This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/Err7ZpWRQFWf8BIk796AdCa7gcA.roa File: Err7ZpWRQFWf8BIk796AdCa7gcA.roa (raw, json) Hash identifier: XK55jQ6nupceV00NIJspto01E4a6brQFthUMFsjmMGc= Subject key identifier: 12:BA:FB:66:95:91:40:55:9F:F0:12:24:EF:DE:80:74:26:BB:81:C0 Certificate issuer: /CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f Certificate serial: 019B7AC7B1EBB2A748B0C9E55905F219B5D3 Authority key identifier: 44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/Err7ZpWRQFWf8BIk796AdCa7gcA.roa Signing time: Thu 01 Jan 2026 18:17:46 +0000 ROA not before: Thu 01 Jan 2026 18:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29238 IP address blocks: 79.98.112.0/21 maxlen: 21 79.98.112.0/24 maxlen: 24 79.98.113.0/24 maxlen: 24 79.98.114.0/24 maxlen: 24 79.98.115.0/24 maxlen: 24 79.98.116.0/24 maxlen: 24 79.98.117.0/24 maxlen: 24 185.66.128.0/22 maxlen: 22 217.21.144.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.crl rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.mft rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:b1:eb:b2:a7:48:b0:c9:e5:59:05:f2:19:b5:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=447b65f9f87aa8f740d5a17a72e6f8bc1e5d888f Validity Not Before: Jan 1 18:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=12bafb66959140559ff01224efde807426bb81c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:aa:f2:fb:76:1e:11:0d:b4:79:90:72:a9:ec: 3c:3d:74:43:d2:bb:ff:93:30:09:ec:35:11:f9:48: 2b:3c:ba:95:db:c3:d0:e7:6d:39:09:60:14:6e:e4: 8b:ab:2a:1c:de:bb:c4:4d:85:44:13:e5:7d:fb:aa: 10:05:81:fb:e3:4a:eb:f4:40:3a:a5:8c:72:2e:b1: 09:0a:a3:dd:6e:4f:8c:df:47:4d:68:f4:5b:f0:d5: f4:72:4b:44:29:98:97:aa:c7:a5:42:14:5d:8e:17: f3:e6:ba:0f:75:59:16:6d:e3:66:d1:32:99:d4:8c: 23:b8:38:75:ae:ea:bc:9f:2d:50:c4:ab:2e:b1:0e: da:11:3d:bb:de:08:8b:ca:a6:26:1a:7f:5f:a0:7e: d5:4d:69:1b:85:b4:1a:ce:3a:13:0a:a1:59:93:8c: ee:67:8e:5c:d3:d5:fc:32:e7:80:45:c5:71:59:6a: 4c:1d:38:4e:01:f5:57:14:25:eb:03:e8:c8:21:d3: 75:9a:35:b8:fd:01:ed:7b:d2:f9:4c:23:0c:66:c7: 6a:4d:3c:5c:27:0c:b8:7f:12:04:b2:76:67:df:e1: af:e7:39:89:86:a0:96:99:7b:98:a0:ee:04:c3:43: 26:c5:b3:1e:de:31:a3:b4:27:bb:da:5f:48:75:e9: 03:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:BA:FB:66:95:91:40:55:9F:F0:12:24:EF:DE:80:74:26:BB:81:C0 X509v3 Authority Key Identifier: keyid:44:7B:65:F9:F8:7A:A8:F7:40:D5:A1:7A:72:E6:F8:BC:1E:5D:88:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHtl-fh6qPdA1aF6cub4vB5diI8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/Err7ZpWRQFWf8BIk796AdCa7gcA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/772d2f-d1ae-47df-b67e-15ca753fa510/1/RHtl-fh6qPdA1aF6cub4vB5diI8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.98.112.0/21 