This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/1fKDHDyi88uhIrdIl99Ji35F12s.roa File: 1fKDHDyi88uhIrdIl99Ji35F12s.roa (raw, json) Hash identifier: ibeCFUGVM6Hr/NL42yqJmWoFRaGEzYgkrlHOoS3siho= Subject key identifier: D5:F2:83:1C:3C:A2:F3:CB:A1:22:B7:48:97:DF:49:8B:7E:45:D7:6B Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B7C12FBD09749FA5AC3EF510C46B99768 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/1fKDHDyi88uhIrdIl99Ji35F12s.roa Signing time: Fri 02 Jan 2026 00:19:37 +0000 ROA not before: Fri 02 Jan 2026 00:19:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210089 IP address blocks: 79.110.169.0/24 maxlen: 24 2a06:1e83:caff::/48 maxlen: 48 2a06:1e86:babe::/48 maxlen: 48 2a0d:1a45::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:fb:d0:97:49:fa:5a:c3:ef:51:0c:46:b9:97:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jan 2 00:19:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5f2831c3ca2f3cba122b74897df498b7e45d76b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:37:92:21:a1:07:3d:17:03:a4:8d:15:3e:73: 7e:67:88:dc:f2:30:2e:8f:62:e3:8e:07:6a:68:38: 94:be:86:28:b9:58:a0:51:47:6f:96:5b:2e:d1:37: 5d:69:0c:09:74:a6:d6:f8:4f:0a:14:70:50:13:a2: c9:ad:7f:6b:23:12:03:02:49:fa:93:0d:60:74:a6: e8:c5:67:ad:42:eb:76:81:dd:df:57:2b:9f:3f:b2: 52:ce:d9:9a:d4:22:91:dc:b4:e9:ae:4c:52:28:e0: 5c:44:e6:23:3e:26:11:e7:b2:f6:c2:b9:43:2c:cf: f9:63:c8:a9:be:87:e2:97:78:2f:cf:64:93:b4:38: bf:93:e5:af:a1:18:3f:c1:7e:e6:c4:f5:1d:26:1d: e4:82:eb:14:09:f2:11:9d:7c:f9:63:4c:16:e6:f4: 3a:2d:c7:6f:d0:c4:cd:68:1d:e3:2c:58:1e:77:91: b2:5f:56:39:b7:63:81:1a:35:ca:5b:21:86:0d:2b: b5:a9:15:c7:5d:c6:13:b2:94:09:03:8e:46:aa:bb: ef:21:28:04:6b:ce:dd:67:6b:7f:49:bc:98:ce:b9: 62:b4:fb:e8:5a:1c:85:35:3a:1d:e9:b5:71:71:25: 32:fe:d3:93:be:eb:c6:5f:22:5f:df:10:51:e0:63: c5:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F2:83:1C:3C:A2:F3:CB:A1:22:B7:48:97:DF:49:8B:7E:45:D7:6B X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/1fKDHDyi88uhIrdIl99Ji35F12s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.110.169.0/24 IPv6: 2a06:1e83:caff::/48 2a06:1e86:babe::/48 2a0d:1a45::/32 Signature Algorithm: sha256WithRSAEncryption 58:47:d4:c1:f8:a6:e7:9b:d1:84:d3:5f:67:46:67:5b:55:9c: 02:66:34:ff:ef:34:78:56:e3:4a:5a:a6:4d:e3:a5:65:03:d1: 0c:1e:2a:c5:1a:49:a2:d2:8c:fd:2e:23:32:dd:73:2f:bb:45: 39:ca:c6:13:2a:11:62:4e:59:5d:1b:86:58:be:ce:78:ae:e3: 6d:ba:3f:07:9e:e8:29:26:f8:28:cd:6c:8d:46:d6:b1:95:73: 68:e1:36:00:52:c6:c5:54:7f:d9:c6:44:1d:a7:f0:20:02:e7: ba:c2:eb:88:cb:4f:c5:ac:74:09:48:bd:4e:0f:80:f4:bf:86: 43:cb:03:d6:05:c6:6a:6a:9e:88:7e:94:65:43:4e:5d:b6:b6: d7:5e:16:5b:d0:30:6b:f6:92:d6:49:1b:13:c5:cf:be:cc:8a: a6:34:5b:b8:ed:59:35:b7:9c:e3:94:a3:fd:7d:19:5f:bb:72: 8c:7c:cb:88:2c:54:b0:5c:6a:50:bf:b4:c0:a6:92:ab:6d:1b: 06:06:0d:b6:0d:62:e5:d3:f4:77:1b:cd:2a:78:de:7b:67:e1: 17:c0:28:cd:d2:48:e6:ab:b8:42:61:e8:a8:e1:b7:e3:d4:b1: cd:56:09:c4:6b:dc:c4:2c:bf:64:b3:9d:2b:19:20:f6:4f:39: ba:1b:cb:35 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt8EvvQl0n6WsPvUQxGuZdoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwMTAyMDAxOTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWYyODMxYzNjYTJmM2NiYTEyMmI3NDg5N2RmNDk4YjdlNDVkNzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzeSIaEHPRcDpI0VPnN+Z4jc8jAu j2LjjgdqaDiUvoYouVigUUdvllsu0TddaQwJdKbW+E8KFHBQE6LJrX9rIxIDAkn6 kw1gdKboxWetQut2gd3fVyufP7JSztma1CKR3LTprkxSKOBcROYjPiYR57L2wrlD LM/5Y8ipvofil3gvz2STtDi/k+WvoRg/wX7mxPUdJh3kgusUCfIRnXz5Y0wW5vQ6 Lcdv0MTNaB3jLFged5GyX1Y5t2OBGjXKWyGGDSu1qRXHXcYTspQJA45GqrvvISgE a87dZ2t/SbyYzrlitPvoWhyFNTod6bVxcSUy/tOTvuvGXyJf3xBR4GPFpQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFNXygxw8ovPLoSK3SJffSYt+RddrMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvMWZLREhEeWk4OHVoSXJkSWw5OUppMzVGMTJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAMBAIAATAGAwQAT26pMB8E AgACMBkDBwAqBh6Dyv8DBwAqBh6Gur4DBQAqDRpFMA0GCSqGSIb3DQEBCwUAA4IB AQBYR9TB+Kbnm9GE019nRmdbVZwCZjT/7zR4VuNKWqZN46VlA9EMHirFGkmi0oz9 LiMy3XMvu0U5ysYTKhFiTlldG4ZYvs54ruNtuj8HnugpJvgozWyNRtaxlXNo4TYA UsbFVH/ZxkQdp/AgAue6wuuIy0/FrHQJSL1OD4D0v4ZDywPWBcZqap6IfpRlQ05d trbXXhZb0DBr9pLWSRsTxc++zIqmNFu47Vk1t5zjlKP9fRlfu3KMfMuILFSwXGpQ v7TAppKrbRsGBg22DWLl0/R3G80qeN57Z+EXwCjN0kjmq7hCYeio4bfj1LHNVgnE a9zELL9ks50rGSD2Tzm6G8s1 -----END CERTIFICATE-----Generated at Wed Jan 7 15:56:09 2026 by rpki-client