This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/4O_QOhMXcJ0t8sIeKd1mrxtJgYw.roa File: 4O_QOhMXcJ0t8sIeKd1mrxtJgYw.roa (raw, json) Hash identifier: TciVqBMkJDUC0ydXbkijfxJoweOnHoMs5V4ucXCEH+g= Subject key identifier: E0:EF:D0:3A:13:17:70:9D:2D:F2:C2:1E:29:DD:66:AF:1B:49:81:8C Certificate issuer: /CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99 Certificate serial: 019B7F159CAD926715A7A1F724E753798508 Authority key identifier: C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/4O_QOhMXcJ0t8sIeKd1mrxtJgYw.roa Signing time: Fri 02 Jan 2026 14:21:21 +0000 ROA not before: Fri 02 Jan 2026 14:21:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210150 IP address blocks: 79.171.64.0/21 maxlen: 21 85.158.80.0/21 maxlen: 21 217.145.232.0/22 maxlen: 22 2a0d:9c40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.mft rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:9c:ad:92:67:15:a7:a1:f7:24:e7:53:79:85:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c53b4cf0a7471f000f8a56a049b163967cc3bd99 Validity Not Before: Jan 2 14:21:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0efd03a1317709d2df2c21e29dd66af1b49818c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c3:14:36:88:98:20:b4:9e:b5:7b:02:6b:26: e4:38:c8:ab:08:83:42:bb:e7:90:b9:94:bc:f7:9b: 17:46:fe:82:b9:56:4c:5f:61:f0:1d:51:59:09:0a: 70:12:47:4c:e3:08:db:63:a7:85:ca:39:3c:13:7e: 3b:e1:e2:70:d1:bb:70:1d:af:6c:ec:44:1f:ab:08: 0e:db:af:51:04:0f:f9:81:e3:97:79:88:52:9b:d5: 05:74:63:79:b8:c1:aa:a5:99:f5:76:f7:bf:2b:b5: 54:d2:fa:68:25:f7:de:27:35:d7:76:96:c3:c7:71: 3a:1e:d5:7b:93:79:3d:d4:43:37:1c:38:c0:c1:5e: 3b:25:aa:c8:48:2f:f2:a6:05:01:40:a3:b2:43:0c: 55:a1:d1:6e:e0:bb:6a:f1:2c:81:78:4c:14:8a:09: 49:3a:49:e8:fa:7d:03:93:18:07:ca:a6:4a:52:a9: 43:bb:0b:e8:72:15:dd:35:45:be:32:93:f8:a2:bd: 7a:ae:3e:a6:c7:24:d0:b7:8c:11:b3:55:a1:f4:90: c9:bc:40:64:af:eb:9a:cd:02:89:27:49:5d:87:f8: 42:8a:42:71:31:1c:1a:85:4a:be:79:bb:a9:d5:e3: 38:b7:b3:52:b4:fd:de:90:d7:2c:21:ba:c1:57:42: 7a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EF:D0:3A:13:17:70:9D:2D:F2:C2:1E:29:DD:66:AF:1B:49:81:8C X509v3 Authority Key Identifier: keyid:C5:3B:4C:F0:A7:47:1F:00:0F:8A:56:A0:49:B1:63:96:7C:C3:BD:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTtM8KdHHwAPilagSbFjlnzDvZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/4O_QOhMXcJ0t8sIeKd1mrxtJgYw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bb2b75-bc02-4a6b-98d6-d84e6d3af975/1/xTtM8KdHHwAPilagSbFjlnzDvZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.171.64.0/21 85.158.80.0/21 217.145.232.0/22 IPv6: 