This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/0Ca7AbeYXApVqvCvbAQmVKT6zB4.roa File: 0Ca7AbeYXApVqvCvbAQmVKT6zB4.roa (raw, json) Hash identifier: yajzvHBczLvuRuutMDqrA4C/+S65nBUWHxWPZS+HU6Y= Subject key identifier: D0:26:BB:01:B7:98:5C:0A:55:AA:F0:AF:6C:04:26:54:A4:FA:CC:1E Certificate issuer: /CN=6dbd51576b4a93460a465af35e6bf550f5548894 Certificate serial: 019B7758CA30B9540E4A48E052B3170542F7 Authority key identifier: 6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/0Ca7AbeYXApVqvCvbAQmVKT6zB4.roa Signing time: Thu 01 Jan 2026 02:17:46 +0000 ROA not before: Thu 01 Jan 2026 02:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207103 IP address blocks: 79.172.16.0/21 maxlen: 24 185.5.140.0/24 maxlen: 24 185.5.141.0/24 maxlen: 24 188.68.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:ca:30:b9:54:0e:4a:48:e0:52:b3:17:05:42:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dbd51576b4a93460a465af35e6bf550f5548894 Validity Not Before: Jan 1 02:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d026bb01b7985c0a55aaf0af6c042654a4facc1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:ca:8f:47:b7:4c:3d:f8:cb:83:0a:14:03:22: b5:ca:07:3a:84:f9:d3:4c:08:13:b2:db:fb:25:74: ea:70:35:54:b7:2d:12:ca:c9:d5:58:9c:14:4e:b1: f5:10:25:d8:c4:f0:42:69:7a:cf:2b:5f:9a:2e:98: 1c:76:ea:72:05:15:70:5b:f4:a4:06:1a:cb:d3:23: 08:69:3f:c2:81:dd:16:c2:31:f8:95:e2:d2:60:c2: 77:55:b9:03:cf:83:da:28:7e:60:88:42:89:7b:7e: 92:77:a3:78:9c:ef:c2:09:92:1d:6e:ad:f4:0a:42: 05:70:37:0a:40:2e:8f:86:a4:cb:01:58:00:6f:80: 4d:6d:32:34:47:92:92:81:3e:b8:f7:4d:61:44:6a: 07:8c:cb:ae:9d:c4:d3:dc:97:91:d9:37:09:91:08: eb:7e:78:f8:47:54:77:df:ff:0f:8a:a0:e8:9c:e9: fd:95:14:12:02:41:78:89:d3:86:26:85:9c:83:f4: fb:5e:7d:19:b1:a2:cb:a9:6f:1f:ed:ab:7e:e8:6e: 8f:7e:03:4d:c0:07:c2:eb:00:16:b0:8e:c1:97:9f: 70:e3:58:78:fd:65:74:99:88:d7:a1:37:9c:29:65: d0:b8:97:b7:9d:d7:ee:1d:29:ae:68:00:f2:6d:33: 16:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:26:BB:01:B7:98:5C:0A:55:AA:F0:AF:6C:04:26:54:A4:FA:CC:1E X509v3 Authority Key Identifier: keyid:6D:BD:51:57:6B:4A:93:46:0A:46:5A:F3:5E:6B:F5:50:F5:54:88:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/0Ca7AbeYXApVqvCvbAQmVKT6zB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8ff537-71e0-403b-979e-1ef7ef17fa43/1/bb1RV2tKk0YKRlrzXmv1UPVUiJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.172.16.0/21 185.5.140.0/23 188.68.88.0/23 Signature Algorithm: sha256WithRSAEncryption 