This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/SEmswT8qRK9Bjzxvl0uw6a5asBk.roa File: SEmswT8qRK9Bjzxvl0uw6a5asBk.roa (raw, json) Hash identifier: u11Eo4iK3j8KXMwIQS50D4H8cdM2mGVMvEkf3VKSGko= Subject key identifier: 48:49:AC:C1:3F:2A:44:AF:41:8F:3C:6F:97:4B:B0:E9:AE:5A:B0:19 Certificate issuer: /CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Certificate serial: 019B7C12F5201342C83A9D601CBC411CF750 Authority key identifier: ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/SEmswT8qRK9Bjzxvl0uw6a5asBk.roa Signing time: Fri 02 Jan 2026 00:19:35 +0000 ROA not before: Fri 02 Jan 2026 00:19:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 79.110.168.0/22 maxlen: 24 139.28.204.0/22 maxlen: 24 217.145.236.0/22 maxlen: 24 2a06:1e80::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.mft rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 06:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:f5:20:13:42:c8:3a:9d:60:1c:bc:41:1c:f7:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed77e6b925b3b7a7abb92885d55d733dc5fa62d2 Validity Not Before: Jan 2 00:19:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4849acc13f2a44af418f3c6f974bb0e9ae5ab019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:2c:40:e7:1c:3f:55:94:22:f1:38:21:7f: 79:22:16:4b:a6:f7:11:41:c3:82:ab:3b:36:fe:be: ed:55:4f:ac:ba:51:3e:8c:59:4b:9a:0e:40:88:66: 67:a9:c8:b1:e4:a2:36:2e:fb:48:ee:b2:5b:75:2c: 78:ba:48:19:2b:63:19:92:8b:b4:fc:5d:31:97:33: 42:01:35:31:75:62:e1:4c:d4:82:6b:c0:3e:9a:46: 0f:88:b1:ed:11:dd:1c:80:32:45:fa:59:a6:be:82: d6:01:fc:04:67:f6:ea:c4:13:a2:d9:46:47:2e:2d: a0:12:64:6e:89:d4:91:75:e1:00:c1:cf:9f:03:a4: 71:28:61:46:12:00:4d:b5:77:58:e3:3f:eb:f4:e8: 28:53:f7:4e:c5:26:2c:d9:6e:3e:34:e9:21:f7:a4: b0:e3:fe:29:4f:0f:e9:fe:0b:31:51:8c:6a:67:11: 29:c6:9b:5c:14:0c:14:db:89:af:15:d5:69:c5:ea: ee:dd:23:eb:d5:e3:99:9e:4a:8d:c7:3d:5f:67:c1: 7d:33:31:cd:03:96:62:5e:93:e0:48:9d:fa:f9:c8: da:bb:9a:32:30:c4:67:d9:9d:24:16:6f:dd:3b:a1: 83:67:ca:da:3e:4a:73:d1:78:bf:c3:0a:41:ef:03: 2b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:49:AC:C1:3F:2A:44:AF:41:8F:3C:6F:97:4B:B0:E9:AE:5A:B0:19 X509v3 Authority Key Identifier: keyid:ED:77:E6:B9:25:B3:B7:A7:AB:B9:28:85:D5:5D:73:3D:C5:FA:62:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7XfmuSWzt6eruSiF1V1zPcX6YtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/SEmswT8qRK9Bjzxvl0uw6a5asBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/d83777-5ba8-4f1e-851c-92819de8a036/1/7XfmuSWzt6eruSiF1V1zPcX6YtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.110.168.0/22 