This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/nPEounEr9Dlrb0BmzADGVTeSqtg.roa File: nPEounEr9Dlrb0BmzADGVTeSqtg.roa (raw, json) Hash identifier: WNJB2u1ILoanF+nGeSCzXfM+9cLuf8G8/18OGH9ztZ8= Subject key identifier: 9C:F1:28:BA:71:2B:F4:39:6B:6F:40:66:CC:00:C6:55:37:92:AA:D8 Certificate issuer: /CN=c0f92571108958786b65ffa241b1f11f6d058b56 Certificate serial: 019B7CEDC6DDCCEB0AB0B688B5A7EEB9DB88 Authority key identifier: C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/nPEounEr9Dlrb0BmzADGVTeSqtg.roa Signing time: Fri 02 Jan 2026 04:18:36 +0000 ROA not before: Fri 02 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.79.72.0/24 maxlen: 24 185.79.73.0/24 maxlen: 24 185.79.74.0/24 maxlen: 24 185.79.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c6:dd:cc:eb:0a:b0:b6:88:b5:a7:ee:b9:db:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0f92571108958786b65ffa241b1f11f6d058b56 Validity Not Before: Jan 2 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cf128ba712bf4396b6f4066cc00c6553792aad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ff:92:aa:1a:36:46:6b:81:3d:94:90:3e:25: 0c:9a:c2:41:b6:e3:b9:60:6e:06:02:de:90:bf:f3: 48:f0:ef:22:4e:5f:6c:b4:4a:09:01:cb:3a:c0:b2: fb:ef:e7:35:73:12:01:2d:98:0c:8b:ad:41:52:fc: d1:9b:0f:76:b7:03:e3:c8:6f:1f:fa:fb:7e:ad:97: 42:15:b3:61:11:58:2a:a7:3d:a7:a4:84:e9:44:f5: 44:58:09:31:4d:88:92:22:cf:1f:d6:dc:5f:9d:c2: 39:05:e8:3d:df:bd:61:e8:bc:85:f6:92:71:5b:e0: 7d:76:c2:f6:1f:f4:86:96:d8:f3:da:03:92:e1:68: 5c:f2:74:50:84:f6:41:08:ed:b8:90:f6:f2:1b:67: 69:5b:2a:94:80:09:cd:36:31:db:44:46:99:16:0a: 04:76:ac:80:57:ca:0c:99:ad:1f:a2:7a:7c:ff:27: 4e:96:df:a3:1d:e6:aa:f5:6d:1a:05:f7:cc:59:29: bd:a1:6e:67:1e:af:90:ee:5a:f9:7f:fd:ad:b9:0f: 5a:e6:68:84:6b:6b:a5:72:e1:97:b3:53:92:99:0f: 4c:88:a9:ba:21:ea:dd:30:16:a2:a2:5c:75:ef:c2: 9f:2e:14:37:a0:b1:a7:34:8b:70:0f:f4:89:bd:6c: f4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F1:28:BA:71:2B:F4:39:6B:6F:40:66:CC:00:C6:55:37:92:AA:D8 X509v3 Authority Key Identifier: keyid:C0:F9:25:71:10:89:58:78:6B:65:FF:A2:41:B1:F1:1F:6D:05:8B:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPklcRCJWHhrZf-iQbHxH20Fi1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/nPEounEr9Dlrb0BmzADGVTeSqtg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/bf1ccb-9f32-4f41-8dad-9b2b9ea95535/1/wPklcRCJWHhrZf-iQbHxH20Fi1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.79.72.