This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/1-U7ZLiFH54V7UGyRCgDs02Js4k4.roa File: 1-U7ZLiFH54V7UGyRCgDs02Js4k4.roa (raw, json) Hash identifier: wlYaVRuSGL068CQWCjhHpIbI34smKOkek9Nmd6k0FcE= Subject key identifier: F9:4E:D9:2E:21:47:E7:85:7B:50:6C:91:0A:00:EC:D3:62:6C:E2:4E Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Certificate serial: 019B7C7F4EE09330D61280B092FB9F721C8C Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/1-U7ZLiFH54V7UGyRCgDs02Js4k4.roa Signing time: Fri 02 Jan 2026 02:17:56 +0000 ROA not before: Fri 02 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24748 IP address blocks: 77.79.192.0/24 maxlen: 24 193.111.36.0/24 maxlen: 24 212.91.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:4e:e0:93:30:d6:12:80:b0:92:fb:9f:72:1c:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b Validity Not Before: Jan 2 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f94ed92e2147e7857b506c910a00ecd3626ce24e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:eb:e6:f7:c2:5c:fd:e3:df:0d:4f:8e:df:62: 56:67:b2:40:98:9b:2c:02:eb:fe:d2:6f:08:83:c8: 55:46:d4:89:a2:55:ca:26:a5:a9:79:71:ed:92:c6: 43:45:f3:81:5c:cd:c8:c4:0d:49:ca:8e:28:4a:ec: 59:6f:f1:ef:db:3a:53:5c:6f:06:18:4a:ef:51:b6: 58:c7:b7:c9:13:5d:2d:d9:23:c8:1c:6f:47:dc:48: 24:59:fc:62:f5:53:6f:8c:11:ac:f2:64:9d:2d:be: f9:5c:d5:12:2f:32:7b:2f:3d:88:a8:c6:7b:60:a3: 86:9f:d6:b5:a1:1b:d3:45:d3:40:53:29:90:07:b1: 65:cd:33:ba:26:20:f9:12:27:2f:0a:23:e1:c2:26: e1:79:0b:71:32:45:1e:a5:ce:0b:05:8e:2d:c6:e1: 9a:ff:90:bc:54:75:49:e3:b5:fe:15:91:5c:09:54: 7f:85:92:94:c9:70:6e:91:40:ff:c0:76:22:48:74: b4:33:2e:68:f1:5b:54:49:24:18:3b:3d:dc:7f:8e: da:19:9c:66:e2:b6:71:a5:6c:aa:e5:cf:20:a9:86: 88:63:10:6b:01:e6:2d:2c:60:cf:74:4d:26:c6:60: da:77:92:5b:52:97:9d:21:d2:18:c5:aa:ef:d5:12: d3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4E:D9:2E:21:47:E7:85:7B:50:6C:91:0A:00:EC:D3:62:6C:E2:4E X509v3 Authority Key Identifier: keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/1-U7ZLiFH54V7UGyRCgDs02Js4k4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.79.192.0/24 193.111.36.0/24 212.91.0.0/22 Signature Algorithm: sha256WithRSAEncryption 48:f8:89:a9:d5:13:4b:f6:bc:29:92:f3:02:b0:cf:18:f3:8a: 53:13:88:1f:9d:6a:aa:b8:f5:a8:e2:6a:63:db:bf:79:8d:68: 8c:a8:31:d0:5f:63:42:ad:67:fd:08:62:bd:7e:ec:26:c2:fc: 05:35:8e:4a:cb:5f:93:31:7c:01:10:d8:e0:09:dd:31:64:f6: c5:ec:fc:ac:8c:40:0e:27:94:01:e7:f8:bf:09:36:04:61:91: 51:54:26:a2:f2:d1:e5:32:a4:fd:19:e1:9c:6a:e2:38:ec:ad: 01:66:b2:b7:7d:1b:44:7c:8d:0b:7d:9a:21:50:6f:4e:b3:66: 9b:68:ac:c8:88:ad:32:74:1b:09:d5:58:f2:5b:98:90:38:9f: 25:02:68:61:03:5b:00:1c:91:ac:f9:bb:5c:1d:3e:1e:3c:80: c0:0f:74:cb:28:29:d5:99:67:52:8d:fb:80:60:83:e0:a5:23: 2d:df:81:66:05:e5:d5:9e:d9:f7:17:e1:e8:2e:81:5b:c3:66: 00:07:a2:7e:75:4c:bf:6a:13:4d:fe:84:6c:e4:6d:f8:43:91: 1a:03:cf:fc:be:c9:bb:f5:96:39:68:7f:6e:a1:16:7e:93:14: 3a:63:02:09:78:7f:c8:47:cb:f7:42:3b:3b:e1:89:51:a3:74: bf:c8:53:1a -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgISAZt8f07gkzDWEoCwkvufchyMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz MzBjNWIwHhcNMjYwMTAyMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTRlZDkyZTIxNDdlNzg1N2I1MDZjOTEwYTAwZWNkMzYyNmNlMjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhevm98Jc/ePfDU+O32JWZ7JAmJss Auv+0m8Ig8hVRtSJolXKJqWpeXHtksZDRfOBXM3IxA1Jyo4oSuxZb/Hv2zpTXG8G GErvUbZYx7fJE10t2SPIHG9H3EgkWfxi9VNvjBGs8mSdLb75XNUSLzJ7Lz2IqMZ7 YKOGn9a1oRvTRdNAUymQB7FlzTO6JiD5EicvCiPhwibheQtxMkUepc4LBY4txuGa /5C8VHVJ47X+FZFcCVR/hZKUyXBukUD/wHYiSHS0My5o8VtUSSQYOz3cf47aGZxm 4rZxpWyq5c8gqYaIYxBrAeYtLGDPdE0mxmDad5JbUpedIdIYxarv1RLTgwIDAQAB o4ICFjCCAhIwHQYDVR0OBBYEFPlO2S4hR+eFe1BskQoA7NNibOJOMB8GA1UdIwQY MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt NWQ2NjVlOTk4ZjZhLzEvMS1VN1pMaUZINTRWN1VHeVJDZ0RzMDJKczRrNC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTgvZTBmMmY2LTNhOGEtNGRhYS04MjcxLTVkNjY1ZTk5OGY2 YS8xL2FNVVFfSnVHWFpianI4ZkZZRmJ2clpvekRGcy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAE1PwAME AMFvJAMEAtRbADANBgkqhkiG9w0BAQsFAAOCAQEASPiJqdUTS/a8KZLzArDPGPOK UxOIH51qqrj1qOJqY9u/eY1ojKgx0F9jQq1n/QhivX7sJsL8BTWOSstfkzF8ARDY 4AndMWT2xez8rIxADieUAef4vwk2BGGRUVQmovLR5TKk/RnhnGriOOytAWayt30b RHyNC32aIVBvTrNmm2isyIitMnQbCdVY8luYkDifJQJoYQNbAByRrPm7XB0+HjyA wA90yygp1ZlnUo37gGCD4KUjLd+BZgXl1Z7Z9xfh6C6BW8NmAAeifnVMv2oTTf6E bORt+EORGgPP/L7Ju/WWOWh/bqEWfpMUOmMCCXh/yEfL90I7O+GJUaN0v8hTGg== -----END CERTIFICATE-----Generated at Mon Jan 26 23:22:52 2026 by rpki-client