This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/eEtvYHTwNLCffEj8YwMZ07YM80A.roa File: eEtvYHTwNLCffEj8YwMZ07YM80A.roa (raw, json) Hash identifier: KoseUG4qyoAZeCMnKAte2U4qF0QE9yVimwNiWlLxjq8= Subject key identifier: 78:4B:6F:60:74:F0:34:B0:9F:7C:48:FC:63:03:19:D3:B6:0C:F3:40 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797ED7B74282197FB5163C964D0F86A2 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/eEtvYHTwNLCffEj8YwMZ07YM80A.roa Signing time: Thu 01 Jan 2026 12:18:34 +0000 ROA not before: Thu 01 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207459 IP address blocks: 79.175.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:d7:b7:42:82:19:7f:b5:16:3c:96:4d:0f:86:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=784b6f6074f034b09f7c48fc630319d3b60cf340 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b1:e8:59:e7:7e:87:c5:f5:77:81:02:e2:19: 9b:14:fd:a9:70:06:27:a5:b0:f9:dd:b4:f8:8f:5d: 63:2d:45:50:5f:08:84:34:21:68:0d:49:fe:9a:dd: 8b:08:99:23:bb:0d:ae:81:68:05:2f:c2:bd:80:7a: 4f:7a:33:77:79:81:34:d1:f3:21:62:a2:de:0a:a3: 6a:a5:97:de:57:15:57:9b:11:98:a2:5a:64:0e:76: 4f:0e:23:0b:cc:7f:77:54:e8:e6:3b:cc:a2:2a:18: 25:8d:0d:a6:ae:22:31:f6:1e:28:47:c6:25:69:07: 5a:50:de:49:d6:d8:32:64:ce:51:9f:b7:c6:69:ec: b8:c4:08:69:f7:5e:b2:fe:ad:fb:d5:23:21:c2:54: 8d:11:59:d4:7e:9a:cb:20:e2:d8:37:70:a6:48:36: 8e:f6:51:78:ca:2a:24:04:89:c0:17:66:7f:c9:b4: d4:aa:a3:dd:b9:01:69:41:8c:cc:d5:f2:5f:ca:95: 54:8f:2d:9d:47:25:a6:0c:8c:f0:23:a6:98:ba:a5: 16:bd:72:80:b3:e0:c4:21:a7:25:9a:5c:65:9d:41: 75:22:cb:12:03:b0:6f:85:6e:26:5b:3d:77:d4:01: fe:97:4a:e9:9f:c7:ed:62:67:e3:83:c1:01:4a:c2: 69:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4B:6F:60:74:F0:34:B0:9F:7C:48:FC:63:03:19:D3:B6:0C:F3:40 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/eEtvYHTwNLCffEj8YwMZ07YM80A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.175.96.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:30:44:b5:89:e5:57:f9:59:89:83:70:12:c8:58:a2:1f:d4: b8:80:b9:9b:55:a9:6f:e6:56:2c:09:a3:bf:fe:b8:0b:08:0d: 0d:46:64:ff:d6:ed:e6:b3:06:13:09:3d:50:6e:85:82:cc:97: da:c1:aa:9c:d1:ae:68:34:9b:65:5b:b2:54:b7:b3:f2:ea:07: ff:22:65:54:2f:99:a6:d5:a3:53:f6:56:3a:42:e2:e8:d8:4a: a0:41:15:89:28:30:39:c2:8f:dc:61:28:3a:4d:c9:ae:65:37: d2:ed:cc:f3:40:22:65:c7:d2:47:59:0b:09:99:cc:80:33:ae: 87:6d:d8:57:b4:9c:b9:83:f0:e2:05:0d:3b:93:f0:54:25:32: db:03:b8:1b:40:c9:a8:4e:8b:82:54:40:19:59:ad:f6:a5:c4: a2:a5:90:93:65:20:2d:33:48:7c:f7:64:e1:f3:3b:09:aa:7e: b2:75:09:cd:4a:fc:c5:7a:31:77:45:9e:24:b1:36:ec:c0:49: 63:b4:11:a2:b9:70:99:25:a5:4f:46:86:3a:bf:d7:bf:ff:2f: bf:b1:af:db:6e:2d:a0:32:9e:a9:d5:e8:f5:84:16:09:86:5a: 4b:71:8d:6e:85:8f:0a:14:c9:fc:fd:df:b5:0b:85:ad:61:4d: 52:b2:20:e2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fte3QoIZf7UWPJZND4aiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODRiNmY2MDc0ZjAzNGIwOWY3YzQ4ZmM2MzAzMTlkM2I2MGNmMzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrHoWed+h8X1d4EC4hmbFP2pcAYn pbD53bT4j11jLUVQXwiENCFoDUn+mt2LCJkjuw2ugWgFL8K9gHpPejN3eYE00fMh YqLeCqNqpZfeVxVXmxGYolpkDnZPDiMLzH93VOjmO8yiKhgljQ2mriIx9h4oR8Yl aQdaUN5J1tgyZM5Rn7fGaey4xAhp916y/q371SMhwlSNEVnUfprLIOLYN3CmSDaO 9lF4yiokBInAF2Z/ybTUqqPduQFpQYzM1fJfypVUjy2dRyWmDIzwI6aYuqUWvXKA s+DEIaclmlxlnUF1IssSA7BvhW4mWz131AH+l0rpn8ftYmfjg8EBSsJpNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHhLb2B08DSwn3xI/GMDGdO2DPNAMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvZUV0dllIVHdOTENmZkVqOFl3TVowN1lNODBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT69gMA0G CSqGSIb3DQEBCwUAA4IBAQAaMES1ieVX+VmJg3ASyFiiH9S4gLmbValv5lYsCaO/ /rgLCA0NRmT/1u3mswYTCT1QboWCzJfawaqc0a5oNJtlW7JUt7Py6gf/ImVUL5mm 1aNT9lY6QuLo2EqgQRWJKDA5wo/cYSg6TcmuZTfS7czzQCJlx9JHWQsJmcyAM66H bdhXtJy5g/DiBQ07k/BUJTLbA7gbQMmoTouCVEAZWa32pcSipZCTZSAtM0h892Th 8zsJqn6ydQnNSvzFejF3RZ4ksTbswEljtBGiuXCZJaVPRoY6v9e//y+/sa/bbi2g Mp6p1ej1hBYJhlpLcY1uhY8KFMn8/d+1C4WtYU1SsiDi -----END CERTIFICATE-----Generated at Mon Jan 19 13:54:03 2026 by rpki-client