This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/b9Q4ikh7P1-VewBOlxjh6fowvZA.roa File: b9Q4ikh7P1-VewBOlxjh6fowvZA.roa (raw, json) Hash identifier: JZ6Vz7a38Av/sfq39iREbtu+EKiAMHTBIZnSyAMSJE4= Subject key identifier: 6F:D4:38:8A:48:7B:3F:5F:95:7B:00:4E:97:18:E1:E9:FA:30:BD:90 Certificate issuer: /CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955 Certificate serial: 019B76EB667DCD02BA8386AB6C0002508F88 Authority key identifier: EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/b9Q4ikh7P1-VewBOlxjh6fowvZA.roa Signing time: Thu 01 Jan 2026 00:18:17 +0000 ROA not before: Thu 01 Jan 2026 00:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5483 IP address blocks: 79.121.74.0/23 maxlen: 23 79.121.76.0/22 maxlen: 22 79.121.120.0/22 maxlen: 22 91.147.214.0/23 maxlen: 23 94.248.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.mft rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:66:7d:cd:02:ba:83:86:ab:6c:00:02:50:8f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef0efd5de78f93bcaead15e14c006edbbd1b5955 Validity Not Before: Jan 1 00:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6fd4388a487b3f5f957b004e9718e1e9fa30bd90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a6:28:7f:59:2b:f6:c5:8d:83:5b:15:99:05: e8:7b:be:47:32:c5:f0:56:a2:94:8f:f6:2e:7e:7e: f1:ce:e6:55:3d:f1:ef:36:f1:4d:f5:75:eb:85:5f: d5:10:b3:2d:8d:22:f4:1c:94:0a:02:82:a3:03:20: 45:8d:78:74:f6:24:12:07:03:b9:75:96:e9:27:fa: 83:4b:21:d3:60:31:a0:db:46:e8:d0:54:87:90:aa: 03:7e:cc:0f:08:78:91:12:5c:27:5e:b8:7e:b1:7f: 7c:30:72:37:59:7e:f3:85:f2:bb:b6:01:eb:0b:ca: 68:44:b3:2c:24:7a:cc:4e:b5:32:47:b7:bd:e7:4d: b5:1e:47:2b:60:b7:c9:63:44:59:b9:21:02:03:05: 7b:b9:06:b4:b4:36:17:99:2f:5a:21:52:68:f4:68: ad:6a:37:d2:a4:ac:5b:5b:1d:cc:b6:0e:c1:11:e9: 7f:99:0c:61:3f:ee:de:33:b2:35:05:92:0f:9f:7b: fb:1c:7a:d1:45:ad:be:03:bf:00:54:80:a7:01:03: c1:a6:d3:4b:ff:87:d5:7f:ec:bf:45:f6:d5:31:28: 2f:a6:fa:e8:e8:a5:af:4d:6c:8b:c5:5a:61:93:a2: 41:f7:6f:9c:89:31:dc:dd:cd:f7:c0:2a:fa:42:84: d7:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:D4:38:8A:48:7B:3F:5F:95:7B:00:4E:97:18:E1:E9:FA:30:BD:90 X509v3 Authority Key Identifier: keyid:EF:0E:FD:5D:E7:8F:93:BC:AE:AD:15:E1:4C:00:6E:DB:BD:1B:59:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7w79XeePk7yurRXhTABu270bWVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/b9Q4ikh7P1-VewBOlxjh6fowvZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e0f9e6-d655-4377-8d09-ea86509c3b30/1/7w79XeePk7yurRXhTABu270bWVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.121.74.0-79.121.79.255 79.121.120.0/22 