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:d6:4d:f5:6b:e1:51:bc:4f:3d:09:63:f6:ae:70:27:96:53: b9:b8:ba:41:3a:88:de:69:cb:41:d1:63:a7:f5:6f:40:30:fe: e8:13:c2:e9:c4:c2:d0:a2:96:44:38:a7:d6:98:51:f0:4f:67: 38:4b:e9:48:68:ea:81:22:e5:72:50:99:bb:88:fb:1f:ee:b8: c9:86:ab:5c:b3:27:6a:44:89:84:00:7d:ae:35:91:1b:6d:8b: a7:14:bb:d9:7a:58:bc:e4:9a:40:ac:03:38:36:1e:b5:1e:a3: f1:9a:89:c9:56:35:ae:63:88:ce:06:8a:42:e5:50:9d:fd:39: c8:f1:03:8e:57:26:8e:f6:68:73:5d:29:a7:4b:ac:98:3e:78: ac:71:7e:10:e2:31:bc:a2:37:b8:52:76:ea:d0:6d:f7:5e:35: ea:64:ad:ff:80:69:9b:5c:af:bb:3d:58:43:3a:57:df:8c:39: 42:1e:8a:3e:5f:2c:24:d5:f9:ce:f9:d9:3f:3b:2a:28:96:50: 38:ff:ed:fa:1b:eb:d6:bf:ab:2d:be:50:56:cf:cd:2c:3a:45: 80:74:19:cd:16:d8:53:22:02:2f:4f:cb:85:0e:56:28:73:8a: de:e3:a1:c7:88:08:ed:bd:65:9f:60:0a:f9:25:4c:0a:00:26: 30:dd:b9:0d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87cbdzOsKsLaItafuuduIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZjkyNTcxMTA4OTU4Nzg2YjY1ZmZhMjQxYjFmMTFmNmQw NThiNTYwHhcNMjYwMTAyMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2YxMjhiYTcxMmJmNDM5NmI2ZjQwNjZjYzAwYzY1NTM3OTJhYWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/+Sqho2RmuBPZSQPiUMmsJBtuO5 YG4GAt6Qv/NI8O8iTl9stEoJAcs6wLL77+c1cxIBLZgMi61BUvzRmw92twPjyG8f +vt+rZdCFbNhEVgqpz2npITpRPVEWAkxTYiSIs8f1txfncI5Beg9371h6LyF9pJx W+B9dsL2H/SGltjz2gOS4Whc8nRQhPZBCO24kPbyG2dpWyqUgAnNNjHbREaZFgoE dqyAV8oMma0fonp8/ydOlt+jHeaq9W0aBffMWSm9oW5nHq+Q7lr5f/2tuQ9a5miE a2ulcuGXs1OSmQ9MiKm6IerdMBaiolx178KfLhQ3oLGnNItwD/SJvWz0kQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJzxKLpxK/Q5a29AZswAxlU3kqrYMB8GA1UdIwQY MBaAFMD5JXEQiVh4a2X/okGx8R9tBYtWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1BrbGNSQ0pXSGhyWmYtaVFiSHhIMjBGaTFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9iZjFjY2ItOWYzMi00ZjQxLThkYWQt OWIyYjllYTk1NTM1LzEvblBFb3VuRXI5RGxyYjBCbXpBREdWVGVTcXRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9iZjFjY2ItOWYzMi00ZjQxLThkYWQtOWIyYjllYTk1NTM1 LzEvd1BrbGNSQ0pXSGhyWmYtaVFiSHhIMjBGaTFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuU9IMA0G CSqGSIb3DQEBCwUAA4IBAQA/1k31a+FRvE89CWP2rnAnllO5uLpBOojeactB0WOn 9W9AMP7oE8LpxMLQopZEOKfWmFHwT2c4S+lIaOqBIuVyUJm7iPsf7rjJhqtcsydq RImEAH2uNZEbbYunFLvZeli85JpArAM4Nh61HqPxmonJVjWuY4jOBopC5VCd/TnI 8QOOVyaO9mhzXSmnS6yYPniscX4Q4jG8oje4Unbq0G33XjXqZK3/gGmbXK+7PVhD OlffjDlCHoo+Xywk1fnO+dk/OyoollA4/+36G+vWv6stvlBWz80sOkWAdBnNFthT IgIvT8uFDlYoc4re46HHiAjtvWWfYAr5JUwKACYw3bkN -----END CERTIFICATE-----Generated at Fri Jan 2 16:03:44 2026 by rpki-client