This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/fLNjAmopkelaDg7Aq2lJcncLXtM.roa File: fLNjAmopkelaDg7Aq2lJcncLXtM.roa (raw, json) Hash identifier: 8cm1hslCHrVaaQSNqeySs3D9Y+PqAm9zZ1D0nP3dkvI= Subject key identifier: 7C:B3:63:02:6A:29:91:E9:5A:0E:0E:C0:AB:69:49:72:77:0B:5E:D3 Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c Certificate serial: 019B78A2B5289264E2C7B0FB76991D34A802 Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/fLNjAmopkelaDg7Aq2lJcncLXtM.roa Signing time: Thu 01 Jan 2026 08:18:07 +0000 ROA not before: Thu 01 Jan 2026 08:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54103 IP address blocks: 79.143.129.0/24 maxlen: 24 79.143.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:b5:28:92:64:e2:c7:b0:fb:76:99:1d:34:a8:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c Validity Not Before: Jan 1 08:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7cb363026a2991e95a0e0ec0ab694972770b5ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:79:39:49:81:ae:66:fc:63:2a:07:90:1a:2d: 89:66:ec:9a:00:17:4f:9f:05:e3:0e:c9:a0:e7:96: 1c:d8:87:58:d7:dd:fd:b9:ff:d0:99:a9:9d:c2:54: e2:08:86:b0:90:80:b8:8f:61:99:9c:ff:17:6f:6f: 85:7c:7f:0d:cc:ea:53:ff:ac:19:9e:94:08:0d:18: 29:94:3a:32:e8:e8:33:22:de:be:6c:01:da:6c:a5: ef:c5:db:c6:50:78:9b:87:2f:ba:4d:ed:4f:59:5d: 06:53:f8:21:4a:55:97:c0:5d:cd:82:c2:cd:c3:92: 24:31:32:72:4e:da:ff:f8:3a:c3:fe:47:31:df:9a: c4:b1:8c:e2:48:cf:b1:cb:2a:1f:d1:94:1e:c6:5e: 92:51:8f:48:38:11:38:75:f4:1c:36:e4:ab:1e:b5: 48:46:f9:d1:b4:7b:2a:77:05:53:16:85:91:50:c4: 76:9d:ad:0f:bd:4f:67:4a:eb:ec:b9:11:92:ca:ec: 3d:00:fc:f9:64:2c:fa:e2:8d:95:bf:72:af:45:34: 77:a9:62:7e:dc:b2:0e:65:e9:8a:13:f3:88:f8:b9: 1b:00:d7:22:2a:ee:f4:12:e4:76:c7:be:01:e7:a6: 3d:ea:ce:b0:79:0a:8d:d3:99:f6:9b:9a:be:42:23: 60:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B3:63:02:6A:29:91:E9:5A:0E:0E:C0:AB:69:49:72:77:0B:5E:D3 X509v3 Authority Key Identifier: keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/fLNjAmopkelaDg7Aq2lJcncLXtM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.143.129.0/24 79.143.131.0/24 Signature Algorithm: sha256WithRSAEncryption 2a:77:7b:09:1d:3b:f1:3f:4d:c9:ba:8d:d1:5f:12:32:43:11: 66:f8:d2:e3:1d:d0:d8:08:b6:a9:2e:b1:61:12:90:d2:0f:f0: de:8d:87:d1:f7:19:4b:42:36:dd:94:d5:4a:58:87:d2:7d:0e: 37:19:a6:81:d1:a4:96:5c:58:d6:c6:f3:40:8d:4b:e2:52:3c: 28:e5:9b:ee:d7:88:2a:9d:5e:b0:62:55:b5:c6:59:65:9e:10: a9:8a:40:96:7a:76:2c:54:40:78:fa:b6:4b:e5:05:37:f3:a0: 2c:e4:7f:ad:e6:8f:b0:6c:5f:d5:92:d6:10:e0:72:ff:88:fd: b7:bd:c9:fd:ad:5e:6b:15:91:3a:d8:37:46:9a:eb:f8:64:83: f0:7b:48:bd:3a:97:1d:02:d1:3b:da:1c:90:bd:10:96:08:28: 49:64:04:2d:ee:be:2b:56:c9:99:79:de:10:bf:47:ff:2f:7c: aa:91:07:06:31:fc:3d:34:86:be:84:2e:7e:7b:ff:a8:9f:8b: b2:f5:90:9b:2b:47:e3:6f:5e:17:5e:8a:74:ed:50:2a:30:9d: 1d:fd:82:a8:f5:b1:94:c1:69:89:71:76:04:f3:ae:3c:ad:cd: 0c:06:db:1c:e0:44:83:17:98:22:e1:28:83:9d:60:27:e2:7c: d7:5e:9b:03 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4orUokmTix7D7dpkdNKgCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz MTk4M2MwHhcNMjYwMTAxMDgxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Y2IzNjMwMjZhMjk5MWU5NWEwZTBlYzBhYjY5NDk3Mjc3MGI1ZWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHk5SYGuZvxjKgeQGi2JZuyaABdP nwXjDsmg55Yc2IdY1939uf/QmamdwlTiCIawkIC4j2GZnP8Xb2+FfH8NzOpT/6wZ npQIDRgplDoy6OgzIt6+bAHabKXvxdvGUHibhy+6Te1PWV0GU/ghSlWXwF3NgsLN w5IkMTJyTtr/+DrD/kcx35rEsYziSM+xyyof0ZQexl6SUY9IOBE4dfQcNuSrHrVI RvnRtHsqdwVTFoWRUMR2na0PvU9nSuvsuRGSyuw9APz5ZCz64o2Vv3KvRTR3qWJ+ 3LIOZemKE/OI+LkbANciKu70EuR2x74B56Y96s6weQqN05n2m5q+QiNgawIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHyzYwJqKZHpWg4OwKtpSXJ3C17TMB8GA1UdIwQY MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt NTlhZTA5ZWRiZWI5LzEvZkxOakFtb3BrZWxhRGc3QXEybEpjbmNMWHRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5 LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT4+BAwQA T4+DMA0GCSqGSIb3DQEBCwUAA4IBAQAqd3sJHTvxP03Juo3RXxIyQxFm+NLjHdDY CLapLrFhEpDSD/DejYfR9xlLQjbdlNVKWIfSfQ43GaaB0aSWXFjWxvNAjUviUjwo 5Zvu14gqnV6wYlW1xlllnhCpikCWenYsVEB4+rZL5QU386As5H+t5o+wbF/VktYQ 4HL/iP23vcn9rV5rFZE62DdGmuv4ZIPwe0i9OpcdAtE72hyQvRCWCChJZAQt7r4r VsmZed4Qv0f/L3yqkQcGMfw9NIa+hC5+e/+on4uy9ZCbK0fjb14XXop07VAqMJ0d /YKo9bGUwWmJcXYE8648rc0MBtsc4ESDF5gi4SiDnWAn4nzXXpsD -----END CERTIFICATE-----Generated at Wed Jan 21 06:07:47 2026 by rpki-client