This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/wV5BPDxGRgucm4wZuBCjR8lApU0.roa File: wV5BPDxGRgucm4wZuBCjR8lApU0.roa (raw, json) Hash identifier: KOPAQ/JfubXTVOE2sqPV4mZaZScn0JaVg3o+dB2YRo0= Subject key identifier: C1:5E:41:3C:3C:46:46:0B:9C:9B:8C:19:B8:10:A3:47:C9:40:A5:4D Certificate issuer: /CN=b307c87e7b6e294f2700790eef19e82939d85cd6 Certificate serial: 019B7B366B6B76A589E3FDCF8ABF0D52B0A1 Authority key identifier: B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/wV5BPDxGRgucm4wZuBCjR8lApU0.roa Signing time: Thu 01 Jan 2026 20:18:42 +0000 ROA not before: Thu 01 Jan 2026 20:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211181 IP address blocks: 79.132.194.0/24 maxlen: 24 2a10:fa41::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.mft rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:6b:6b:76:a5:89:e3:fd:cf:8a:bf:0d:52:b0:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b307c87e7b6e294f2700790eef19e82939d85cd6 Validity Not Before: Jan 1 20:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c15e413c3c46460b9c9b8c19b810a347c940a54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f8:d6:f3:71:d0:54:25:44:13:e1:2b:af:cd: 86:cb:07:fc:6e:2d:78:7d:72:e6:2c:c7:b5:75:a7: a2:56:97:5c:1c:5a:3f:c8:b8:a1:c1:23:a3:97:d4: cc:3e:94:79:11:41:84:84:0f:fe:4b:69:bc:86:34: 8f:81:c1:67:e8:96:34:7a:72:4a:14:0c:30:01:6a: 1d:21:9d:7c:9b:a3:e4:29:95:14:54:28:5f:00:40: 37:b7:f8:ba:6a:17:15:59:35:22:8e:e8:cf:27:a0: ed:81:6b:64:03:3b:da:e7:24:45:ae:a0:11:36:6e: 92:94:88:10:19:7f:44:fa:4e:a1:8d:31:6b:74:30: 5a:5a:c6:d3:30:e4:63:e3:42:c3:fc:52:40:34:67: 89:bc:36:aa:70:6c:6f:24:07:98:eb:16:b3:17:27: 49:b7:14:a2:2a:1e:cc:d3:33:e3:48:a9:e6:4b:6b: 06:42:87:58:cb:a6:61:3e:db:22:99:25:0c:8c:01: d6:b3:b1:39:d4:d2:8d:c4:c5:b6:91:5f:fb:51:55: 9a:ec:86:2f:96:a1:b9:87:4b:a4:f3:f8:8e:a0:14: bf:de:74:66:89:5c:7a:53:05:45:76:83:4c:99:48: 1e:fb:9b:6e:c3:88:d2:6d:bf:f1:90:bb:01:39:56: dd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5E:41:3C:3C:46:46:0B:9C:9B:8C:19:B8:10:A3:47:C9:40:A5:4D X509v3 Authority Key Identifier: keyid:B3:07:C8:7E:7B:6E:29:4F:27:00:79:0E:EF:19:E8:29:39:D8:5C:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/swfIfntuKU8nAHkO7xnoKTnYXNY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/wV5BPDxGRgucm4wZuBCjR8lApU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/da642a-a6ab-4705-9587-64945a4f8e12/1/swfIfntuKU8nAHkO7xnoKTnYXNY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.132.194.0/24 IPv6: 