This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/MVzrKrM-ROmp6L5KpAFmsDon3R8.roa File: MVzrKrM-ROmp6L5KpAFmsDon3R8.roa (raw, json) Hash identifier: hzkN6RGTusRdNVM/sNBianVdHp8+zhapZ5YWnWzEJls= Subject key identifier: 31:5C:EB:2A:B3:3E:44:E9:A9:E8:BE:4A:A4:01:66:B0:3A:27:DD:1F Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797ED91D6C7ED6ACB424ED4C0EDEB501 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/MVzrKrM-ROmp6L5KpAFmsDon3R8.roa Signing time: Thu 01 Jan 2026 12:18:34 +0000 ROA not before: Thu 01 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209043 IP address blocks: 79.175.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d9:1d:6c:7e:d6:ac:b4:24:ed:4c:0e:de:b5:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=315ceb2ab33e44e9a9e8be4aa40166b03a27dd1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b7:d8:34:90:10:07:cc:41:49:ab:b5:c4:29: 37:e3:9f:95:39:1f:11:6b:2f:f4:4b:4e:15:0d:4c: 5e:4b:18:8c:de:03:ba:15:b3:7e:26:61:52:6e:3c: 11:77:77:29:67:10:c8:d7:83:cc:09:b9:12:6c:18: a7:97:ff:78:06:87:70:11:b6:ec:2f:3e:85:35:cc: 22:e8:3d:0a:62:47:e6:a8:a6:98:fb:f0:ac:81:2c: 95:8b:7c:c4:3c:fc:f7:22:eb:f1:4c:72:98:95:8f: 2d:6c:83:3e:06:37:cc:bc:38:56:62:34:6e:40:80: 77:17:90:4b:08:d5:58:83:0d:a0:38:08:46:99:e8: b8:fe:d3:7c:b7:3e:b0:6e:8d:ec:5f:47:37:1f:c7: 82:a4:95:58:bb:99:e7:bf:cc:12:a2:20:41:68:0c: 9d:f8:79:87:0d:70:e7:30:ad:75:78:fb:03:85:9f: bb:71:5a:2f:10:b4:de:88:e5:c7:3c:c9:33:82:aa: 84:e0:09:87:78:fb:c5:b8:a3:6f:e0:94:96:f4:c9: 77:3a:5f:91:27:43:dd:a1:13:38:b9:f4:be:61:f8: 9d:f3:d2:65:ac:19:11:35:9e:a9:a8:b1:6e:1f:89: fb:18:89:1e:31:7b:8d:94:c4:35:31:cf:5e:89:18: 3f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5C:EB:2A:B3:3E:44:E9:A9:E8:BE:4A:A4:01:66:B0:3A:27:DD:1F X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/MVzrKrM-ROmp6L5KpAFmsDon3R8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.175.117.0/24 Signature Algorithm: sha256WithRSAEncryption 27:26:4a:95:ef:92:7f:85:e3:7e:0f:84:fe:8b:48:86:2d:df: 7b:ea:c3:14:d4:4f:80:52:82:f5:52:c4:62:d5:43:c3:ac:d6: 92:d8:0f:6d:12:26:9d:c7:8d:f0:e4:07:04:c9:c8:76:d6:5b: 81:33:89:2f:6f:7a:7d:bc:66:b1:7c:a8:ce:d5:aa:33:6f:33: f0:86:72:4a:e3:06:d1:2d:25:45:b7:d7:7b:40:57:dc:e5:ee: ab:dc:85:6f:d5:3f:2a:5f:c5:bd:f6:7d:7e:d5:ca:16:83:dc: fd:ba:a2:a0:90:18:3f:75:3b:b8:37:15:4e:64:3e:f8:54:d3: a4:a7:5f:f3:4b:e8:8f:df:13:78:52:1e:8e:fd:08:fe:b0:71: 45:2b:2b:bf:4a:d8:be:e9:87:4d:48:a2:07:52:c0:d7:ee:4b: 06:d3:81:61:ce:df:02:2f:a0:3c:89:a6:75:01:fa:0b:1c:53: eb:54:3b:f3:6c:52:7d:0c:54:45:5d:dc:5e:bf:ac:54:dd:ed: e0:07:55:e9:dc:70:78:60:1b:c1:9f:73:35:f2:1e:f4:77:37: 09:52:12:a2:69:69:4d:b1:c7:c3:7e:85:4f:3f:e4:f9:75:21: 6a:44:a6:d1:e2:15:3f:eb:16:53:26:21:71:3c:75:48:f8:9e: fe:30:31:82 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ftkdbH7WrLQk7UwO3rUBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTVjZWIyYWIzM2U0NGU5YTllOGJlNGFhNDAxNjZiMDNhMjdkZDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7fYNJAQB8xBSau1xCk345+VOR8R ay/0S04VDUxeSxiM3gO6FbN+JmFSbjwRd3cpZxDI14PMCbkSbBinl/94BodwEbbs Lz6FNcwi6D0KYkfmqKaY+/CsgSyVi3zEPPz3IuvxTHKYlY8tbIM+BjfMvDhWYjRu QIB3F5BLCNVYgw2gOAhGmei4/tN8tz6wbo3sX0c3H8eCpJVYu5nnv8wSoiBBaAyd +HmHDXDnMK11ePsDhZ+7cVovELTeiOXHPMkzgqqE4AmHePvFuKNv4JSW9Ml3Ol+R J0PdoRM4ufS+Yfid89JlrBkRNZ6pqLFuH4n7GIkeMXuNlMQ1Mc9eiRg/ewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDFc6yqzPkTpqei+SqQBZrA6J90fMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvTVZ6cktyTS1ST21wNkw1S3BBRm1zRG9uM1I4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT691MA0G CSqGSIb3DQEBCwUAA4IBAQAnJkqV75J/heN+D4T+i0iGLd976sMU1E+AUoL1UsRi 1UPDrNaS2A9tEiadx43w5AcEych21luBM4kvb3p9vGaxfKjO1aozbzPwhnJK4wbR LSVFt9d7QFfc5e6r3IVv1T8qX8W99n1+1coWg9z9uqKgkBg/dTu4NxVOZD74VNOk p1/zS+iP3xN4Uh6O/Qj+sHFFKyu/Sti+6YdNSKIHUsDX7ksG04Fhzt8CL6A8iaZ1 AfoLHFPrVDvzbFJ9DFRFXdxev6xU3e3gB1Xp3HB4YBvBn3M18h70dzcJUhKiaWlN scfDfoVPP+T5dSFqRKbR4hU/6xZTJiFxPHVI+J7+MDGC -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:29 2026 by rpki-client