This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/4zHjTJievMCXjs1MUKZY0zgnlZk.roa File: 4zHjTJievMCXjs1MUKZY0zgnlZk.roa (raw, json) Hash identifier: jFjIAWns9tkVOTNAS5iBg9kuu8j0fEnt1irbpmfUxy4= Subject key identifier: E3:31:E3:4C:98:9E:BC:C0:97:8E:CD:4C:50:A6:58:D3:38:27:95:99 Certificate issuer: /CN=bafd79b6dd85290fef6169a44e426107d274651a Certificate serial: 019B78A351E5F6B51EC31A621DE92996DEFF Authority key identifier: BA:FD:79:B6:DD:85:29:0F:EF:61:69:A4:4E:42:61:07:D2:74:65:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/4zHjTJievMCXjs1MUKZY0zgnlZk.roa Signing time: Thu 01 Jan 2026 08:18:47 +0000 ROA not before: Thu 01 Jan 2026 08:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198362 IP address blocks: 176.117.78.0/24 maxlen: 24 176.117.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.mft rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:51:e5:f6:b5:1e:c3:1a:62:1d:e9:29:96:de:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bafd79b6dd85290fef6169a44e426107d274651a Validity Not Before: Jan 1 08:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e331e34c989ebcc0978ecd4c50a658d338279599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:70:91:67:f4:33:39:8f:d6:a5:f0:59:52:d2: cb:38:f3:27:4f:34:d6:81:0a:1b:94:d0:21:bc:b3: d5:fe:b3:e5:d6:b3:f6:b8:f8:de:cb:dd:a1:2f:a4: 24:be:33:c8:2d:ac:ea:c0:42:19:9d:09:d2:f2:96: 14:5b:3e:5c:17:ec:7a:f8:12:e9:75:5b:0a:25:2c: 70:39:6c:c9:9c:b8:15:4d:29:28:9f:c3:89:ee:3e: d8:cf:01:da:5b:15:5a:6c:fb:64:ac:99:e9:90:f6: fa:63:eb:28:ab:7f:e0:61:2b:87:ef:f8:a7:1a:bc: a2:6b:32:26:9b:5a:34:f1:76:21:55:dd:c5:b5:dc: 23:af:d6:f6:5f:9d:01:97:8e:ab:d5:41:c1:92:80: a5:a8:eb:84:8e:c0:50:bd:36:8a:45:54:33:ce:04: 20:17:31:53:37:0b:94:11:8b:17:69:77:88:14:a8: f2:c5:27:2a:0e:fd:e1:2e:bb:b3:7e:34:07:1e:f9: dc:d9:f9:0a:2f:35:76:c6:07:a0:ca:aa:a3:a1:22: 8b:95:fe:c3:3d:41:79:44:d5:65:0d:17:ac:0d:a1: f0:d7:94:57:2a:a3:51:fa:cc:5c:d3:f6:f3:fb:83: e3:a2:f1:12:b1:24:6d:92:5d:8a:0e:29:61:7d:e2: 5e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:31:E3:4C:98:9E:BC:C0:97:8E:CD:4C:50:A6:58:D3:38:27:95:99 X509v3 Authority Key Identifier: keyid:BA:FD:79:B6:DD:85:29:0F:EF:61:69:A4:4E:42:61:07:D2:74:65:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/4zHjTJievMCXjs1MUKZY0zgnlZk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/169a21-f3c1-43b9-ade5-8696a96044f2/1/uv15tt2FKQ_vYWmkTkJhB9J0ZRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.117.78.0/23 Signature Algorithm: sha256WithRSAEncryption 