This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/royOJADOHC1NNGIUFUSG8i3BLQ0.roa File: royOJADOHC1NNGIUFUSG8i3BLQ0.roa (raw, json) Hash identifier: 2PUXEpyjrcM46Q23bjPi20e6P3M7C3MjAxYWgm68WVY= Subject key identifier: AE:8C:8E:24:00:CE:1C:2D:4D:34:62:14:15:44:86:F2:2D:C1:2D:0D Certificate issuer: /CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908 Certificate serial: 019B79110A8EB6495C9B10DD876A1DD2D1D6 Authority key identifier: 5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/royOJADOHC1NNGIUFUSG8i3BLQ0.roa Signing time: Thu 01 Jan 2026 10:18:38 +0000 ROA not before: Thu 01 Jan 2026 10:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44432 IP address blocks: 79.134.226.0/24 maxlen: 24 79.134.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:0a:8e:b6:49:5c:9b:10:dd:87:6a:1d:d2:d1:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908 Validity Not Before: Jan 1 10:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae8c8e2400ce1c2d4d346214154486f22dc12d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:80:62:f2:c1:30:9e:49:d3:8e:1a:28:6b:a6: 27:cc:f5:36:61:56:07:7e:82:45:f4:6f:01:82:16: a6:eb:3a:de:ae:16:16:9c:4e:1a:8c:16:69:20:70: 16:d8:78:2a:eb:e0:0b:d6:07:b9:d0:25:6a:14:7c: 19:f8:4b:ce:a9:82:c7:89:e5:ee:fe:c5:7d:24:3e: 94:81:a2:6b:18:82:4d:93:1a:52:43:cd:0d:fc:9b: 57:19:d2:0f:ed:af:cf:2f:26:e4:e2:d6:36:24:3f: ff:74:56:60:02:41:03:84:ab:75:d4:6b:16:36:bf: c9:05:fc:ca:46:71:00:e1:c9:09:fd:33:0f:70:aa: c2:b9:c9:a2:a6:30:f4:35:83:d1:e5:25:91:ce:e1: 79:6e:bb:d6:03:b5:e9:d3:5c:3d:56:22:bc:49:dc: 02:37:b3:1f:10:26:7a:44:b4:fb:95:f5:42:ca:65: 43:01:0d:52:bf:86:01:0d:86:a8:67:c6:de:9e:86: e9:8b:c5:6d:8a:36:ba:83:44:c9:66:99:c4:47:b6: c3:df:12:17:14:5b:08:a3:87:57:45:a6:9e:96:a3: eb:2f:96:cb:1d:b6:a0:a2:ca:dc:72:10:46:2b:78: 46:62:0d:fa:a2:70:72:a9:9e:53:c0:9b:f7:c6:5c: 42:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:8C:8E:24:00:CE:1C:2D:4D:34:62:14:15:44:86:F2:2D:C1:2D:0D X509v3 Authority Key Identifier: keyid:5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/royOJADOHC1NNGIUFUSG8i3BLQ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.134.226.0/24 79.134.242.0/24 Signature Algorithm: sha256WithRSAEncryption 26:da:e5:f2:31:2d:4e:4b:ee:ed:7d:4e:95:07:55:db:b3:61: c1:e3:51:ac:c4:5a:51:28:16:ae:3a:2a:b6:97:dc:9d:d1:55: 33:df:42:14:52:9f:fb:eb:da:4f:29:99:1c:83:ab:e4:e0:72: 91:cf:f2:04:72:1c:1e:3a:b1:fc:f8:9b:4d:e5:d7:47:99:a2: 24:9b:ff:65:3b:a7:cd:cd:3a:56:b8:aa:81:65:6b:84:eb:3f: f5:54:75:be:2c:72:28:2f:96:f1:01:c1:47:ba:5a:ef:5a:7a: 2f:21:bb:28:b9:e5:92:e8:05:c2:25:d9:08:8d:12:28:fe:43: e3:a7:4a:3d:b3:eb:74:29:4c:15:49:b6:f7:da:14:f4:47:90: d9:c5:ce:93:9d:bc:73:5e:28:98:d1:f9:18:60:be:04:60:df: 8c:ee:ef:a5:98:bc:3b:a5:08:80:ac:e7:c1:fb:95:ef:45:fe: 71:76:2c:07:2c:23:26:53:5f:35:a8:7c:1e:7d:2a:63:f6:f4: 75:69:58:50:07:ea:33:c2:9b:ef:bb:fe:61:f8:d8:1d:73:3f: 15:0b:11:49:d7:1d:17:5a:68:44:87:c1:c2:40:6c:f7:bf:17: d9:72:ec:04:71:9a:87:ba:15:fb:4b:87:ab:ab:25:d7:74:f6: dc:a1:fc:d5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EQqOtklcmxDdh2od0tHWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkNmMxNWNhOTAzZDdkMjU0NTNlYWViNWY3MjRhMDRlM2Fh NjU5MDgwHhcNMjYwMTAxMTAxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZThjOGUyNDAwY2UxYzJkNGQzNDYyMTQxNTQ0ODZmMjJkYzEyZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIBi8sEwnknTjhooa6YnzPU2YVYH foJF9G8Bgham6zrerhYWnE4ajBZpIHAW2Hgq6+AL1ge50CVqFHwZ+EvOqYLHieXu /sV9JD6UgaJrGIJNkxpSQ80N/JtXGdIP7a/PLybk4tY2JD//dFZgAkEDhKt11GsW Nr/JBfzKRnEA4ckJ/TMPcKrCucmipjD0NYPR5SWRzuF5brvWA7Xp01w9ViK8SdwC N7MfECZ6RLT7lfVCymVDAQ1Sv4YBDYaoZ8benobpi8Vtija6g0TJZpnER7bD3xIX FFsIo4dXRaaelqPrL5bLHbagosrcchBGK3hGYg36onByqZ5TwJv3xlxC3wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK6MjiQAzhwtTTRiFBVEhvItwS0NMB8GA1UdIwQY MBaAFF1sFcqQPX0lRT6utfckoE46plkIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFd3VnlwQTlmU1ZGUHE2MTl5U2dUanFtV1FnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yODY0YzgtYzA0Mi00MjhmLWEwMmQt M2IzNGMyM2I5YzVhLzEvcm95T0pBRE9IQzFOTkdJVUZVU0c4aTNCTFEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yODY0YzgtYzA0Mi00MjhmLWEwMmQtM2IzNGMyM2I5YzVh LzEvWFd3VnlwQTlmU1ZGUHE2MTl5U2dUanFtV1FnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT4biAwQA T4byMA0GCSqGSIb3DQEBCwUAA4IBAQAm2uXyMS1OS+7tfU6VB1Xbs2HB41GsxFpR KBauOiq2l9yd0VUz30IUUp/769pPKZkcg6vk4HKRz/IEchweOrH8+JtN5ddHmaIk m/9lO6fNzTpWuKqBZWuE6z/1VHW+LHIoL5bxAcFHulrvWnovIbsoueWS6AXCJdkI jRIo/kPjp0o9s+t0KUwVSbb32hT0R5DZxc6TnbxzXiiY0fkYYL4EYN+M7u+lmLw7 pQiArOfB+5XvRf5xdiwHLCMmU181qHwefSpj9vR1aVhQB+ozwpvvu/5h+Ngdcz8V CxFJ1x0XWmhEh8HCQGz3vxfZcuwEcZqHuhX7S4erqyXXdPbcofzV -----END CERTIFICATE-----Generated at Mon Feb 9 22:28:00 2026 by rpki-client