This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/S79Gb1Wgs93M_TFXtKZ_MxtZ8rY.roa File: S79Gb1Wgs93M_TFXtKZ_MxtZ8rY.roa (raw, json) Hash identifier: iXSwMrT+vGCWBRxTBdKA3OOmkhNM967qgIOHYI7fwnY= Subject key identifier: 4B:BF:46:6F:55:A0:B3:DD:CC:FD:31:57:B4:A6:7F:33:1B:59:F2:B6 Certificate issuer: /CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5 Certificate serial: 019B78A2CD060DD62AA877C1C9FA6C5900EC Authority key identifier: 8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/S79Gb1Wgs93M_TFXtKZ_MxtZ8rY.roa Signing time: Thu 01 Jan 2026 08:18:13 +0000 ROA not before: Thu 01 Jan 2026 08:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8838 IP address blocks: 194.50.108.0/24 maxlen: 24 212.42.0.0/19 maxlen: 19 2a03:8840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.mft rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:cd:06:0d:d6:2a:a8:77:c1:c9:fa:6c:59:00:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8df51d0670715eb69efa2fbff1998c3bdbd8a9f5 Validity Not Before: Jan 1 08:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4bbf466f55a0b3ddccfd3157b4a67f331b59f2b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0b:67:56:7b:9f:d5:c1:5f:36:94:d6:c7:14: 3a:46:b4:f2:b2:ce:78:bd:4f:72:e8:bb:ec:84:b7: 22:3e:96:66:15:95:b9:ca:06:f8:dc:e6:66:75:f7: 8b:58:bc:c9:f6:1c:2f:26:4f:61:1d:73:cb:94:28: b8:0e:af:f5:c6:c4:67:c9:28:66:0f:93:aa:66:c5: c4:c7:f1:51:28:cd:57:a9:48:ca:08:cd:9b:31:7f: 22:8e:69:a6:a6:fd:22:35:e1:0e:85:37:fb:40:7f: 7a:c8:1a:c8:79:6a:8a:f2:ad:b1:5e:dc:95:a7:c0: 59:c7:f1:c1:a3:84:ad:c5:b3:a8:7d:83:63:17:7f: 20:cc:8d:03:83:d3:43:69:1b:9d:ec:42:61:d3:49: 60:81:b0:5f:ea:73:e6:fb:e2:15:f1:fa:a2:a0:67: c3:8f:fe:38:c8:41:64:9f:84:19:10:29:4d:95:ff: 58:ac:0b:59:72:2e:95:47:14:d5:df:f7:44:0e:81: fa:09:b2:f7:99:6d:fc:4f:f7:ca:a9:5a:dc:fa:8e: fa:cf:08:a7:2e:b3:7b:3e:c2:f7:cb:b9:3f:25:97: f4:56:f4:be:85:ee:42:b1:ca:73:5c:aa:8f:21:23: ba:1a:ec:bc:60:98:b4:41:99:89:c1:07:5b:7f:68: 83:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BF:46:6F:55:A0:B3:DD:CC:FD:31:57:B4:A6:7F:33:1B:59:F2:B6 X509v3 Authority Key Identifier: keyid:8D:F5:1D:06:70:71:5E:B6:9E:FA:2F:BF:F1:99:8C:3B:DB:D8:A9:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfUdBnBxXrae-i-_8ZmMO9vYqfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/S79Gb1Wgs93M_TFXtKZ_MxtZ8rY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/747113-591d-4808-92d9-7a794d5ced3d/1/jfUdBnBxXrae-i-_8ZmMO9vYqfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.50.108.0/24 212.42.0.0/19 IPv6: 2a03:8840::/32 Signature