This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/_Pwzr4JbDzClR-Oc7yMcLt0gzyw.roa File: _Pwzr4JbDzClR-Oc7yMcLt0gzyw.roa (raw, json) Hash identifier: fAUaNNrGBFLsb8ziuClrT7k1PRw95F5PlNscHyG0c24= Subject key identifier: FC:FC:33:AF:82:5B:0F:30:A5:47:E3:9C:EF:23:1C:2E:DD:20:CF:2C Certificate issuer: /CN=779d815db3226b7a848961262ad74ffc15557fa1 Certificate serial: 019B7C809820AD5BD77512762874D9036CD2 Authority key identifier: 77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/_Pwzr4JbDzClR-Oc7yMcLt0gzyw.roa Signing time: Fri 02 Jan 2026 02:19:20 +0000 ROA not before: Fri 02 Jan 2026 02:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51210 IP address blocks: 178.217.240.0/21 maxlen: 21 2001:67c:48::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.mft rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:98:20:ad:5b:d7:75:12:76:28:74:d9:03:6c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=779d815db3226b7a848961262ad74ffc15557fa1 Validity Not Before: Jan 2 02:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcfc33af825b0f30a547e39cef231c2edd20cf2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:33:ab:d4:82:ac:da:97:2d:e0:af:55:9c:99: b6:ab:26:da:12:92:86:72:b7:cf:8e:38:52:db:17: 64:00:a7:7c:1a:b0:c8:eb:b5:d6:ac:f9:47:63:b1: 80:95:c9:8a:1b:57:84:a4:b2:7a:af:31:73:45:22: ac:13:73:0e:82:cb:ba:15:fa:a5:b7:19:85:3c:ef: a6:b7:bb:39:12:e5:68:6f:2a:b5:bb:07:4a:f2:b8: ae:ba:bc:9b:17:45:0b:cf:be:1d:b7:cf:c8:dc:17: 58:99:7b:9f:84:11:cc:1e:ba:d6:f3:f7:7a:9b:c5: a9:85:1d:92:69:5e:43:4f:80:1e:74:4a:8e:59:b5: 41:aa:3f:03:18:68:24:79:93:d6:bd:57:07:df:58: 3c:bb:82:bd:e1:f2:c4:e3:3a:34:64:e8:58:b4:db: 8e:21:82:d4:f0:11:88:f1:a3:2e:46:01:d1:a7:0b: 1c:eb:e2:86:e3:78:03:12:b2:7c:ea:91:e9:07:33: 65:a6:39:fa:09:db:64:93:70:1b:a3:36:11:bb:53: b5:bc:93:24:3b:9d:2f:29:55:ba:50:f2:11:1c:a5: 0a:5d:34:f3:8f:c2:44:1f:45:bb:1f:60:d4:14:95: d0:a6:40:0e:32:57:30:9e:72:06:22:01:af:13:b6: 59:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FC:33:AF:82:5B:0F:30:A5:47:E3:9C:EF:23:1C:2E:DD:20:CF:2C X509v3 Authority Key Identifier: keyid:77:9D:81:5D:B3:22:6B:7A:84:89:61:26:2A:D7:4F:FC:15:55:7F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d52BXbMia3qEiWEmKtdP_BVVf6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/_Pwzr4JbDzClR-Oc7yMcLt0gzyw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/791a4e-1be9-4976-bd95-6561c849057f/1/d52BXbMia3qEiWEmKtdP_BVVf6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.217.240.0/21 IPv6: 2001:67c:48::/48 Signature Algorithm: sha256WithRSAEncryption 0a:a1:e2:a3:3a:dd:ff:a2:85:0a:c1:92:2a:7c:67:bd:1a:c5: be:a1:f2:ba:a4:e6:e2:a4:0d:fe:57:42:13:d6:c0:c4:35:48: d6:03:ec:05:b5:0e:3d:29:1f:4e:b3:5d:a1:5d:0e:9e:ec:00: af:12:31:b2:c3:25:a8:fa:4b:09:4d:30:1d:9c:c6:4e:83:62: ab:ff:35:81:36:c1:d5:88:54:25:f8:90:a8:ca:e3:b3:7d:78: 38:92:ba:ee:c4:0f:e6:64:e3:3a:32:a4:ca:7d:05:40:1c:aa: 90:3c:05:e3:ac:0f:6e:42:36:77:24:51:64:a5:03:06:fd:ce: 0c:6e:39:b3:88:32:b3:18:47:26:ff:c5:8c:83:e5:2f:ae:b0: e3:e3:a3:42:da:fa:dd:2c:ec:59:bf:58:e7:15:76:54:87:45: 21:3d:67:c8:15:f7:95:ad:2d:47:ba:af:6c:28:a9:88:47:9a: 0e:93:67:c1:06:03:84:d9:56:cc:97:0a:b6:20:a7:27:02:11: 7a:81:54:11:b4:89:fe:85:67:56:89:e8:26:e4:2a:ec:1f:39: 7d:a7:84:b0:1e:59:1b:cf:62:21:2b:71:99:a3:5a:4d:b8:84: 2e:15:90:65:6e:cb:94:c7:18:e6:69:54:21:6c:d7:eb:ad:14: df:a1:3a:07 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt8gJggrVvXdRJ2KHTZA2zSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OWQ4MTVkYjMyMjZiN2E4NDg5NjEyNjJhZDc0ZmZjMTU1 NTdmYTEwHhcNMjYwMTAyMDIxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2ZjMzNhZjgyNWIwZjMwYTU0N2UzOWNlZjIzMWMyZWRkMjBjZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzOr1IKs2pct4K9VnJm2qybaEpKG crfPjjhS2xdkAKd8GrDI67XWrPlHY7GAlcmKG1eEpLJ6rzFzRSKsE3MOgsu6Ffql txmFPO+mt7s5EuVobyq1uwdK8riuurybF0ULz74dt8/I3BdYmXufhBHMHrrW8/d6 m8WphR2SaV5DT4AedEqOWbVBqj8DGGgkeZPWvVcH31g8u4K94fLE4zo0ZOhYtNuO IYLU8BGI8aMuRgHRpwsc6+KG43gDErJ86pHpBzNlpjn6Cdtkk3AbozYRu1O1vJMk O50vKVW6UPIRHKUKXTTzj8JEH0W7H2DUFJXQpkAOMlcwnnIGIgGvE7ZZbwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFPz8M6+CWw8wpUfjnO8jHC7dIM8sMB8GA1UdIwQY MBaAFHedgV2zImt6hIlhJirXT/wVVX+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDUyQlhiTWlhM3FFaVdFbUt0ZFBfQlZWZjZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83OTFhNGUtMWJlOS00OTc2LWJkOTUt NjU2MWM4NDkwNTdmLzEvX1B3enI0SmJEekNsUi1PYzd5TWNMdDBnenl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy83OTFhNGUtMWJlOS00OTc2LWJkOTUtNjU2MWM4NDkwNTdm LzEvZDUyQlhiTWlhM3FFaVdFbUt0ZFBfQlZWZjZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDstnwMA8E AgACMAkDBwAgAQZ8AEgwDQYJKoZIhvcNAQELBQADggEBAAqh4qM63f+ihQrBkip8 Z70axb6h8rqk5uKkDf5XQhPWwMQ1SNYD7AW1Dj0pH06zXaFdDp7sAK8SMbLDJaj6 SwlNMB2cxk6DYqv/NYE2wdWIVCX4kKjK47N9eDiSuu7ED+Zk4zoypMp9BUAcqpA8 BeOsD25CNnckUWSlAwb9zgxuObOIMrMYRyb/xYyD5S+usOPjo0La+t0s7Fm/WOcV dlSHRSE9Z8gV95WtLUe6r2woqYhHmg6TZ8EGA4TZVsyXCrYgpycCEXqBVBG0if6F Z1aJ6CbkKuwfOX2nhLAeWRvPYiErcZmjWk24hC4VkGVuy5THGOZpVCFs1+utFN+h Ogc= -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:48 2026 by rpki-client