This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/D79BMk4Sy3Ip91qAwZ0vd8nJl74.roa File: D79BMk4Sy3Ip91qAwZ0vd8nJl74.roa (raw, json) Hash identifier: h7ovrPWRmdbJ21Y1DD2eFw9675DOds3HxoGhsEEYTPc= Subject key identifier: 0F:BF:41:32:4E:12:CB:72:29:F7:5A:80:C1:9D:2F:77:C9:C9:97:BE Certificate issuer: /CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e Certificate serial: 019B7E388480367EC920FA61F07752E0610F Authority key identifier: C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/D79BMk4Sy3Ip91qAwZ0vd8nJl74.roa Signing time: Fri 02 Jan 2026 10:19:51 +0000 ROA not before: Fri 02 Jan 2026 10:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 94.101.106.0/24 maxlen: 24 2a14:7cc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:84:80:36:7e:c9:20:fa:61:f0:77:52:e0:61:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e Validity Not Before: Jan 2 10:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0fbf41324e12cb7229f75a80c19d2f77c9c997be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:00:99:6a:72:37:e6:bb:57:ff:bc:7c:63:70: 76:2c:13:0d:6d:c7:90:73:c3:55:f7:26:5c:15:da: 36:5e:b8:c3:1d:74:e0:19:d0:24:27:c3:2c:65:b2: 3d:8f:d1:18:ba:b4:7a:bc:da:d9:b2:27:bd:0f:72: e5:71:ca:de:9f:a8:55:4f:64:25:7b:8e:2e:7c:0b: 5b:57:fa:78:a7:29:b3:24:42:21:9d:5e:07:3d:ca: 37:c9:ed:30:c0:7e:91:82:f4:fe:81:96:a8:66:10: ce:57:ae:94:8e:60:1d:d3:b2:1a:9a:f7:7b:47:25: 74:ff:45:79:90:0d:0b:3c:cc:a4:76:85:3a:64:7a: 32:f5:66:eb:d4:d2:da:8d:35:bd:28:e7:44:65:c7: 59:73:1d:d5:e7:4a:5c:e4:7f:31:64:4a:5b:c6:2c: 90:2f:87:86:01:3a:7b:35:c4:f2:31:ae:e0:4f:bc: f6:0f:92:ae:79:b6:d0:61:7c:48:bb:e7:fb:01:c1: 68:ad:42:f7:3e:da:10:aa:54:ee:9e:5e:76:3a:3e: 09:e7:77:0c:eb:f7:71:0f:27:42:f3:d6:19:16:8d: 77:2d:d6:d2:1e:38:98:a3:45:01:2b:55:36:dd:97: 3c:f4:ec:61:4b:d0:a9:9d:0b:ab:48:71:85:79:d4: ac:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BF:41:32:4E:12:CB:72:29:F7:5A:80:C1:9D:2F:77:C9:C9:97:BE X509v3 Authority Key Identifier: keyid:C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/D79BMk4Sy3Ip91qAwZ0vd8nJl74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.101.106.0/24 IPv6: 2a14:7cc0::/29 Signature Algorithm: sha256WithRSAEncryption 65:df:91:f1:63:da:21:5d:0e:f0:90:1c:57:d0:ee:ff:c9:d0: 10:2c:06:b9:23:f2:0f:34:28:00:47:70:6b:55:4a:12:3d:c3: 27:b3:e5:3c:f9:b3:84:a4:c2:15:b3:37:cd:71:99:99:d8:30: 96:52:af:69:ff:49:ee:74:91:d0:2b:36:4b:6e:3d:aa:31:78: 7d:0a:e4:86:72:38:25:72:88:2a:62:97:5f:a8:cc:de:dd:a4: fb:14:12:ae:95:74:1a:4d:ba:bd:ca:2c:f6:cb:32:23:d2:a0: 88:1b:36:c4:8c:68:de:fc:07:4d:9f:2f:6f:ee:d1:3f:7f:59: 22:5b:76:54:c6:36:37:a3:0c:d8:4d:89:bd:5b:bd:10:b0:47: 5b:86:80:57:94:72:8f:50:f2:84:e0:22:ab:1d:72:8c:c7:98: 0b:91:12:e3:d6:3d:7f:8a:bf:f3:cc:6d:e7:17:fe:5c:07:1e: f7:4d:e6:8d:c3:bd:35:77:ba:28:51:eb:fe:89:e7:5a:19:38: ef:92:38:52:62:3d:ed:8c:fe:6c:1f:70:21:4b:c6:7e:3a:5e: 75:23:12:5d:ff:77:2a:ab:4e:ca:75:3b:2b:9f:7f:2f:ca:a3: 5c:22:11:20:8f:28:3c:34:83:47:4b:be:a3:78:81:55:8e:ac: 42:59:60:f7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+OISANn7JIPph8HdS4GEPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMTgxYTkyM2U5YWMzYzAwNWViNGM3M2VkYzdhMWU4MzI1 YTViMWUwHhcNMjYwMTAyMTAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmJmNDEzMjRlMTJjYjcyMjlmNzVhODBjMTlkMmY3N2M5Yzk5N2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQCZanI35rtX/7x8Y3B2LBMNbceQ c8NV9yZcFdo2XrjDHXTgGdAkJ8MsZbI9j9EYurR6vNrZsie9D3Llccren6hVT2Ql e44ufAtbV/p4pymzJEIhnV4HPco3ye0wwH6RgvT+gZaoZhDOV66UjmAd07Iamvd7 RyV0/0V5kA0LPMykdoU6ZHoy9Wbr1NLajTW9KOdEZcdZcx3V50pc5H8xZEpbxiyQ L4eGATp7NcTyMa7gT7z2D5KuebbQYXxIu+f7AcForUL3PtoQqlTunl52Oj4J53cM 6/dxDydC89YZFo13LdbSHjiYo0UBK1U23Zc89OxhS9CpnQurSHGFedSsiwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFA+/QTJOEstyKfdagMGdL3fJyZe+MB8GA1UdIwQY MBaAFMMYGpI+msPABetMc+3HoegyWlseMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3hnYWtqNmF3OEFGNjB4ejdjZWg2REphV3g0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS85YmNhZGEtZDk1NS00ZjJhLTkyNTQt ZjllYzU2NjY4NmI5LzEvRDc5Qk1rNFN5M0lwOTFxQXdaMHZkOG5KbDc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS85YmNhZGEtZDk1NS00ZjJhLTkyNTQtZjllYzU2NjY4NmI5 LzEvd3hnYWtqNmF3OEFGNjB4ejdjZWg2REphV3g0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAXmVqMA0E AgACMAcDBQMqFHzAMA0GCSqGSIb3DQEBCwUAA4IBAQBl35HxY9ohXQ7wkBxX0O7/ ydAQLAa5I/IPNCgAR3BrVUoSPcMns+U8+bOEpMIVszfNcZmZ2DCWUq9p/0nudJHQ KzZLbj2qMXh9CuSGcjglcogqYpdfqMze3aT7FBKulXQaTbq9yiz2yzIj0qCIGzbE jGje/AdNny9v7tE/f1kiW3ZUxjY3owzYTYm9W70QsEdbhoBXlHKPUPKE4CKrHXKM x5gLkRLj1j1/ir/zzG3nF/5cBx73TeaNw701d7ooUev+iedaGTjvkjhSYj3tjP5s H3AhS8Z+Ol51IxJd/3cqq07KdTsrn38vyqNcIhEgjyg8NINHS76jeIFVjqxCWWD3 -----END CERTIFICATE-----Generated at Mon Jan 12 00:51:32 2026 by rpki-client