This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/_UtoV7e9xovL4Yza5XO1BJ-otaI.roa File: _UtoV7e9xovL4Yza5XO1BJ-otaI.roa (raw, json) Hash identifier: pIOeMdxwhh897iB8QkqYsFeOjgGBViVJMD2fd5tAswU= Subject key identifier: FD:4B:68:57:B7:BD:C6:8B:CB:E1:8C:DA:E5:73:B5:04:9F:A8:B5:A2 Certificate issuer: /CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68 Certificate serial: 019B76EB19C2413A1D66BDA7A43B05A2D5E1 Authority key identifier: 58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/_UtoV7e9xovL4Yza5XO1BJ-otaI.roa Signing time: Thu 01 Jan 2026 00:17:57 +0000 ROA not before: Thu 01 Jan 2026 00:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8075 IP address blocks: 185.222.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.crl rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.mft rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:19:c2:41:3a:1d:66:bd:a7:a4:3b:05:a2:d5:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58dcfb0ff4f28b8ffad6eb0dd29eb2b6af629a68 Validity Not Before: Jan 1 00:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd4b6857b7bdc68bcbe18cdae573b5049fa8b5a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:33:8d:05:dd:91:c2:10:03:29:bc:b4:6b: 46:bf:00:a0:06:f8:5e:42:49:4f:05:f3:e0:04:03: b7:6c:a2:e7:74:71:82:93:10:b1:6e:6d:9e:93:9a: 0f:c9:02:75:c5:96:cf:fa:a2:c2:97:a8:95:48:1b: 03:aa:51:47:42:ba:4b:f3:73:0f:42:64:98:4e:f3: 38:25:c6:a8:cd:e3:30:77:1f:4a:c6:ed:2e:19:da: ff:ed:74:7d:c9:8a:cd:2d:93:47:31:16:a2:55:34: 35:1d:34:a4:a9:15:60:96:70:fc:09:5f:5a:fc:74: 83:45:59:55:00:f5:bf:3d:26:b0:25:00:08:58:26: 2c:0b:09:51:72:46:cd:3d:85:f1:31:0c:92:1e:15: 40:7d:75:38:f4:f1:9d:09:dc:62:e1:aa:9a:e0:d6: bf:d5:d9:0f:42:cb:f4:94:28:5c:db:24:ec:4d:62: 8d:f7:e0:51:ad:a7:42:4c:95:76:1b:c1:f4:16:52: 80:f4:8d:51:47:bf:89:eb:89:97:15:2f:a8:d5:61: d5:aa:04:65:72:4a:1e:3f:c6:0d:46:9b:c5:0b:e7: 2d:4d:62:fe:7c:5b:9b:09:4b:b9:1d:68:00:f8:bc: 89:57:20:6e:b1:3b:d5:9d:0b:5d:f5:79:a7:da:8d: e1:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4B:68:57:B7:BD:C6:8B:CB:E1:8C:DA:E5:73:B5:04:9F:A8:B5:A2 X509v3 Authority Key Identifier: keyid:58:DC:FB:0F:F4:F2:8B:8F:FA:D6:EB:0D:D2:9E:B2:B6:AF:62:9A:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNz7D_Tyi4_61usN0p6ytq9immg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/_UtoV7e9xovL4Yza5XO1BJ-otaI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/b663df-ac1c-4529-8c8b-712135a6b750/1/WNz7D_Tyi4_61usN0p6ytq9immg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.222.79.