This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/u7mhl95XROSjoK18PIvqrwDhMwU.roa File: u7mhl95XROSjoK18PIvqrwDhMwU.roa (raw, json) Hash identifier: vZsBMmoY3GG/rpSw4TJzASHzOdSJNNeQFgm7zL3D49I= Subject key identifier: BB:B9:A1:97:DE:57:44:E4:A3:A0:AD:7C:3C:8B:EA:AF:00:E1:33:05 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B0AC2C490380443426FD4FCEE49C6 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/u7mhl95XROSjoK18PIvqrwDhMwU.roa Signing time: Fri 02 Jan 2026 06:17:57 +0000 ROA not before: Fri 02 Jan 2026 06:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42805 IP address blocks: 78.142.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:0a:c2:c4:90:38:04:43:42:6f:d4:fc:ee:49:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bbb9a197de5744e4a3a0ad7c3c8beaaf00e13305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b1:bc:f3:00:62:86:09:24:00:92:b5:07:e2: 72:aa:6d:27:bf:75:44:09:64:58:ad:0f:a5:b0:b8: f6:f8:fa:97:a8:a2:fd:58:0d:32:15:aa:cb:0e:c0: 07:70:19:0c:8b:f0:ae:68:3c:22:f1:23:64:b6:ff: 98:04:0e:80:63:d2:a4:91:06:d8:ca:bf:fd:f4:fe: 68:78:be:f3:d1:fc:1c:72:8c:8d:50:03:8d:fd:d3: a6:18:59:d6:e8:dd:86:ae:bd:77:1a:24:67:bd:77: f6:21:26:7d:2e:65:85:2c:c9:94:00:64:df:65:80: 20:0e:0b:38:44:92:7f:72:8f:c6:a4:c5:27:08:4a: 31:c3:31:29:e1:fd:59:9b:6f:77:d7:4f:c5:12:19: 34:4e:9a:1b:18:49:18:82:2c:e6:3b:4b:ac:5d:2b: b0:49:d0:2f:d7:88:ea:73:f5:79:50:0a:97:49:5c: 9c:ea:9f:3a:b1:c5:34:b4:e5:0c:8e:b4:84:4e:d7: 40:20:d6:85:51:a0:43:ca:fe:9e:ad:2c:77:1d:e7: 71:31:86:c5:c6:e9:7c:68:c3:a7:64:04:ec:57:82: ae:8c:55:f7:0b:94:9d:30:07:29:77:09:4c:27:fd: f8:27:c9:0d:3a:e3:06:98:24:d3:0e:6b:3f:b8:c8: 9d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B9:A1:97:DE:57:44:E4:A3:A0:AD:7C:3C:8B:EA:AF:00:E1:33:05 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/u7mhl95XROSjoK18PIvqrwDhMwU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.142.46.0/24 Signature Algorithm: sha256WithRSAEncryption 94:b1:03:01:08:13:3d:39:b2:72:8d:e0:ac:f9:35:b2:49:f0: 88:74:6a:21:96:a9:0f:aa:f6:a0:e7:a6:79:4a:3e:76:46:33: 5e:17:c5:13:89:7f:0f:85:25:64:d4:7d:91:c5:8f:fa:19:7a: 73:25:ed:e9:3f:a0:64:9e:0d:61:6e:c5:99:ba:67:df:f2:01: e2:28:d1:37:05:4a:98:1a:5f:40:06:ae:d0:25:04:08:f5:ee: c4:85:c7:aa:ed:76:d1:1c:8f:a2:e1:30:5c:0f:11:b5:ee:fd: b8:2d:a3:72:ed:b0:f7:a6:11:2f:e7:0e:74:3b:02:14:c5:0b: 84:30:15:38:13:be:0e:d8:20:f9:2e:c7:00:27:1a:8d:fb:fd: 35:f1:c0:7f:65:62:12:7b:cb:6e:a8:bd:b0:77:f5:0a:d2:30: e5:eb:95:94:f1:6c:ab:0f:b4:05:dc:d3:89:5d:b3:39:c7:11: e9:02:f6:fb:2c:0e:96:5d:07:d0:1f:3d:3f:63:e5:b1:a8:06: 40:8f:4f:68:e1:2f:a7:f6:43:25:a0:10:9b:5e:57:42:33:53: 1e:3e:0e:06:da:f4:0d:16:4e:48:97:ea:dd:d7:03:08:64:1f: ab:65:df:d7:e8:32:67:35:95:e7:44:84:dd:07:7e:0a:c4:f9: 57:f2:58:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WwrCxJA4BENCb9T87knGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYmI5YTE5N2RlNTc0NGU0YTNhMGFkN2MzYzhiZWFhZjAwZTEzMzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7G88wBihgkkAJK1B+Jyqm0nv3VE CWRYrQ+lsLj2+PqXqKL9WA0yFarLDsAHcBkMi/CuaDwi8SNktv+YBA6AY9KkkQbY yr/99P5oeL7z0fwccoyNUAON/dOmGFnW6N2Grr13GiRnvXf2ISZ9LmWFLMmUAGTf ZYAgDgs4RJJ/co/GpMUnCEoxwzEp4f1Zm29310/FEhk0TpobGEkYgizmO0usXSuw SdAv14jqc/V5UAqXSVyc6p86scU0tOUMjrSETtdAINaFUaBDyv6erSx3HedxMYbF xul8aMOnZATsV4KujFX3C5SdMAcpdwlMJ/34J8kNOuMGmCTTDms/uMidZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLu5oZfeV0Tko6CtfDyL6q8A4TMFMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvdTdtaGw5NVhST1Nqb0sxOFBJdnFyd0RoTXdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATo4uMA0G CSqGSIb3DQEBCwUAA4IBAQCUsQMBCBM9ObJyjeCs+TWySfCIdGohlqkPqvag56Z5 Sj52RjNeF8UTiX8PhSVk1H2RxY/6GXpzJe3pP6Bkng1hbsWZumff8gHiKNE3BUqY Gl9ABq7QJQQI9e7Ehceq7XbRHI+i4TBcDxG17v24LaNy7bD3phEv5w50OwIUxQuE MBU4E74O2CD5LscAJxqN+/018cB/ZWISe8tuqL2wd/UK0jDl65WU8WyrD7QF3NOJ XbM5xxHpAvb7LA6WXQfQHz0/Y+WxqAZAj09o4S+n9kMloBCbXldCM1MePg4G2vQN Fk5Il+rd1wMIZB+rZd/X6DJnNZXnRITdB34KxPlX8lit -----END CERTIFICATE-----Generated at Fri Jan 23 18:48:26 2026 by rpki-client