This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/cRdiDIpORPBAVJhwFu4KSgQxBNU.roa File: cRdiDIpORPBAVJhwFu4KSgQxBNU.roa (raw, json) Hash identifier: 7e+H6mv7zzWiedShVMT4BRofekAygqmkF5pafBmAWT4= Subject key identifier: 71:17:62:0C:8A:4E:44:F0:40:54:98:70:16:EE:0A:4A:04:31:04:D5 Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Certificate serial: 019B7AC789A490B35726A3F1351793B47F94 Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/cRdiDIpORPBAVJhwFu4KSgQxBNU.roa Signing time: Thu 01 Jan 2026 18:17:35 +0000 ROA not before: Thu 01 Jan 2026 18:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35608 IP address blocks: 79.171.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:89:a4:90:b3:57:26:a3:f1:35:17:93:b4:7f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c Validity Not Before: Jan 1 18:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7117620c8a4e44f04054987016ee0a4a043104d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ab:55:c5:3f:5d:7c:88:05:a4:67:6d:46:fe: 40:69:b2:b3:ec:a0:0d:8a:0a:00:89:56:6b:57:e1: d9:c2:9b:82:25:35:43:2e:1f:e0:bb:4a:a8:3b:3c: 1a:2d:66:3a:4a:12:1d:d3:35:a6:13:f2:2b:c9:c4: 4b:ba:bf:ab:5b:46:24:5b:17:65:30:6f:4b:df:5b: a5:49:71:c0:01:a1:eb:7e:d3:5c:29:e0:5a:43:c4: be:2e:3c:4e:d5:f2:a7:2d:54:e5:13:18:4a:0e:b2: 5e:77:8d:c7:1f:64:0d:62:cd:21:b2:f2:a5:d5:dc: ef:65:30:b7:ea:35:44:18:d7:04:2d:17:46:6f:15: 21:0c:84:7e:13:64:39:7c:08:e0:3a:b8:e5:4c:99: ac:f1:07:7e:3c:1f:6f:6c:ee:81:27:58:45:a0:f7: 8f:c2:55:76:9d:e3:25:4f:6c:a0:97:11:10:44:d3: 2c:06:9d:53:d5:20:01:74:41:48:21:45:8c:57:3f: a3:b9:7b:0d:7a:df:ad:6b:90:d0:45:d8:7c:8b:44: b1:04:e4:15:33:c8:fd:11:ac:6b:38:b3:bf:e5:1d: 4a:81:ae:f1:4e:89:f0:49:0b:ce:b8:32:4f:3b:e1: 38:3f:76:6a:6d:1a:1f:ff:53:a6:5e:a6:19:6d:65: 5a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:17:62:0C:8A:4E:44:F0:40:54:98:70:16:EE:0A:4A:04:31:04:D5 X509v3 Authority Key Identifier: keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/cRdiDIpORPBAVJhwFu4KSgQxBNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.171.117.0/24 Signature Algorithm: sha256WithRSAEncryption 00:07:90:6c:73:f6:2e:2e:56:3f:6e:49:aa:94:41:64:b3:8d: cd:ff:3f:0d:b6:fd:b0:87:1b:ba:bc:c8:9f:34:4f:3d:6c:53: 55:85:e9:32:87:ba:d7:c2:41:fd:a2:12:30:c4:e6:a0:d7:a5: 3b:c0:ec:e7:ad:6e:6e:d4:85:40:54:8c:e8:00:d8:31:42:fb: 84:0b:bb:d8:a6:ac:52:74:5f:9a:b4:71:dd:bc:6c:76:bd:85: 5a:fb:27:2b:c7:d1:f1:7d:bd:ad:19:11:94:5e:de:d8:ab:df: 5c:f8:d4:93:9a:3b:74:5b:68:3f:54:61:6c:c9:79:a0:bd:a0: 0b:07:60:9f:49:50:f7:22:73:35:34:c4:d2:1a:a8:2f:db:e1: f5:99:20:86:d9:f3:61:9a:0d:97:fc:1f:39:a9:0d:5b:e1:59: 9c:95:29:14:a5:06:bc:81:b6:f7:e7:94:93:e5:8f:7b:9c:11: 01:a3:a8:0b:4a:64:40:eb:54:5a:bc:ee:61:4e:52:83:f7:bf: 64:81:58:50:a9:ce:a5:f6:ff:c8:cb:6a:67:ba:83:e8:91:1e: ae:ad:02:a2:16:78:09:ba:5d:a1:93:73:91:a3:ac:5b:18:26: a6:fa:4f:9a:65:52:88:93:fa:cc:a4:c7:d8:5a:03:5c:b9:99: 31:6b:c8:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x4mkkLNXJqPxNReTtH+UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0 ODBiOWMwHhcNMjYwMTAxMTgxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTE3NjIwYzhhNGU0NGYwNDA1NDk4NzAxNmVlMGE0YTA0MzEwNGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkatVxT9dfIgFpGdtRv5AabKz7KAN igoAiVZrV+HZwpuCJTVDLh/gu0qoOzwaLWY6ShId0zWmE/IrycRLur+rW0YkWxdl MG9L31ulSXHAAaHrftNcKeBaQ8S+LjxO1fKnLVTlExhKDrJed43HH2QNYs0hsvKl 1dzvZTC36jVEGNcELRdGbxUhDIR+E2Q5fAjgOrjlTJms8Qd+PB9vbO6BJ1hFoPeP wlV2neMlT2yglxEQRNMsBp1T1SABdEFIIUWMVz+juXsNet+ta5DQRdh8i0SxBOQV M8j9EaxrOLO/5R1Kga7xTonwSQvOuDJPO+E4P3ZqbRof/1OmXqYZbWVaOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHEXYgyKTkTwQFSYcBbuCkoEMQTVMB8GA1UdIwQY MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt NTczNzAxYzg0ODMzLzEvY1JkaURJcE9SUEJBVkpod0Z1NEtTZ1F4Qk5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT6t1MA0G CSqGSIb3DQEBCwUAA4IBAQAAB5Bsc/YuLlY/bkmqlEFks43N/z8Ntv2whxu6vMif NE89bFNVhekyh7rXwkH9ohIwxOag16U7wOznrW5u1IVAVIzoANgxQvuEC7vYpqxS dF+atHHdvGx2vYVa+ycrx9Hxfb2tGRGUXt7Yq99c+NSTmjt0W2g/VGFsyXmgvaAL B2CfSVD3InM1NMTSGqgv2+H1mSCG2fNhmg2X/B85qQ1b4VmclSkUpQa8gbb355ST 5Y97nBEBo6gLSmRA61RavO5hTlKD979kgVhQqc6l9v/Iy2pnuoPokR6urQKiFngJ ul2hk3ORo6xbGCam+k+aZVKIk/rMpMfYWgNcuZkxa8i/ -----END CERTIFICATE-----Generated at Mon Jan 19 20:34:55 2026 by rpki-client