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:65:11:62:3c:3d:c0:2b:9c:ed:f0:3c:72:54:cf:8c:5a:65: 0b:08:5a:15:12:11:fa:b6:29:3a:13:80:14:18:91:f6:55:9d: 27:35:2b:cc:dd:81:0e:3a:a4:ca:72:db:b7:9b:e3:bc:f8:a7: b7:5b:85:c6:bb:16:6f:3b:73:a7:e6:0c:a1:6a:f0:17:ed:a5: 76:9d:ae:40:37:c9:03:3d:9c:07:92:e7:b1:47:50:40:b1:93: 93:e9:64:2b:9b:7e:a8:29:52:d0:b8:85:09:63:2e:10:1a:15: 84:12:da:ca:94:5c:aa:9b:a5:d4:e5:bb:10:59:0c:f8:a8:f6: 0b:cd:b5:22:dd:0e:9c:bc:90:7c:67:fd:24:8e:1e:82:53:da: 71:89:a0:f9:57:38:33:ca:83:e4:0e:bc:08:42:61:5c:6f:1d: 08:66:93:56:13:fa:fe:70:02:9e:51:5b:b4:7a:8e:3e:88:c1: 6b:2a:8a:6a:bb:8d:33:76:bd:df:9e:50:71:84:04:1b:d8:f6: 3e:4d:4a:53:2f:80:36:f0:11:d3:a3:e9:6e:23:a6:0f:8d:58: 1f:ff:1a:6b:72:c6:d3:df:74:90:88:9e:2e:a8:8f:1b:93:04: 97:5b:b5:9d:ab:c2:79:92:8d:60:e8:0a:80:14:d4:df:5d:35: 24:97:25:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xnCQTodZr2npDsFotXhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZGNmYjBmZjRmMjhiOGZmYWQ2ZWIwZGQyOWViMmI2YWY2 MjlhNjgwHhcNMjYwMTAxMDAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDRiNjg1N2I3YmRjNjhiY2JlMThjZGFlNTczYjUwNDlmYThiNWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFIzjQXdkcIQAym8tGtGvwCgBvhe QklPBfPgBAO3bKLndHGCkxCxbm2ek5oPyQJ1xZbP+qLCl6iVSBsDqlFHQrpL83MP QmSYTvM4JcaozeMwdx9Kxu0uGdr/7XR9yYrNLZNHMRaiVTQ1HTSkqRVglnD8CV9a /HSDRVlVAPW/PSawJQAIWCYsCwlRckbNPYXxMQySHhVAfXU49PGdCdxi4aqa4Na/ 1dkPQsv0lChc2yTsTWKN9+BRradCTJV2G8H0FlKA9I1RR7+J64mXFS+o1WHVqgRl ckoeP8YNRpvFC+ctTWL+fFubCUu5HWgA+LyJVyBusTvVnQtd9Xmn2o3hrwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP1LaFe3vcaLy+GM2uVztQSfqLWiMB8GA1UdIwQY MBaAFFjc+w/08ouP+tbrDdKesravYppoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV056N0RfVHlpNF82MXVzTjBwNnl0cTlpbW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iNjYzZGYtYWMxYy00NTI5LThjOGIt NzEyMTM1YTZiNzUwLzEvX1V0b1Y3ZTl4b3ZMNFl6YTVYTzFCSi1vdGFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9iNjYzZGYtYWMxYy00NTI5LThjOGItNzEyMTM1YTZiNzUw LzEvV056N0RfVHlpNF82MXVzTjBwNnl0cTlpbW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud5PMA0G CSqGSIb3DQEBCwUAA4IBAQALZRFiPD3AK5zt8DxyVM+MWmULCFoVEhH6tik6E4AU GJH2VZ0nNSvM3YEOOqTKctu3m+O8+Ke3W4XGuxZvO3On5gyhavAX7aV2na5AN8kD PZwHkuexR1BAsZOT6WQrm36oKVLQuIUJYy4QGhWEEtrKlFyqm6XU5bsQWQz4qPYL zbUi3Q6cvJB8Z/0kjh6CU9pxiaD5VzgzyoPkDrwIQmFcbx0IZpNWE/r+cAKeUVu0 eo4+iMFrKopqu40zdr3fnlBxhAQb2PY+TUpTL4A28BHTo+luI6YPjVgf/xprcsbT 33SQiJ4uqI8bkwSXW7Wdq8J5ko1g6AqAFNTfXTUklyUS -----END CERTIFICATE-----Generated at Sun Jan 18 15:29:18 2026 by rpki-client