This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/PayA9942Pu3PEwdgbc9zI085M7A.roa File: PayA9942Pu3PEwdgbc9zI085M7A.roa (raw, json) Hash identifier: pkpsKDUMLuKxSQ8sea1A1XeztsAXtWdezuYMLOySqF4= Subject key identifier: 3D:AC:80:F7:DE:36:3E:ED:CF:13:07:60:6D:CF:73:23:4F:39:33:B0 Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 019B79ED3A484F86B61464D3158356CA28E9 Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/PayA9942Pu3PEwdgbc9zI085M7A.roa Signing time: Thu 01 Jan 2026 14:19:08 +0000 ROA not before: Thu 01 Jan 2026 14:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203061 IP address blocks: 79.110.239.0/24 maxlen: 24 79.110.239.0/25 maxlen: 25 185.183.44.0/22 maxlen: 22 185.207.37.0/24 maxlen: 24 185.207.38.0/24 maxlen: 24 188.212.6.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:3a:48:4f:86:b6:14:64:d3:15:83:56:ca:28:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: Jan 1 14:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3dac80f7de363eedcf1307606dcf73234f3933b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:93:78:cb:23:07:a2:2a:16:d1:77:65:f1:4a: f8:e4:c5:59:ce:12:e6:cb:ec:19:06:f6:48:4f:a3: 70:b3:50:e4:f9:44:35:50:8e:c4:fe:d4:1b:ee:88: a5:d3:d5:c9:87:d4:3a:63:dc:4d:fb:4b:fb:7a:30: 29:da:d9:c3:da:32:34:d7:cb:af:30:02:66:68:b5: be:44:b2:b3:6e:30:dd:d1:6a:a5:ff:d9:3e:06:be: b9:c9:bc:a8:e5:89:c1:a5:e1:e8:64:a6:85:21:54: 92:76:33:22:2a:9e:ce:cf:0f:2c:10:22:fa:db:b5: 1f:e2:47:a0:cf:6c:4c:4d:66:6e:f0:5a:65:bf:ee: 7c:4f:14:31:a6:35:ca:70:bd:4d:3d:c6:2d:1e:7b: 52:38:71:53:eb:66:54:b2:90:a7:06:8a:73:b9:08: c2:04:20:b8:9a:42:dc:8d:f7:fb:3a:2c:13:0e:82: 26:66:f1:10:2b:b3:89:91:5c:b9:8c:c8:30:3e:37: ed:c3:2f:f6:66:b9:8b:38:04:06:3c:96:1c:e2:51: 66:8f:66:70:52:6f:03:48:ed:d6:e9:93:eb:6c:33: 04:e4:42:29:de:43:9a:cd:0a:5d:19:21:a0:69:ad: 66:aa:a0:69:73:85:06:64:6a:ba:f2:77:6a:bf:f7: 84:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AC:80:F7:DE:36:3E:ED:CF:13:07:60:6D:CF:73:23:4F:39:33:B0 X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/PayA9942Pu3PEwdgbc9zI085M7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.110.239.0/24 185.183.44.0/22 185.207.37.0-185.207.38.255 188.212.6.0/23 Signature Algorithm: sha256WithRSAEncryption 91:b8:1e:87:93:c7:de:1c:6c:f3:2c:a7:e1:48:d2:4b:ff:a8: 75:3a:c6:2f:b6:ac:02:48:54:3b:47:f4:cc:c1:fe:56:93:d2: 95:48:49:bd:d4:0a:42:7e:ec:70:bd:69:99:fa:bf:92:26:41: f1:93:f0:0a:74:75:57:84:e4:ea:6d:eb:02:9b:ba:33:22:08: ef:4c:65:44:2e:e5:30:37:71:fd:3b:41:bf:ad:f7:a0:80:61: 60:95:4b:7b:59:04:d8:34:3a:d9:63:ec:08:d8:a6:60:96:16: 05:ca:a3:e4:17:25:6a:50:c9:24:a5:4d:18:2c:e9:46:02:29: 2d:23:15:e6:3f:69:fe:35:ec:fa:6d:04:97:1f:3c:d5:78:65: 57:c6:f2:b9:55:d1:ee:a9:d7:9b:75:b1:e8:e7:da:bc:03:d0: 21:c4:98:e5:95:9d:8a:0c:07:79:a6:7f:96:aa:b1:76:0a:8a: bf:38:51:a7:9b:27:31:c5:74:7c:e4:73:e9:f4:3b:2c:10:78: a9:fb:f0:17:fc:64:78:d9:61:d7:58:18:69:82:d2:3b:d3:c9: 1a:94:39:62:36:9b:b6:5f:98:79:0b:65:f1:31:19:ba:5b:b6: 1f:30:cb:ef:e3:e1:09:ad:bc:a3:c0:17:8d:c3:06:ac:0b:55: 2f:9f:65:ef -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt57TpIT4a2FGTTFYNWyijpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjYwMTAxMTQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGFjODBmN2RlMzYzZWVkY2YxMzA3NjA2ZGNmNzMyMzRmMzkzM2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZN4yyMHoioW0Xdl8Ur45MVZzhLm y+wZBvZIT6Nws1Dk+UQ1UI7E/tQb7oil09XJh9Q6Y9xN+0v7ejAp2tnD2jI018uv MAJmaLW+RLKzbjDd0Wql/9k+Br65ybyo5YnBpeHoZKaFIVSSdjMiKp7Ozw8sECL6 27Uf4kegz2xMTWZu8Fplv+58TxQxpjXKcL1NPcYtHntSOHFT62ZUspCnBopzuQjC BCC4mkLcjff7OiwTDoImZvEQK7OJkVy5jMgwPjftwy/2ZrmLOAQGPJYc4lFmj2Zw Um8DSO3W6ZPrbDME5EIp3kOazQpdGSGgaa1mqqBpc4UGZGq68ndqv/eEfQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFD2sgPfeNj7tzxMHYG3PcyNPOTOwMB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvUGF5QTk5NDJQdTNQRXdkZ2JjOXpJMDg1TTdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAT27vAwQC ubcsMAwDBAC5zyUDBAC5zyYDBAG81AYwDQYJKoZIhvcNAQELBQADggEBAJG4HoeT x94cbPMsp+FI0kv/qHU6xi+2rAJIVDtH9MzB/laT0pVISb3UCkJ+7HC9aZn6v5Im QfGT8Ap0dVeE5Opt6wKbujMiCO9MZUQu5TA3cf07Qb+t96CAYWCVS3tZBNg0Otlj 7AjYpmCWFgXKo+QXJWpQySSlTRgs6UYCKS0jFeY/af417PptBJcfPNV4ZVfG8rlV 0e6p15t1sejn2rwD0CHEmOWVnYoMB3mmf5aqsXYKir84UaebJzHFdHzkc+n0OywQ eKn78Bf8ZHjZYddYGGmC0jvTyRqUOWI2m7ZfmHkLZfExGbpbth8wy+/j4QmtvKPA F43DBqwLVS+fZe8= -----END CERTIFICATE-----Generated at Wed Jan 21 07:22:12 2026 by rpki-client