This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/kqJYU_hQcPa8r__1hkjYXPW0res.roa File: kqJYU_hQcPa8r__1hkjYXPW0res.roa (raw, json) Hash identifier: 4G1awV8ApckDRCbx3hv+bX+VA3D/9CO+6CU2GGxZ8RQ= Subject key identifier: 92:A2:58:53:F8:50:70:F6:BC:AF:FF:F5:86:48:D8:5C:F5:B4:AD:EB Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B1B64B6A703BD62E4CFD10C16B73A Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/kqJYU_hQcPa8r__1hkjYXPW0res.roa Signing time: Fri 02 Jan 2026 06:18:01 +0000 ROA not before: Fri 02 Jan 2026 06:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202325 IP address blocks: 78.128.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:1b:64:b6:a7:03:bd:62:e4:cf:d1:0c:16:b7:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=92a25853f85070f6bcaffff58648d85cf5b4adeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0c:ea:38:1b:ec:95:a7:ad:2b:f9:0d:28:e8: ef:0a:1a:06:7d:6d:31:83:96:2d:46:f3:55:8c:8d: 79:7c:c2:00:14:91:78:9d:d2:61:38:59:c7:7f:ac: f5:20:59:71:0e:70:9c:02:c0:5f:8a:92:b8:9d:b8: 52:76:fb:a7:f5:0e:74:a8:1c:af:1b:a3:22:9a:9e: 8f:8b:28:4b:08:ad:83:fc:d1:47:9d:2b:c3:fd:fe: 37:bd:a2:5c:13:cd:f0:4d:2c:16:12:be:2a:1b:e9: 5f:9a:50:5e:cd:5c:2e:5e:d1:d5:9b:9b:ff:b3:52: c5:5d:db:5c:7f:01:ea:9c:dd:28:80:78:1a:cc:ad: ca:4f:22:89:73:9f:de:a3:03:13:69:b3:75:5c:cf: b5:91:b9:ae:a8:86:64:12:87:ab:af:68:c6:e1:16: 5a:ef:c1:b5:f8:be:9d:3e:50:42:5d:72:de:9d:9d: 66:c0:50:9d:83:17:07:69:81:fc:1e:ec:03:ad:a3: 72:18:ec:c0:da:d7:9a:b3:e0:89:6d:95:85:a5:c9: eb:81:8a:3f:e9:3b:65:dd:b2:be:4a:8e:d7:c6:4d: c2:cc:58:ac:ad:79:1c:85:29:aa:cc:23:87:26:60: 85:bd:ba:84:99:43:9b:65:ad:25:4d:2f:c6:2c:9e: f3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:A2:58:53:F8:50:70:F6:BC:AF:FF:F5:86:48:D8:5C:F5:B4:AD:EB X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/kqJYU_hQcPa8r__1hkjYXPW0res.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.128.112.0/24 Signature Algorithm: sha256WithRSAEncryption 65:c8:58:5a:17:a3:8d:06:3e:54:0c:4d:08:6c:17:f0:0c:cd: 8a:f9:f9:82:66:c7:26:2f:54:eb:58:d9:73:73:b0:8b:51:b9: 31:ee:5c:c0:ec:7c:95:3f:3a:58:38:a3:22:79:41:f0:63:41: 60:16:1c:2a:12:47:ea:cc:08:c5:a3:17:c5:70:a4:56:2b:c9: e5:9c:06:41:93:ae:a9:84:b7:de:b3:7a:56:1b:d2:b4:f9:23: a2:2c:0c:ce:42:6f:be:9e:5b:8b:89:66:63:9e:82:4e:62:4a: 61:49:94:93:3c:de:7a:55:d7:29:b5:78:8a:17:fc:49:86:57: cb:ef:39:fd:07:d9:26:fd:30:77:48:72:3e:20:1d:25:e5:ba: 99:78:28:f6:cd:45:54:99:f2:8c:44:69:69:70:c1:d9:5e:75: 81:33:cc:7f:1f:74:26:95:c7:51:e8:c4:40:ea:be:2c:56:70: f1:4b:3e:fa:c2:ff:25:21:ee:29:d2:7e:cd:e8:32:68:46:a5: 2f:94:bd:05:70:bc:c7:3e:24:97:44:15:33:84:0d:ed:81:79: d9:68:a2:3d:11:d4:b1:37:12:ed:c3:45:d9:8d:84:b1:20:cc: 32:22:98:c3:b6:0e:bc:bb:f3:2d:ca:05:be:5d:2d:65:89:84: d1:cb:ac:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WxtktqcDvWLkz9EMFrc6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MmEyNTg1M2Y4NTA3MGY2YmNhZmZmZjU4NjQ4ZDg1Y2Y1YjRhZGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAzqOBvslaetK/kNKOjvChoGfW0x g5YtRvNVjI15fMIAFJF4ndJhOFnHf6z1IFlxDnCcAsBfipK4nbhSdvun9Q50qByv G6Mimp6PiyhLCK2D/NFHnSvD/f43vaJcE83wTSwWEr4qG+lfmlBezVwuXtHVm5v/ s1LFXdtcfwHqnN0ogHgazK3KTyKJc5/eowMTabN1XM+1kbmuqIZkEoerr2jG4RZa 78G1+L6dPlBCXXLenZ1mwFCdgxcHaYH8HuwDraNyGOzA2teas+CJbZWFpcnrgYo/ 6Ttl3bK+So7Xxk3CzFisrXkchSmqzCOHJmCFvbqEmUObZa0lTS/GLJ7zZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJKiWFP4UHD2vK//9YZI2Fz1tK3rMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEva3FKWVVfaFFjUGE4cl9fMWhrallYUFcwcmVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAToBwMA0G CSqGSIb3DQEBCwUAA4IBAQBlyFhaF6ONBj5UDE0IbBfwDM2K+fmCZscmL1TrWNlz c7CLUbkx7lzA7HyVPzpYOKMieUHwY0FgFhwqEkfqzAjFoxfFcKRWK8nlnAZBk66p hLfes3pWG9K0+SOiLAzOQm++nluLiWZjnoJOYkphSZSTPN56VdcptXiKF/xJhlfL 7zn9B9km/TB3SHI+IB0l5bqZeCj2zUVUmfKMRGlpcMHZXnWBM8x/H3QmlcdR6MRA 6r4sVnDxSz76wv8lIe4p0n7N6DJoRqUvlL0FcLzHPiSXRBUzhA3tgXnZaKI9EdSx NxLtw0XZjYSxIMwyIpjDtg68u/MtygW+XS1liYTRy6xr -----END CERTIFICATE-----Generated at Fri Jan 23 18:50:44 2026 by rpki-client