2a0d:9c40::/29 Signature Algorithm: sha256WithRSAEncryption 0e:ad:a2:79:87:93:e9:28:4f:3e:c6:9f:d5:07:68:35:79:bc: 8d:23:ba:3e:04:85:bd:5b:4b:0b:50:d5:fa:74:d7:ff:b5:eb: 5f:9c:62:74:74:97:17:52:ff:6c:c8:04:25:9d:c1:e8:9a:0b: ff:5f:a1:9a:04:42:be:7b:c4:a8:d5:db:b8:c5:c0:a1:ed:77: 41:a4:0b:36:25:42:fd:21:fe:ae:e3:3f:5d:7e:f6:0c:4f:cf: 0c:b9:f2:d1:96:21:bf:8b:fb:8d:fd:ab:1e:5e:ec:63:2a:92: ef:84:d5:2a:9a:66:8d:81:a1:b7:c6:7f:31:97:18:f9:36:92: 9d:ba:50:9a:82:b6:d6:a5:4f:87:07:3b:ea:da:64:75:6c:1b: 39:92:d5:d6:35:75:aa:72:b7:66:4c:e8:1e:22:26:92:bd:90: 03:e2:e6:7c:1f:eb:5b:62:57:85:37:4e:90:a4:dd:9b:4b:19: c6:86:3c:32:c3:ea:a9:ba:7d:c8:49:96:2c:18:6a:36:ea:e4: 48:87:04:8d:d8:4c:b5:1c:a8:2d:a5:4d:72:ad:62:d7:7a:19: 9e:48:72:7a:62:72:e9:07:6c:7a:bd:c0:02:78:38:23:37:79: f1:4e:c1:8e:ea:f2:f0:7c:da:53:c6:e0:5e:d9:4f:ef:86:ea: 98:6b:78:13 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt/FZytkmcVp6H3JOdTeYUIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1M2I0Y2YwYTc0NzFmMDAwZjhhNTZhMDQ5YjE2Mzk2N2Nj M2JkOTkwHhcNMjYwMTAyMTQyMTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGVmZDAzYTEzMTc3MDlkMmRmMmMyMWUyOWRkNjZhZjFiNDk4MThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cMUNoiYILSetXsCaybkOMirCINC u+eQuZS895sXRv6CuVZMX2HwHVFZCQpwEkdM4wjbY6eFyjk8E3474eJw0btwHa9s 7EQfqwgO269RBA/5geOXeYhSm9UFdGN5uMGqpZn1dve/K7VU0vpoJffeJzXXdpbD x3E6HtV7k3k91EM3HDjAwV47JarISC/ypgUBQKOyQwxVodFu4Ltq8SyBeEwUiglJ Okno+n0DkxgHyqZKUqlDuwvochXdNUW+MpP4or16rj6mxyTQt4wRs1Wh9JDJvEBk r+uazQKJJ0ldh/hCikJxMRwahUq+ebup1eM4t7NStP3ekNcsIbrBV0J68QIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFODv0DoTF3CdLfLCHindZq8bSYGMMB8GA1UdIwQY MBaAFMU7TPCnRx8AD4pWoEmxY5Z8w72ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFR0TThLZEhId0FQaWxhZ1NiRmpsbnpEdlprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9iYjJiNzUtYmMwMi00YTZiLTk4ZDYt ZDg0ZTZkM2FmOTc1LzEvNE9fUU9oTVhjSjB0OHNJZUtkMW1yeHRKZ1l3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9iYjJiNzUtYmMwMi00YTZiLTk4ZDYtZDg0ZTZkM2FmOTc1 LzEveFR0TThLZEhId0FQaWxhZ1NiRmpsbnpEdlprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDT6tAAwQD VZ5QAwQC2ZHoMA0EAgACMAcDBQMqDZxAMA0GCSqGSIb3DQEBCwUAA4IBAQAOraJ5 h5PpKE8+xp/VB2g1ebyNI7o+BIW9W0sLUNX6dNf/tetfnGJ0dJcXUv9syAQlncHo mgv/X6GaBEK+e8So1du4xcCh7XdBpAs2JUL9If6u4z9dfvYMT88MufLRliG/i/uN /aseXuxjKpLvhNUqmmaNgaG3xn8xlxj5NpKdulCagrbWpU+HBzvq2mR1bBs5ktXW NXWqcrdmTOgeIiaSvZAD4uZ8H+tbYleFN06QpN2bSxnGhjwyw+qpun3ISZYsGGo2 6uRIhwSN2Ey1HKgtpU1yrWLXehmeSHJ6YnLpB2x6vcACeDgjN3nxTsGO6vLwfNpT xuBe2U/vhuqYa3gT -----END CERTIFICATE-----Generated at Tue Jan 27 08:47:00 2026 by rpki-client