47:d7:42:76:66:89:b3:5e:2e:40:c0:9b:d5:3e:6d:05:16:55: bd:43:4c:40:2d:9e:40:16:b0:f2:16:0d:f4:16:40:25:48:41: 41:ec:05:e8:b6:c6:1b:86:3b:58:e9:62:22:0c:f5:9a:ee:ae: 8c:04:8e:94:66:ec:e5:44:29:54:68:56:4f:98:9a:08:b9:51: 75:a6:c2:e2:65:37:72:5a:0e:65:d2:33:16:b5:1e:1f:bc:09: f1:8d:3c:95:bf:07:ad:92:0d:4f:85:68:05:f2:bf:1e:a9:25: e1:16:ea:29:02:22:17:d1:01:49:50:da:09:b7:77:eb:c4:81: 6a:1a:20:ab:ae:6d:02:4f:29:67:86:b9:85:6d:65:ae:cd:47: 36:01:9d:d7:81:50:78:21:eb:51:d2:78:78:04:54:7d:f4:d5: bd:48:57:62:c1:01:eb:4e:57:29:8e:be:6a:e1:00:b1:62:51: 47:72:7e:a1:5f:f3:60:89:5f:31:80:ec:e7:37:e5:57:c9:86: 3b:92:e3:ae:6b:30:05:f2:24:9c:0b:c7:a7:9f:f0:15:eb:99: dd:e9:de:fe:0b:75:d2:40:72:41:af:70:e3:dc:3c:ce:96:e0: 8c:de:f2:3f:8a:2f:7c:dc:39:94:21:bd:0b:f1:c1:09:7c:12: 50:72:d0:3b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4o1Hl9rUewxpiHekplt7/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhZmQ3OWI2ZGQ4NTI5MGZlZjYxNjlhNDRlNDI2MTA3ZDI3 NDY1MWEwHhcNMjYwMTAxMDgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzMxZTM0Yzk4OWViY2MwOTc4ZWNkNGM1MGE2NThkMzM4Mjc5NTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnCRZ/QzOY/WpfBZUtLLOPMnTzTW gQoblNAhvLPV/rPl1rP2uPjey92hL6QkvjPILazqwEIZnQnS8pYUWz5cF+x6+BLp dVsKJSxwOWzJnLgVTSkon8OJ7j7YzwHaWxVabPtkrJnpkPb6Y+soq3/gYSuH7/in GryiazImm1o08XYhVd3Ftdwjr9b2X50Bl46r1UHBkoClqOuEjsBQvTaKRVQzzgQg FzFTNwuUEYsXaXeIFKjyxScqDv3hLruzfjQHHvnc2fkKLzV2xgegyqqjoSKLlf7D PUF5RNVlDResDaHw15RXKqNR+sxc0/bz+4PjovESsSRtkl2KDilhfeJe+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOMx40yYnrzAl47NTFCmWNM4J5WZMB8GA1UdIwQY MBaAFLr9ebbdhSkP72FppE5CYQfSdGUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdXYxNXR0MkZLUV92WVdta1RrSmhCOUowWlJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8xNjlhMjEtZjNjMS00M2I5LWFkZTUt ODY5NmE5NjA0NGYyLzEvNHpIalRKaWV2TUNYanMxTVVLWlkwemdubFprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8xNjlhMjEtZjNjMS00M2I5LWFkZTUtODY5NmE5NjA0NGYy LzEvdXYxNXR0MkZLUV92WVdta1RrSmhCOUowWlJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsHVOMA0G CSqGSIb3DQEBCwUAA4IBAQBH10J2ZomzXi5AwJvVPm0FFlW9Q0xALZ5AFrDyFg30 FkAlSEFB7AXotsYbhjtY6WIiDPWa7q6MBI6UZuzlRClUaFZPmJoIuVF1psLiZTdy Wg5l0jMWtR4fvAnxjTyVvwetkg1PhWgF8r8eqSXhFuopAiIX0QFJUNoJt3frxIFq GiCrrm0CTylnhrmFbWWuzUc2AZ3XgVB4IetR0nh4BFR99NW9SFdiwQHrTlcpjr5q 4QCxYlFHcn6hX/NgiV8xgOznN+VXyYY7kuOuazAF8iScC8enn/AV65nd6d7+C3XS QHJBr3Dj3DzOluCM3vI/ii983DmUIb0L8cEJfBJQctA7 -----END CERTIFICATE-----Generated at Mon Jan 12 09:21:15 2026 by rpki-client