139.28.204.0/22 217.145.236.0/22 IPv6: 2a06:1e80::/29 Signature Algorithm: sha256WithRSAEncryption 85:58:42:a0:d0:12:cd:d0:6a:d0:8b:0b:15:69:dc:fe:d6:2c: b2:8d:55:51:19:a7:2e:ba:8a:3f:c9:c7:4b:83:05:c8:fe:a4: 6f:29:92:eb:89:0c:5f:a4:3a:48:63:03:19:1c:97:7b:27:bc: ad:27:a7:99:c7:d9:eb:73:3f:ff:30:82:4d:9b:99:2e:45:99: 1b:36:4b:5e:34:f8:bc:af:70:2e:00:cd:27:35:8a:46:f6:dd: 68:f9:43:39:f0:fe:ee:56:ae:66:ac:b9:ce:04:ea:cf:89:71: c0:41:f0:86:19:77:ed:85:0d:fb:3c:c8:79:cd:a5:d5:77:0e: cc:89:56:17:dc:cd:7c:6b:a0:f6:a9:5f:cc:02:ca:8a:61:69: 8d:7d:ec:1e:01:77:5e:0f:e5:87:6d:15:04:54:04:70:ed:2d: 77:ba:12:be:ae:90:88:a6:81:33:0a:25:e1:02:f2:e5:9c:b3: ae:68:67:e1:74:c8:4a:2e:d7:82:8c:58:e8:5f:12:a4:5a:90: f2:c3:a7:4f:99:dd:5d:55:10:09:c2:93:29:e4:5d:5f:2e:df: 35:80:6d:ed:65:fd:9c:ab:c1:02:0a:44:b3:41:7b:5d:2f:5f: 71:df:e7:2a:f5:c2:53:14:af:85:fa:19:9d:c4:4a:b0:00:ae: 98:a5:9c:dc -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt8EvUgE0LIOp1gHLxBHPdQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNzdlNmI5MjViM2I3YTdhYmI5Mjg4NWQ1NWQ3MzNkYzVm YTYyZDIwHhcNMjYwMTAyMDAxOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODQ5YWNjMTNmMmE0NGFmNDE4ZjNjNmY5NzRiYjBlOWFlNWFiMDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqQsQOccP1WUIvE4IX95IhZLpvcR QcOCqzs2/r7tVU+sulE+jFlLmg5AiGZnqcix5KI2LvtI7rJbdSx4ukgZK2MZkou0 /F0xlzNCATUxdWLhTNSCa8A+mkYPiLHtEd0cgDJF+lmmvoLWAfwEZ/bqxBOi2UZH Li2gEmRuidSRdeEAwc+fA6RxKGFGEgBNtXdY4z/r9OgoU/dOxSYs2W4+NOkh96Sw 4/4pTw/p/gsxUYxqZxEpxptcFAwU24mvFdVpxeru3SPr1eOZnkqNxz1fZ8F9MzHN A5ZiXpPgSJ36+cjau5oyMMRn2Z0kFm/dO6GDZ8raPkpz0Xi/wwpB7wMr4wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFEhJrME/KkSvQY88b5dLsOmuWrAZMB8GA1UdIwQY MBaAFO135rkls7enq7kohdVdcz3F+mLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMt OTI4MTlkZThhMDM2LzEvU0Vtc3dUOHFSSzlCanp4dmwwdXc2YTVhc0JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9kODM3NzctNWJhOC00ZjFlLTg1MWMtOTI4MTlkZThhMDM2 LzEvN1hmbXVTV3p0NmVydVNpRjFWMXpQY1g2WXRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCT26oAwQC ixzMAwQC2ZHsMA0EAgACMAcDBQMqBh6AMA0GCSqGSIb3DQEBCwUAA4IBAQCFWEKg 0BLN0GrQiwsVadz+1iyyjVVRGacuuoo/ycdLgwXI/qRvKZLriQxfpDpIYwMZHJd7 J7ytJ6eZx9nrcz//MIJNm5kuRZkbNkteNPi8r3AuAM0nNYpG9t1o+UM58P7uVq5m rLnOBOrPiXHAQfCGGXfthQ37PMh5zaXVdw7MiVYX3M18a6D2qV/MAsqKYWmNfewe AXdeD+WHbRUEVARw7S13uhK+rpCIpoEzCiXhAvLlnLOuaGfhdMhKLteCjFjoXxKk WpDyw6dPmd1dVRAJwpMp5F1fLt81gG3tZf2cq8ECCkSzQXtdL19x3+cq9cJTFK+F +hmdxEqwAK6YpZzc -----END CERTIFICATE-----Generated at Wed Jan 7 15:53:21 2026 by rpki-client