This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/593uxzhKtaz959jMa3kQfymkQ_A.roa File: 593uxzhKtaz959jMa3kQfymkQ_A.roa (raw, json) Hash identifier: eXYCKjgM5SCSuqJrMHz3uebePPhFrmqWLG5jnzxgJfE= Subject key identifier: E7:DD:EE:C7:38:4A:B5:AC:FD:E7:D8:CC:6B:79:10:7F:29:A4:43:F0 Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 019B775904E91FA7C8830AE4C302562112CE Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/593uxzhKtaz959jMa3kQfymkQ_A.roa Signing time: Thu 01 Jan 2026 02:18:01 +0000 ROA not before: Thu 01 Jan 2026 02:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62387 IP address blocks: 79.132.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 05:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:04:e9:1f:a7:c8:83:0a:e4:c3:02:56:21:12:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Jan 1 02:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e7ddeec7384ab5acfde7d8cc6b79107f29a443f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:36:9a:ae:73:23:fc:9c:52:75:f0:53:74:70: 70:22:87:5b:55:f5:be:50:1a:33:68:da:04:96:11: 2d:dd:06:8e:d1:60:94:33:dc:90:ff:e7:ab:87:5e: 9d:c6:59:74:87:00:87:ea:5b:5e:7b:bc:21:75:bf: 28:b7:a7:f9:d3:3a:c2:26:6c:3c:f4:d1:85:97:23: 44:37:c5:78:38:95:96:6d:91:67:b6:a9:b9:db:c6: 50:bd:86:1f:7b:1a:fc:ed:d5:30:6e:2a:98:c6:28: d4:f3:a6:19:f2:4f:27:68:db:c4:e7:fa:3f:1e:ef: 68:ac:9e:5f:26:96:c4:06:0f:6f:a9:e1:1a:b0:9b: 33:cb:71:cc:e6:4e:aa:46:cd:64:aa:eb:02:09:97: 00:9b:3a:18:1b:46:50:4f:64:f5:e5:1b:81:25:1c: 74:6f:92:ca:7a:20:86:aa:2a:bc:89:90:cd:f4:6b: a6:af:81:fc:25:4a:65:8f:e9:47:d4:be:d9:0a:81: 3f:b6:a2:a9:90:88:f8:1c:33:91:b8:53:77:d0:9d: ab:58:63:05:20:f3:06:91:2c:92:eb:ac:06:10:a6: 60:be:7f:51:38:39:9a:fa:df:12:a6:7d:2d:c2:40: ea:09:ca:ac:c4:89:37:3d:56:f4:39:41:a8:4b:d3: 8b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:DD:EE:C7:38:4A:B5:AC:FD:E7:D8:CC:6B:79:10:7F:29:A4:43:F0 X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/593uxzhKtaz959jMa3kQfymkQ_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.132.176.0/20 Signature Algorithm: sha256WithRSAEncryption 32:55:e3:a1:a7:13:c5:32:8b:e7:51:7b:32:f9:11:f2:d2:48: 0b:8f:10:8f:fc:40:2e:4d:03:c4:a0:6b:35:14:71:36:47:ec: c5:6d:0c:6c:d5:18:77:8e:37:0b:0a:36:7e:80:d1:8a:e2:1a: 85:2a:e2:ae:20:65:09:18:a9:ca:1f:1a:3c:08:69:fd:e5:49: 59:ea:6d:64:87:c8:c2:e5:19:9e:7b:b4:99:99:3d:8f:78:40: 3d:29:4b:14:5c:03:a0:26:c1:e0:56:0b:5e:11:fb:30:cb:74: c7:be:32:69:0c:f9:b7:cc:68:6b:a3:ab:24:4d:78:71:f4:0f: 22:70:02:f3:10:e6:37:13:4e:a9:93:2a:47:54:34:4d:63:4f: 5d:82:a4:46:df:22:10:b4:81:c3:5e:96:7e:27:95:59:9c:76: 00:90:f9:78:ed:9f:11:59:f4:8d:e7:f2:0d:b5:12:65:d7:65: 04:9b:52:84:bc:87:ba:d9:32:46:ad:4d:b3:87:45:94:e8:78: b1:fd:39:c0:9a:ba:83:fa:0e:0c:72:48:3f:56:f9:42:d9:38: 11:f3:42:8d:7c:68:30:22:3e:e4:18:56:0f:c4:5e:99:bf:a1: fa:51:da:6a:2b:0e:a4:6b:06:b0:61:a3:d1:75:79:bb:08:e5: b1:10:f3:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQTpH6fIgwrkwwJWIRLOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjYwMTAxMDIxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlN2RkZWVjNzM4NGFiNWFjZmRlN2Q4Y2M2Yjc5MTA3ZjI5YTQ0M2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzaarnMj/JxSdfBTdHBwIodbVfW+ UBozaNoElhEt3QaO0WCUM9yQ/+erh16dxll0hwCH6ltee7whdb8ot6f50zrCJmw8 9NGFlyNEN8V4OJWWbZFntqm528ZQvYYfexr87dUwbiqYxijU86YZ8k8naNvE5/o/ Hu9orJ5fJpbEBg9vqeEasJszy3HM5k6qRs1kqusCCZcAmzoYG0ZQT2T15RuBJRx0 b5LKeiCGqiq8iZDN9Gumr4H8JUplj+lH1L7ZCoE/tqKpkIj4HDORuFN30J2rWGMF IPMGkSyS66wGEKZgvn9RODma+t8Spn0twkDqCcqsxIk3PVb0OUGoS9OLFQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOfd7sc4SrWs/efYzGt5EH8ppEPwMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvNTkzdXh6aEt0YXo5NTlqTWEza1FmeW1rUV9BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQET4SwMA0G CSqGSIb3DQEBCwUAA4IBAQAyVeOhpxPFMovnUXsy+RHy0kgLjxCP/EAuTQPEoGs1 FHE2R+zFbQxs1Rh3jjcLCjZ+gNGK4hqFKuKuIGUJGKnKHxo8CGn95UlZ6m1kh8jC 5Rmee7SZmT2PeEA9KUsUXAOgJsHgVgteEfswy3THvjJpDPm3zGhro6skTXhx9A8i cALzEOY3E06pkypHVDRNY09dgqRG3yIQtIHDXpZ+J5VZnHYAkPl47Z8RWfSN5/IN tRJl12UEm1KEvIe62TJGrU2zh0WU6Hix/TnAmrqD+g4Mckg/VvlC2TgR80KNfGgw Ij7kGFYPxF6Zv6H6UdpqKw6kawawYaPRdXm7COWxEPO9 -----END CERTIFICATE-----Generated at Thu Jan 22 15:30:25 2026 by rpki-client