This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/cC0R0U3yLfyeHy34sQf62c4Yd5I.roa File: cC0R0U3yLfyeHy34sQf62c4Yd5I.roa (raw, json) Hash identifier: Ftp3hYIhod4N2TGi5f485eZqNTbbJ0tpe9F/qj+8t1w= Subject key identifier: 70:2D:11:D1:4D:F2:2D:FC:9E:1F:2D:F8:B1:07:FA:D9:CE:18:77:92 Certificate issuer: /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e Certificate serial: 019B7B36E3447506FE567FD476EA9059D387 Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/cC0R0U3yLfyeHy34sQf62c4Yd5I.roa Signing time: Thu 01 Jan 2026 20:19:13 +0000 ROA not before: Thu 01 Jan 2026 20:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 79.110.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 14:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:e3:44:75:06:fe:56:7f:d4:76:ea:90:59:d3:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e Validity Not Before: Jan 1 20:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=702d11d14df22dfc9e1f2df8b107fad9ce187792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:78:16:66:32:85:59:ee:71:31:db:f0:be:9a: 44:00:5a:c3:82:8d:37:be:8f:42:8d:7c:9c:fc:45: 50:78:45:58:c4:56:03:08:38:4c:8b:3e:ff:69:af: 71:82:e0:b6:63:39:ce:df:44:e7:ad:ed:d3:3b:c3: 02:bf:1b:88:4e:4d:50:bf:64:a3:bc:67:99:cc:74: 27:41:18:ae:51:04:d8:50:d5:81:d8:fb:9c:7f:54: 79:4f:36:c8:96:ab:93:eb:4c:1a:47:f9:a1:38:e3: 6e:ea:c0:49:08:ed:ec:39:da:20:78:7a:6a:b9:a7: 23:b7:bb:47:b1:c3:44:8a:c8:01:02:9d:9e:a7:fd: 93:b7:57:a6:f6:f1:fa:05:f5:14:6e:0b:28:bc:24: fc:19:8e:bb:c2:0d:d3:b1:f1:6f:bd:ea:3a:d5:32: 1a:81:e0:59:ff:b2:58:00:be:4a:2b:82:8f:6d:e0: 76:eb:bf:ac:e5:cd:e8:b2:43:f9:54:db:81:1d:a7: 22:44:74:19:70:b9:88:75:38:43:43:e6:cb:f3:ce: 76:fa:59:6a:42:6b:93:da:c9:71:80:6a:b6:d7:63: 5b:f7:f6:ea:0d:ab:a1:0f:df:19:2d:91:82:08:ca: e9:fb:54:a2:f6:81:a1:f0:e6:09:b3:70:7c:28:c8: 26:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:2D:11:D1:4D:F2:2D:FC:9E:1F:2D:F8:B1:07:FA:D9:CE:18:77:92 X509v3 Authority Key Identifier: keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/cC0R0U3yLfyeHy34sQf62c4Yd5I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.110.165.0/24 Signature Algorithm: sha256WithRSAEncryption 56:86:a0:53:e2:e4:03:df:b7:b2:29:ef:6b:4b:f1:0a:fb:f1: 30:c6:65:9b:a9:c1:06:ca:65:3e:51:d9:18:84:11:5e:2a:43: 0e:b7:d1:5e:23:c5:e4:a5:1d:40:ce:15:d5:76:70:ca:fc:0e: b6:66:c0:ab:79:a2:1d:fd:01:10:bb:95:b7:95:cc:1e:c9:62: a8:a3:7d:18:a4:54:6e:ef:b5:20:f2:8b:df:40:fa:e3:e0:0b: 7d:28:4c:47:45:58:f6:ab:83:4e:12:2f:2c:2d:e4:a8:71:61: 0b:12:8e:d7:73:f2:2a:b8:0b:82:e5:91:68:e8:9d:d9:78:f2: 73:d3:0d:91:11:7d:62:b7:1f:2f:b1:44:29:52:f2:22:89:f5: 58:5b:c0:d9:66:3e:1a:16:4c:b0:f8:83:c0:76:90:fd:dd:34: 7b:18:f1:1b:0d:a2:a5:0d:7f:24:fc:e0:6f:63:ff:f1:ec:b7: 49:6b:08:5e:be:08:ae:fc:53:ef:47:2a:16:41:cc:fd:8b:67: 12:6d:ca:cd:47:2d:e4:7a:ef:c9:49:30:22:91:27:28:dd:5b: a6:c1:9c:28:0d:72:51:3a:95:59:01:d0:1f:5e:21:66:5b:8d: ec:f5:fe:bc:e6:3d:f6:cd:19:11:5a:a4:fe:fe:f5:35:c7:8b: d0:c9:51:e4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NuNEdQb+Vn/UduqQWdOHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ODM4NDFiYzA5ZjFmZDRmZTNkZTk5MTAxNmMwYjcxMjZm YmE1MmUwHhcNMjYwMTAxMjAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDJkMTFkMTRkZjIyZGZjOWUxZjJkZjhiMTA3ZmFkOWNlMTg3NzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHgWZjKFWe5xMdvwvppEAFrDgo03 vo9CjXyc/EVQeEVYxFYDCDhMiz7/aa9xguC2YznO30Tnre3TO8MCvxuITk1Qv2Sj vGeZzHQnQRiuUQTYUNWB2Pucf1R5TzbIlquT60waR/mhOONu6sBJCO3sOdogeHpq uacjt7tHscNEisgBAp2ep/2Tt1em9vH6BfUUbgsovCT8GY67wg3TsfFvveo61TIa geBZ/7JYAL5KK4KPbeB267+s5c3oskP5VNuBHaciRHQZcLmIdThDQ+bL8852+llq QmuT2slxgGq212Nb9/bqDauhD98ZLZGCCMrp+1Si9oGh8OYJs3B8KMgmnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHAtEdFN8i38nh8t+LEH+tnOGHeSMB8GA1UdIwQY MBaAFCmDhBvAnx/U/j3pkQFsC3Em+6UuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2It MWRkNWRhYjM2ZjlmLzEvY0MwUjBVM3lMZnllSHkzNHNRZjYyYzRZZDVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2ItMWRkNWRhYjM2Zjlm LzEvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT26lMA0G CSqGSIb3DQEBCwUAA4IBAQBWhqBT4uQD37eyKe9rS/EK+/EwxmWbqcEGymU+UdkY hBFeKkMOt9FeI8XkpR1AzhXVdnDK/A62ZsCreaId/QEQu5W3lcweyWKoo30YpFRu 77Ug8ovfQPrj4At9KExHRVj2q4NOEi8sLeSocWELEo7Xc/IquAuC5ZFo6J3ZePJz 0w2REX1itx8vsUQpUvIiifVYW8DZZj4aFkyw+IPAdpD93TR7GPEbDaKlDX8k/OBv Y//x7LdJawhevgiu/FPvRyoWQcz9i2cSbcrNRy3keu/JSTAikSco3VumwZwoDXJR OpVZAdAfXiFmW43s9f685j32zRkRWqT+/vU1x4vQyVHk -----END CERTIFICATE-----Generated at Sat Jan 10 00:25:07 2026 by rpki-client