This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/7XbFsP1QSrJniTdgu_N7iH4g1xI.roa File: 7XbFsP1QSrJniTdgu_N7iH4g1xI.roa (raw, json) Hash identifier: NM80etZdBdU62dnPf4C5hQEio+L+9na8pq8oLCRMtSA= Subject key identifier: ED:76:C5:B0:FD:50:4A:B2:67:89:37:60:BB:F3:7B:88:7E:20:D7:12 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B17E30DD33CC93E8255F029142738 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/7XbFsP1QSrJniTdgu_N7iH4g1xI.roa Signing time: Fri 02 Jan 2026 06:18:00 +0000 ROA not before: Fri 02 Jan 2026 06:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199221 IP address blocks: 78.142.21.0/24 maxlen: 24 79.124.48.0/24 maxlen: 24 130.185.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:17:e3:0d:d3:3c:c9:3e:82:55:f0:29:14:27:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed76c5b0fd504ab267893760bbf37b887e20d712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7b:23:d1:da:b3:e4:4f:e2:8b:30:4c:64:bb: a2:a4:ac:9a:8b:23:0b:48:e8:a9:45:6c:33:88:ac: c5:75:1f:e9:a7:3a:d6:5b:2e:9c:f8:7b:d2:88:99: 75:8a:89:04:c3:ae:2c:6d:71:11:ef:a8:82:07:e6: e7:f0:ee:04:39:f8:53:00:8e:02:dc:64:72:66:72: d2:dc:0f:78:74:01:b3:1e:65:5c:f6:2b:7a:0f:9e: 74:42:79:6d:fc:36:62:09:f7:ae:72:1d:36:cd:59: fb:c2:0b:b8:9d:50:ad:2b:89:d0:0c:21:b7:05:1d: 66:6d:2b:43:43:19:97:a3:ec:7c:30:ef:cd:c4:d9: b1:25:de:ac:e6:1c:45:3c:73:9f:c0:31:b8:f4:f3: bc:3d:d2:76:24:aa:ed:9f:0b:7f:7a:59:71:89:9f: 5a:79:72:0f:aa:1f:21:e7:72:fe:6a:ea:79:aa:13: 3b:2b:97:c9:29:0e:e1:e4:01:30:d4:8a:ed:0e:63: 38:cc:b2:d0:95:fd:de:96:01:f9:59:e7:54:06:21: 38:1d:14:87:60:cd:b7:ba:21:33:75:1b:f4:3d:34: 2b:ba:3d:e5:6e:64:04:bd:6e:9f:f7:a0:9e:24:f9: 7d:90:5f:04:65:bb:41:a2:0d:2f:28:cd:00:03:91: 0d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:76:C5:B0:FD:50:4A:B2:67:89:37:60:BB:F3:7B:88:7E:20:D7:12 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/7XbFsP1QSrJniTdgu_N7iH4g1xI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.142.21.0/24 79.124.48.0/24 130.185.228.0/24 Signature Algorithm: sha256WithRSAEncryption 34:a7:a8:48:e6:ea:31:01:12:0b:14:87:0c:d8:dd:40:4c:e3: fe:b5:08:ae:9e:7a:20:28:78:78:98:d3:eb:44:85:00:13:56: e5:8c:7f:da:9b:be:e5:dd:1d:4b:46:5c:f2:4f:ac:c4:f8:0f: de:f4:20:1b:a0:5c:4f:ca:7a:fb:0b:33:90:f1:e5:ef:b5:05: 2c:95:f6:4c:90:a8:b2:90:c5:e4:87:6f:89:91:2e:cd:d7:ca: 2b:b1:7b:dd:5b:c3:21:bd:b4:7a:78:19:8b:00:d0:fa:89:07: cc:7f:32:52:98:4f:d3:64:d2:b5:4d:80:0b:9f:3a:52:c4:bf: ba:0a:e9:c2:3d:b5:63:cb:e5:8b:ef:6a:17:80:ca:91:a7:2d: 6a:90:7c:53:8c:04:ca:08:50:7e:b7:0e:63:b1:ab:39:1b:b3: 11:64:2f:1d:69:9b:8c:7c:01:ce:a7:b6:a1:61:84:5b:dd:8d: c4:b5:dd:0b:76:8a:da:06:08:8e:ca:96:30:37:34:dc:78:72: 75:7a:3a:ae:65:02:bd:ca:15:34:14:8e:c1:86:19:39:26:88: b1:5c:15:14:d9:6d:76:a9:b6:79:05:f2:ef:e7:a9:d4:e5:b4: 51:56:4a:98:79:e9:95:66:57:f3:fe:ba:0a:24:6e:d2:5d:5a: 54:e0:02:60 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9WxfjDdM8yT6CVfApFCc4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDc2YzViMGZkNTA0YWIyNjc4OTM3NjBiYmYzN2I4ODdlMjBkNzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXsj0dqz5E/iizBMZLuipKyaiyML SOipRWwziKzFdR/ppzrWWy6c+HvSiJl1iokEw64sbXER76iCB+bn8O4EOfhTAI4C 3GRyZnLS3A94dAGzHmVc9it6D550Qnlt/DZiCfeuch02zVn7wgu4nVCtK4nQDCG3 BR1mbStDQxmXo+x8MO/NxNmxJd6s5hxFPHOfwDG49PO8PdJ2JKrtnwt/ellxiZ9a eXIPqh8h53L+aup5qhM7K5fJKQ7h5AEw1IrtDmM4zLLQlf3elgH5WedUBiE4HRSH YM23uiEzdRv0PTQruj3lbmQEvW6f96CeJPl9kF8EZbtBog0vKM0AA5EN6QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFO12xbD9UEqyZ4k3YLvze4h+INcSMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvN1hiRnNQMVFTckpuaVRkZ3VfTjdpSDRnMXhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATo4VAwQA T3wwAwQAgrnkMA0GCSqGSIb3DQEBCwUAA4IBAQA0p6hI5uoxARILFIcM2N1ATOP+ tQiunnogKHh4mNPrRIUAE1bljH/am77l3R1LRlzyT6zE+A/e9CAboFxPynr7CzOQ 8eXvtQUslfZMkKiykMXkh2+JkS7N18orsXvdW8MhvbR6eBmLAND6iQfMfzJSmE/T ZNK1TYALnzpSxL+6CunCPbVjy+WL72oXgMqRpy1qkHxTjATKCFB+tw5jsas5G7MR ZC8daZuMfAHOp7ahYYRb3Y3Etd0LdoraBgiOypYwNzTceHJ1ejquZQK9yhU0FI7B hhk5JoixXBUU2W12qbZ5BfLv56nU5bRRVkqYeemVZlfz/roKJG7SXVpU4AJg -----END CERTIFICATE-----Generated at Fri Jan 23 18:48:24 2026 by rpki-client