This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/R4qEToqfSkeiFULTHUZGnydGcw4.roa File: R4qEToqfSkeiFULTHUZGnydGcw4.roa (raw, json) Hash identifier: o1YZ2eQ1EJL441JD9x3LpK7S2x6ycvX1hJM3jM3ADIM= Subject key identifier: 47:8A:84:4E:8A:9F:4A:47:A2:15:42:D3:1D:46:46:9F:27:46:73:0E Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Certificate serial: 019B7758FCA16494B9AB4405D3FF66233DAD Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/R4qEToqfSkeiFULTHUZGnydGcw4.roa Signing time: Thu 01 Jan 2026 02:17:58 +0000 ROA not before: Thu 01 Jan 2026 02:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 79.132.180.0/24 maxlen: 24 79.132.183.0/24 maxlen: 24 79.132.188.0/24 maxlen: 24 79.132.190.0/24 maxlen: 24 88.223.154.0/23 maxlen: 24 88.223.164.0/24 maxlen: 24 88.223.165.0/24 maxlen: 24 88.223.166.0/24 maxlen: 24 88.223.167.0/24 maxlen: 24 88.223.176.0/20 maxlen: 24 88.223.180.0/24 maxlen: 24 88.223.183.0/24 maxlen: 24 88.223.189.0/24 maxlen: 24 88.223.190.0/24 maxlen: 24 88.223.191.0/24 maxlen: 24 88.223.208.0/24 maxlen: 24 88.223.211.0/24 maxlen: 24 88.223.218.0/24 maxlen: 24 88.223.224.0/20 maxlen: 24 88.223.244.0/22 maxlen: 22 88.223.248.0/22 maxlen: 22 88.223.252.0/22 maxlen: 22 213.164.96.0/20 maxlen: 24 213.164.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:fc:a1:64:94:b9:ab:44:05:d3:ff:66:23:3d:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4 Validity Not Before: Jan 1 02:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=478a844e8a9f4a47a21542d31d46469f2746730e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cb:18:63:d6:a1:5f:b1:67:f2:02:72:d8:48: 3a:2e:a2:f6:e3:a9:a6:36:62:5d:fc:3a:c4:ee:b5: 77:1a:dc:3a:37:7c:02:69:01:6b:ac:5c:8a:80:4d: 13:74:41:9b:73:ca:99:13:e7:5f:58:b5:8d:71:72: 9f:82:d8:46:89:ca:06:7f:ce:5f:7f:5a:cf:fc:61: ee:bb:fa:95:ac:de:df:f6:1f:ec:77:77:ab:b3:8d: 73:a5:bc:20:e2:a7:bc:06:5d:08:4e:4c:d4:bb:ca: 27:e8:37:45:58:5d:f3:e1:8c:79:05:c4:a9:80:d3: d2:45:e4:49:03:31:2b:e7:15:b5:d8:19:a4:a5:cc: 8c:cf:d6:ea:d3:1d:56:b1:0e:a0:96:86:bb:24:43: 52:d1:e1:1a:be:96:de:35:ba:a7:d4:c1:0a:bd:b0: db:b5:a7:3c:16:5a:03:35:7a:b9:f3:d6:51:d8:f9: 88:fc:4b:ea:4f:4e:af:a0:2b:8a:4b:29:b1:50:ba: d0:ef:bf:4a:48:49:db:a9:d7:d8:ff:fa:11:9a:29: 8f:4c:b9:0a:70:33:09:e3:db:32:6c:05:9d:a9:88: 12:9a:f7:ec:de:34:f2:cd:5c:3d:9c:0f:fb:1b:5f: 62:37:0b:52:24:f3:0c:99:16:c2:69:b1:1c:79:5d: 42:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8A:84:4E:8A:9F:4A:47:A2:15:42:D3:1D:46:46:9F:27:46:73:0E X509v3 Authority Key Identifier: keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/R4qEToqfSkeiFULTHUZGnydGcw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.132.180.0/24 