This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/pb93xORhoMueYmyxlDmub2csMUU.roa File: pb93xORhoMueYmyxlDmub2csMUU.roa (raw, json) Hash identifier: W2ilRrOmp5j6ds//EogisCtYsOUf3q2rFrb5UD0HU90= Subject key identifier: A5:BF:77:C4:E4:61:A0:CB:9E:62:6C:B1:94:39:AE:6F:67:2C:31:45 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B296F505AE8392A7DFEC822AD0D72 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/pb93xORhoMueYmyxlDmub2csMUU.roa Signing time: Fri 02 Jan 2026 06:18:04 +0000 ROA not before: Fri 02 Jan 2026 06:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213509 IP address blocks: 78.128.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:29:6f:50:5a:e8:39:2a:7d:fe:c8:22:ad:0d:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5bf77c4e461a0cb9e626cb19439ae6f672c3145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:61:2e:5b:09:a5:04:f3:b3:d6:04:6f:ac:fc: 8c:af:6a:b4:1e:7d:92:a5:78:97:57:86:cb:37:37: 0d:74:c9:8d:f5:44:bf:2c:79:49:d8:7a:29:45:cd: f1:3d:ee:2d:8f:0b:3f:83:50:2a:6b:be:04:65:d0: d8:8e:24:7f:c2:4a:65:06:6a:bc:14:0a:59:2b:cd: 23:4b:8c:f9:64:36:09:33:fc:17:15:70:21:93:ee: 36:e9:50:4a:f4:23:ba:cc:54:63:a1:2d:bb:60:c6: 12:4b:06:9b:c8:40:e2:bd:45:95:62:6c:6d:47:77: 6e:f3:47:7b:21:3b:0d:78:af:d4:1d:08:90:fa:e6: cd:77:c7:c4:76:5d:f6:1c:f3:68:3b:19:44:69:b1: 9a:56:b1:37:10:b4:0b:69:11:8d:56:29:f6:32:40: 14:c4:ab:ff:d5:6d:e6:d7:dd:3b:79:ad:0d:ff:85: fa:46:1d:84:de:e0:33:04:b7:70:33:42:ba:36:cb: 1e:98:13:64:87:e7:27:d9:a9:b8:83:0e:57:b5:92: a5:cb:cd:2c:32:8e:a1:ca:1a:7e:64:db:4c:c9:27: 73:2d:b8:18:88:6c:4c:da:ae:bc:75:0a:57:ac:a0: b1:c6:e0:17:6a:4d:b5:b2:f7:ec:42:85:97:4b:92: 1d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:BF:77:C4:E4:61:A0:CB:9E:62:6C:B1:94:39:AE:6F:67:2C:31:45 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/pb93xORhoMueYmyxlDmub2csMUU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.128.63.0/24 Signature Algorithm: sha256WithRSAEncryption a2:5d:50:e8:da:ea:24:66:51:b8:65:7b:e8:88:ec:b3:9e:29: af:73:5b:a2:49:cf:04:6c:1f:43:3b:a9:67:8d:2e:69:6d:a3: 5e:ad:42:44:0f:bc:c8:3c:1d:2f:8d:38:c1:23:94:e5:75:70: fd:84:a2:34:3c:0a:e6:fd:54:14:b9:75:8a:03:9a:c0:08:1e: 5b:82:9d:a5:51:63:a1:3c:d5:b6:f0:da:61:18:61:75:36:9e: 87:7c:18:23:03:81:bc:be:ef:32:c0:01:f8:16:8b:4a:99:9b: 6d:94:26:85:bc:b4:e9:f5:5d:48:4d:fa:bd:42:67:76:f8:b0: 8f:41:c2:0e:6b:64:02:92:c9:de:3c:5f:48:28:7d:7d:23:18: 2c:f0:d8:71:e8:b5:1e:72:a2:4f:6d:c2:8b:91:e1:e0:8d:e5: 8d:7a:ca:04:01:8f:64:2e:27:95:1d:be:18:95:e0:d2:fe:92: ca:17:3c:fe:a4:67:29:3b:f9:9f:d8:99:17:3a:75:d7:fe:a5: 0b:7c:54:84:00:23:c1:9c:b1:58:75:9d:3a:25:1e:71:55:ec: ac:be:95:d0:2a:1c:0d:57:b2:6a:50:6a:d5:14:85:cd:1d:bb: ed:43:03:c6:8c:6a:06:7c:b3:bb:57:bb:30:61:41:e3:e6:43: d2:a0:d5:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WylvUFroOSp9/sgirQ1yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWJmNzdjNGU0NjFhMGNiOWU2MjZjYjE5NDM5YWU2ZjY3MmMzMTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGEuWwmlBPOz1gRvrPyMr2q0Hn2S pXiXV4bLNzcNdMmN9US/LHlJ2HopRc3xPe4tjws/g1Aqa74EZdDYjiR/wkplBmq8 FApZK80jS4z5ZDYJM/wXFXAhk+426VBK9CO6zFRjoS27YMYSSwabyEDivUWVYmxt R3du80d7ITsNeK/UHQiQ+ubNd8fEdl32HPNoOxlEabGaVrE3ELQLaRGNVin2MkAU xKv/1W3m1907ea0N/4X6Rh2E3uAzBLdwM0K6NssemBNkh+cn2am4gw5XtZKly80s Mo6hyhp+ZNtMySdzLbgYiGxM2q68dQpXrKCxxuAXak21svfsQoWXS5IdmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKW/d8TkYaDLnmJssZQ5rm9nLDFFMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvcGI5M3hPUmhvTXVlWW15eGxEbXViMmNzTVVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAToA/MA0G CSqGSIb3DQEBCwUAA4IBAQCiXVDo2uokZlG4ZXvoiOyznimvc1uiSc8EbB9DO6ln jS5pbaNerUJED7zIPB0vjTjBI5TldXD9hKI0PArm/VQUuXWKA5rACB5bgp2lUWOh PNW28NphGGF1Np6HfBgjA4G8vu8ywAH4FotKmZttlCaFvLTp9V1ITfq9Qmd2+LCP QcIOa2QCksnePF9IKH19Ixgs8Nhx6LUecqJPbcKLkeHgjeWNesoEAY9kLieVHb4Y leDS/pLKFzz+pGcpO/mf2JkXOnXX/qULfFSEACPBnLFYdZ06JR5xVeysvpXQKhwN V7JqUGrVFIXNHbvtQwPGjGoGfLO7V7swYUHj5kPSoNWF -----END CERTIFICATE-----Generated at Fri Jan 23 18:49:09 2026 by rpki-client