This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/RapZ-qOhJ8yjvuDPZUekpYwE9lg.roa File: RapZ-qOhJ8yjvuDPZUekpYwE9lg.roa (raw, json) Hash identifier: 6bNU9Qy7gfD16SLkxQ7XrFRbn1WRdrTIHlp5cBAhhLU= Subject key identifier: 45:AA:59:FA:A3:A1:27:CC:A3:BE:E0:CF:65:47:A4:A5:8C:04:F6:58 Certificate issuer: /CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded Certificate serial: 019B7F13A9DD7D6B67AB876DC116991C43E2 Authority key identifier: BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/RapZ-qOhJ8yjvuDPZUekpYwE9lg.roa Signing time: Fri 02 Jan 2026 14:19:13 +0000 ROA not before: Fri 02 Jan 2026 14:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 79.170.100.0/24 maxlen: 24 79.170.101.0/24 maxlen: 24 79.170.102.0/24 maxlen: 24 79.170.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:a9:dd:7d:6b:67:ab:87:6d:c1:16:99:1c:43:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded Validity Not Before: Jan 2 14:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45aa59faa3a127cca3bee0cf6547a4a58c04f658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:57:8e:96:41:d2:fc:86:cf:4d:8e:b4:2f:71: 76:6f:61:47:dd:c9:e1:fa:79:7d:ee:de:3f:6b:ca: dc:45:59:5f:a5:b2:7d:f0:b6:85:ca:73:78:42:7f: 55:ad:9b:05:31:92:21:a0:c6:28:f8:21:a6:86:38: 55:26:0d:e3:ca:e1:eb:9b:32:a0:4d:29:30:b9:9a: 05:f1:b6:6f:b3:e2:d3:7b:c4:5c:75:ae:b6:d0:64: 2e:51:a7:8c:03:e9:42:df:59:d4:36:8c:7b:8d:3b: d6:05:71:1f:e1:3d:fb:54:3a:d2:f4:37:7e:ad:99: e2:04:d4:c4:82:95:5f:66:c6:9f:17:69:45:c4:d2: ba:c1:b2:56:ec:74:b9:70:93:55:15:b0:ee:a8:82: 30:e1:51:fc:2d:25:10:0c:f7:22:37:da:22:1e:28: 34:25:a0:8b:6f:d6:4f:a7:8c:95:b0:ca:10:07:3f: 4c:f9:7d:5c:48:9a:32:e6:50:40:3c:27:8a:5a:87: 84:26:57:f9:d7:5d:fc:36:97:0b:9a:e8:91:ef:ee: 7d:da:2a:ae:33:94:0b:cf:07:34:9f:a6:71:95:01: 18:9b:e0:74:09:76:5a:19:b2:a7:ad:1d:6b:08:21: 29:ac:d6:bd:03:af:20:0f:95:b5:52:5e:fe:e3:a0: b9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:AA:59:FA:A3:A1:27:CC:A3:BE:E0:CF:65:47:A4:A5:8C:04:F6:58 X509v3 Authority Key Identifier: keyid:BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/RapZ-qOhJ8yjvuDPZUekpYwE9lg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.170.100.0/22 Signature Algorithm: sha256WithRSAEncryption 89:46:53:a4:60:47:af:79:40:0a:49:f2:3b:71:c6:25:46:c3: 02:44:80:84:b8:1b:69:60:8e:64:4d:d8:9c:87:ba:86:36:cf: fe:e4:ee:d7:8f:b4:15:02:1f:70:60:06:7b:0c:68:10:91:58: 86:fb:f5:0e:6a:9a:1a:c0:31:01:ec:24:69:5a:9f:c7:64:ee: 96:d1:ab:9a:b5:32:32:2b:f7:6a:8a:60:f5:26:cf:08:aa:79: 0f:31:11:fc:ea:1f:bc:a2:b9:56:95:38:31:8c:0e:c4:6a:a5: 5f:c8:e7:52:7a:81:3e:6c:9b:73:67:3f:11:07:ce:17:ea:cd: 3f:1d:f6:8f:59:83:fb:19:e1:3f:0f:3e:a1:e0:85:e9:69:3c: 89:05:f4:9b:fd:38:94:d1:19:b2:96:9d:9b:b1:74:6a:5a:5f: 9d:53:bd:55:b3:91:d8:d1:26:e1:50:b1:c6:07:4c:1f:ab:3b: ec:2c:2d:e3:04:47:93:ae:fa:da:33:2a:79:d3:87:07:0f:20: 2a:b6:f2:3d:5e:2f:4f:da:18:a1:97:11:bb:5f:03:8b:9c:82: 68:e9:13:62:ec:50:72:3e:d3:0f:ff:ad:65:75:95:e9:59:8d: 25:57:34:d0:48:3d:8b:35:3c:71:cf:b2:38:9a:e0:cf:09:e0: 00:d9:a4:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/E6ndfWtnq4dtwRaZHEPiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNGJiZDMzNDU4MWRkY2RkOTM1YmNlZjQ3ZDlhMDRjYmNl NWZkZWQwHhcNMjYwMTAyMTQxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWFhNTlmYWEzYTEyN2NjYTNiZWUwY2Y2NTQ3YTRhNThjMDRmNjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVeOlkHS/IbPTY60L3F2b2FH3cnh +nl97t4/a8rcRVlfpbJ98LaFynN4Qn9VrZsFMZIhoMYo+CGmhjhVJg3jyuHrmzKg TSkwuZoF8bZvs+LTe8Rcda620GQuUaeMA+lC31nUNox7jTvWBXEf4T37VDrS9Dd+ rZniBNTEgpVfZsafF2lFxNK6wbJW7HS5cJNVFbDuqIIw4VH8LSUQDPciN9oiHig0 JaCLb9ZPp4yVsMoQBz9M+X1cSJoy5lBAPCeKWoeEJlf51138NpcLmuiR7+592iqu M5QLzwc0n6ZxlQEYm+B0CXZaGbKnrR1rCCEprNa9A68gD5W1Ul7+46C5HwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEWqWfqjoSfMo77gz2VHpKWMBPZYMB8GA1UdIwQY MBaAFLtLvTNFgd3N2TW870fZoEy85f3tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTB1OU0wV0IzYzNaTmJ6dlI5bWdUTHpsX2UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83YTdjZTYtMDZhNi00MWQzLWI1ZmEt OTcxNzRhOTZlODE1LzEvUmFwWi1xT2hKOHlqdnVEUFpVZWtwWXdFOWxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC83YTdjZTYtMDZhNi00MWQzLWI1ZmEtOTcxNzRhOTZlODE1 LzEvdTB1OU0wV0IzYzNaTmJ6dlI5bWdUTHpsX2UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCT6pkMA0G CSqGSIb3DQEBCwUAA4IBAQCJRlOkYEeveUAKSfI7ccYlRsMCRICEuBtpYI5kTdic h7qGNs/+5O7Xj7QVAh9wYAZ7DGgQkViG+/UOapoawDEB7CRpWp/HZO6W0auatTIy K/dqimD1Js8IqnkPMRH86h+8orlWlTgxjA7EaqVfyOdSeoE+bJtzZz8RB84X6s0/ HfaPWYP7GeE/Dz6h4IXpaTyJBfSb/TiU0Rmylp2bsXRqWl+dU71Vs5HY0SbhULHG B0wfqzvsLC3jBEeTrvraMyp504cHDyAqtvI9Xi9P2hihlxG7XwOLnIJo6RNi7FBy PtMP/61ldZXpWY0lVzTQSD2LNTxxz7I4muDPCeAA2aSk -----END CERTIFICATE-----Generated at Fri Jan 9 06:25:37 2026 by rpki-client