This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/16nEg4Z5wbtoDDN6_ubXqPAb3F4.roa File: 16nEg4Z5wbtoDDN6_ubXqPAb3F4.roa (raw, json) Hash identifier: 9s+JOh3d4PoMVPF7Ek9BEiMQiwVYCfc6akF3EYHxeyo= Subject key identifier: D7:A9:C4:83:86:79:C1:BB:68:0C:33:7A:FE:E6:D7:A8:F0:1B:DC:5E Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B106DC0EE6E1F77734C149C5110A2 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/16nEg4Z5wbtoDDN6_ubXqPAb3F4.roa Signing time: Fri 02 Jan 2026 06:17:58 +0000 ROA not before: Fri 02 Jan 2026 06:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50360 IP address blocks: 78.128.114.0/24 maxlen: 24 78.142.35.0/24 maxlen: 24 78.142.49.0/24 maxlen: 24 79.124.40.0/24 maxlen: 24 79.124.41.0/24 maxlen: 24 79.124.45.0/24 maxlen: 24 79.124.49.0/24 maxlen: 24 79.124.56.0/24 maxlen: 24 79.124.58.0/24 maxlen: 24 79.124.59.0/24 maxlen: 24 79.124.60.0/24 maxlen: 24 79.124.62.0/24 maxlen: 24 91.148.128.0/24 maxlen: 24 91.148.129.0/24 maxlen: 24 91.148.186.0/24 maxlen: 24 91.148.190.0/23 maxlen: 24 91.191.220.0/24 maxlen: 24 91.191.221.0/24 maxlen: 24 91.191.222.0/24 maxlen: 24 91.191.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:10:6d:c0:ee:6e:1f:77:73:4c:14:9c:51:10:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7a9c4838679c1bb680c337afee6d7a8f01bdc5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e5:fd:df:75:98:c6:33:5a:53:48:1a:76:56: d2:a4:39:bf:4d:b0:28:13:1c:58:49:b5:3f:e0:9c: fb:2b:d3:ac:07:59:50:ac:f3:75:5e:35:5f:79:59: 3a:1a:9c:19:c7:32:de:df:6f:4d:25:92:47:27:6d: 9e:f0:9f:ab:4e:70:68:82:e3:4e:75:fc:0c:2f:26: 98:af:b4:03:da:d3:f6:23:40:78:36:fe:21:82:68: a7:5a:b2:ec:2e:8b:ba:a5:ea:79:02:f2:11:18:82: f4:96:85:18:c1:bb:b1:b7:3f:0b:7c:05:ae:1a:1f: 2f:e7:7a:55:ea:0d:0d:0d:e3:22:ba:4f:72:f2:f4: db:f7:1c:05:b2:2e:c8:9d:8c:a8:de:f3:0c:86:4c: 52:70:9a:0f:03:29:ee:70:0e:20:6f:d8:27:b0:29: 6b:82:f9:f9:d5:a1:38:8b:bd:41:8e:14:3e:4f:d1: 9d:04:9d:47:89:8e:54:d0:ba:7d:64:78:56:67:c3: 16:ea:c9:ab:23:21:04:b0:80:3c:e4:7e:f5:02:c6: 96:97:27:5a:ca:87:26:37:53:5e:a0:f3:87:83:8b: 67:93:a3:8e:49:3f:b0:24:09:5e:cf:50:62:ea:3c: 31:10:ef:cc:8a:6b:cd:99:60:7d:1a:f3:97:b5:1e: 9b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:A9:C4:83:86:79:C1:BB:68:0C:33:7A:FE:E6:D7:A8:F0:1B:DC:5E X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/16nEg4Z5wbtoDDN6_ubXqPAb3F4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.128.114.0/24 