This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/T0bT7U9y0DJUTUl_EMq5FeduW5M.roa File: T0bT7U9y0DJUTUl_EMq5FeduW5M.roa (raw, json) Hash identifier: HRICrIpSn4zTh6O4U6WNSwAAbsaKoExIdH0g1rkbKBU= Subject key identifier: 4F:46:D3:ED:4F:72:D0:32:54:4D:49:7F:10:CA:B9:15:E7:6E:5B:93 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B26025531D641B3672680114F21A7 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/T0bT7U9y0DJUTUl_EMq5FeduW5M.roa Signing time: Fri 02 Jan 2026 06:18:04 +0000 ROA not before: Fri 02 Jan 2026 06:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209160 IP address blocks: 78.128.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:26:02:55:31:d6:41:b3:67:26:80:11:4f:21:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f46d3ed4f72d032544d497f10cab915e76e5b93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:68:a0:4f:ff:1c:ee:ee:82:c7:2f:5d:18:30: d5:41:25:96:9c:e5:84:b6:c2:e8:6c:d3:2b:ed:89: fc:69:82:6b:42:98:e5:4a:8e:3c:19:d3:fb:7d:73: 87:ad:2c:eb:3d:7a:7d:0c:bc:75:d1:ed:95:0e:86: 7f:82:64:39:8b:12:30:6d:aa:2c:2e:79:5d:e3:e0: f5:6a:b3:0c:8a:4e:e5:22:50:66:0e:83:b5:c8:6b: c8:ac:57:fd:1f:ed:28:f7:34:7a:bf:24:d8:80:2a: 4a:23:83:29:13:30:c5:cb:d5:a7:7a:f6:7b:1f:4c: f6:a2:b2:1a:65:ff:d4:83:5f:95:34:c2:b2:b3:df: 03:98:dd:b2:28:25:b7:b1:54:d6:87:f3:b3:9b:26: 5a:f9:8b:7b:b4:8a:3a:67:ff:c2:cf:e9:67:45:d6: 60:f8:84:1c:50:37:b1:ee:2e:41:85:9b:4c:61:f7: f9:08:01:9d:af:87:59:3e:a1:df:aa:de:39:15:65: e7:91:57:88:02:0e:45:97:64:33:8b:be:ee:f0:aa: 6c:48:52:b5:12:c8:26:59:d5:8c:6e:cd:e0:4f:f8: 74:b1:fd:2d:40:02:58:57:eb:9d:bd:d3:d9:2a:32: 00:fb:02:33:03:64:4a:5e:47:9f:1b:d6:c2:b9:52: 7e:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:46:D3:ED:4F:72:D0:32:54:4D:49:7F:10:CA:B9:15:E7:6E:5B:93 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/T0bT7U9y0DJUTUl_EMq5FeduW5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.128.113.0/24 Signature Algorithm: sha256WithRSAEncryption 75:50:dc:91:6e:04:f3:c8:aa:9b:dc:c6:1d:59:b7:04:96:8c: fc:7b:75:bb:13:69:25:79:90:54:43:ac:a2:fd:7d:91:ac:ad: b5:e6:26:4d:cb:55:c6:b9:57:63:67:69:ea:78:c4:e6:0a:30: 14:bd:ad:64:62:ba:70:61:21:54:5f:e8:23:05:15:6d:38:90: 90:25:21:8f:c5:0c:f1:cd:c7:dc:a0:8b:61:e9:55:a2:b8:d6: c0:0f:ed:84:1a:fe:ce:b1:36:96:10:db:20:29:ed:ea:27:cd: c1:87:e3:42:a5:5f:ab:58:72:e7:cd:7f:85:8d:ec:67:86:6a: 63:36:92:0c:10:3b:0f:2e:98:b0:3c:5b:94:c0:8b:22:b3:4d: 6b:0d:af:81:e3:97:72:ac:05:8a:ff:1a:48:92:9a:8b:5b:f0: 5d:3e:6d:e3:43:d0:13:5d:a2:fa:4d:8b:21:6a:c0:98:63:ca: 31:38:07:bc:82:d3:2f:f8:84:21:ab:69:32:91:a1:db:5e:ad: e1:1f:3a:8a:37:a2:12:6d:47:8d:14:e8:d9:48:00:8e:db:48: 66:1c:d2:be:78:99:7a:9f:8d:4a:b9:65:59:e6:50:fa:28:8d: 37:82:d0:d7:6d:30:24:32:ef:e8:72:50:34:ad:b3:89:bf:6e: 87:b9:49:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WyYCVTHWQbNnJoARTyGnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjQ2ZDNlZDRmNzJkMDMyNTQ0ZDQ5N2YxMGNhYjkxNWU3NmU1YjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWigT/8c7u6Cxy9dGDDVQSWWnOWE tsLobNMr7Yn8aYJrQpjlSo48GdP7fXOHrSzrPXp9DLx10e2VDoZ/gmQ5ixIwbaos Lnld4+D1arMMik7lIlBmDoO1yGvIrFf9H+0o9zR6vyTYgCpKI4MpEzDFy9WnevZ7 H0z2orIaZf/Ug1+VNMKys98DmN2yKCW3sVTWh/OzmyZa+Yt7tIo6Z//Cz+lnRdZg +IQcUDex7i5BhZtMYff5CAGdr4dZPqHfqt45FWXnkVeIAg5Fl2Qzi77u8KpsSFK1 EsgmWdWMbs3gT/h0sf0tQAJYV+udvdPZKjIA+wIzA2RKXkefG9bCuVJ+gQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE9G0+1PctAyVE1JfxDKuRXnbluTMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvVDBiVDdVOXkwREpVVFVsX0VNcTVGZWR1VzVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAToBxMA0G CSqGSIb3DQEBCwUAA4IBAQB1UNyRbgTzyKqb3MYdWbcEloz8e3W7E2kleZBUQ6yi /X2RrK215iZNy1XGuVdjZ2nqeMTmCjAUva1kYrpwYSFUX+gjBRVtOJCQJSGPxQzx zcfcoIth6VWiuNbAD+2EGv7OsTaWENsgKe3qJ83Bh+NCpV+rWHLnzX+Fjexnhmpj NpIMEDsPLpiwPFuUwIsis01rDa+B45dyrAWK/xpIkpqLW/BdPm3jQ9ATXaL6TYsh asCYY8oxOAe8gtMv+IQhq2kykaHbXq3hHzqKN6ISbUeNFOjZSACO20hmHNK+eJl6 n41KuWVZ5lD6KI03gtDXbTAkMu/oclA0rbOJv26HuUnH -----END CERTIFICATE-----Generated at Fri Jan 23 18:48:26 2026 by rpki-client