79:72:2a:d5:a2:31:6d:fe:a6:83:cc:4a:b0:7b:28:c6:aa:32: 34:d9:12:99:40:c5:ba:ee:76:dc:86:db:7e:a4:f2:49:71:2b: aa:ab:e8:e2:bf:11:1a:11:6f:44:32:9c:af:36:3c:6c:80:2a: 9f:60:cd:47:0e:b9:1c:0f:77:87:0f:a6:44:c5:da:49:6b:40: c7:ec:14:98:7d:30:ae:69:5d:fc:12:4d:32:ad:dd:c5:c2:db: d2:55:67:c6:6e:71:6b:54:3a:1f:0c:87:37:7c:00:a5:50:25: 67:b2:07:35:af:37:c2:16:60:7d:ee:e3:53:88:19:fb:8d:87: 48:b2:1f:89:ae:e6:ba:98:0a:ce:0a:95:7d:2c:2b:dd:51:32: 41:ad:11:0c:1b:5f:a4:96:e7:83:bd:ac:0c:60:29:89:96:2f: 1f:7d:b3:3c:23:7c:b8:f9:b1:31:15:ae:d7:3b:e5:76:7c:d6: 3e:30:a8:32:79:bc:ea:71:0b:9a:16:4c:cc:5c:fa:23:c7:32: f0:c4:a0:9d:b1:49:4a:7a:18:a8:3c:37:3a:5a:be:cf:78:22: 20:63:e2:83:d3:2f:aa:37:7b:6f:cb:3c:00:9c:90:8c:96:97: 72:47:14:ed:42:a5:f4:39:f1:4a:53:a9:ff:2f:bf:14:ad:33: 71:50:27:5e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3WMowuVQOSkjgUrMXBUL3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYmQ1MTU3NmI0YTkzNDYwYTQ2NWFmMzVlNmJmNTUwZjU1 NDg4OTQwHhcNMjYwMTAxMDIxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDI2YmIwMWI3OTg1YzBhNTVhYWYwYWY2YzA0MjY1NGE0ZmFjYzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8qPR7dMPfjLgwoUAyK1ygc6hPnT TAgTstv7JXTqcDVUty0SysnVWJwUTrH1ECXYxPBCaXrPK1+aLpgcdupyBRVwW/Sk BhrL0yMIaT/Cgd0WwjH4leLSYMJ3VbkDz4PaKH5giEKJe36Sd6N4nO/CCZIdbq30 CkIFcDcKQC6PhqTLAVgAb4BNbTI0R5KSgT64901hRGoHjMuuncTT3JeR2TcJkQjr fnj4R1R33/8PiqDonOn9lRQSAkF4idOGJoWcg/T7Xn0ZsaLLqW8f7at+6G6PfgNN wAfC6wAWsI7Bl59w41h4/WV0mYjXoTecKWXQuJe3ndfuHSmuaADybTMWYQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNAmuwG3mFwKVarwr2wEJlSk+sweMB8GA1UdIwQY MBaAFG29UVdrSpNGCkZa815r9VD1VIiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmIxUlYydEtrMFlLUmxyelhtdjFVUFZVaUpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84ZmY1MzctNzFlMC00MDNiLTk3OWUt MWVmN2VmMTdmYTQzLzEvMENhN0FiZVlYQXBWcXZDdmJBUW1WS1Q2ekI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS84ZmY1MzctNzFlMC00MDNiLTk3OWUtMWVmN2VmMTdmYTQz LzEvYmIxUlYydEtrMFlLUmxyelhtdjFVUFZVaUpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDT6wQAwQB uQWMAwQBvERYMA0GCSqGSIb3DQEBCwUAA4IBAQB5cirVojFt/qaDzEqweyjGqjI0 2RKZQMW67nbchtt+pPJJcSuqq+jivxEaEW9EMpyvNjxsgCqfYM1HDrkcD3eHD6ZE xdpJa0DH7BSYfTCuaV38Ek0yrd3FwtvSVWfGbnFrVDofDIc3fAClUCVnsgc1rzfC FmB97uNTiBn7jYdIsh+Jrua6mArOCpV9LCvdUTJBrREMG1+klueDvawMYCmJli8f fbM8I3y4+bExFa7XO+V2fNY+MKgyebzqcQuaFkzMXPojxzLwxKCdsUlKehioPDc6 Wr7PeCIgY+KD0y+qN3tvyzwAnJCMlpdyRxTtQqX0OfFKU6n/L78UrTNxUCde -----END CERTIFICATE-----Generated at Mon Jan 19 09:32:22 2026 by rpki-client