78.142.35.0/24 78.142.49.0/24 79.124.40.0/23 79.124.45.0/24 79.124.49.0/24 79.124.56.0/24 79.124.58.0-79.124.60.255 79.124.62.0/24 91.148.128.0/23 91.148.186.0/24 91.148.190.0/23 91.191.220.0/22 Signature Algorithm: sha256WithRSAEncryption aa:40:fd:20:be:09:6b:43:78:05:d8:d0:d8:49:b3:d8:2b:72: 2d:11:ea:ee:25:ad:48:40:09:8d:31:4e:e0:c8:ef:91:b5:e8: 17:8e:80:25:24:dc:86:ad:54:c3:3e:bb:66:de:dc:8c:a2:38: 95:30:15:c9:55:7b:5b:fa:f3:33:b5:f4:e5:c8:8b:5a:41:3c: da:d0:63:67:9d:ab:be:07:b9:8f:58:bb:84:5c:92:39:16:e3: fd:31:38:f0:af:66:72:73:8e:7c:70:92:65:ea:0b:08:a4:99: 80:08:ea:b1:2f:2e:43:1c:93:d4:ad:6c:be:37:fc:dc:d9:af: 11:27:5d:e4:bc:79:da:6f:ca:3f:a7:71:31:b4:6c:54:13:b7: 3a:1d:39:87:46:10:85:6c:cc:0f:0a:0c:2a:f5:b6:c2:0e:1b: a1:c5:b2:b3:35:19:c1:5c:59:47:d1:77:13:c0:77:83:23:5a: 89:f2:07:83:47:38:4a:54:80:57:5d:6e:2a:34:07:5f:f8:4c: 18:d0:63:f9:0a:55:33:fa:13:0e:a1:f9:3f:70:1e:30:23:7e: cc:b4:88:50:2c:4c:7b:66:23:7d:21:20:b5:ec:fd:ed:7f:86: f5:84:4c:79:50:88:42:c6:7f:a3:c4:72:6e:7b:38:0b:5d:40: d4:53:62:10 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgISAZt9WxBtwO5uH3dzTBScURCiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2E5YzQ4Mzg2NzljMWJiNjgwYzMzN2FmZWU2ZDdhOGYwMWJkYzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOX933WYxjNaU0gadlbSpDm/TbAo ExxYSbU/4Jz7K9OsB1lQrPN1XjVfeVk6GpwZxzLe329NJZJHJ22e8J+rTnBoguNO dfwMLyaYr7QD2tP2I0B4Nv4hgminWrLsLou6pep5AvIRGIL0loUYwbuxtz8LfAWu Gh8v53pV6g0NDeMiuk9y8vTb9xwFsi7InYyo3vMMhkxScJoPAynucA4gb9gnsClr gvn51aE4i71BjhQ+T9GdBJ1HiY5U0Lp9ZHhWZ8MW6smrIyEEsIA85H71AsaWlyda yocmN1NeoPOHg4tnk6OOST+wJAlez1Bi6jwxEO/MimvNmWB9GvOXtR6bAQIDAQAB o4ICWTCCAlUwHQYDVR0OBBYEFNepxIOGecG7aAwzev7m16jwG9xeMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvMTZuRWc0WjV3YnRvRERONl91YlhxUEFiM0Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBcBAIAATBWAwQAToByAwQA To4jAwQATo4xAwQBT3woAwQAT3wtAwQAT3wxAwQAT3w4MAwDBAFPfDoDBABPfDwD BABPfD4DBAFblIADBABblLoDBAFblL4DBAJbv9wwDQYJKoZIhvcNAQELBQADggEB AKpA/SC+CWtDeAXY0NhJs9grci0R6u4lrUhACY0xTuDI75G16BeOgCUk3IatVMM+ u2be3IyiOJUwFclVe1v68zO19OXIi1pBPNrQY2edq74HuY9Yu4RckjkW4/0xOPCv ZnJzjnxwkmXqCwikmYAI6rEvLkMck9StbL43/NzZrxEnXeS8edpvyj+ncTG0bFQT tzodOYdGEIVszA8KDCr1tsIOG6HFsrM1GcFcWUfRdxPAd4MjWonyB4NHOEpUgFdd bio0B1/4TBjQY/kKVTP6Ew6h+T9wHjAjfsy0iFAsTHtmI30hILXs/e1/hvWETHlQ iELGf6PEcm57OAtdQNRTYhA= -----END CERTIFICATE-----Generated at Fri Jan 23 18:49:57 2026 by rpki-client