This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/FzYYHJjZ1VyjrqmR6VyqdhmHs8I.roa File: FzYYHJjZ1VyjrqmR6VyqdhmHs8I.roa (raw, json) Hash identifier: A2gvDrWNnIIKvLZJlwmcHqXl0rLuVgpVjavbxPCN9B4= Subject key identifier: 17:36:18:1C:98:D9:D5:5C:A3:AE:A9:91:E9:5C:AA:76:19:87:B3:C2 Certificate issuer: /CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27 Certificate serial: 019B7834BE00A89769278400E957658BA9BE Authority key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/FzYYHJjZ1VyjrqmR6VyqdhmHs8I.roa Signing time: Thu 01 Jan 2026 06:18:00 +0000 ROA not before: Thu 01 Jan 2026 06:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44021 IP address blocks: 79.141.112.0/20 maxlen: 20 185.167.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:be:00:a8:97:69:27:84:00:e9:57:65:8b:a9:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27 Validity Not Before: Jan 1 06:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1736181c98d9d55ca3aea991e95caa761987b3c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5e:6e:f2:4b:a2:23:e9:e3:a2:73:3c:5d:5d: e2:54:fe:40:29:f4:ee:b4:92:41:9f:8f:a9:89:5f: d7:4b:fb:87:2d:e5:51:27:6b:30:c9:b9:79:d6:50: a1:9d:f7:f5:c7:42:44:ba:ce:8e:43:7c:c0:dc:7b: 03:a9:00:0e:e6:ab:ee:3d:86:65:7f:25:c8:4a:38: ac:93:de:1b:ab:9d:12:5f:d5:fe:f7:26:f0:56:f1: d3:85:78:ff:18:3e:75:cc:22:da:21:e1:f3:0b:25: 28:68:a9:e5:6c:80:dc:52:41:dd:0b:7e:60:a4:35: eb:3d:b0:19:0f:97:ee:b3:ec:b5:2d:82:04:8c:ad: bc:a1:33:01:ba:4e:a9:bd:33:58:d1:1c:da:b1:d9: bc:5b:59:b4:c0:d4:f5:7f:bc:9a:12:66:07:fb:c7: 22:90:ad:0e:38:f8:20:bc:85:da:cb:8e:1a:55:19: f8:d6:41:96:a9:fb:5a:ef:81:5f:c4:33:11:9f:72: dd:a2:f6:e3:b0:b0:a6:04:86:bc:40:c1:ea:9e:f5: 0e:aa:48:c5:33:df:9b:ea:e9:e2:29:06:a8:28:99: 12:9f:46:f3:4a:44:b2:79:ed:10:06:ac:2f:0d:51: 95:35:6f:cc:02:2b:9e:42:9d:71:fb:20:7e:db:ff: 50:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:36:18:1C:98:D9:D5:5C:A3:AE:A9:91:E9:5C:AA:76:19:87:B3:C2 X509v3 Authority Key Identifier: keyid:0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/FzYYHJjZ1VyjrqmR6VyqdhmHs8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.141.112.0/20 185.167.44.0/22 Signature Algorithm: sha256WithRSAEncryption 36:ec:ed:74:38:73:1d:54:70:93:26:0f:27:67:60:4c:e5:5c: fd:14:f8:51:30:7c:69:f3:61:46:53:8f:fd:8e:0a:6e:ac:d4: f3:61:61:06:49:b1:06:9c:5e:42:87:e8:f4:10:13:35:55:31: f9:ca:bd:ae:25:06:c6:77:0c:a8:cf:98:11:01:1d:09:7f:c5: 64:76:ed:03:54:be:7e:c5:91:9f:11:8b:34:b5:19:10:3b:b1: a2:65:ee:57:6f:b6:03:4a:1f:bf:82:69:91:7a:6c:b0:92:34: 2a:7d:bc:57:b4:85:ea:c1:42:d8:fa:85:6d:7b:ff:a6:0a:f0: e4:38:4c:76:4e:eb:b0:a1:33:a8:3d:0b:98:2f:ab:4b:8a:9b: 74:9a:49:d0:33:76:c9:d6:06:ba:30:36:d4:5b:94:29:ad:73: 41:0c:72:f0:ff:55:6e:12:3e:ba:d6:53:df:ba:0e:5f:c2:c8: 7b:3e:b5:e2:08:c0:dd:d7:a2:4a:b8:6d:87:29:20:9a:1b:5b: 10:26:64:9c:41:8d:6a:18:de:6f:de:66:17:a9:d3:51:e8:3b: bc:55:26:71:c7:ea:53:f1:aa:47:16:57:32:6f:eb:24:8c:8d: 0e:f8:a2:3c:ce:ef:97:42:c9:d9:a7:47:56:31:fd:ac:fd:b2: 44:30:75:05 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NL4AqJdpJ4QA6Vdli6m+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMTAzN2MxN2JjMTVhN2M5ZDg1Njk4ODdmNWIwNTgzNWNl MzJkMjcwHhcNMjYwMTAxMDYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzM2MTgxYzk4ZDlkNTVjYTNhZWE5OTFlOTVjYWE3NjE5ODdiM2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l5u8kuiI+njonM8XV3iVP5AKfTu tJJBn4+piV/XS/uHLeVRJ2swybl51lChnff1x0JEus6OQ3zA3HsDqQAO5qvuPYZl fyXISjisk94bq50SX9X+9ybwVvHThXj/GD51zCLaIeHzCyUoaKnlbIDcUkHdC35g pDXrPbAZD5fus+y1LYIEjK28oTMBuk6pvTNY0Rzasdm8W1m0wNT1f7yaEmYH+8ci kK0OOPggvIXay44aVRn41kGWqfta74FfxDMRn3LdovbjsLCmBIa8QMHqnvUOqkjF M9+b6uniKQaoKJkSn0bzSkSyee0QBqwvDVGVNW/MAiueQp1x+yB+2/9QmwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBc2GByY2dVco66pkelcqnYZh7PCMB8GA1UdIwQY MBaAFAwQN8F7wVp8nYVpiH9bBYNc4y0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREJBM3dYdkJXbnlkaFdtSWYxc0ZnMXpqTFNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNjJhN2ItOGY3Ni00ODk5LWExNTMt OGM1MDAyOTVjYjk2LzEvRnpZWUhKaloxVnlqcnFtUjZWeXFkaG1IczhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hNjJhN2ItOGY3Ni00ODk5LWExNTMtOGM1MDAyOTVjYjk2 LzEvREJBM3dYdkJXbnlkaFdtSWYxc0ZnMXpqTFNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQET41wAwQC uacsMA0GCSqGSIb3DQEBCwUAA4IBAQA27O10OHMdVHCTJg8nZ2BM5Vz9FPhRMHxp 82FGU4/9jgpurNTzYWEGSbEGnF5Ch+j0EBM1VTH5yr2uJQbGdwyoz5gRAR0Jf8Vk du0DVL5+xZGfEYs0tRkQO7GiZe5Xb7YDSh+/gmmRemywkjQqfbxXtIXqwULY+oVt e/+mCvDkOEx2TuuwoTOoPQuYL6tLipt0mknQM3bJ1ga6MDbUW5QprXNBDHLw/1Vu Ej661lPfug5fwsh7PrXiCMDd16JKuG2HKSCaG1sQJmScQY1qGN5v3mYXqdNR6Du8 VSZxx+pT8apHFlcyb+skjI0O+KI8zu+XQsnZp0dWMf2s/bJEMHUF -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:24 2026 by rpki-client