This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/714jAkRfYNSFRWD00Ttnn_8kshU.roa File: 714jAkRfYNSFRWD00Ttnn_8kshU.roa (raw, json) Hash identifier: Qwe2Q2afQjCXeJnI6CuGzTdKEtcUpiC/k2FP9kdrGD4= Subject key identifier: EF:5E:23:02:44:5F:60:D4:85:45:60:F4:D1:3B:67:9F:FF:24:B2:15 Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c Certificate serial: 019B7910E0DDF74969F55D2300FA736ED284 Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/714jAkRfYNSFRWD00Ttnn_8kshU.roa Signing time: Thu 01 Jan 2026 10:18:27 +0000 ROA not before: Thu 01 Jan 2026 10:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216246 IP address blocks: 79.137.192.0/24 maxlen: 24 85.192.30.0/24 maxlen: 24 85.192.56.0/24 maxlen: 24 213.219.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.mft rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 04:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:e0:dd:f7:49:69:f5:5d:23:00:fa:73:6e:d2:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c Validity Not Before: Jan 1 10:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ef5e2302445f60d4854560f4d13b679fff24b215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:49:af:e1:47:d6:bf:55:58:27:25:0f:e5:3a: e4:5f:dd:40:7e:6a:1f:c3:01:56:3e:4b:4a:88:58: a1:be:10:35:df:95:4b:d0:ca:ad:17:86:1e:62:79: 91:e9:14:0f:77:3b:05:57:87:88:d8:e3:16:e8:99: 8c:71:7d:9f:bf:16:98:7f:18:55:f0:4c:d1:ec:58: 65:fd:2b:91:0c:e7:a8:f0:40:85:7c:ef:54:8c:64: b0:97:c3:57:79:18:ea:1f:c4:c8:bc:85:bb:02:88: 81:39:36:af:53:87:2f:42:98:16:78:e3:fb:ed:e5: 71:63:f5:4e:bd:d1:f1:1d:be:43:72:7f:c2:cc:14: 89:f7:53:ce:35:a9:32:40:6f:4d:02:75:6d:18:28: a9:88:e2:4e:18:71:56:13:87:d5:1d:f2:86:91:0a: 29:ab:19:cb:65:53:64:e9:4f:0f:08:22:ae:a7:dc: 24:72:bd:3a:ca:0d:cb:c7:28:b2:0f:b8:79:1f:8f: 8c:f7:06:6a:e6:ef:c1:f9:12:dc:1d:ec:4c:6b:e4: 66:e0:9f:fa:9b:d9:e9:36:0a:b9:69:69:cc:55:17: f8:11:b8:89:29:77:63:7f:f3:43:9a:59:a6:0c:c2: 23:d9:22:76:85:73:0c:48:97:c2:64:83:39:75:e1: 90:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5E:23:02:44:5F:60:D4:85:45:60:F4:D1:3B:67:9F:FF:24:B2:15 X509v3 Authority Key Identifier: keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/714jAkRfYNSFRWD00Ttnn_8kshU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.137.192.0/24 85.192.30.0/24 85.192.56.0/24 213.219.247.0/24 Signature Algorithm: sha256WithRSAEncryption 18:02:90:87:31:2f:2d:98:64:ab:9e:bb:6c:2b:78:67:4d:f3: ba:25:4d:61:86:96:f6:d9:60:2e:5c:c2:4e:2e:9d:fa:31:40: e4:b6:ac:c4:4a:dc:17:26:10:db:4c:3f:5f:63:81:d5:b1:4e: c3:1e:cc:e5:ba:2c:de:3a:ea:8e:82:47:d4:88:e5:ec:3e:eb: 34:fe:58:2f:ff:dd:00:20:63:00:49:99:fd:e7:d2:48:c7:7f: c5:79:60:b5:66:6e:f1:a2:23:2d:55:a3:0d:d2:6f:fe:05:72: a8:22:44:33:14:66:0d:14:f5:66:95:cd:ba:e7:ee:ab:10:f4: a6:c5:d1:46:5d:19:c5:ed:ef:99:22:b0:91:a5:c5:f9:0d:e9: 1d:7e:1b:10:9a:9f:17:69:04:68:12:79:0e:50:d1:94:e1:47: 18:ab:79:91:c8:ba:04:3d:77:cf:41:96:88:06:52:c2:cf:fa: 9e:6f:ef:5c:e0:6a:0e:70:05:06:ca:99:35:29:f2:e9:4a:b4: 65:c8:31:8d:e1:83:bd:66:e6:a4:aa:84:9b:f0:e4:88:c6:1b: 49:5a:10:8f:9a:5c:cf:10:47:d4:59:f3:12:ce:3b:74:3f:4e: 9a:b2:dd:3b:e7:fd:2a:3e:7a:cc:b7:ab:15:1d:d5:67:8d:0e: 50:e0:11:53 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5EODd90lp9V0jAPpzbtKEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNhMWM3NTcxNTk2ZTQ0NGFhMzIzNzFjYmFiNzI0ZDQ2ZDNj M2M1MmMwHhcNMjYwMTAxMTAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZjVlMjMwMjQ0NWY2MGQ0ODU0NTYwZjRkMTNiNjc5ZmZmMjRiMjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukmv4UfWv1VYJyUP5TrkX91Afmof wwFWPktKiFihvhA135VL0MqtF4YeYnmR6RQPdzsFV4eI2OMW6JmMcX2fvxaYfxhV 8EzR7Fhl/SuRDOeo8ECFfO9UjGSwl8NXeRjqH8TIvIW7AoiBOTavU4cvQpgWeOP7 7eVxY/VOvdHxHb5Dcn/CzBSJ91PONakyQG9NAnVtGCipiOJOGHFWE4fVHfKGkQop qxnLZVNk6U8PCCKup9wkcr06yg3LxyiyD7h5H4+M9wZq5u/B+RLcHexMa+Rm4J/6 m9npNgq5aWnMVRf4EbiJKXdjf/NDmlmmDMIj2SJ2hXMMSJfCZIM5deGQ0QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFO9eIwJEX2DUhUVg9NE7Z5//JLIVMB8GA1UdIwQY MBaAFMocdXFZbkRKoyNxy6tyTUbTw8UsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEt Yjc2MmMwMTc1ZjI3LzEvNzE0akFrUmZZTlNGUldEMDBUdG5uXzhrc2hVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zMzYyYzYtYTAzYS00ZjlmLWEwOTEtYjc2MmMwMTc1ZjI3 LzEveWh4MWNWbHVSRXFqSTNITHEzSk5SdFBEeFN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAT4nAAwQA VcAeAwQAVcA4AwQA1dv3MA0GCSqGSIb3DQEBCwUAA4IBAQAYApCHMS8tmGSrnrts K3hnTfO6JU1hhpb22WAuXMJOLp36MUDktqzEStwXJhDbTD9fY4HVsU7DHszluize OuqOgkfUiOXsPus0/lgv/90AIGMASZn959JIx3/FeWC1Zm7xoiMtVaMN0m/+BXKo IkQzFGYNFPVmlc265+6rEPSmxdFGXRnF7e+ZIrCRpcX5DekdfhsQmp8XaQRoEnkO UNGU4UcYq3mRyLoEPXfPQZaIBlLCz/qeb+9c4GoOcAUGypk1KfLpSrRlyDGN4YO9 ZuakqoSb8OSIxhtJWhCPmlzPEEfUWfMSzjt0P06ast075/0qPnrMt6sVHdVnjQ5Q 4BFT -----END CERTIFICATE-----Generated at Tue Jan 20 14:13:47 2026 by rpki-client