This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/EKpnbSkJoheUPYuYgYNhyjPLR1w.roa File: EKpnbSkJoheUPYuYgYNhyjPLR1w.roa (raw, json) Hash identifier: PUbuau+z8Lww+7oAmlqqvq9byrcXps+O5e5cvZQ7tLk= Subject key identifier: 10:AA:67:6D:29:09:A2:17:94:3D:8B:98:81:83:61:CA:33:CB:47:5C Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B03A315C9C83C7A60867056FFA675 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/EKpnbSkJoheUPYuYgYNhyjPLR1w.roa Signing time: Fri 02 Jan 2026 06:17:55 +0000 ROA not before: Fri 02 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8877 IP address blocks: 78.128.0.0/24 maxlen: 24 78.142.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:03:a3:15:c9:c8:3c:7a:60:86:70:56:ff:a6:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=10aa676d2909a217943d8b98818361ca33cb475c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:2b:a2:99:b4:08:1c:7a:e5:d0:c0:82:cc:6c: b7:59:d6:82:b6:9b:e2:bd:14:d1:e4:0c:9c:20:ca: 46:5a:7e:4d:39:9b:42:a6:a7:17:12:d2:0a:85:d5: 05:bf:11:9d:b8:4e:79:db:2a:d2:a6:5d:aa:ec:8d: fd:9c:88:83:4b:c8:b6:08:72:7d:f2:be:bb:0d:d3: 40:41:62:c1:ac:ee:ed:54:c0:8e:4e:f0:46:da:1d: a8:47:3e:56:e7:c6:67:15:05:3e:87:0f:a3:7d:70: d1:31:28:51:73:cf:63:c2:96:77:eb:04:58:d9:ac: 62:9b:e3:88:8f:47:6c:10:cc:24:50:b2:df:e5:ef: 1a:ed:c9:66:a8:01:ee:b3:16:f8:3d:02:8f:9e:6c: d0:c7:7e:35:4b:69:4b:95:d1:b4:c4:75:b0:e9:eb: a0:a3:0d:32:81:cd:c2:0c:09:57:89:c8:db:4d:68: 1c:29:5f:cb:ee:f7:1b:3f:17:1e:1d:b8:bb:20:13: dc:2e:c4:74:bb:6a:a6:fc:47:b4:bd:92:6c:0c:e7: 5a:b0:53:31:81:87:bc:31:f4:a4:68:6d:eb:35:c1: 2a:4b:fa:8c:1e:e8:f7:a8:bf:61:c2:69:ef:dc:60: 31:a1:37:37:e3:44:5c:f3:43:aa:1a:3f:b6:c5:8c: 28:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AA:67:6D:29:09:A2:17:94:3D:8B:98:81:83:61:CA:33:CB:47:5C X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/EKpnbSkJoheUPYuYgYNhyjPLR1w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.128.0.0/24 78.142.60.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:36:67:e6:ad:ce:d0:9d:a2:81:c8:d3:a4:e3:60:82:f5:42: d9:e1:d1:70:8c:98:18:f1:cb:e8:c1:93:7b:c0:17:65:7d:7e: 0e:c5:2f:50:60:32:48:03:f6:db:2f:85:59:4f:2a:50:e0:6d: 59:3a:37:1b:f8:25:32:4f:04:a7:17:0b:4a:c9:c9:53:be:b8: 41:07:f5:16:74:19:c8:47:7e:d1:0f:e3:42:58:91:5c:f8:1d: a7:ec:0f:7e:83:c3:73:fa:92:7a:0b:28:de:ef:f6:90:97:90: 33:12:dc:ec:ac:74:60:40:22:9e:ed:3c:35:19:f8:08:36:3e: 47:0d:af:9c:be:bd:57:31:76:af:8f:75:d7:ae:6e:d2:0b:87: 49:35:c2:46:cd:19:97:d4:3e:a4:11:3d:12:e3:b7:97:b9:a0: 78:d7:3a:7f:67:81:e7:78:d7:94:39:1d:a5:28:d2:3c:19:40: 81:f5:be:e3:41:16:f2:64:2e:fc:47:07:ed:7b:a8:29:da:ea: c2:80:1c:33:99:98:1a:c3:af:59:5d:0a:1e:fd:e7:ef:60:f3: 7d:d6:be:dc:0a:93:0f:74:79:3e:bb:1c:26:20:42:24:b2:ca: 88:d0:09:2d:fe:20:49:b9:05:75:a1:b8:41:be:82:ed:92:f8: 29:b4:82:4e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9WwOjFcnIPHpghnBW/6Z1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMGFhNjc2ZDI5MDlhMjE3OTQzZDhiOTg4MTgzNjFjYTMzY2I0NzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8SuimbQIHHrl0MCCzGy3WdaCtpvi vRTR5AycIMpGWn5NOZtCpqcXEtIKhdUFvxGduE552yrSpl2q7I39nIiDS8i2CHJ9 8r67DdNAQWLBrO7tVMCOTvBG2h2oRz5W58ZnFQU+hw+jfXDRMShRc89jwpZ36wRY 2axim+OIj0dsEMwkULLf5e8a7clmqAHusxb4PQKPnmzQx341S2lLldG0xHWw6eug ow0ygc3CDAlXicjbTWgcKV/L7vcbPxceHbi7IBPcLsR0u2qm/Ee0vZJsDOdasFMx gYe8MfSkaG3rNcEqS/qMHuj3qL9hwmnv3GAxoTc340Rc80OqGj+2xYwoYQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBCqZ20pCaIXlD2LmIGDYcozy0dcMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvRUtwbmJTa0pvaGVVUFl1WWdZTmh5alBMUjF3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAToAAAwQA To48MA0GCSqGSIb3DQEBCwUAA4IBAQBuNmfmrc7QnaKByNOk42CC9ULZ4dFwjJgY 8cvowZN7wBdlfX4OxS9QYDJIA/bbL4VZTypQ4G1ZOjcb+CUyTwSnFwtKyclTvrhB B/UWdBnIR37RD+NCWJFc+B2n7A9+g8Nz+pJ6Cyje7/aQl5AzEtzsrHRgQCKe7Tw1 GfgINj5HDa+cvr1XMXavj3XXrm7SC4dJNcJGzRmX1D6kET0S47eXuaB41zp/Z4Hn eNeUOR2lKNI8GUCB9b7jQRbyZC78Rwfte6gp2urCgBwzmZgaw69ZXQoe/efvYPN9 1r7cCpMPdHk+uxwmIEIkssqI0Akt/iBJuQV1obhBvoLtkvgptIJO -----END CERTIFICATE-----Generated at Fri Jan 23 18:49:11 2026 by rpki-client