This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/8nUUvipsJGFWtgUAxRwlJPb_ah0.roa File: 8nUUvipsJGFWtgUAxRwlJPb_ah0.roa (raw, json) Hash identifier: RfhC0lor7ocbV187oRCCkH5Ho1WxD/1e+brUtZHzelA= Subject key identifier: F2:75:14:BE:2A:6C:24:61:56:B6:05:00:C5:1C:25:24:F6:FF:6A:1D Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B0E8088C8DDC3B79FF7A284EE6C28 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/8nUUvipsJGFWtgUAxRwlJPb_ah0.roa Signing time: Fri 02 Jan 2026 06:17:58 +0000 ROA not before: Fri 02 Jan 2026 06:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49188 IP address blocks: 78.128.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:0e:80:88:c8:dd:c3:b7:9f:f7:a2:84:ee:6c:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f27514be2a6c246156b60500c51c2524f6ff6a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e6:26:89:57:12:6e:85:e4:69:9f:63:e4:03: 4f:93:67:fc:46:d7:98:4f:99:3e:4a:f7:38:4a:41: 61:24:8e:cf:a7:82:9d:5c:32:67:1c:1a:00:23:50: 5e:6b:78:01:e9:d5:5c:54:ff:96:a7:d9:bc:e1:ec: 5a:4b:17:d6:b2:fb:a7:83:7e:df:ae:16:56:07:ee: d1:42:28:13:7e:1c:01:29:c6:33:3a:50:1f:ae:ca: 37:8c:84:e7:56:26:bd:fd:1f:75:fc:16:0d:cd:51: a5:b5:a3:88:53:47:5f:21:bb:b1:5d:4b:5f:20:6b: da:7d:21:8a:4c:dd:7b:7f:d6:5a:c9:22:97:43:3d: e9:5d:75:98:c2:46:0a:d0:49:92:17:c5:ee:17:3b: fc:00:0b:a3:6c:36:bb:40:8d:fe:5d:47:4e:19:da: 4b:0a:9f:de:80:a6:98:6e:f2:43:22:f8:c7:ce:f1: 37:8c:48:50:75:2c:bd:a8:cc:c3:14:45:63:ed:d9: c5:56:6d:ec:4a:b3:a3:63:8b:bc:92:ff:d8:9d:b5: 3f:2a:e3:19:ad:f5:87:b6:f8:a3:12:03:79:7b:5f: af:bd:0e:92:b9:20:df:5b:86:2a:3d:c1:35:35:76: 1c:ae:61:11:42:46:74:36:35:24:51:e0:f5:44:79: 95:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:75:14:BE:2A:6C:24:61:56:B6:05:00:C5:1C:25:24:F6:FF:6A:1D X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/8nUUvipsJGFWtgUAxRwlJPb_ah0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.128.4.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:5a:ff:ec:51:6a:91:b9:ce:c4:18:f9:d6:00:7c:7e:a9:16: cd:83:6b:fa:74:11:ac:89:78:95:16:fa:07:4a:d0:7d:d8:3e: c8:18:5e:f6:da:55:09:e4:56:dd:3c:03:58:1a:31:dd:db:6e: 05:99:36:0c:1c:92:6f:59:59:1d:92:31:48:6d:8d:24:43:a0: 8a:2b:ca:0d:ac:a4:e8:46:3f:66:17:8b:70:34:ac:8a:b8:16: 62:cd:63:40:ca:a5:3d:25:cb:cc:88:4a:f0:41:db:e8:d4:08: 8c:56:f0:27:c0:ee:86:46:42:f5:df:65:3e:87:74:45:a4:ed: 8a:a7:22:9d:0e:38:71:90:f5:4b:cf:86:8b:47:66:5f:67:c1: c7:19:38:5f:fe:0e:90:17:39:04:34:c1:cc:33:05:5f:d3:d3: 0c:13:8f:ae:ef:dd:53:a0:74:c4:c3:6b:9a:6b:83:43:58:41: 45:7a:6c:e8:d1:45:1d:f9:2f:5b:ef:f3:e3:8c:d5:68:8c:7f: d0:80:2c:9d:8c:04:a3:7f:7f:c2:3a:31:b3:1d:e2:5f:cd:80: 6c:31:2a:2a:d3:45:cf:6c:d6:ff:7f:1a:e6:d9:cc:da:37:24: b9:b1:59:49:55:b3:fc:b4:e4:da:fa:7e:f3:5c:35:8f:64:2e: 90:67:e7:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9Ww6AiMjdw7ef96KE7mwoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjc1MTRiZTJhNmMyNDYxNTZiNjA1MDBjNTFjMjUyNGY2ZmY2YTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeYmiVcSboXkaZ9j5ANPk2f8RteY T5k+Svc4SkFhJI7Pp4KdXDJnHBoAI1Bea3gB6dVcVP+Wp9m84exaSxfWsvung37f rhZWB+7RQigTfhwBKcYzOlAfrso3jITnVia9/R91/BYNzVGltaOIU0dfIbuxXUtf IGvafSGKTN17f9ZaySKXQz3pXXWYwkYK0EmSF8XuFzv8AAujbDa7QI3+XUdOGdpL Cp/egKaYbvJDIvjHzvE3jEhQdSy9qMzDFEVj7dnFVm3sSrOjY4u8kv/YnbU/KuMZ rfWHtvijEgN5e1+vvQ6SuSDfW4YqPcE1NXYcrmERQkZ0NjUkUeD1RHmVUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPJ1FL4qbCRhVrYFAMUcJST2/2odMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvOG5VVXZpcHNKR0ZXdGdVQXhSd2xKUGJfYWgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAToAEMA0G CSqGSIb3DQEBCwUAA4IBAQCLWv/sUWqRuc7EGPnWAHx+qRbNg2v6dBGsiXiVFvoH StB92D7IGF722lUJ5FbdPANYGjHd224FmTYMHJJvWVkdkjFIbY0kQ6CKK8oNrKTo Rj9mF4twNKyKuBZizWNAyqU9JcvMiErwQdvo1AiMVvAnwO6GRkL132U+h3RFpO2K pyKdDjhxkPVLz4aLR2ZfZ8HHGThf/g6QFzkENMHMMwVf09MME4+u791ToHTEw2ua a4NDWEFFemzo0UUd+S9b7/PjjNVojH/QgCydjASjf3/COjGzHeJfzYBsMSoq00XP bNb/fxrm2czaNyS5sVlJVbP8tOTa+n7zXDWPZC6QZ+fG -----END CERTIFICATE-----Generated at Fri Jan 23 18:47:53 2026 by rpki-client