This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/23_Q0k97ohSYhvnWxu35Zy80Mfc.roa File: 23_Q0k97ohSYhvnWxu35Zy80Mfc.roa (raw, json) Hash identifier: LkGJHPtQ2i8ewj4JbRnm7Yf3bQxK6ETgS9Jt6JtRoAY= Subject key identifier: DB:7F:D0:D2:4F:7B:A2:14:98:86:F9:D6:C6:ED:F9:67:2F:34:31:F7 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B2A8E30B885DB0276A86D969F4CAD Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/23_Q0k97ohSYhvnWxu35Zy80Mfc.roa Signing time: Fri 02 Jan 2026 06:18:05 +0000 ROA not before: Fri 02 Jan 2026 06:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214170 IP address blocks: 79.124.29.0/24 maxlen: 24 2a01:8740:18::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:2a:8e:30:b8:85:db:02:76:a8:6d:96:9f:4c:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db7fd0d24f7ba2149886f9d6c6edf9672f3431f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ab:82:c4:20:99:35:ef:1e:e5:47:81:8a:6c: 15:1b:e2:84:c0:b6:eb:9f:c1:f4:59:76:89:27:54: ad:61:28:1c:ff:a5:76:e2:cc:5b:ad:f9:af:ea:f4: ee:11:e8:c7:85:81:7a:8f:01:0e:15:f8:58:c9:d5: b8:2f:2f:f3:6e:09:ec:e6:0f:09:ad:17:ed:04:0a: 77:98:42:dd:a2:63:12:4b:ad:65:ad:03:21:65:21: e0:a2:df:07:84:58:26:18:67:b3:d3:68:9d:d6:4f: 7e:6f:9b:28:cb:d1:17:24:c4:47:2b:02:66:2e:ad: 54:e8:c8:b8:f6:50:99:a7:d8:3c:b7:03:dd:45:64: 58:55:23:ac:7b:29:26:bd:e2:36:53:7b:91:25:3f: 96:34:e5:e7:99:6e:0a:22:6a:76:a8:93:e4:ef:57: 2e:3b:13:8d:29:12:b9:2e:0c:15:79:70:41:a1:38: 3b:a4:d6:cc:b6:d5:31:a1:56:1e:7c:9e:d9:bf:df: 8d:c4:30:10:b7:3b:0b:2f:8d:94:53:e0:62:d1:92: e8:12:76:18:c6:fd:63:90:a7:f6:4c:96:5b:71:30: 20:0a:89:41:ca:99:6d:0b:7b:3f:5a:0f:ec:be:0a: 4b:23:ba:e7:ff:d4:0c:f7:d9:ff:b4:af:e7:2d:1a: 3e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7F:D0:D2:4F:7B:A2:14:98:86:F9:D6:C6:ED:F9:67:2F:34:31:F7 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/23_Q0k97ohSYhvnWxu35Zy80Mfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.124.29.0/24 IPv6: 2a01:8740:18::/48 Signature Algorithm: sha256WithRSAEncryption 80:03:39:d1:d7:2b:9a:bb:48:c1:08:bf:7e:5f:4e:67:8d:ab: 83:c2:a2:fc:1e:84:f8:fd:f8:b4:d7:c1:22:49:4e:3c:bb:d7: 71:4c:91:5f:9a:b8:91:3c:90:6a:6c:97:e7:de:7c:fd:4e:75: dc:a8:30:7e:16:37:40:54:d2:ca:85:c8:ee:08:29:ef:bb:91: 21:ec:e5:49:7f:e5:a4:07:2e:ab:57:3e:13:18:bf:e8:1e:f7: 14:20:52:50:db:c8:dd:0f:fe:ff:a4:9e:1d:72:91:05:d6:6d: 75:98:82:55:1e:d7:cd:ea:61:3a:df:c5:98:cc:ab:39:1e:14: 3f:47:be:ae:f7:fe:9a:dc:8f:4d:2a:37:e5:4c:08:69:8c:63: 90:8b:5c:a4:58:bc:42:7f:d9:b0:88:39:93:a9:63:e6:35:42: 5f:6d:3c:f5:54:c1:52:56:63:16:37:e8:6a:d7:5a:b7:6c:b3: 4b:e6:63:dd:a3:35:e1:bc:44:fa:a2:71:77:f7:7d:95:f6:d4: d9:47:37:4d:2d:01:39:91:97:c3:76:d3:7c:ee:7b:76:6c:33: da:8c:0e:cf:82:70:d4:f9:d3:a9:83:72:d6:32:15:f5:b5:7c: c8:b9:91:98:2f:5d:ea:94:bd:a3:47:a2:c9:6b:86:4d:fb:08: 4f:d7:d6:24 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9WyqOMLiF2wJ2qG2Wn0ytMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjdmZDBkMjRmN2JhMjE0OTg4NmY5ZDZjNmVkZjk2NzJmMzQzMWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyauCxCCZNe8e5UeBimwVG+KEwLbr n8H0WXaJJ1StYSgc/6V24sxbrfmv6vTuEejHhYF6jwEOFfhYydW4Ly/zbgns5g8J rRftBAp3mELdomMSS61lrQMhZSHgot8HhFgmGGez02id1k9+b5soy9EXJMRHKwJm Lq1U6Mi49lCZp9g8twPdRWRYVSOseykmveI2U3uRJT+WNOXnmW4KImp2qJPk71cu OxONKRK5LgwVeXBBoTg7pNbMttUxoVYefJ7Zv9+NxDAQtzsLL42UU+Bi0ZLoEnYY xv1jkKf2TJZbcTAgColBypltC3s/Wg/svgpLI7rn/9QM99n/tK/nLRo+HQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFNt/0NJPe6IUmIb51sbt+WcvNDH3MB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvMjNfUTBrOTdvaFNZaHZuV3h1MzVaeTgwTWZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAT3wdMA8E AgACMAkDBwAqAYdAABgwDQYJKoZIhvcNAQELBQADggEBAIADOdHXK5q7SMEIv35f TmeNq4PCovwehPj9+LTXwSJJTjy713FMkV+auJE8kGpsl+fefP1OddyoMH4WN0BU 0sqFyO4IKe+7kSHs5Ul/5aQHLqtXPhMYv+ge9xQgUlDbyN0P/v+knh1ykQXWbXWY glUe183qYTrfxZjMqzkeFD9Hvq73/prcj00qN+VMCGmMY5CLXKRYvEJ/2bCIOZOp Y+Y1Ql9tPPVUwVJWYxY36GrXWrdss0vmY92jNeG8RPqicXf3fZX21NlHN00tATmR l8N203zue3ZsM9qMDs+CcNT506mDctYyFfW1fMi5kZgvXeqUvaNHoslrhk37CE/X 1iQ= -----END CERTIFICATE-----Generated at Fri Jan 23 18:51:30 2026 by rpki-client