This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/1FZi4AVfxAG0c_zfGp_o2T9Ppsg.roa File: 1FZi4AVfxAG0c_zfGp_o2T9Ppsg.roa (raw, json) Hash identifier: oIdG0nPfH26GkdGgpcIt19B+XrLmT6pK1I+pgTOJu04= Subject key identifier: D4:56:62:E0:05:5F:C4:01:B4:73:FC:DF:1A:9F:E8:D9:3F:4F:A6:C8 Certificate issuer: /CN=6e9a558ad546dcc9abc0b8a131067af02e407007 Certificate serial: 019B7BA3954059B469ABA13D82E750C403BC Authority key identifier: 6E:9A:55:8A:D5:46:DC:C9:AB:C0:B8:A1:31:06:7A:F0:2E:40:70:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/1FZi4AVfxAG0c_zfGp_o2T9Ppsg.roa Signing time: Thu 01 Jan 2026 22:17:56 +0000 ROA not before: Thu 01 Jan 2026 22:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 79.171.96.0/21 maxlen: 24 185.62.60.0/22 maxlen: 24 185.67.180.0/22 maxlen: 24 185.130.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/bppVitVG3MmrwLihMQZ68C5AcAc.crl rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/bppVitVG3MmrwLihMQZ68C5AcAc.mft rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:95:40:59:b4:69:ab:a1:3d:82:e7:50:c4:03:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e9a558ad546dcc9abc0b8a131067af02e407007 Validity Not Before: Jan 1 22:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d45662e0055fc401b473fcdf1a9fe8d93f4fa6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:68:49:3b:59:31:26:cf:01:c7:bf:bb:29:b9: c1:d5:38:d6:25:86:af:75:5b:86:a6:7f:ce:d4:98: 07:f8:b9:3b:a3:2f:1e:52:d3:80:9b:61:7c:b3:da: a6:e5:94:f1:49:03:77:8f:52:f3:5f:ce:45:84:e9: a6:82:27:c7:84:fa:e7:f7:a7:24:e9:e4:27:4f:51: c5:7b:de:9a:62:22:42:a9:14:f9:d9:32:88:a6:a1: 92:23:79:30:27:dd:a0:da:af:ff:53:e9:e1:31:c5: 3d:ba:21:ea:d4:a5:76:24:ea:e6:e7:b9:d0:2f:0a: cd:1a:c8:1b:16:3b:5c:2a:b0:1d:86:80:ec:e0:20: a7:92:4d:50:05:c8:67:17:9a:09:53:82:9d:81:ed: 7d:86:ab:c4:ec:68:6e:af:80:77:59:bc:f6:9e:dd: 2d:06:ea:3a:e7:7c:70:55:28:f5:5f:6d:39:4a:99: 0e:3a:3c:06:6d:df:2c:77:12:1f:ee:f4:eb:6a:84: e3:d2:b5:e6:ae:89:fd:24:81:4c:a1:46:67:25:6f: fd:a0:95:f4:8f:01:c1:7a:60:c0:e3:9e:d0:25:a9: e3:f7:0b:44:81:6e:b4:db:35:09:c2:25:a4:84:3f: 9c:a1:8f:d6:f7:dc:31:e3:62:31:3e:1b:6f:87:66: 39:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:56:62:E0:05:5F:C4:01:B4:73:FC:DF:1A:9F:E8:D9:3F:4F:A6:C8 X509v3 Authority Key Identifier: keyid:6E:9A:55:8A:D5:46:DC:C9:AB:C0:B8:A1:31:06:7A:F0:2E:40:70:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/1FZi4AVfxAG0c_zfGp_o2T9Ppsg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/bppVitVG3MmrwLihMQZ68C5AcAc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.171.96.0/21 185.62.60.0/22 185.67.180.0/22 