This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/hKv7ysEGAlTCfDAhjd2l9ZMKCcU.roa File: hKv7ysEGAlTCfDAhjd2l9ZMKCcU.roa (raw, json) Hash identifier: OaUrLW1j7cxXZHPdkw2cDMBUnDWKq/yDK0dWfbCa6QY= Subject key identifier: 84:AB:FB:CA:C1:06:02:54:C2:7C:30:21:8D:DD:A5:F5:93:0A:09:C5 Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef Certificate serial: 019B7AC9507E066D2CCA9AA62061AC4B3265 Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/hKv7ysEGAlTCfDAhjd2l9ZMKCcU.roa Signing time: Thu 01 Jan 2026 18:19:32 +0000 ROA not before: Thu 01 Jan 2026 18:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212330 IP address blocks: 79.132.195.0/24 maxlen: 24 109.230.121.0/24 maxlen: 24 109.230.122.0/24 maxlen: 24 109.230.124.0/24 maxlen: 24 109.230.125.0/24 maxlen: 24 122.102.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:50:7e:06:6d:2c:ca:9a:a6:20:61:ac:4b:32:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef Validity Not Before: Jan 1 18:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=84abfbcac1060254c27c30218ddda5f5930a09c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6a:be:48:d9:a2:a5:09:fd:e5:e6:ec:a7:80: 45:f1:ad:b4:98:35:92:ba:35:ba:f6:3b:1e:c0:8e: 09:a6:0c:de:8f:7a:ee:a9:39:16:19:07:6b:f3:9a: c7:97:56:49:07:34:8c:00:a5:e8:c9:68:9d:e2:1b: 83:7e:1a:ef:bb:15:ad:27:32:1f:34:4a:68:10:33: 9c:2e:b9:6f:f9:db:30:60:4d:e2:6d:15:3d:bf:81: d2:67:fe:03:0b:13:03:9c:a5:f7:d2:a0:e0:ee:0b: 15:10:13:88:6d:3f:8a:8e:bf:e1:bb:7a:1b:77:56: 5b:39:cd:34:11:83:38:60:be:2b:31:14:1c:0f:e3: 49:e0:b2:66:d8:8c:2d:c2:d8:dc:e4:50:b3:e3:c9: 98:d0:2b:b5:20:53:33:c4:d4:25:db:ca:74:9f:d0: 7f:cc:6e:a9:6d:1b:91:a0:6d:65:df:94:4a:7a:3c: e9:34:24:ec:ff:4e:5b:3d:74:50:f9:f7:44:a3:7c: 39:36:dc:b5:40:02:da:e2:ae:a3:50:68:92:43:24: 61:3e:57:28:ce:79:9a:7c:ca:64:28:0f:9e:0c:54: d1:9f:a9:68:71:a0:3f:6e:7b:31:0e:58:f0:70:da: 62:50:8b:2e:67:02:ef:b9:a6:90:7c:18:4d:d2:25: f6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AB:FB:CA:C1:06:02:54:C2:7C:30:21:8D:DD:A5:F5:93:0A:09:C5 X509v3 Authority Key Identifier: keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/hKv7ysEGAlTCfDAhjd2l9ZMKCcU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.132.195.0/24 109.230.121.0-109.230.122.255 109.230.124.0/23 122.102.116.0/24 Signature Algorithm: sha256WithRSAEncryption 35:0f:8e:16:1c:da:ff:89:c9:9c:6c:bb:bd:02:52:f7:38:b7: 55:67:e1:35:b6:b3:b6:f9:6f:47:60:91:0c:45:51:81:53:39: 98:a4:97:45:73:08:ce:76:b2:68:76:98:78:14:65:bd:2f:17: 84:8d:7c:3d:32:16:1e:d5:33:ef:41:39:d7:f8:b6:27:dc:ca: 68:92:c7:d4:19:0a:23:fc:b0:19:ca:a4:d6:58:b8:1e:fe:75: dc:34:4c:8c:7b:fb:7c:63:21:32:9d:82:6a:28:20:b1:f0:c2: fb:ec:76:09:38:ed:c6:be:af:cd:ce:b2:e3:9a:05:86:ad:1d: dd:48:8c:58:8a:a8:a7:fa:56:bd:9f:8a:c6:71:97:ed:f2:2f: 77:2a:dd:9f:0f:92:7f:f2:69:cf:13:fe:7c:ac:b1:41:d6:b7: c7:69:d1:10:0c:15:07:ed:b0:62:aa:86:c8:6c:d9:aa:ee:23: 6d:b9:d4:24:0b:ef:b4:4f:62:52:41:6e:6e:7f:c8:d7:72:9b: 20:92:50:5f:e6:d7:7d:2d:07:93:53:2b:70:98:09:08:ce:00: 7d:fe:8e:b5:af:fb:d6:7a:5c:8e:09:1b:c4:1f:75:a5:9b:bf: 79:55:d8:d2:aa:c8:da:ad:e8:9a:4e:b4:24:32:2a:f2:a1:68: 00:59:b0:01 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt6yVB+Bm0sypqmIGGsSzJlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDk4YTE5MDViYmQzMzgxNTMzODI4ZjZiN2ZkMjI3MTcw NDMxZWYwHhcNMjYwMTAxMTgxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NGFiZmJjYWMxMDYwMjU0YzI3YzMwMjE4ZGRkYTVmNTkzMGEwOWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Gq+SNmipQn95ebsp4BF8a20mDWS ujW69jsewI4Jpgzej3ruqTkWGQdr85rHl1ZJBzSMAKXoyWid4huDfhrvuxWtJzIf NEpoEDOcLrlv+dswYE3ibRU9v4HSZ/4DCxMDnKX30qDg7gsVEBOIbT+Kjr/hu3ob d1ZbOc00EYM4YL4rMRQcD+NJ4LJm2Iwtwtjc5FCz48mY0Cu1IFMzxNQl28p0n9B/ zG6pbRuRoG1l35RKejzpNCTs/05bPXRQ+fdEo3w5Nty1QALa4q6jUGiSQyRhPlco znmafMpkKA+eDFTRn6locaA/bnsxDljwcNpiUIsuZwLvuaaQfBhN0iX2UQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFISr+8rBBgJUwnwwIY3dpfWTCgnFMB8GA1UdIwQY MBaAFMEJihkFu9M4FTOCj2t/0icXBDHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUt YjJhNzEzZDJlYWIyLzEvaEt2N3lzRUdBbFRDZkRBaGpkMmw5Wk1LQ2NVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUtYjJhNzEzZDJlYWIy LzEvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAT4TDMAwD BABt5nkDBABt5noDBAFt5nwDBAB6ZnQwDQYJKoZIhvcNAQELBQADggEBADUPjhYc 2v+JyZxsu70CUvc4t1Vn4TW2s7b5b0dgkQxFUYFTOZikl0VzCM52smh2mHgUZb0v F4SNfD0yFh7VM+9BOdf4tifcymiSx9QZCiP8sBnKpNZYuB7+ddw0TIx7+3xjITKd gmooILHwwvvsdgk47ca+r83OsuOaBYatHd1IjFiKqKf6Vr2fisZxl+3yL3cq3Z8P kn/yac8T/nyssUHWt8dp0RAMFQftsGKqhshs2aruI2251CQL77RPYlJBbm5/yNdy myCSUF/m130tB5NTK3CYCQjOAH3+jrWv+9Z6XI4JG8QfdaWbv3lV2NKqyNqt6JpO tCQyKvKhaABZsAE= -----END CERTIFICATE-----Generated at Tue Jan 20 04:45:26 2026 by rpki-client