This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/aJ3j-PqBaLbGRtkrZNKbvT-mXtk.roa File: aJ3j-PqBaLbGRtkrZNKbvT-mXtk.roa (raw, json) Hash identifier: BHOvLPoK/7YFSmV/6eieQqRahYjUJUMafk1EDooHo8M= Subject key identifier: 68:9D:E3:F8:FA:81:68:B6:C6:46:D9:2B:64:D2:9B:BD:3F:A6:5E:D9 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B11D0DCC42C5A0A328599052DD575 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/aJ3j-PqBaLbGRtkrZNKbvT-mXtk.roa Signing time: Fri 02 Jan 2026 06:17:58 +0000 ROA not before: Fri 02 Jan 2026 06:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57705 IP address blocks: 78.142.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:11:d0:dc:c4:2c:5a:0a:32:85:99:05:2d:d5:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=689de3f8fa8168b6c646d92b64d29bbd3fa65ed9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:97:3f:aa:86:a5:20:d9:18:b0:d2:62:2a:c1: 9f:89:89:4d:b8:66:59:04:c4:22:a5:09:7b:c6:22: e3:85:5d:9d:e0:dc:8b:0e:cf:c3:24:01:d5:af:92: 55:9a:ec:7a:5d:8c:a7:a2:d0:bc:b9:85:e0:0b:6b: 21:25:8b:5c:94:e7:49:44:26:08:29:da:bc:d6:1b: 6b:35:6b:c0:8d:d6:22:9b:bd:66:1c:9e:f6:6a:82: f5:98:83:29:8e:ec:0c:ec:fb:dd:c2:3a:45:61:a0: c4:5e:42:34:c6:47:97:62:e6:07:83:98:ac:be:55: 98:1d:04:0f:fe:8d:0d:57:08:17:d8:e3:f2:e7:18: 69:11:7c:a9:5c:3e:e0:07:a9:f6:35:ca:a3:59:45: 4e:f6:6b:ff:8c:1c:36:21:9f:5c:cc:dd:fb:ba:ec: ad:8b:15:01:71:a1:88:6d:ce:38:dc:8f:20:5e:51: 5b:a1:b5:9c:54:6a:82:01:43:7d:49:1f:bd:31:0d: 85:ee:19:0b:83:0d:66:be:89:6b:1c:d5:c9:2d:ea: 75:f4:4e:1a:b7:b5:8d:24:5a:24:18:fd:30:c2:be: e0:89:2d:95:e4:c6:ab:31:17:12:be:96:65:ba:fa: 96:87:ae:42:fc:83:31:38:c2:0a:85:5e:3f:49:d0: 44:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:9D:E3:F8:FA:81:68:B6:C6:46:D9:2B:64:D2:9B:BD:3F:A6:5E:D9 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/aJ3j-PqBaLbGRtkrZNKbvT-mXtk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.142.19.0/24 Signature Algorithm: sha256WithRSAEncryption 57:3b:71:9b:18:4a:a2:11:30:10:57:f2:ac:ea:42:69:f8:01: cc:cb:00:e3:4e:01:fc:84:14:d5:47:03:f2:2a:06:9a:75:5b: e4:02:c9:d2:ea:e2:65:8f:0f:4b:36:d9:19:e4:93:d4:15:6d: 70:c2:c0:25:4d:23:21:cf:6d:73:48:32:4a:64:13:b6:f8:ee: 17:bc:ed:74:70:ac:7a:3b:6b:0f:84:18:0a:06:0b:27:de:54: ea:f9:d9:fa:9d:56:1c:6f:b1:b0:d4:5b:32:b1:b3:58:f2:28: 18:fb:a7:1d:63:82:43:76:63:da:8a:c8:81:e1:82:cf:74:32: db:f8:3e:f9:83:50:d9:14:90:bf:f9:36:0e:38:3d:f9:91:a2: 49:e3:58:c2:d2:8c:29:0d:29:94:26:fd:5c:65:53:b5:14:ae: 00:f6:d4:a3:12:1b:f9:72:0e:d8:e0:63:f1:12:46:03:0d:af: 55:c2:c2:9f:43:8a:74:48:74:de:af:88:e3:e3:66:35:15:6d: eb:47:24:32:7e:b1:17:ab:dd:b1:38:fb:2e:60:8b:c9:dd:b5: 21:ba:5d:4a:6e:46:25:ca:29:34:1b:28:4d:a9:b7:ba:39:25: 96:f7:cb:54:ec:43:76:f1:58:91:ca:97:0f:98:d4:18:75:ae: 57:6b:02:51 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WxHQ3MQsWgoyhZkFLdV1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODlkZTNmOGZhODE2OGI2YzY0NmQ5MmI2NGQyOWJiZDNmYTY1ZWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspc/qoalINkYsNJiKsGfiYlNuGZZ BMQipQl7xiLjhV2d4NyLDs/DJAHVr5JVmux6XYynotC8uYXgC2shJYtclOdJRCYI Kdq81htrNWvAjdYim71mHJ72aoL1mIMpjuwM7PvdwjpFYaDEXkI0xkeXYuYHg5is vlWYHQQP/o0NVwgX2OPy5xhpEXypXD7gB6n2NcqjWUVO9mv/jBw2IZ9czN37uuyt ixUBcaGIbc443I8gXlFbobWcVGqCAUN9SR+9MQ2F7hkLgw1mvolrHNXJLep19E4a t7WNJFokGP0wwr7giS2V5MarMRcSvpZluvqWh65C/IMxOMIKhV4/SdBErwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGid4/j6gWi2xkbZK2TSm70/pl7ZMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvYUozai1QcUJhTGJHUnRrclpOS2J2VC1tWHRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATo4TMA0G CSqGSIb3DQEBCwUAA4IBAQBXO3GbGEqiETAQV/Ks6kJp+AHMywDjTgH8hBTVRwPy KgaadVvkAsnS6uJljw9LNtkZ5JPUFW1wwsAlTSMhz21zSDJKZBO2+O4XvO10cKx6 O2sPhBgKBgsn3lTq+dn6nVYcb7Gw1FsysbNY8igY+6cdY4JDdmPaisiB4YLPdDLb +D75g1DZFJC/+TYOOD35kaJJ41jC0owpDSmUJv1cZVO1FK4A9tSjEhv5cg7Y4GPx EkYDDa9VwsKfQ4p0SHTer4jj42Y1FW3rRyQyfrEXq92xOPsuYIvJ3bUhul1KbkYl yik0GyhNqbe6OSWW98tU7EN28ViRypcPmNQYda5XawJR -----END CERTIFICATE-----Generated at Fri Jan 23 18:47:10 2026 by rpki-client