This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/79S97sh77TUY_ErUyiX3p8rKe3w.roa File: 79S97sh77TUY_ErUyiX3p8rKe3w.roa (raw, json) Hash identifier: LEhB0OtYTizcbBHkerXjTJ1lt8uSH6AUULDTX50iSM0= Subject key identifier: EF:D4:BD:EE:C8:7B:ED:35:18:FC:4A:D4:CA:25:F7:A7:CA:CA:7B:7C Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Certificate serial: 019B7E37DDB16EBF778E6183A56E78E08781 Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/79S97sh77TUY_ErUyiX3p8rKe3w.roa Signing time: Fri 02 Jan 2026 10:19:08 +0000 ROA not before: Fri 02 Jan 2026 10:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38927 IP address blocks: 185.121.135.0/24 maxlen: 24 212.232.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 03:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:dd:b1:6e:bf:77:8e:61:83:a5:6e:78:e0:87:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Validity Not Before: Jan 2 10:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efd4bdeec87bed3518fc4ad4ca25f7a7caca7b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:41:0d:a9:44:3a:e8:69:be:ed:66:e1:78:50: d8:73:99:41:17:82:42:92:96:59:fa:95:b1:8e:c2: 72:22:22:63:ed:b9:15:55:4f:f3:70:ee:1d:2b:c0: 38:0a:ac:b1:2d:8e:29:32:47:6e:10:55:1a:45:34: 1e:74:1e:50:66:e0:96:9a:2f:9d:ba:7e:6e:ca:02: 92:58:3e:e9:2d:15:d1:84:be:6d:38:01:e9:03:7b: c6:c3:75:4c:bc:86:28:c0:36:b9:bb:46:ee:3b:b0: 25:4a:d7:09:6c:49:7c:98:2b:de:c7:ed:90:f1:fd: 12:6d:78:c9:36:4e:56:1c:fa:d6:53:17:88:a7:78: 1b:17:f9:df:e4:98:fd:a2:42:6f:40:b1:4c:30:b4: 50:bf:e5:95:a6:16:76:10:f1:b5:c1:38:85:a8:7e: 22:ae:3f:63:2e:fc:bd:b9:2c:6b:6c:0d:9a:8f:67: e7:b7:b9:6b:5b:70:f3:ca:9f:39:64:8d:83:0b:b7: f5:6f:b9:65:08:63:43:2c:02:a1:34:16:1b:d7:8c: 4a:f5:59:09:ad:0b:57:4b:ba:f7:e9:f1:11:b7:82: 00:8d:b2:bb:1d:1d:2f:2d:07:a4:c0:db:5b:8a:1c: c0:2d:8d:a2:59:bd:00:e2:e3:27:b0:57:4c:85:d0: c5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D4:BD:EE:C8:7B:ED:35:18:FC:4A:D4:CA:25:F7:A7:CA:CA:7B:7C X509v3 Authority Key Identifier: keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/79S97sh77TUY_ErUyiX3p8rKe3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.121.135.0/24 212.232.19.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:8b:6e:cb:6c:51:07:8f:00:32:6a:3b:89:53:e0:fb:65:99: b1:78:1d:d1:99:c5:e6:41:02:78:ef:c1:2f:e8:a1:89:36:90: e4:22:a3:3c:14:ce:a0:e7:65:81:11:f3:12:74:f6:54:da:ef: ed:30:b6:f0:1a:6b:ad:06:7c:74:e4:6f:3f:40:f8:47:64:f4: 92:a7:05:8f:c5:72:18:fe:57:84:b7:97:de:55:19:d8:6b:21: fa:13:b0:f6:e8:fe:05:fd:84:4f:47:c2:48:68:e4:6b:24:b4: d5:1c:9c:fc:bb:1a:8e:50:0c:ac:e6:83:22:ac:e9:6e:79:b4: 4c:19:59:e8:3c:d2:e5:6e:43:14:82:b9:7e:fc:48:64:e2:74: 3e:ca:e9:1f:26:1c:4c:38:bc:9d:f6:43:47:54:13:48:03:a1: 73:9e:68:2d:d0:97:f8:f4:e9:c8:b0:25:38:fb:53:ad:a5:14: 9a:7a:3c:6d:fb:a4:4f:5a:88:af:40:28:10:f9:d4:b5:1d:eb: 11:64:e0:3e:a6:b9:ab:17:6e:34:0f:1f:05:87:b1:3d:a4:05: cf:6b:1a:a2:59:57:6b:d9:48:d9:3d:19:fa:ec:fd:b6:b7:b8: ce:44:e7:db:ce:f1:a3:20:cf:da:49:44:17:2e:15:53:9b:88: 98:7e:44:29 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+N92xbr93jmGDpW544IeBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx YmM3N2YwHhcNMjYwMTAyMTAxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmQ0YmRlZWM4N2JlZDM1MThmYzRhZDRjYTI1ZjdhN2NhY2E3YjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40ENqUQ66Gm+7WbheFDYc5lBF4JC kpZZ+pWxjsJyIiJj7bkVVU/zcO4dK8A4CqyxLY4pMkduEFUaRTQedB5QZuCWmi+d un5uygKSWD7pLRXRhL5tOAHpA3vGw3VMvIYowDa5u0buO7AlStcJbEl8mCvex+2Q 8f0SbXjJNk5WHPrWUxeIp3gbF/nf5Jj9okJvQLFMMLRQv+WVphZ2EPG1wTiFqH4i rj9jLvy9uSxrbA2aj2fnt7lrW3Dzyp85ZI2DC7f1b7llCGNDLAKhNBYb14xK9VkJ rQtXS7r36fERt4IAjbK7HR0vLQekwNtbihzALY2iWb0A4uMnsFdMhdDF9wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFO/Uve7Ie+01GPxK1Mol96fKynt8MB8GA1UdIwQY MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt YWE2ZWQ0ZGFmYjNiLzEvNzlTOTdzaDc3VFVZX0VyVXlpWDNwOHJLZTN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuXmHAwQA 1OgTMA0GCSqGSIb3DQEBCwUAA4IBAQA/i27LbFEHjwAyajuJU+D7ZZmxeB3RmcXm QQJ478Ev6KGJNpDkIqM8FM6g52WBEfMSdPZU2u/tMLbwGmutBnx05G8/QPhHZPSS pwWPxXIY/leEt5feVRnYayH6E7D26P4F/YRPR8JIaORrJLTVHJz8uxqOUAys5oMi rOluebRMGVnoPNLlbkMUgrl+/Ehk4nQ+yukfJhxMOLyd9kNHVBNIA6Fznmgt0Jf4 9OnIsCU4+1OtpRSaejxt+6RPWoivQCgQ+dS1HesRZOA+prmrF240Dx8Fh7E9pAXP axqiWVdr2UjZPRn67P22t7jOROfbzvGjIM/aSUQXLhVTm4iYfkQp -----END CERTIFICATE-----Generated at Wed Jan 21 11:09:03 2026 by rpki-client