This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/dm6R5Y0rDPQEx3D9n2h0BIwl_0U.roa File: dm6R5Y0rDPQEx3D9n2h0BIwl_0U.roa (raw, json) Hash identifier: FxYpw3zVO69AVc5rp9FX5r+aLdXWK+KsfJVTY+QsNJ0= Subject key identifier: 76:6E:91:E5:8D:2B:0C:F4:04:C7:70:FD:9F:68:74:04:8C:25:FF:45 Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6 Certificate serial: 019B7DCAA97466345C1B65458708D7DB4E79 Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/dm6R5Y0rDPQEx3D9n2h0BIwl_0U.roa Signing time: Fri 02 Jan 2026 08:19:52 +0000 ROA not before: Fri 02 Jan 2026 08:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207691 IP address blocks: 147.78.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 18:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:a9:74:66:34:5c:1b:65:45:87:08:d7:db:4e:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6 Validity Not Before: Jan 2 08:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=766e91e58d2b0cf404c770fd9f6874048c25ff45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1f:8b:42:ac:5b:d8:fc:07:28:5d:c4:a5:08: f3:8d:ad:bd:74:be:4e:f8:b2:17:96:0b:ad:f0:60: 98:17:9e:ec:4d:6c:0d:da:b8:26:e7:75:a3:98:d9: ba:b4:fa:38:60:22:62:73:e2:db:78:ea:b4:2b:10: 5b:87:ee:9b:8d:ba:a5:55:17:f4:33:d8:24:ea:f0: 50:0c:bf:f6:a7:45:28:11:50:68:4b:f7:84:6a:16: 15:15:b8:ce:56:cb:cd:87:a0:08:44:7a:bc:63:91: d8:5b:36:3c:71:f1:1e:ee:80:d8:a4:19:b8:2b:00: ea:3d:ce:ff:c0:2a:fd:25:e2:76:df:fe:22:ca:fc: 70:f8:27:67:28:be:45:92:05:96:31:4b:ea:7c:a8: 83:4c:d0:9b:f1:5c:f4:86:2d:a8:7d:7b:59:74:56: 37:e6:4b:a2:7f:81:e9:f0:df:44:18:bb:c1:3c:55: 1b:c7:04:d2:e4:0d:e5:01:de:4e:00:ba:49:92:6f: b7:11:0f:c0:52:f8:a6:6e:e2:7a:7b:23:17:56:ab: 15:ce:3c:c7:91:f6:b3:54:a4:06:03:3a:be:5f:78: 16:d5:dd:78:17:dc:82:60:82:72:1d:6e:71:97:14: 37:9f:d4:f0:82:61:18:23:8c:f8:99:5c:f5:46:4b: 3a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:6E:91:E5:8D:2B:0C:F4:04:C7:70:FD:9F:68:74:04:8C:25:FF:45 X509v3 Authority Key Identifier: keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/dm6R5Y0rDPQEx3D9n2h0BIwl_0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.142.0/24 Signature Algorithm: sha256WithRSAEncryption a3:3e:77:62:c8:03:c9:3e:3a:a7:79:0a:0b:bb:df:53:fc:ea: ed:ae:1e:bf:ca:9c:0f:ea:d0:ed:63:c2:48:f3:74:1b:71:2e: a0:f2:e4:e0:64:66:e3:6c:c9:c0:dc:11:ec:6e:57:bc:f5:11: 6b:ec:8a:a1:8d:39:3c:3a:58:3d:6e:30:c2:0e:fc:59:28:4d: e2:be:79:23:95:cc:9f:b6:0f:d4:ad:f7:a6:cb:cd:24:ad:33: c5:c5:fc:a7:ae:78:16:22:87:a5:cf:db:e6:6a:25:f0:fe:b8: 69:55:e2:76:70:a6:65:79:0e:41:b6:4f:08:2e:2b:b0:7e:a2: db:a1:c4:50:eb:69:2f:a6:a8:0a:d8:c2:c0:47:be:af:b3:98: 78:44:1e:c2:bc:30:6e:15:8c:39:f6:cb:45:bd:47:2b:38:85: 14:5b:05:79:3f:c0:53:e2:7b:e9:51:ad:b0:a7:ad:5a:02:75: 77:6a:e1:2e:4f:94:56:f1:84:a3:38:7f:df:bb:e6:51:b5:e8: da:a4:83:f3:7c:0a:90:de:cd:a8:a7:9c:ad:8d:49:51:40:85: d3:5e:e3:33:f9:6c:61:b6:c9:10:7d:4b:59:67:c7:66:47:c5: 75:0a:12:05:b7:10:d6:89:cc:13:40:5d:fe:af:77:bc:fa:27: 11:8b:4b:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yql0ZjRcG2VFhwjX2055MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDY5ZDlmNzQ5NjMwZjAyNTZjZjBjZWFiNTg4MzZiNDkx YTU4ZjYwHhcNMjYwMTAyMDgxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NjZlOTFlNThkMmIwY2Y0MDRjNzcwZmQ5ZjY4NzQwNDhjMjVmZjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3R+LQqxb2PwHKF3EpQjzja29dL5O +LIXlgut8GCYF57sTWwN2rgm53WjmNm6tPo4YCJic+LbeOq0KxBbh+6bjbqlVRf0 M9gk6vBQDL/2p0UoEVBoS/eEahYVFbjOVsvNh6AIRHq8Y5HYWzY8cfEe7oDYpBm4 KwDqPc7/wCr9JeJ23/4iyvxw+CdnKL5FkgWWMUvqfKiDTNCb8Vz0hi2ofXtZdFY3 5kuif4Hp8N9EGLvBPFUbxwTS5A3lAd5OALpJkm+3EQ/AUvimbuJ6eyMXVqsVzjzH kfazVKQGAzq+X3gW1d14F9yCYIJyHW5xlxQ3n9TwgmEYI4z4mVz1Rks67QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHZukeWNKwz0BMdw/Z9odASMJf9FMB8GA1UdIwQY MBaAFF3WnZ90ljDwJWzwzqtYg2tJGlj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRhZG4zU1dNUEFsYlBET3ExaURhMGthV1BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MTY5MjQtOTNiMi00ZGNiLWFlZWIt ZjNmZDY0MzMxNzA5LzEvZG02UjVZMHJEUFFFeDNEOW4yaDBCSXdsXzBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC82MTY5MjQtOTNiMi00ZGNiLWFlZWItZjNmZDY0MzMxNzA5 LzEvWGRhZG4zU1dNUEFsYlBET3ExaURhMGthV1BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk06OMA0G CSqGSIb3DQEBCwUAA4IBAQCjPndiyAPJPjqneQoLu99T/Ortrh6/ypwP6tDtY8JI 83QbcS6g8uTgZGbjbMnA3BHsble89RFr7IqhjTk8Olg9bjDCDvxZKE3ivnkjlcyf tg/Urfemy80krTPFxfynrngWIoelz9vmaiXw/rhpVeJ2cKZleQ5Btk8ILiuwfqLb ocRQ62kvpqgK2MLAR76vs5h4RB7CvDBuFYw59stFvUcrOIUUWwV5P8BT4nvpUa2w p61aAnV3auEuT5RW8YSjOH/fu+ZRtejapIPzfAqQ3s2op5ytjUlRQIXTXuMz+Wxh tskQfUtZZ8dmR8V1ChIFtxDWicwTQF3+r3e8+icRi0sA -----END CERTIFICATE-----Generated at Fri Jan 23 21:15:57 2026 by rpki-client