This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/f4L-e9UliizwQHMrVG3Z-smnCOE.roa File: f4L-e9UliizwQHMrVG3Z-smnCOE.roa (raw, json) Hash identifier: wnJ8nLXsSbO6JIdouqW7cKBmQK9y4hfrwz9zAhevvk0= Subject key identifier: 7F:82:FE:7B:D5:25:8A:2C:F0:40:73:2B:54:6D:D9:FA:C9:A7:08:E1 Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Certificate serial: 019B797E432539ED701867EB7DCEB53AF236 Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/f4L-e9UliizwQHMrVG3Z-smnCOE.roa Signing time: Thu 01 Jan 2026 12:17:56 +0000 ROA not before: Thu 01 Jan 2026 12:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213638 IP address blocks: 79.174.20.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 12:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:43:25:39:ed:70:18:67:eb:7d:ce:b5:3a:f2:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745 Validity Not Before: Jan 1 12:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f82fe7bd5258a2cf040732b546dd9fac9a708e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:65:e8:93:df:f8:bf:3f:b6:39:d9:e8:92:73: da:b9:08:14:79:cf:fc:a5:dd:6f:80:89:1d:a4:85: 4a:4a:3c:4d:d0:83:b1:d7:53:40:3f:02:26:da:d7: 96:09:4b:48:42:74:c6:2e:01:53:57:09:0f:a5:1f: b4:e2:19:d3:9a:b8:c2:fe:13:53:59:9c:9a:f8:f5: 5c:b7:34:42:39:4b:47:6c:db:25:99:d5:64:7d:ad: 43:90:90:46:3a:41:49:22:56:62:7e:4d:d2:fe:62: a5:60:0b:30:11:19:df:c6:68:a4:bb:f2:23:a0:87: bc:04:88:f0:00:2a:be:af:6e:9d:9f:93:33:a9:c9: 2d:b8:70:46:82:43:6a:70:30:75:c7:f2:13:1d:58: 47:79:c5:34:aa:20:f4:bb:3c:88:cd:58:d2:1f:1e: 69:95:9e:4d:a0:0d:9e:e8:e3:ef:d4:6d:2d:a5:37: f0:29:ca:6f:3a:4c:1d:17:0e:69:ab:8a:94:e2:19: f6:b9:2a:06:51:fe:16:82:a0:0c:4f:20:30:c5:e7: 1d:8e:d5:b8:b8:c6:df:35:6e:e6:21:78:45:7f:12: c3:e6:dc:c0:92:47:62:51:29:f4:7a:6f:f2:b5:cd: 42:f7:93:d8:87:bc:6e:09:6c:bf:c8:15:6b:c4:f8: 9e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:82:FE:7B:D5:25:8A:2C:F0:40:73:2B:54:6D:D9:FA:C9:A7:08:E1 X509v3 Authority Key Identifier: keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/f4L-e9UliizwQHMrVG3Z-smnCOE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.174.20.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:87:4d:6c:e2:52:2f:29:f8:09:0c:75:57:30:a4:9a:ed:d8: 39:6f:a8:80:9b:84:5c:a0:9e:05:9d:0d:05:b6:4f:52:b7:51: dc:42:fa:fb:c2:b2:12:a0:8d:40:8e:b1:68:a3:b6:51:d5:cd: 1d:5c:0c:0d:db:12:5e:7e:47:0f:d1:aa:55:f6:ce:f8:4a:93: 80:f0:0a:ed:43:68:be:22:ec:64:a3:38:28:c4:f1:35:2a:ba: 32:ce:49:5e:82:67:0b:ea:a9:09:2a:92:f0:62:9c:26:de:20: 90:59:80:53:0f:cb:c6:d1:06:11:b1:af:0b:78:c9:bf:f2:e6: a9:39:b6:ba:ec:52:48:4e:54:73:00:97:46:9b:83:6b:5b:41: ad:8d:2b:1c:81:0a:17:e4:8f:93:e1:b9:70:e8:ee:05:a7:64: ea:60:bc:91:6c:2a:ff:21:08:07:a8:a3:b8:99:48:cb:ab:d8: c0:b9:91:79:a9:77:7c:6d:72:79:01:8b:1a:f0:d6:10:47:ff: a1:c6:0d:d9:8f:7e:e4:4a:52:4d:bd:8a:5b:a8:93:c5:95:93: ff:99:06:a8:0b:b1:01:66:e4:50:ae:7b:ad:5f:95:d8:55:32: fc:44:7e:db:06:ac:bf:98:0b:72:1e:9a:a6:e9:66:e8:ac:1d: 97:f4:14:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fkMlOe1wGGfrfc61OvI2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi YTU3NDUwHhcNMjYwMTAxMTIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjgyZmU3YmQ1MjU4YTJjZjA0MDczMmI1NDZkZDlmYWM5YTcwOGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWXok9/4vz+2OdnoknPauQgUec/8 pd1vgIkdpIVKSjxN0IOx11NAPwIm2teWCUtIQnTGLgFTVwkPpR+04hnTmrjC/hNT WZya+PVctzRCOUtHbNslmdVkfa1DkJBGOkFJIlZifk3S/mKlYAswERnfxmiku/Ij oIe8BIjwACq+r26dn5MzqcktuHBGgkNqcDB1x/ITHVhHecU0qiD0uzyIzVjSHx5p lZ5NoA2e6OPv1G0tpTfwKcpvOkwdFw5pq4qU4hn2uSoGUf4WgqAMTyAwxecdjtW4 uMbfNW7mIXhFfxLD5tzAkkdiUSn0em/ytc1C95PYh7xuCWy/yBVrxPie+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH+C/nvVJYos8EBzK1Rt2frJpwjhMB8GA1UdIwQY MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt ZmVhYzI2ZWFlY2MyLzEvZjRMLWU5VWxpaXp3UUhNclZHM1otc21uQ09FLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT64UMA0G CSqGSIb3DQEBCwUAA4IBAQCbh01s4lIvKfgJDHVXMKSa7dg5b6iAm4RcoJ4FnQ0F tk9St1HcQvr7wrISoI1AjrFoo7ZR1c0dXAwN2xJefkcP0apV9s74SpOA8ArtQ2i+ IuxkozgoxPE1KroyzklegmcL6qkJKpLwYpwm3iCQWYBTD8vG0QYRsa8LeMm/8uap Oba67FJITlRzAJdGm4NrW0GtjSscgQoX5I+T4blw6O4Fp2TqYLyRbCr/IQgHqKO4 mUjLq9jAuZF5qXd8bXJ5AYsa8NYQR/+hxg3Zj37kSlJNvYpbqJPFlZP/mQaoC7EB ZuRQrnutX5XYVTL8RH7bBqy/mAtyHpqm6WborB2X9BSA -----END CERTIFICATE-----Generated at Mon Jan 19 20:22:59 2026 by rpki-client