79.132.183.0/24 79.132.188.0/24 79.132.190.0/24 88.223.154.0/23 88.223.164.0/22 88.223.176.0/20 88.223.208.0/24 88.223.211.0/24 88.223.218.0/24 88.223.224.0/20 88.223.244.0-88.223.255.255 213.164.96.0/20 Signature Algorithm: sha256WithRSAEncryption 05:62:92:31:f3:b4:b0:12:04:33:f3:d0:6e:0d:47:5c:a7:73: fc:e7:45:f1:60:e8:1f:0a:4a:6d:ea:25:6a:57:d5:53:bb:52: d0:55:78:d3:fa:7e:66:e9:37:aa:52:bf:5d:96:89:16:6d:97: 96:59:ab:cd:62:93:96:48:00:8a:8d:e4:35:b5:07:30:81:85: 4e:a4:e9:60:f0:22:2d:8c:73:95:d6:99:94:64:36:cd:fc:5d: 88:c3:7a:f6:8c:a4:21:93:b3:6a:c4:4c:af:3c:27:16:0b:db: 9e:0a:84:1e:fe:4a:bb:ce:11:5a:e7:7a:f0:a0:3d:b4:2a:f7: af:e5:03:8e:4c:e7:28:63:5c:87:d8:f4:69:b5:bd:b9:de:10: 15:89:13:a5:6d:c9:97:f6:40:88:b5:10:86:69:6b:eb:3e:05: 47:a6:05:1c:0a:2c:5d:53:a3:24:63:7c:91:7b:fb:d3:ae:3f: 8e:c6:f9:46:8c:21:5e:b3:ee:5c:f4:db:f9:a6:33:92:f2:b9: a6:42:00:f6:ac:7b:53:1d:66:35:21:c5:e4:e7:99:89:72:90: 91:f5:7f:e5:83:f9:c9:97:46:cf:cd:36:38:d1:46:ba:af:b5: d7:97:60:64:ea:39:e6:e0:47:fc:80:98:0e:a3:5a:dd:5a:3c: d9:3b:61:4a -----BEGIN CERTIFICATE----- MIIFTDCCBDSgAwIBAgISAZt3WPyhZJS5q0QF0/9mIz2tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0 ZjgzYzQwHhcNMjYwMTAxMDIxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzhhODQ0ZThhOWY0YTQ3YTIxNTQyZDMxZDQ2NDY5ZjI3NDY3MzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMsYY9ahX7Fn8gJy2Eg6LqL246mm NmJd/DrE7rV3Gtw6N3wCaQFrrFyKgE0TdEGbc8qZE+dfWLWNcXKfgthGicoGf85f f1rP/GHuu/qVrN7f9h/sd3ers41zpbwg4qe8Bl0ITkzUu8on6DdFWF3z4Yx5BcSp gNPSReRJAzEr5xW12BmkpcyMz9bq0x1WsQ6gloa7JENS0eEavpbeNbqn1MEKvbDb tac8FloDNXq589ZR2PmI/EvqT06voCuKSymxULrQ779KSEnbqdfY//oRmimPTLkK cDMJ49sybAWdqYgSmvfs3jTyzVw9nA/7G19iNwtSJPMMmRbCabEceV1CKQIDAQAB o4ICWDCCAlQwHQYDVR0OBBYEFEeKhE6Kn0pHohVC0x1GRp8nRnMOMB8GA1UdIwQY MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut MWY4NzQ2OTQ1NDgzLzEvUjRxRVRvcWZTa2VpRlVMVEhVWkdueWRHY3c0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG4GCCsGAQUFBwEHAQH/BF8wXTBbBAIAATBVAwQAT4S0AwQA T4S3AwQAT4S8AwQAT4S+AwQBWN+aAwQCWN+kAwQEWN+wAwQAWN/QAwQAWN/TAwQA WN/aAwQEWN/gMAsDBAJY3/QDAwVYwAMEBNWkYDANBgkqhkiG9w0BAQsFAAOCAQEA BWKSMfO0sBIEM/PQbg1HXKdz/OdF8WDoHwpKbeolalfVU7tS0FV40/p+Zuk3qlK/ XZaJFm2XllmrzWKTlkgAio3kNbUHMIGFTqTpYPAiLYxzldaZlGQ2zfxdiMN69oyk IZOzasRMrzwnFgvbngqEHv5Ku84RWud68KA9tCr3r+UDjkznKGNch9j0abW9ud4Q FYkTpW3Jl/ZAiLUQhmlr6z4FR6YFHAosXVOjJGN8kXv7064/jsb5RowhXrPuXPTb +aYzkvK5pkIA9qx7Ux1mNSHF5OeZiXKQkfV/5YP5yZdGz802ONFGuq+115dgZOo5 5uBH/ICYDqNa3Vo82TthSg== -----END CERTIFICATE-----Generated at Thu Jan 8 00:16:37 2026 by rpki-client