This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/CW6HLaTxuEgAkIkl3ZVRU-w1DnQ.roa File: CW6HLaTxuEgAkIkl3ZVRU-w1DnQ.roa (raw, json) Hash identifier: 3gHAMI5/T+SJvodC41hA812P6kRQqhKBBEsEG4aWbEA= Subject key identifier: 09:6E:87:2D:A4:F1:B8:48:00:90:89:25:DD:95:51:53:EC:35:0E:74 Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029 Certificate serial: 019B78A240512EE76E7732822EE7703511E5 Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/CW6HLaTxuEgAkIkl3ZVRU-w1DnQ.roa Signing time: Thu 01 Jan 2026 08:17:37 +0000 ROA not before: Thu 01 Jan 2026 08:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8881 IP address blocks: 79.121.148.0/23 maxlen: 24 79.121.154.0/23 maxlen: 24 79.121.162.0/23 maxlen: 24 79.121.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:40:51:2e:e7:6e:77:32:82:2e:e7:70:35:11:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e20b034e2c497b1884488def106972704765029 Validity Not Before: Jan 1 08:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=096e872da4f1b84800908925dd955153ec350e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:50:b6:f4:7c:a6:2a:3f:93:32:38:48:96:9e: cc:53:08:f3:08:0d:87:27:f8:51:b8:d3:d3:45:b3: 7a:18:68:07:3e:d0:f4:09:5f:fc:2f:7b:f8:4b:c3: da:1b:31:48:1f:f4:15:62:e0:92:74:f8:a4:07:75: 6b:00:0f:6a:7d:dd:9c:6d:d2:ee:26:c4:91:9e:54: 35:c2:a4:2a:6e:7b:1b:d8:d7:03:26:84:2d:57:b5: 15:72:de:68:de:d5:f9:9e:96:54:22:02:46:1a:a5: 70:8c:2e:d9:ca:1d:e5:13:11:26:c3:c2:66:7e:70: b7:a5:63:9b:b3:1f:7b:e5:0f:4a:fc:07:c2:a2:e4: ac:87:87:3d:cd:9b:bd:fe:86:09:d4:61:f7:2d:ca: 5b:eb:1f:3f:83:16:0f:a6:73:60:87:ee:f8:ab:eb: 2d:9f:3f:c7:09:1e:59:0b:d1:91:31:09:33:71:76: 2f:61:1c:7e:ca:5a:49:d5:6a:70:dd:70:89:74:2d: c7:53:53:48:34:fe:38:3d:4e:a3:84:ad:90:6a:ca: 2b:11:e1:65:15:f0:91:85:d7:b6:df:f9:88:83:24: 1e:d1:cb:b4:ff:c3:54:48:ef:86:03:f5:ec:df:b9: a6:48:59:71:57:d8:7e:3d:54:d9:af:e8:b0:59:e2: 48:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:6E:87:2D:A4:F1:B8:48:00:90:89:25:DD:95:51:53:EC:35:0E:74 X509v3 Authority Key Identifier: keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/CW6HLaTxuEgAkIkl3ZVRU-w1DnQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.121.148.0/23 79.121.154.0/23 79.121.162.0-79.121.165.255 Signature Algorithm: sha256WithRSAEncryption 25:13:00:f9:52:f3:d0:e9:8a:b8:1b:0e:f1:c6:29:7a:b8:a8: 3a:95:f3:0c:6a:da:5e:90:5e:c5:b0:22:8a:27:2a:24:15:83: a0:9f:c5:a9:81:b9:49:39:7c:6e:be:e4:e6:93:ce:57:9d:e5: a5:eb:83:da:76:a0:14:65:fe:b3:04:90:ee:96:63:0f:c5:32: 55:f5:7f:cd:a3:40:c5:c9:fe:16:b5:c1:51:76:3c:ab:2f:ac: 45:9e:a4:35:76:39:c2:b3:bf:88:5a:d1:a8:ea:e9:25:99:e2: 04:21:6e:96:e0:a0:25:59:c8:6a:d9:45:ae:c2:d1:fb:27:74: e7:77:b4:9d:f1:e7:01:31:d9:9f:27:5e:bb:06:4b:fd:df:a9: 6d:60:d3:0d:84:9f:5e:c6:af:74:fe:98:f4:94:b3:52:fe:cd: ad:07:0b:29:31:76:b7:66:8a:55:60:34:a9:40:04:99:d6:64: 7d:12:71:d0:7f:d6:08:3f:f0:ee:6b:44:db:c3:6e:be:ec:b7: 24:38:d4:e5:1c:45:fd:ab:88:4d:0d:24:17:dc:75:bc:b5:31: 00:53:1e:0a:6b:55:d2:40:6b:9f:40:87:e0:a5:14:5e:64:15: 4c:bf:ae:33:0f:5a:88:29:a7:89:3d:97:e9:0b:b9:07:7d:1c: 4b:a2:55:36 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt4okBRLududzKCLudwNRHlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3 NjUwMjkwHhcNMjYwMTAxMDgxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTZlODcyZGE0ZjFiODQ4MDA5MDg5MjVkZDk1NTE1M2VjMzUwZTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlC29HymKj+TMjhIlp7MUwjzCA2H J/hRuNPTRbN6GGgHPtD0CV/8L3v4S8PaGzFIH/QVYuCSdPikB3VrAA9qfd2cbdLu JsSRnlQ1wqQqbnsb2NcDJoQtV7UVct5o3tX5npZUIgJGGqVwjC7Zyh3lExEmw8Jm fnC3pWObsx975Q9K/AfCouSsh4c9zZu9/oYJ1GH3Lcpb6x8/gxYPpnNgh+74q+st nz/HCR5ZC9GRMQkzcXYvYRx+ylpJ1Wpw3XCJdC3HU1NINP44PU6jhK2QasorEeFl FfCRhde23/mIgyQe0cu0/8NUSO+GA/Xs37mmSFlxV9h+PVTZr+iwWeJImwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFAluhy2k8bhIAJCJJd2VUVPsNQ50MB8GA1UdIwQY MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt MDM1ZDk3N2Y0MjE2LzEvQ1c2SExhVHh1RWdBa0lrbDNaVlJVLXcxRG5RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2 LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBT3mUAwQB T3maMAwDBAFPeaIDBAFPeaQwDQYJKoZIhvcNAQELBQADggEBACUTAPlS89Dpirgb DvHGKXq4qDqV8wxq2l6QXsWwIoonKiQVg6CfxamBuUk5fG6+5OaTzled5aXrg9p2 oBRl/rMEkO6WYw/FMlX1f82jQMXJ/ha1wVF2PKsvrEWepDV2OcKzv4ha0ajq6SWZ 4gQhbpbgoCVZyGrZRa7C0fsndOd3tJ3x5wEx2Z8nXrsGS/3fqW1g0w2En17Gr3T+ mPSUs1L+za0HCykxdrdmilVgNKlABJnWZH0ScdB/1gg/8O5rRNvDbr7styQ41OUc Rf2riE0NJBfcdby1MQBTHgprVdJAa59Ah+ClFF5kFUy/rjMPWogpp4k9l+kLuQd9 HEuiVTY= -----END CERTIFICATE-----Generated at Mon Jan 19 08:15:50 2026 by rpki-client