This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/RSgAiFfFUDOLRRmOCmbncd53Jto.roa File: RSgAiFfFUDOLRRmOCmbncd53Jto.roa (raw, json) Hash identifier: R29MYZiBKSn2Fy47uX6Yiye7bvq2OW5L5W2duo3Eaes= Subject key identifier: 45:28:00:88:57:C5:50:33:8B:45:19:8E:0A:66:E7:71:DE:77:26:DA Certificate issuer: /CN=b05442c4ffe9c1d761e7c569360ead042438f903 Certificate serial: 019B7DCAACF7D7DEF2DD023A60938D6519D9 Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/RSgAiFfFUDOLRRmOCmbncd53Jto.roa Signing time: Fri 02 Jan 2026 08:19:53 +0000 ROA not before: Fri 02 Jan 2026 08:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33808 IP address blocks: 79.171.88.0/21 maxlen: 21 89.31.0.0/21 maxlen: 21 134.101.125.0/24 maxlen: 24 193.110.68.0/22 maxlen: 22 217.170.176.0/20 maxlen: 20 217.170.176.0/21 maxlen: 21 217.170.184.0/22 maxlen: 22 217.170.188.0/22 maxlen: 22 2a00:17f0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ac:f7:d7:de:f2:dd:02:3a:60:93:8d:65:19:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903 Validity Not Before: Jan 2 08:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4528008857c550338b45198e0a66e771de7726da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ec:1d:6c:3c:eb:a2:fd:2c:39:e7:a1:4f:fc: 3f:90:08:b3:b3:2f:79:f6:16:13:71:29:d1:42:d4: 5d:6a:a2:30:59:bf:f9:c7:45:7f:5c:f0:75:6d:04: 39:14:eb:a9:2e:b7:e0:ed:38:c0:ed:19:b9:65:c7: 90:56:c4:e0:4d:9a:42:c5:61:87:17:72:85:ea:93: 2a:79:0d:d9:41:02:b6:1b:05:5b:7f:e9:00:69:2b: dc:d0:1a:d3:eb:77:aa:76:2f:bc:9a:ad:1c:1a:31: 75:47:38:77:02:8d:4a:c8:ac:f5:99:e7:9e:96:7c: 97:1c:75:50:8d:e4:20:4d:11:1c:d5:02:d8:fe:a3: 3d:47:7c:42:96:5a:0f:c0:9a:d5:3e:79:bd:52:70: cf:73:fc:cc:d4:03:a4:2c:4d:6c:ea:05:f5:49:59: 0c:5b:01:39:3a:0d:fe:1c:37:3a:89:00:80:42:17: 75:ae:15:05:cb:21:22:53:b3:ac:1b:64:c4:43:0c: bc:3a:49:7c:ed:47:ff:68:c3:89:c1:57:de:35:b9: 45:d9:18:50:9a:2f:ad:fc:a1:d3:63:55:55:0d:21: 9f:d1:3c:bf:2b:f9:84:13:76:ee:15:fe:9f:55:01: 03:2f:56:e3:34:f5:69:14:fa:1b:8f:fb:eb:fd:fd: 01:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:28:00:88:57:C5:50:33:8B:45:19:8E:0A:66:E7:71:DE:77:26:DA X509v3 Authority Key Identifier: keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/RSgAiFfFUDOLRRmOCmbncd53Jto.