2a10:fa41::/32 Signature Algorithm: sha256WithRSAEncryption 28:a8:27:d0:50:3b:86:84:ef:fb:9c:86:63:e1:00:07:d0:3d: aa:02:66:4e:fb:c5:0c:39:05:ff:4f:ad:6f:15:a3:78:96:b2: d0:6b:06:32:ea:19:cb:34:ce:a7:2b:10:e9:2d:5d:7d:72:ff: fe:4a:6b:75:53:b7:85:ba:c8:72:e0:a9:d4:d7:a4:fa:5f:14: 93:d9:84:9a:1b:58:9b:11:62:78:fd:88:1d:2f:b8:91:fe:4a: 09:27:cf:50:89:2b:74:4d:ae:e7:c9:32:fa:f5:a3:26:38:c8: 43:4a:52:b3:a9:9d:cf:bf:d5:38:16:04:45:9d:28:c6:2d:11: 0e:f8:b9:1e:48:9a:51:15:79:8c:7c:6c:46:fc:19:36:a2:67: 33:82:e4:3b:d9:5d:90:e4:39:c0:cc:a7:37:64:4a:9d:a3:71: ea:6a:50:dc:a6:b3:f2:f9:08:36:ba:f7:2f:93:95:7f:3b:f4: 57:b2:d6:ee:75:e8:40:f9:57:ac:a1:89:4a:9b:33:31:2e:3d: c5:e4:8d:45:4e:37:8d:d7:fe:53:fc:01:c5:f0:59:bf:e0:4a: 7e:cc:cc:a8:f9:46:5e:2a:c6:55:5a:6b:0e:3a:4f:7b:64:d0: 1a:04:86:6e:e8:64:f2:f8:e0:7e:c0:05:18:e8:ba:15:d3:c4: 64:b4:16:bf -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NmtrdqWJ4/3Pir8NUrChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzMDdjODdlN2I2ZTI5NGYyNzAwNzkwZWVmMTllODI5Mzlk ODVjZDYwHhcNMjYwMTAxMjAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTVlNDEzYzNjNDY0NjBiOWM5YjhjMTliODEwYTM0N2M5NDBhNTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/jW83HQVCVEE+Err82Gywf8bi14 fXLmLMe1daeiVpdcHFo/yLihwSOjl9TMPpR5EUGEhA/+S2m8hjSPgcFn6JY0enJK FAwwAWodIZ18m6PkKZUUVChfAEA3t/i6ahcVWTUijujPJ6DtgWtkAzva5yRFrqAR Nm6SlIgQGX9E+k6hjTFrdDBaWsbTMORj40LD/FJANGeJvDaqcGxvJAeY6xazFydJ txSiKh7M0zPjSKnmS2sGQodYy6ZhPtsimSUMjAHWs7E51NKNxMW2kV/7UVWa7IYv lqG5h0uk8/iOoBS/3nRmiVx6UwVFdoNMmUge+5tuw4jSbb/xkLsBOVbdpQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMFeQTw8RkYLnJuMGbgQo0fJQKVNMB8GA1UdIwQY MBaAFLMHyH57bilPJwB5Du8Z6Ck52FzWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kYTY0MmEtYTZhYi00NzA1LTk1ODct NjQ5NDVhNGY4ZTEyLzEvd1Y1QlBEeEdSZ3VjbTR3WnVCQ2pSOGxBcFUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9kYTY0MmEtYTZhYi00NzA1LTk1ODctNjQ5NDVhNGY4ZTEy LzEvc3dmSWZudHVLVThuQUhrTzd4bm9LVG5ZWE5ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAT4TCMA0E AgACMAcDBQAqEPpBMA0GCSqGSIb3DQEBCwUAA4IBAQAoqCfQUDuGhO/7nIZj4QAH 0D2qAmZO+8UMOQX/T61vFaN4lrLQawYy6hnLNM6nKxDpLV19cv/+Smt1U7eFushy 4KnU16T6XxST2YSaG1ibEWJ4/YgdL7iR/koJJ89QiSt0Ta7nyTL69aMmOMhDSlKz qZ3Pv9U4FgRFnSjGLREO+LkeSJpRFXmMfGxG/Bk2omczguQ72V2Q5DnAzKc3ZEqd o3HqalDcprPy+Qg2uvcvk5V/O/RXstbudehA+VesoYlKmzMxLj3F5I1FTjeN1/5T /AHF8Fm/4Ep+zMyo+UZeKsZVWmsOOk97ZNAaBIZu6GTy+OB+wAUY6LoV08RktBa/ -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:14 2026 by rpki-client