185.130.12.0/22 Signature Algorithm: sha256WithRSAEncryption 8f:81:4a:c7:8e:36:54:22:a9:24:bc:5b:0a:1b:49:25:30:a8: 85:09:9e:de:c9:a5:02:8c:88:7d:ce:4a:b2:60:10:db:0a:99: c7:de:01:0e:20:b6:66:2a:d6:f0:0b:5c:9b:4c:d4:2b:c4:3a: dc:42:a4:64:d4:35:b7:19:f3:0e:c6:5e:2b:13:56:29:3a:3b: f3:5a:a0:4f:c3:0c:d4:9a:4d:d8:38:34:91:36:36:e1:9e:89: 7c:0f:72:d9:5f:47:fd:36:62:b3:a8:43:5d:0f:55:66:ad:55: 75:ba:69:80:40:7d:5d:ac:eb:13:06:d4:c1:d9:1f:ea:10:88: 3d:6c:67:d1:10:36:3f:40:3d:34:90:d7:23:12:b5:2e:4b:3e: 42:f4:49:16:f1:9f:15:85:eb:97:a6:85:d2:26:9d:ca:49:1f: 6a:14:58:51:ab:b3:25:5a:f9:83:36:e4:18:f7:5c:e5:5c:de: ee:62:60:f8:9f:a8:24:b5:cf:2d:b2:d1:54:35:1b:53:1a:a7: 76:e8:af:4b:e5:38:9a:c3:9f:a1:16:ce:7b:38:15:6e:7e:8f: aa:e5:9a:19:7d:b5:18:c9:3f:fc:52:68:3f:80:1e:77:27:f1: 3f:c6:39:9f:22:94:40:74:55:df:e3:76:9f:be:c5:2a:45:89: 0f:9f:ab:d0 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7o5VAWbRpq6E9gudQxAO8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlOWE1NThhZDU0NmRjYzlhYmMwYjhhMTMxMDY3YWYwMmU0 MDcwMDcwHhcNMjYwMTAxMjIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDU2NjJlMDA1NWZjNDAxYjQ3M2ZjZGYxYTlmZThkOTNmNGZhNmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mhJO1kxJs8Bx7+7KbnB1TjWJYav dVuGpn/O1JgH+Lk7oy8eUtOAm2F8s9qm5ZTxSQN3j1LzX85FhOmmgifHhPrn96ck 6eQnT1HFe96aYiJCqRT52TKIpqGSI3kwJ92g2q//U+nhMcU9uiHq1KV2JOrm57nQ LwrNGsgbFjtcKrAdhoDs4CCnkk1QBchnF5oJU4Kdge19hqvE7Ghur4B3Wbz2nt0t Buo653xwVSj1X205SpkOOjwGbd8sdxIf7vTraoTj0rXmron9JIFMoUZnJW/9oJX0 jwHBemDA457QJanj9wtEgW602zUJwiWkhD+coY/W99wx42IxPhtvh2Y5+wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNRWYuAFX8QBtHP83xqf6Nk/T6bIMB8GA1UdIwQY MBaAFG6aVYrVRtzJq8C4oTEGevAuQHAHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnBwVml0VkczTW1yd0xpaE1RWjY4QzVBY0FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8xNTI5YzYtODA4Mi00ZjNhLWJjOTIt NDIzZmNhMjI0MDQxLzEvMUZaaTRBVmZ4QUcwY196ZkdwX28yVDlQcHNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC8xNTI5YzYtODA4Mi00ZjNhLWJjOTItNDIzZmNhMjI0MDQx LzEvYnBwVml0VkczTW1yd0xpaE1RWjY4QzVBY0FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDT6tgAwQC uT48AwQCuUO0AwQCuYIMMA0GCSqGSIb3DQEBCwUAA4IBAQCPgUrHjjZUIqkkvFsK G0klMKiFCZ7eyaUCjIh9zkqyYBDbCpnH3gEOILZmKtbwC1ybTNQrxDrcQqRk1DW3 GfMOxl4rE1YpOjvzWqBPwwzUmk3YODSRNjbhnol8D3LZX0f9NmKzqENdD1VmrVV1 ummAQH1drOsTBtTB2R/qEIg9bGfREDY/QD00kNcjErUuSz5C9EkW8Z8VheuXpoXS Jp3KSR9qFFhRq7MlWvmDNuQY91zlXN7uYmD4n6gktc8tstFUNRtTGqd26K9L5Tia w5+hFs57OBVufo+q5ZoZfbUYyT/8Umg/gB53J/E/xjmfIpRAdFXf43afvsUqRYkP n6vQ -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:39 2026 by rpki-client