This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/aRP5zR7I0TgM8LY51XGSYWatTQQ.roa File: aRP5zR7I0TgM8LY51XGSYWatTQQ.roa (raw, json) Hash identifier: LVxUrfetgxz/4SN5gopgp3ET7PUoT2EpbawMuVQ0tfI= Subject key identifier: 69:13:F9:CD:1E:C8:D1:38:0C:F0:B6:39:D5:71:92:61:66:AD:4D:04 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797EDAA6836ECB6EC8E40079AE4C2F21 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/aRP5zR7I0TgM8LY51XGSYWatTQQ.roa Signing time: Thu 01 Jan 2026 12:18:35 +0000 ROA not before: Thu 01 Jan 2026 12:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212897 IP address blocks: 79.175.71.0/24 maxlen: 24 188.255.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:da:a6:83:6e:cb:6e:c8:e4:00:79:ae:4c:2f:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6913f9cd1ec8d1380cf0b639d571926166ad4d04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:26:62:b9:54:3f:c2:c9:7b:e5:cb:29:f1:00: 51:cc:fd:7d:a3:b9:80:0e:30:4c:e4:05:39:82:b3: 6d:64:d2:c5:25:c0:72:e7:bd:02:62:97:29:a3:e1: d0:c9:b8:59:ca:80:73:b0:03:96:4b:25:24:4b:fa: 31:92:cd:06:ea:26:3e:c5:60:39:c2:7d:73:48:14: a1:6e:bc:da:82:37:95:53:31:ab:75:80:94:5f:41: 79:33:65:bd:79:f2:98:9e:91:be:a8:85:74:7a:8f: d0:c4:bc:f2:ba:70:3b:bc:95:e2:51:85:a2:d5:94: 91:5d:e9:cd:19:aa:66:c4:4f:6b:59:b5:7d:86:8a: 9c:fb:fb:aa:1d:fc:0b:cb:ab:5c:db:69:19:24:f0: 4a:cd:42:90:56:85:80:07:c2:2f:f4:1f:13:3b:6e: 1a:f4:61:43:07:9b:7a:16:3c:bb:16:c1:99:95:a6: c5:d2:88:0e:5c:14:1c:ff:27:e7:04:f7:39:6a:dc: 48:2a:2c:b5:57:23:b9:be:a2:2c:23:3e:3a:ec:4d: 53:78:75:e5:5f:22:64:4a:d8:b2:d6:93:3a:84:e5: eb:19:71:cd:27:9a:e3:0c:b6:fc:df:45:f7:8e:15: 42:cf:f5:d5:c9:33:07:d4:49:bf:6b:7c:2c:9b:81: 1b:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:13:F9:CD:1E:C8:D1:38:0C:F0:B6:39:D5:71:92:61:66:AD:4D:04 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/aRP5zR7I0TgM8LY51XGSYWatTQQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.175.71.0/24 188.255.202.0/24 Signature Algorithm: sha256WithRSAEncryption 65:de:54:47:31:c5:9b:56:6e:83:79:d6:45:f9:bd:52:bd:33: 6e:8f:f9:df:bc:a6:e5:81:43:9a:62:9f:83:4a:67:38:3c:8c: 8d:20:a6:28:20:f5:5b:b4:aa:2b:28:ed:cc:3d:74:34:b7:8a: 0d:50:a3:67:80:0c:8e:d6:17:97:42:0c:77:04:79:da:cf:4c: 3c:c8:47:0f:82:f6:f9:8a:9a:ae:ca:9c:cf:6a:74:ee:36:ab: 4f:1b:f4:6b:89:a0:51:1e:dd:f5:b5:88:24:66:e3:e4:77:99: 6f:36:79:53:af:ae:4f:b7:68:74:f7:5b:2a:af:83:b5:61:eb: 23:ac:f6:22:2b:65:da:d3:8b:3b:74:59:0a:f1:1f:e5:ac:2f: 6f:01:73:ce:53:b2:91:24:15:20:dd:f6:4c:65:ce:6d:6f:4a: 58:d8:e6:32:56:07:48:8f:e4:19:0a:87:e1:d1:8e:01:23:cf: db:05:8a:fe:07:75:a8:a0:6e:a8:1b:e1:07:21:63:36:6b:95: 10:3b:85:93:0f:d5:2b:64:8f:9a:b4:19:cb:a0:07:97:86:39: 13:51:e1:22:b6:97:8c:4b:f3:f8:06:03:48:bf:59:e4:7f:00: 03:1e:ac:f1:b7:49:21:1a:01:61:bc:64:f0:ca:c2:fd:f1:85: ff:a0:0a:69 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ftqmg27LbsjkAHmuTC8hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OTEzZjljZDFlYzhkMTM4MGNmMGI2MzlkNTcxOTI2MTY2YWQ0ZDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiZiuVQ/wsl75csp8QBRzP19o7mA DjBM5AU5grNtZNLFJcBy570CYpcpo+HQybhZyoBzsAOWSyUkS/oxks0G6iY+xWA5 wn1zSBShbrzagjeVUzGrdYCUX0F5M2W9efKYnpG+qIV0eo/QxLzyunA7vJXiUYWi 1ZSRXenNGapmxE9rWbV9hoqc+/uqHfwLy6tc22kZJPBKzUKQVoWAB8Iv9B8TO24a 9GFDB5t6Fjy7FsGZlabF0ogOXBQc/yfnBPc5atxIKiy1VyO5vqIsIz467E1TeHXl XyJkStiy1pM6hOXrGXHNJ5rjDLb830X3jhVCz/XVyTMH1Em/a3wsm4EbhwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGkT+c0eyNE4DPC2OdVxkmFmrU0EMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvYVJQNXpSN0kwVGdNOExZNTFYR1NZV2F0VFFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT69HAwQA vP/KMA0GCSqGSIb3DQEBCwUAA4IBAQBl3lRHMcWbVm6DedZF+b1SvTNuj/nfvKbl gUOaYp+DSmc4PIyNIKYoIPVbtKorKO3MPXQ0t4oNUKNngAyO1heXQgx3BHnaz0w8 yEcPgvb5ipquypzPanTuNqtPG/RriaBRHt31tYgkZuPkd5lvNnlTr65Pt2h091sq r4O1YesjrPYiK2Xa04s7dFkK8R/lrC9vAXPOU7KRJBUg3fZMZc5tb0pY2OYyVgdI j+QZCofh0Y4BI8/bBYr+B3WooG6oG+EHIWM2a5UQO4WTD9UrZI+atBnLoAeXhjkT UeEitpeMS/P4BgNIv1nkfwADHqzxt0khGgFhvGTwysL98YX/oApp -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:07 2026 by rpki-client