This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/v-222wH1pTEnd9ZUAJB-e3v1qLg.roa File: v-222wH1pTEnd9ZUAJB-e3v1qLg.roa (raw, json) Hash identifier: BCTHFt6CJgwC/Bj/Hw/fdsANtMpAYGMDW1sjpjUD5cU= Subject key identifier: BF:ED:B6:DB:01:F5:A5:31:27:77:D6:54:00:90:7E:7B:7B:F5:A8:B8 Certificate issuer: /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Certificate serial: 019B78A273FD627C4FDA713EF674DE65ACA0 Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/v-222wH1pTEnd9ZUAJB-e3v1qLg.roa Signing time: Thu 01 Jan 2026 08:17:51 +0000 ROA not before: Thu 01 Jan 2026 08:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8100 IP address blocks: 79.98.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:73:fd:62:7c:4f:da:71:3e:f6:74:de:65:ac:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07 Validity Not Before: Jan 1 08:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bfedb6db01f5a5312777d65400907e7b7bf5a8b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:a1:8e:65:e9:41:7a:8b:fd:36:7c:57:d5:76: 88:c9:a1:c9:21:29:d3:d4:87:fd:ee:ab:3f:87:45: f5:75:bd:99:77:0b:89:6c:0c:f9:ea:a9:80:cb:47: 7c:b4:4b:33:bd:01:3f:73:4a:e9:12:32:bb:5a:cb: c9:0b:e0:73:8e:c7:af:ea:f0:ef:b2:6b:ca:5d:41: 57:06:ca:dc:6b:e8:0e:a1:59:5e:07:71:df:b1:5c: 07:29:4c:5a:06:41:0c:a7:3e:64:36:3e:00:da:f8: d5:b8:2b:9e:18:26:82:cc:c9:e3:ed:21:12:bd:a8: 92:7c:6e:4d:24:3a:a7:78:87:58:49:d7:56:96:5b: cc:e2:07:0a:3d:f5:c8:ec:1e:1c:8b:67:33:b4:2e: 41:96:35:d6:f3:ce:8b:85:51:fc:74:47:72:40:54: 4f:c5:8b:06:1d:55:05:ed:0b:00:4c:8a:c6:68:36: 4b:39:61:4b:f7:bd:04:34:7a:ec:ac:60:b9:e7:ea: 1b:d3:52:ad:c5:fc:43:99:14:33:e7:82:bd:4a:1d: f4:72:db:ec:f7:de:75:f5:62:8e:2d:82:4f:c5:36: 3c:17:8c:68:d8:f8:ac:23:07:d5:0b:82:8c:84:f8: 40:09:3f:79:5e:ab:b8:0b:e9:ee:34:81:48:72:bd: 8c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:ED:B6:DB:01:F5:A5:31:27:77:D6:54:00:90:7E:7B:7B:F5:A8:B8 X509v3 Authority Key Identifier: keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/v-222wH1pTEnd9ZUAJB-e3v1qLg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.98.180.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:76:2d:0e:ca:a7:c2:22:2d:5e:d1:fa:eb:b4:83:82:31:15: 10:fa:36:d1:ba:57:12:47:16:45:ec:83:6e:f6:da:06:8e:48: 7f:ca:2b:32:b9:ed:e7:13:b7:f4:69:77:49:1e:d3:90:9a:39: 74:e3:d6:c9:f8:28:23:1a:13:4e:4f:16:1d:f6:ba:f7:05:99: 20:0c:30:9b:54:9f:11:68:fa:37:1b:04:62:42:6e:3c:ef:40: 85:c1:e5:c1:b3:8b:fe:3e:84:4c:18:b8:f7:26:cf:96:dd:70: 95:30:87:73:c5:c5:f1:b1:29:09:d9:2a:3d:91:9a:dc:35:fa: 86:73:5b:94:72:27:0a:ba:4a:87:cc:dc:3e:80:0f:04:d4:84: ce:c9:8e:6c:6a:c5:2f:39:21:c5:6f:fb:91:bf:35:f9:5a:df: c3:9c:b4:05:bf:8e:49:aa:6d:73:7c:bd:f9:fa:89:f3:1a:c3: 1b:85:c0:0f:48:6e:50:4c:6c:58:39:8b:8e:5d:a6:09:fc:ea: 8f:86:77:01:98:c9:b5:c6:45:0a:81:19:07:34:f0:f9:ff:fe: 3d:ff:9e:1d:bb:cb:29:ee:75:d7:a5:c9:ef:4d:90:67:05:7d: c8:c3:27:bb:ae:11:d3:75:94:61:5a:f6:3d:05:23:c0:0f:e0: 33:87:d3:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4onP9YnxP2nE+9nTeZaygMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYjc4ZjY2ODJmYzM5YzU1YjQxZDQ4ZjgwYjg4MzhkNWQy ZGJmMDcwHhcNMjYwMTAxMDgxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZmVkYjZkYjAxZjVhNTMxMjc3N2Q2NTQwMDkwN2U3YjdiZjVhOGI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9qGOZelBeov9NnxX1XaIyaHJISnT 1If97qs/h0X1db2ZdwuJbAz56qmAy0d8tEszvQE/c0rpEjK7WsvJC+Bzjsev6vDv smvKXUFXBsrca+gOoVleB3HfsVwHKUxaBkEMpz5kNj4A2vjVuCueGCaCzMnj7SES vaiSfG5NJDqneIdYSddWllvM4gcKPfXI7B4ci2cztC5BljXW886LhVH8dEdyQFRP xYsGHVUF7QsATIrGaDZLOWFL970ENHrsrGC55+ob01KtxfxDmRQz54K9Sh30ctvs 99519WKOLYJPxTY8F4xo2PisIwfVC4KMhPhACT95Xqu4C+nuNIFIcr2MswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL/tttsB9aUxJ3fWVACQfnt79ai4MB8GA1UdIwQY MBaAFHK3j2aC/DnFW0HUj4C4g41dLb8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEt ZjNlNTA2YWVhYTAxLzEvdi0yMjJ3SDFwVEVuZDlaVUFKQi1lM3YxcUxnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zYzRiOGEtYmZjNy00MWU5LTk5ZTEtZjNlNTA2YWVhYTAx LzEvY3JlUFpvTDhPY1ZiUWRTUGdMaURqVjB0dndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT2K0MA0G CSqGSIb3DQEBCwUAA4IBAQCadi0OyqfCIi1e0frrtIOCMRUQ+jbRulcSRxZF7INu 9toGjkh/yisyue3nE7f0aXdJHtOQmjl049bJ+CgjGhNOTxYd9rr3BZkgDDCbVJ8R aPo3GwRiQm4870CFweXBs4v+PoRMGLj3Js+W3XCVMIdzxcXxsSkJ2So9kZrcNfqG c1uUcicKukqHzNw+gA8E1ITOyY5sasUvOSHFb/uRvzX5Wt/DnLQFv45Jqm1zfL35 +onzGsMbhcAPSG5QTGxYOYuOXaYJ/OqPhncBmMm1xkUKgRkHNPD5//49/54du8sp 7nXXpcnvTZBnBX3Iwye7rhHTdZRhWvY9BSPAD+Azh9P4 -----END CERTIFICATE-----Generated at Mon Jan 19 19:57:52 2026 by rpki-client