This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/1-E2eDnplntvlwe4dqvPIQjAUIhc.roa File: 1-E2eDnplntvlwe4dqvPIQjAUIhc.roa (raw, json) Hash identifier: 9/Z1jYPf+fJJ28ARuzFgbWJGXm1CGkGx0/9J9dd55no= Subject key identifier: F8:4D:9E:0E:7A:65:9E:DB:E5:C1:EE:1D:AA:F3:C8:42:30:14:22:17 Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Certificate serial: 019B7D5D2811F0AA5B9DB154454BAD173772 Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/1-E2eDnplntvlwe4dqvPIQjAUIhc.roa Signing time: Fri 02 Jan 2026 06:20:15 +0000 ROA not before: Fri 02 Jan 2026 06:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54103 IP address blocks: 79.143.137.0/24 maxlen: 24 79.143.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.mft rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:28:11:f0:aa:5b:9d:b1:54:45:4b:ad:17:37:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e Validity Not Before: Jan 2 06:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f84d9e0e7a659edbe5c1ee1daaf3c84230142217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:60:ab:d1:3f:87:22:9b:74:ac:93:b3:d9:3d: 68:54:7b:ab:2f:e8:ad:35:ab:3d:47:c0:e0:28:6e: ab:f8:2b:ac:89:21:ed:fa:43:1f:0a:e6:6a:1d:df: 21:35:81:6f:a0:3b:29:c9:78:37:90:ca:3f:fe:fc: cd:c5:e3:61:5e:9e:08:e7:ff:e8:a0:69:8f:d7:99: 27:5c:cc:c7:ef:48:a2:4e:a5:cd:e7:7d:55:38:4b: a0:3a:30:8d:9c:64:04:8d:20:fb:96:cb:15:7b:62: ae:06:59:e9:89:68:ff:60:6e:9f:e0:a5:9e:9b:81: a0:4c:c1:24:5f:b6:e3:02:85:d5:a3:c4:b8:69:37: 8e:6f:5c:a5:c2:84:0a:85:c0:d9:6b:08:e9:82:dc: ee:f7:6d:b0:b2:ef:39:8e:96:fd:bf:1a:ee:59:4a: da:65:37:19:af:d8:21:22:00:0a:e0:b3:ad:dd:55: 1b:c5:0d:c3:fd:7f:8f:31:7e:f2:f5:5c:0f:e9:6a: 2a:67:d0:74:1c:94:de:a0:cf:6a:a4:70:56:a3:1a: bb:11:30:9a:a1:99:ae:c7:00:83:e0:fb:2e:09:26: e1:4f:b8:09:48:b0:51:91:65:a7:51:5f:dc:df:2e: 7f:8f:2b:b2:7f:6a:3c:83:31:8e:b6:e6:ac:8f:ac: 26:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:4D:9E:0E:7A:65:9E:DB:E5:C1:EE:1D:AA:F3:C8:42:30:14:22:17 X509v3 Authority Key Identifier: keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/1-E2eDnplntvlwe4dqvPIQjAUIhc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.143.137.0/24 79.143.139.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:69:67:ce:fa:df:7c:53:fe:7c:75:10:9c:46:e7:0a:37:70: f0:47:1b:95:83:4e:c2:c0:3d:0e:e5:8c:fb:a8:db:e2:99:ae: db:bc:38:26:ca:72:eb:c7:bb:23:47:16:9e:7d:26:35:c3:a2: 53:7f:de:eb:17:22:9d:dc:31:3b:a3:0b:de:11:6b:b8:b7:b2: 2a:97:ff:74:69:be:7c:8d:f5:b2:39:08:df:10:c6:18:ec:2e: 42:ca:75:47:f1:9d:f0:e4:a4:a3:a1:5a:80:63:01:56:a8:33: 81:5a:1d:1f:28:83:e8:c6:78:f8:71:5e:93:04:ec:8b:73:b6: 10:ad:f0:a5:82:d2:8c:fa:5d:e4:e6:ae:b5:91:2c:53:71:e4: 9d:1f:c5:f3:9b:49:d7:e6:04:c1:6c:ce:61:3d:78:c9:d6:12: eb:73:11:a7:33:00:73:1a:09:2d:8e:69:13:71:9f:8b:e8:d4: 6b:93:c3:09:65:08:7e:0f:48:e2:f8:b1:28:22:71:b0:30:13: b0:a5:b9:d3:f8:f0:0e:89:b0:11:c3:5b:66:12:26:cc:82:27: cd:ec:03:1b:b7:0f:5e:13:8d:2d:85:0d:d9:ad:c4:1f:2e:23: c8:e1:66:36:54:e2:46:2d:d5:43:80:97:a5:02:ec:a9:76:d7: 3e:30:03:5e -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt9XSgR8KpbnbFURUutFzdyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhYWE3YjRjMDFlOTI5YzM4OTIzOTgxYWI1MWM5NzI3YTFm OWYwN2UwHhcNMjYwMTAyMDYyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODRkOWUwZTdhNjU5ZWRiZTVjMWVlMWRhYWYzYzg0MjMwMTQyMjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32Cr0T+HIpt0rJOz2T1oVHurL+it Nas9R8DgKG6r+CusiSHt+kMfCuZqHd8hNYFvoDspyXg3kMo//vzNxeNhXp4I5//o oGmP15knXMzH70iiTqXN531VOEugOjCNnGQEjSD7lssVe2KuBlnpiWj/YG6f4KWe m4GgTMEkX7bjAoXVo8S4aTeOb1ylwoQKhcDZawjpgtzu922wsu85jpb9vxruWUra ZTcZr9ghIgAK4LOt3VUbxQ3D/X+PMX7y9VwP6WoqZ9B0HJTeoM9qpHBWoxq7ETCa oZmuxwCD4PsuCSbhT7gJSLBRkWWnUV/c3y5/jyuyf2o8gzGOtuasj6wmpwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPhNng56ZZ7b5cHuHarzyEIwFCIXMB8GA1UdIwQY MBaAFLqqe0wB6SnDiSOYGrUclyeh+fB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXFwN1RBSHBLY09KSTVnYXRSeVhKNkg1OEg0LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYjllNzAtNDg5YS00MDg4LWIyOGUt ZTY4ZjZjZjJjMGQyLzEvMS1FMmVEbnBsbnR2bHdlNGRxdlBJUWpBVUloYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGMvYWI5ZTcwLTQ4OWEtNDA4OC1iMjhlLWU2OGY2Y2YyYzBk Mi8xL3VxcDdUQUhwS2NPSkk1Z2F0UnlYSjZINThINC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAE+PiQME AE+PizANBgkqhkiG9w0BAQsFAAOCAQEAamlnzvrffFP+fHUQnEbnCjdw8EcblYNO wsA9DuWM+6jb4pmu27w4Jspy68e7I0cWnn0mNcOiU3/e6xcindwxO6ML3hFruLey Kpf/dGm+fI31sjkI3xDGGOwuQsp1R/Gd8OSko6FagGMBVqgzgVodHyiD6MZ4+HFe kwTsi3O2EK3wpYLSjPpd5OautZEsU3HknR/F85tJ1+YEwWzOYT14ydYS63MRpzMA cxoJLY5pE3Gfi+jUa5PDCWUIfg9I4vixKCJxsDATsKW50/jwDomwEcNbZhImzIIn zewDG7cPXhONLYUN2a3EHy4jyOFmNlTiRi3VQ4CXpQLsqXbXPjADXg== -----END CERTIFICATE-----Generated at Wed Jan 21 06:05:51 2026 by rpki-client