Algorithm: sha256WithRSAEncryption 63:8c:08:8d:c0:b6:9d:ed:c8:0c:f8:5f:9c:d4:1a:e1:b1:fd: 74:07:8e:98:06:d4:bc:49:09:be:2d:a7:96:dd:83:f7:d2:13: 43:eb:c5:86:53:9c:5f:6b:f9:05:ee:1c:0e:52:55:42:d9:af: 06:02:2e:8a:9e:2b:08:ea:a5:15:20:23:98:bb:ec:d6:7e:58: 3e:4f:b2:74:76:b6:0f:50:5c:18:5d:69:95:88:30:39:e2:fa: 85:4f:83:f7:f3:7e:21:8c:91:f2:f9:09:a6:84:94:c2:51:5c: 17:af:6d:ff:e1:3f:cc:84:b9:71:07:64:c4:2b:be:28:7d:d8: 51:09:79:2b:a8:87:92:df:da:83:94:57:50:7c:1b:f6:b9:3c: 74:16:06:96:30:3d:97:cc:28:1d:5a:5d:4c:f9:16:2d:10:b7: cb:ed:a8:0c:b8:f5:3e:ff:f9:49:0b:12:a3:4f:47:eb:32:24: 3c:9a:a5:02:3c:e6:3d:ad:30:bf:64:c6:65:0c:59:82:29:40: 85:09:6c:16:45:be:7f:2e:6b:bb:15:25:98:75:21:0b:39:71: 6d:dc:d4:df:14:eb:d6:a4:d0:76:ed:6d:3e:cf:a0:92:ad:9c: e8:4c:72:60:f7:71:1b:ea:1d:1b:64:e1:65:8b:fe:2e:e6:dd: 33:6a:bf:1f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4os0GDdYqqHfByfpsWQDsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkZjUxZDA2NzA3MTVlYjY5ZWZhMmZiZmYxOTk4YzNiZGJk OGE5ZjUwHhcNMjYwMTAxMDgxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YmJmNDY2ZjU1YTBiM2RkY2NmZDMxNTdiNGE2N2YzMzFiNTlmMmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AtnVnuf1cFfNpTWxxQ6RrTyss54 vU9y6LvshLciPpZmFZW5ygb43OZmdfeLWLzJ9hwvJk9hHXPLlCi4Dq/1xsRnyShm D5OqZsXEx/FRKM1XqUjKCM2bMX8ijmmmpv0iNeEOhTf7QH96yBrIeWqK8q2xXtyV p8BZx/HBo4StxbOofYNjF38gzI0Dg9NDaRud7EJh00lggbBf6nPm++IV8fqioGfD j/44yEFkn4QZEClNlf9YrAtZci6VRxTV3/dEDoH6CbL3mW38T/fKqVrc+o76zwin LrN7PsL3y7k/JZf0VvS+he5CscpzXKqPISO6Guy8YJi0QZmJwQdbf2iDrwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFEu/Rm9VoLPdzP0xV7SmfzMbWfK2MB8GA1UdIwQY MBaAFI31HQZwcV62nvovv/GZjDvb2Kn1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamZVZEJuQnhYcmFlLWktXzhabU1POXZZcWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC83NDcxMTMtNTkxZC00ODA4LTkyZDkt N2E3OTRkNWNlZDNkLzEvUzc5R2IxV2dzOTNNX1RGWHRLWl9NeHRaOHJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC83NDcxMTMtNTkxZC00ODA4LTkyZDktN2E3OTRkNWNlZDNk LzEvamZVZEJuQnhYcmFlLWktXzhabU1POXZZcWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAwjJsAwQF 1CoAMA0EAgACMAcDBQAqA4hAMA0GCSqGSIb3DQEBCwUAA4IBAQBjjAiNwLad7cgM +F+c1Brhsf10B46YBtS8SQm+LaeW3YP30hND68WGU5xfa/kF7hwOUlVC2a8GAi6K nisI6qUVICOYu+zWflg+T7J0drYPUFwYXWmViDA54vqFT4P3834hjJHy+QmmhJTC UVwXr23/4T/MhLlxB2TEK74ofdhRCXkrqIeS39qDlFdQfBv2uTx0FgaWMD2XzCgd Wl1M+RYtELfL7agMuPU+//lJCxKjT0frMiQ8mqUCPOY9rTC/ZMZlDFmCKUCFCWwW Rb5/Lmu7FSWYdSELOXFt3NTfFOvWpNB27W0+z6CSrZzoTHJg93Eb6h0bZOFli/4u 5t0zar8f -----END CERTIFICATE-----Generated at Tue Jan 20 04:47:36 2026 by rpki-client