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.171.88.0/21 89.31.0.0/21 134.101.125.0/24 193.110.68.0/22 217.170.176.0/20 IPv6: 2a00:17f0::/32 Signature Algorithm: sha256WithRSAEncryption 88:70:c3:d2:5c:46:5d:6f:22:9e:93:d1:ec:0b:37:c6:cf:8d: 79:3f:83:5c:36:d9:d2:c7:71:9f:e0:7e:b0:8c:b5:7d:e0:1c: 28:11:9d:ce:e6:35:7c:ca:b4:64:1e:79:1b:14:8a:a4:31:67: a3:cd:08:0d:16:a6:0d:64:36:b9:fb:90:ef:ac:4b:bb:2f:07: ac:9d:b5:54:0c:5c:c9:f6:3f:bc:96:df:30:ac:21:b3:41:da: c1:e6:6b:22:11:f7:cd:ef:79:62:28:fb:bc:d3:95:34:9a:1f: b1:66:3f:20:ae:bb:36:08:da:33:fe:59:bf:d9:02:7c:dd:82: 1d:dc:4e:5d:19:6d:1a:22:ae:1a:3c:49:73:ba:21:ac:0c:9b: f5:2a:e2:2b:ea:6b:73:5e:14:3f:f9:10:da:2b:ff:ef:7e:75: 9e:e8:be:98:bf:b5:36:06:ee:42:da:be:c3:dd:b3:0e:12:d8: 3e:c6:4d:31:e1:81:6b:77:b0:61:e9:7a:3f:81:f4:31:78:c0: 3a:a1:ea:a8:f1:24:50:bb:bb:31:74:42:ef:33:d9:a1:db:08: 53:d9:a4:73:a1:51:6a:fc:a5:40:5a:13:2e:fe:54:d8:70:d8: 51:f9:be:65:cc:76:ec:d9:81:50:50:a2:61:66:48:84:d8:f4: 1b:be:64:80 -----BEGIN CERTIFICATE----- MIIFJDCCBAygAwIBAgISAZt9yqz3197y3QI6YJONZRnZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwNTQ0MmM0ZmZlOWMxZDc2MWU3YzU2OTM2MGVhZDA0MjQz OGY5MDMwHhcNMjYwMTAyMDgxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTI4MDA4ODU3YzU1MDMzOGI0NTE5OGUwYTY2ZTc3MWRlNzcyNmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqewdbDzrov0sOeehT/w/kAizsy95 9hYTcSnRQtRdaqIwWb/5x0V/XPB1bQQ5FOupLrfg7TjA7Rm5ZceQVsTgTZpCxWGH F3KF6pMqeQ3ZQQK2GwVbf+kAaSvc0BrT63eqdi+8mq0cGjF1Rzh3Ao1KyKz1meee lnyXHHVQjeQgTREc1QLY/qM9R3xClloPwJrVPnm9UnDPc/zM1AOkLE1s6gX1SVkM WwE5Og3+HDc6iQCAQhd1rhUFyyEiU7OsG2TEQwy8Okl87Uf/aMOJwVfeNblF2RhQ mi+t/KHTY1VVDSGf0Ty/K/mEE3buFf6fVQEDL1bjNPVpFPobj/vr/f0BRQIDAQAB o4ICMDCCAiwwHQYDVR0OBBYEFEUoAIhXxVAzi0UZjgpm53HedybaMB8GA1UdIwQY MBaAFLBUQsT/6cHXYefFaTYOrQQkOPkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0ZSQ3hQX3B3ZGRoNThWcE5nNnRCQ1E0LVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80Yjc3ZTctMzQ3Yy00OWZhLTgwOGIt NmVkMzMxZjMxZTA5LzEvUlNnQWlGZkZVRE9MUlJtT0NtYm5jZDUzSnRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS80Yjc3ZTctMzQ3Yy00OWZhLTgwOGItNmVkMzMxZjMxZTA5 LzEvc0ZSQ3hQX3B3ZGRoNThWcE5nNnRCQ1E0LVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDT6tYAwQD WR8AAwQAhmV9AwQCwW5EAwQE2aqwMA0EAgACMAcDBQAqABfwMA0GCSqGSIb3DQEB CwUAA4IBAQCIcMPSXEZdbyKek9HsCzfGz415P4NcNtnSx3Gf4H6wjLV94BwoEZ3O 5jV8yrRkHnkbFIqkMWejzQgNFqYNZDa5+5DvrEu7LwesnbVUDFzJ9j+8lt8wrCGz QdrB5msiEffN73liKPu805U0mh+xZj8grrs2CNoz/lm/2QJ83YId3E5dGW0aIq4a PElzuiGsDJv1KuIr6mtzXhQ/+RDaK//vfnWe6L6Yv7U2Bu5C2r7D3bMOEtg+xk0x 4YFrd7Bh6Xo/gfQxeMA6oeqo8SRQu7sxdELvM9mh2whT2aRzoVFq/KVAWhMu/lTY cNhR+b5lzHbs2YFQUKJhZkiE2PQbvmSA -----END CERTIFICATE-----Generated at Mon Feb 9 22:15:20 2026 by rpki-client