185.66.128.0/22 217.21.144.0/20 Signature Algorithm: sha256WithRSAEncryption af:f6:f4:10:51:f9:27:4d:1d:ba:e6:fe:48:07:5e:82:fa:99: 14:26:ad:94:30:36:59:73:42:58:64:0c:52:cf:0b:0d:07:30: 26:e7:9e:f1:18:48:99:e7:4c:a7:e3:0c:2b:62:01:4f:66:62: 8c:b5:b9:df:80:d8:16:10:de:c4:1d:0d:be:4a:5d:e7:07:cf: ee:ae:0b:a1:0a:8f:e2:18:dd:41:e2:9e:b6:db:a9:23:0d:28: c3:2d:d1:4d:55:fc:68:cb:b2:b6:a8:0e:90:8a:bb:4c:e3:b5: f6:5c:c0:99:9a:00:c1:01:4b:82:68:7c:23:5a:72:33:11:2a: cc:8d:c0:e0:4a:3a:8c:22:b6:98:fc:0a:b2:06:c3:fe:98:a8: c9:d4:97:12:06:0a:5d:d7:05:68:91:96:72:c8:ce:9d:b8:79: 75:1d:9d:b6:7b:12:a0:05:66:63:3c:5d:97:15:b7:04:2e:04: b2:ba:cd:c6:a5:31:6f:5c:ed:ee:8b:59:da:82:a0:dd:d4:3c: 09:b2:81:15:00:ac:37:8e:6e:be:42:d5:8b:74:85:c9:ee:ca: 6a:7f:7e:54:ec:0d:30:c3:b4:4d:99:03:2c:db:8d:60:7f:4f: ce:42:3b:fa:40:0f:04:1a:3c:27:57:36:01:e7:b8:44:17:75: 64:18:88:9e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6x7HrsqdIsMnlWQXyGbXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0N2I2NWY5Zjg3YWE4Zjc0MGQ1YTE3YTcyZTZmOGJjMWU1 ZDg4OGYwHhcNMjYwMTAxMTgxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMmJhZmI2Njk1OTE0MDU1OWZmMDEyMjRlZmRlODA3NDI2YmI4MWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ary+3YeEQ20eZByqew8PXRD0rv/ kzAJ7DUR+UgrPLqV28PQ5205CWAUbuSLqyoc3rvETYVEE+V9+6oQBYH740rr9EA6 pYxyLrEJCqPdbk+M30dNaPRb8NX0cktEKZiXqselQhRdjhfz5roPdVkWbeNm0TKZ 1IwjuDh1ruq8ny1QxKsusQ7aET273giLyqYmGn9foH7VTWkbhbQazjoTCqFZk4zu Z45c09X8MueARcVxWWpMHThOAfVXFCXrA+jIIdN1mjW4/QHte9L5TCMMZsdqTTxc Jwy4fxIEsnZn3+Gv5zmJhqCWmXuYoO4Ew0MmxbMe3jGjtCe72l9IdekDyQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFBK6+2aVkUBVn/ASJO/egHQmu4HAMB8GA1UdIwQY MBaAFER7Zfn4eqj3QNWhenLm+LweXYiPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkh0bC1maDZxUGRBMWFGNmN1YjR2QjVkaUk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC83NzJkMmYtZDFhZS00N2RmLWI2N2Ut MTVjYTc1M2ZhNTEwLzEvRXJyN1pwV1JRRldmOEJJazc5NkFkQ2E3Z2NBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC83NzJkMmYtZDFhZS00N2RmLWI2N2UtMTVjYTc1M2ZhNTEw LzEvUkh0bC1maDZxUGRBMWFGNmN1YjR2QjVkaUk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDT2JwAwQC uUKAAwQE2RWQMA0GCSqGSIb3DQEBCwUAA4IBAQCv9vQQUfknTR265v5IB16C+pkU Jq2UMDZZc0JYZAxSzwsNBzAm557xGEiZ50yn4wwrYgFPZmKMtbnfgNgWEN7EHQ2+ Sl3nB8/urguhCo/iGN1B4p6226kjDSjDLdFNVfxoy7K2qA6QirtM47X2XMCZmgDB AUuCaHwjWnIzESrMjcDgSjqMIraY/AqyBsP+mKjJ1JcSBgpd1wVokZZyyM6duHl1 HZ22exKgBWZjPF2XFbcELgSyus3GpTFvXO3ui1nagqDd1DwJsoEVAKw3jm6+QtWL dIXJ7spqf35U7A0ww7RNmQMs241gf0/OQjv6QA8EGjwnVzYB57hEF3VkGIie -----END CERTIFICATE-----Generated at Thu Jan 29 11:27:38 2026 by rpki-client