This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/uHoYr86rLNvZFRdWQ_D8xP7fOLM.roa File: uHoYr86rLNvZFRdWQ_D8xP7fOLM.roa (raw, json) Hash identifier: bO4OmKWMMlC2lQSAT59HP7178/MEwWDF7J1tQWSfkGU= Subject key identifier: B8:7A:18:AF:CE:AB:2C:DB:D9:15:17:56:43:F0:FC:C4:FE:DF:38:B3 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B25A3E49E7D5287C713CEA0A0D935 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/uHoYr86rLNvZFRdWQ_D8xP7fOLM.roa Signing time: Fri 02 Jan 2026 06:18:03 +0000 ROA not before: Fri 02 Jan 2026 06:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208637 IP address blocks: 78.128.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:25:a3:e4:9e:7d:52:87:c7:13:ce:a0:a0:d9:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b87a18afceab2cdbd915175643f0fcc4fedf38b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5e:4d:77:3f:5e:8f:34:fd:b7:a2:cf:db:1b: 9b:f2:ca:06:8c:8e:bd:57:c3:2d:00:09:77:a4:66: e3:f6:f6:56:4c:d6:26:a0:48:84:ab:18:7f:91:ed: 62:63:c7:82:f2:49:c1:bd:fd:13:b9:04:73:20:4d: e2:d3:93:b4:69:5e:ac:25:13:81:07:d1:ed:44:36: d7:50:34:f3:c8:6c:6b:7f:32:18:a0:8a:a2:e1:5f: e1:94:73:1e:54:5e:e6:28:f0:68:29:4f:86:41:5a: 03:7f:1c:6d:f6:62:9c:83:d8:7d:55:af:a6:e5:11: 8a:ba:56:5a:b2:e3:9f:87:49:c2:9c:4f:50:2c:b1: 14:a6:1f:21:a5:3c:67:f5:88:4c:f5:1b:8d:0b:4e: cd:d8:bb:c8:3c:67:cf:e6:c0:8f:78:bf:38:3e:3d: 77:92:85:05:df:c8:8b:45:74:04:9d:d0:ab:8b:3c: 8b:88:8d:71:57:5a:d2:62:66:75:0d:5a:34:5a:71: 07:bd:77:83:bd:b0:ce:b6:cc:4f:96:21:92:07:12: bd:2e:5a:09:99:84:e6:d5:dd:05:58:e2:27:02:ca: 35:03:2c:e8:6b:7e:53:dc:b8:0b:77:a2:41:35:2b: 0f:f1:e0:16:f5:52:4a:71:0e:5e:df:db:f5:11:86: 03:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:7A:18:AF:CE:AB:2C:DB:D9:15:17:56:43:F0:FC:C4:FE:DF:38:B3 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/uHoYr86rLNvZFRdWQ_D8xP7fOLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.128.112.0/24 Signature Algorithm: sha256WithRSAEncryption 37:b1:d1:4a:89:75:19:7b:b1:9b:77:67:82:c9:6d:7c:cf:07: a6:62:e1:11:66:3d:f5:b6:c9:b9:06:2b:37:dc:5f:10:0b:7e: a0:eb:ad:09:35:72:6b:b7:13:a6:2f:f6:c4:63:80:63:e0:d7: 87:79:a2:3e:e2:93:99:75:e8:c4:58:b4:7b:dd:88:5c:3c:65: 6b:e1:8c:72:9a:f7:06:05:38:51:6b:62:f1:07:0c:83:88:df: d2:45:52:57:ea:3f:5e:bf:03:ec:cf:07:92:17:43:af:d3:60: a3:d4:82:93:30:e8:d0:ba:c6:cf:a1:97:55:88:af:61:42:f0: 8a:6d:87:a7:21:47:9b:91:19:29:b1:26:25:5c:d4:15:ba:66: 15:dc:31:31:29:46:53:be:74:1d:75:85:dc:be:c2:0d:13:e7: 57:d0:f3:aa:7a:2c:7f:f7:60:22:f8:74:97:f1:af:92:9d:bf: 5c:11:bf:8b:3f:1b:3f:d8:b7:50:56:2f:e4:d8:e4:b8:20:d2: aa:cd:cf:9e:9e:3c:cd:16:46:35:ea:3b:94:c7:06:bc:81:f9: 9d:07:93:7b:92:10:2c:d2:73:99:66:4e:cb:89:91:93:e3:b8: 19:9e:b2:3c:24:8b:29:24:c8:11:5d:02:7b:e7:ff:8a:f1:2b: 5c:7b:39:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WyWj5J59UofHE86goNk1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODdhMThhZmNlYWIyY2RiZDkxNTE3NTY0M2YwZmNjNGZlZGYzOGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV5Ndz9ejzT9t6LP2xub8soGjI69 V8MtAAl3pGbj9vZWTNYmoEiEqxh/ke1iY8eC8knBvf0TuQRzIE3i05O0aV6sJROB B9HtRDbXUDTzyGxrfzIYoIqi4V/hlHMeVF7mKPBoKU+GQVoDfxxt9mKcg9h9Va+m 5RGKulZasuOfh0nCnE9QLLEUph8hpTxn9YhM9RuNC07N2LvIPGfP5sCPeL84Pj13 koUF38iLRXQEndCrizyLiI1xV1rSYmZ1DVo0WnEHvXeDvbDOtsxPliGSBxK9LloJ mYTm1d0FWOInAso1Ayzoa35T3LgLd6JBNSsP8eAW9VJKcQ5e39v1EYYDVwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLh6GK/Oqyzb2RUXVkPw/MT+3zizMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvdUhvWXI4NnJMTnZaRlJkV1FfRDh4UDdmT0xNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAToBwMA0G CSqGSIb3DQEBCwUAA4IBAQA3sdFKiXUZe7Gbd2eCyW18zwemYuERZj31tsm5Bis3 3F8QC36g660JNXJrtxOmL/bEY4Bj4NeHeaI+4pOZdejEWLR73YhcPGVr4YxymvcG BThRa2LxBwyDiN/SRVJX6j9evwPszweSF0Ov02Cj1IKTMOjQusbPoZdViK9hQvCK bYenIUebkRkpsSYlXNQVumYV3DExKUZTvnQddYXcvsINE+dX0POqeix/92Ai+HSX 8a+Snb9cEb+LPxs/2LdQVi/k2OS4INKqzc+enjzNFkY16juUxwa8gfmdB5N7khAs 0nOZZk7LiZGT47gZnrI8JIspJMgRXQJ75/+K8Stcezl5 -----END CERTIFICATE-----Generated at Fri Jan 23 18:48:25 2026 by rpki-client