This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/m1smZtHhr7p6P22JBC2S8rXTRH0.roa File: m1smZtHhr7p6P22JBC2S8rXTRH0.roa (raw, json) Hash identifier: AZfdpuPx/o6l5BjbSUq8CaGpbmlI57hR9PdsjakXqMg= Subject key identifier: 9B:5B:26:66:D1:E1:AF:BA:7A:3F:6D:89:04:2D:92:F2:B5:D3:44:7D Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B2A427E705D25B6D3ECFC023F8574 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/m1smZtHhr7p6P22JBC2S8rXTRH0.roa Signing time: Fri 02 Jan 2026 06:18:05 +0000 ROA not before: Fri 02 Jan 2026 06:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214032 IP address blocks: 78.128.119.0/24 maxlen: 24 2a01:8740:20::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:2a:42:7e:70:5d:25:b6:d3:ec:fc:02:3f:85:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b5b2666d1e1afba7a3f6d89042d92f2b5d3447d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1c:75:13:3f:8b:ce:71:27:69:ce:da:ed:91: 99:74:f9:07:e6:97:93:74:8c:c8:21:d2:18:b4:06: 81:39:6f:4c:44:47:63:e9:20:7a:32:b6:17:ab:14: fd:58:ed:bb:a3:28:82:30:1a:82:40:7b:ea:c3:4f: 71:d3:97:23:44:3e:f3:f7:3b:ad:c4:a4:56:e0:54: f0:31:07:93:74:27:53:a4:7d:5a:a6:55:87:d5:d2: 6e:3b:1e:f0:a8:72:c9:94:16:88:71:74:2c:e4:08: 6c:8b:03:04:db:70:3c:22:5c:a0:d3:62:f2:bf:4f: 5e:0b:56:77:2d:00:46:63:a2:15:c7:6e:5b:bb:1c: 31:34:fd:26:f1:95:ca:e1:05:b5:57:64:a5:94:54: 26:02:15:90:e4:69:24:eb:02:da:39:bb:2d:db:5d: 4c:9f:e5:40:cd:b9:fa:0b:d5:a9:44:60:c8:a6:64: da:f6:67:a9:79:9c:df:ab:1d:8a:fd:a3:30:bc:97: eb:d2:ec:42:a4:de:9f:15:ca:51:52:c9:2b:0c:12: 17:78:94:80:fb:9c:4c:63:4e:1b:bb:50:8a:d8:e0: d1:59:95:10:5a:c9:5f:4c:fa:84:41:47:35:b2:1c: 54:db:a3:a1:d9:45:01:16:a2:f3:49:c8:cf:db:33: a8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5B:26:66:D1:E1:AF:BA:7A:3F:6D:89:04:2D:92:F2:B5:D3:44:7D X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/m1smZtHhr7p6P22JBC2S8rXTRH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.128.119.0/24 IPv6: 2a01:8740:20::/48 Signature Algorithm: sha256WithRSAEncryption 18:05:7b:54:ea:7f:31:3c:8c:51:a9:b6:b3:7c:04:c2:1d:b8: 07:3f:48:a3:81:37:d0:d0:50:89:8d:da:e5:e2:d7:c1:af:5a: ac:e5:20:84:e3:a7:ab:8d:5d:86:42:c0:a9:11:f9:29:27:20: b5:35:65:97:e2:b7:a5:e7:21:e3:1f:44:2d:20:55:08:27:fa: 78:b4:d2:67:48:18:fe:03:40:4c:a0:33:b1:65:b3:04:61:f1: 90:6e:da:9b:86:10:34:2b:74:d8:04:32:9b:b4:95:11:95:16: 62:48:23:26:1c:50:8e:ba:27:49:04:9a:82:94:0b:9a:dc:ed: 85:2c:22:b9:ab:1a:d5:a7:e5:e8:f1:31:3a:83:43:f8:c6:e3: a2:50:5c:c1:91:d2:ba:9d:e2:7f:64:12:1b:64:ee:5a:95:07: ff:6d:69:95:1a:30:8c:05:3b:6e:e4:15:4b:4d:fb:32:34:cb: 23:96:8e:16:71:54:f1:2d:c3:90:fa:ee:65:f8:20:44:11:af: b3:70:44:22:2f:dd:ab:08:7f:32:3f:b6:47:63:af:fe:f0:5d: b3:fb:7a:b2:2a:e7:6c:71:87:9a:5d:98:3c:bc:0a:8d:58:43: 6b:66:4c:95:07:d0:8d:7f:e0:f0:eb:2f:16:9d:1f:ee:8d:16: ea:4f:5a:d9 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt9WypCfnBdJbbT7PwCP4V0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YjViMjY2NmQxZTFhZmJhN2EzZjZkODkwNDJkOTJmMmI1ZDM0NDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xx1Ez+LznEnac7a7ZGZdPkH5peT dIzIIdIYtAaBOW9MREdj6SB6MrYXqxT9WO27oyiCMBqCQHvqw09x05cjRD7z9zut xKRW4FTwMQeTdCdTpH1aplWH1dJuOx7wqHLJlBaIcXQs5AhsiwME23A8Ilyg02Ly v09eC1Z3LQBGY6IVx25buxwxNP0m8ZXK4QW1V2SllFQmAhWQ5Gkk6wLaObst211M n+VAzbn6C9WpRGDIpmTa9mepeZzfqx2K/aMwvJfr0uxCpN6fFcpRUskrDBIXeJSA +5xMY04bu1CK2ODRWZUQWslfTPqEQUc1shxU26Oh2UUBFqLzScjP2zOowwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFJtbJmbR4a+6ej9tiQQtkvK100R9MB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvbTFzbVp0SGhyN3A2UDIySkJDMlM4clhUUkgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAToB3MA8E AgACMAkDBwAqAYdAACAwDQYJKoZIhvcNAQELBQADggEBABgFe1TqfzE8jFGptrN8 BMIduAc/SKOBN9DQUImN2uXi18GvWqzlIITjp6uNXYZCwKkR+SknILU1ZZfit6Xn IeMfRC0gVQgn+ni00mdIGP4DQEygM7FlswRh8ZBu2puGEDQrdNgEMpu0lRGVFmJI IyYcUI66J0kEmoKUC5rc7YUsIrmrGtWn5ejxMTqDQ/jG46JQXMGR0rqd4n9kEhtk 7lqVB/9taZUaMIwFO27kFUtN+zI0yyOWjhZxVPEtw5D67mX4IEQRr7NwRCIv3asI fzI/tkdjr/7wXbP7erIq52xxh5pdmDy8Co1YQ2tmTJUH0I1/4PDrLxadH+6NFupP Wtk= -----END CERTIFICATE-----Generated at Fri Jan 23 18:49:55 2026 by rpki-client