:20: cd:88:7a:51:5a:c5:7f:3d:45:41:f9:6b:49:2a:23:09:f5:67: 78:cb:0e:75:01:bf:a3:2a:7e:30:65:3c:57:31:d4:b8:74:95: a8:be:73:83:da:6d:a4:08:ad:64:ef:e9:79:a0:ab:57:2c:ae: 7d:da:85:39:61:cc:d9:77:f8:54:ce:84:84:85:c3:ba:2d:36: 3d:f8:42:bb:85:07:da:4f:e8:41:ae:67:51:99:cf:61:81:6b: 25:33:81:11:c3:5c:81:b0:b5:d9:29:72:4a:31:3d:7b:be:28: b0:fa:f8:9e:07:74:22:9f:23:4e:b2:bd:1e:6f:36:e2:9a:7f: 90:3e:a1:de:49:63:db:9d:4f:c9:3e:90:7a:a5:2d:32:44:ee: 60:5d:88:68:6d:9f:2b:f3:1a:37:e2:1f:44:42:c5:64:69:aa: fd:f7:99:ab:3a:25:1b:fa:2c:35:59:88:26:f9:5b:c0:42:e6: 23:71:59:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XPv3i5Dhc08MnWqrySuLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjYwMTAyMDYyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2Q2YzM5YzUyNzQ2N2Y5Yjg5ZTZmNGRjOTBkMzM1NGMxMWI5YTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6cfVO6I/BJrOAEVf2fFlhbNyS8u V/HsqYZgHhIvz69FTH9o7Stlr4zy8IRp8kJZeewQjejSKb/+gW+gP65vHx/56UV2 aH2IZINLleIUd4uXK8THKCcPrLx2KJb8lFlm36svwtnM/EojWMvc7lmiAavPaa5R 6yaaVfb2w9jvY9es/ZnU+AJKvOseBbiFc9G8q3/g/zplofvKMcIMXqoG7nZWJi5g Gg9gCCx3os8CxvpfTGdeK0izHkLY1WzO0vdyxSLFK6S+XinpvqP/v0W7he5b0lAR hnEP/4l436aodmUpcv0ZBNHbjK9tQ1uTbC7qtzTLKJ2FUtJy6pRI6NsaHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAfWw5xSdGf5uJ5vTckNM1TBG5pgMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvQjliRG5GSjBaX200bm05TnlRMHpWTUVibW1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT39BMA0G CSqGSIb3DQEBCwUAA4IBAQDC+0H04256KRgKPcwPVyCzM/M2kqsHCnPcNsRm17HJ mhocJm48xHHzsB+3MAFacbnMDLlpzpLRSRQ4zUizLHrhLP5lDEKRbSDNiHpRWsV/ PUVB+WtJKiMJ9Wd4yw51Ab+jKn4wZTxXMdS4dJWovnOD2m2kCK1k7+l5oKtXLK59 2oU5YczZd/hUzoSEhcO6LTY9+EK7hQfaT+hBrmdRmc9hgWslM4ERw1yBsLXZKXJK MT17viiw+vieB3QinyNOsr0ebzbimn+QPqHeSWPbnU/JPpB6pS0yRO5gXYhobZ8r 8xo34h9EQsVkaar995mrOiUb+iw1WYgm+VvAQuYjcVkl -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:58 2026 by rpki-client