91.147.214.0/23 94.248.248.0/21 Signature Algorithm: sha256WithRSAEncryption 63:42:c8:8a:80:94:fb:94:1e:81:3e:3d:10:a6:04:4b:98:13: a6:62:f8:a3:3c:21:6a:01:91:f2:1f:73:ac:23:06:cb:89:0b: 55:2a:50:89:04:3a:c1:91:82:6f:2f:2a:6f:3d:2f:27:5e:0f: 74:f8:dc:66:b9:1f:c1:52:d9:08:ac:1f:48:3e:34:37:37:04: 49:5e:01:44:b1:61:f2:31:f4:28:69:9f:29:ce:b1:8f:f8:c5: 47:8e:91:0d:7c:ec:ab:7c:59:f7:51:f4:85:1a:7f:35:48:19: b9:f4:0b:3d:dc:9d:d0:22:39:e0:af:d3:9a:53:e5:10:a9:37: ca:33:18:c7:92:14:77:66:20:28:af:04:e0:cd:d7:06:2e:01: 23:a4:4d:4b:49:da:6d:3e:47:b1:98:f7:3a:9d:48:9b:94:a7: fd:e1:68:fb:6b:10:8b:ed:5d:a9:58:ab:33:90:af:4d:94:6f: 58:16:fa:5a:7a:dc:93:b2:15:31:62:f6:ed:d0:b7:df:03:90: e6:a3:f6:a6:a3:78:f3:40:0e:cd:c0:b4:52:21:ce:8e:57:96: 89:a2:c9:d4:9b:af:86:1b:92:f8:92:7f:6e:61:a3:2a:de:c7: 34:64:2e:d2:73:a8:77:bf:e7:b8:ab:06:91:92:cd:a4:32:0f: 65:80:57:e6 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt262Z9zQK6g4arbAACUI+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmMGVmZDVkZTc4ZjkzYmNhZWFkMTVlMTRjMDA2ZWRiYmQx YjU5NTUwHhcNMjYwMTAxMDAxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZmQ0Mzg4YTQ4N2IzZjVmOTU3YjAwNGU5NzE4ZTFlOWZhMzBiZDkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6Yof1kr9sWNg1sVmQXoe75HMsXw VqKUj/Yufn7xzuZVPfHvNvFN9XXrhV/VELMtjSL0HJQKAoKjAyBFjXh09iQSBwO5 dZbpJ/qDSyHTYDGg20bo0FSHkKoDfswPCHiRElwnXrh+sX98MHI3WX7zhfK7tgHr C8poRLMsJHrMTrUyR7e95021HkcrYLfJY0RZuSECAwV7uQa0tDYXmS9aIVJo9Git ajfSpKxbWx3Mtg7BEel/mQxhP+7eM7I1BZIPn3v7HHrRRa2+A78AVICnAQPBptNL /4fVf+y/RfbVMSgvpvro6KWvTWyLxVphk6JB92+ciTHc3c33wCr6QoTX+wIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFG/UOIpIez9flXsATpcY4en6ML2QMB8GA1UdIwQY MBaAFO8O/V3nj5O8rq0V4UwAbtu9G1lVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3c3OVhlZVBrN3l1clJYaFRBQnUyNzBiV1ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lMGY5ZTYtZDY1NS00Mzc3LThkMDkt ZWE4NjUwOWMzYjMwLzEvYjlRNGlraDdQMS1WZXdCT2x4amg2Zm93dlpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9lMGY5ZTYtZDY1NS00Mzc3LThkMDktZWE4NjUwOWMzYjMw LzEvN3c3OVhlZVBrN3l1clJYaFRBQnUyNzBiV1ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBAFPeUoD BARPeUADBAJPeXgDBAFbk9YDBANe+PgwDQYJKoZIhvcNAQELBQADggEBAGNCyIqA lPuUHoE+PRCmBEuYE6Zi+KM8IWoBkfIfc6wjBsuJC1UqUIkEOsGRgm8vKm89Lyde D3T43Ga5H8FS2QisH0g+NDc3BEleAUSxYfIx9ChpnynOsY/4xUeOkQ187Kt8WfdR 9IUafzVIGbn0Cz3cndAiOeCv05pT5RCpN8ozGMeSFHdmICivBODN1wYuASOkTUtJ 2m0+R7GY9zqdSJuUp/3haPtrEIvtXalYqzOQr02Ub1gW+lp63JOyFTFi9u3Qt98D kOaj9qajePNADs3AtFIhzo5XlomiydSbr4YbkviSf25hoyrexzRkLtJzqHe/57ir BpGSzaQyD2WAV+Y= -----END CERTIFICATE-----Generated at Mon Jan 26 15:00:19 2026 by rpki-client