This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/vzgjJuZ2jcFONbTt18xs7bRbA6M.roa File: vzgjJuZ2jcFONbTt18xs7bRbA6M.roa (raw, json) Hash identifier: 3kidy1n0cGTU1x9sSeXSbQZulEPQQHRZH7fBrlNV3sc= Subject key identifier: BF:38:23:26:E6:76:8D:C1:4E:35:B4:ED:D7:CC:6C:ED:B4:5B:03:A3 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B1CA8FE0777A96FB04EB8407779AA Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/vzgjJuZ2jcFONbTt18xs7bRbA6M.roa Signing time: Fri 02 Jan 2026 06:18:01 +0000 ROA not before: Fri 02 Jan 2026 06:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202968 IP address blocks: 78.128.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:1c:a8:fe:07:77:a9:6f:b0:4e:b8:40:77:79:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf382326e6768dc14e35b4edd7cc6cedb45b03a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e4:4f:61:72:de:b4:d8:20:3b:f8:c9:7f:ba: 72:53:62:5c:4b:0d:bc:b3:48:51:56:4d:9b:d6:0f: a4:9a:73:f9:a4:72:b3:ce:2b:7f:55:ea:f3:af:90: 0c:f9:99:f4:e9:6a:63:93:f8:73:3d:b3:21:3b:af: 93:46:5d:f3:c7:71:d6:8e:fb:87:d3:74:2a:33:1c: b5:ea:03:a2:c6:28:0d:e0:31:36:53:e9:05:ef:e7: 71:cd:0a:1f:ff:79:ef:c2:71:3f:45:61:e0:eb:f0: 53:19:ef:94:97:a6:bc:c7:bf:a4:e2:23:80:a6:80: d8:d6:94:c2:eb:ca:d4:e3:47:b0:c1:bb:5f:f9:ca: 91:47:91:53:f7:dd:5a:d2:5a:10:76:6f:80:44:f1: af:0d:6c:bd:4f:a5:49:e1:7d:dc:f3:d1:26:99:96: c6:67:bd:09:3a:ea:97:f9:65:65:04:ae:6e:94:c3: 42:c1:8d:da:ad:27:d8:57:0c:16:04:d9:57:21:e6: a2:54:32:dc:54:2d:f0:af:58:10:57:40:9c:a0:41: 4a:27:20:36:c8:42:af:00:d4:2b:23:6c:00:94:49: 73:54:5f:8e:ff:9a:29:47:d1:f1:46:65:76:0f:4f: 27:52:8f:16:bb:4d:f1:6c:ad:5f:76:73:7c:73:92: 54:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:38:23:26:E6:76:8D:C1:4E:35:B4:ED:D7:CC:6C:ED:B4:5B:03:A3 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/vzgjJuZ2jcFONbTt18xs7bRbA6M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.128.61.0/24 Signature Algorithm: sha256WithRSAEncryption b3:75:b8:78:f2:b1:6f:e2:d4:87:8d:9f:a6:f2:81:e2:fb:5b: 21:55:ae:28:9f:a2:b4:fa:b8:28:60:0a:5b:d4:22:28:10:a3: 20:9c:3d:12:5a:d1:17:ab:46:4b:ee:ab:ba:fb:f5:ed:5f:e0: de:0d:40:29:51:03:3e:6f:9b:fe:47:2b:e4:88:48:8e:2a:c9: 12:f4:ec:ae:a8:78:af:4a:a0:2a:7a:03:fa:4f:88:27:37:3b: 4a:04:78:01:55:18:df:e5:a1:05:e2:05:54:19:6a:c0:7f:19: ef:9c:60:96:4e:0b:38:ea:f6:ad:e3:69:d1:83:49:56:f6:fb: d5:6d:47:f1:7e:e1:03:24:7a:2c:23:95:42:02:e0:01:e2:47: db:01:c5:7b:7b:4e:6d:c9:21:07:06:65:70:03:be:18:3c:91: f2:d7:fd:67:d1:e2:93:db:5d:c1:69:0e:17:b2:32:ad:9c:5d: f5:2c:30:56:09:7b:93:08:1c:9a:18:06:79:08:78:ff:77:f6: bd:4b:80:f6:39:79:5e:e3:41:6c:a3:7e:7d:50:86:93:c3:80: 5e:d8:33:f6:41:20:e0:22:96:d8:60:c7:13:4f:ef:3d:20:9f: d6:e0:15:a8:29:07:c1:6f:e9:af:6e:6f:e5:ae:9d:5f:5d:40: 8c:3e:be:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9Wxyo/gd3qW+wTrhAd3mqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjM4MjMyNmU2NzY4ZGMxNGUzNWI0ZWRkN2NjNmNlZGI0NWIwM2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuRPYXLetNggO/jJf7pyU2JcSw28 s0hRVk2b1g+kmnP5pHKzzit/Verzr5AM+Zn06Wpjk/hzPbMhO6+TRl3zx3HWjvuH 03QqMxy16gOixigN4DE2U+kF7+dxzQof/3nvwnE/RWHg6/BTGe+Ul6a8x7+k4iOA poDY1pTC68rU40ewwbtf+cqRR5FT991a0loQdm+ARPGvDWy9T6VJ4X3c89EmmZbG Z70JOuqX+WVlBK5ulMNCwY3arSfYVwwWBNlXIeaiVDLcVC3wr1gQV0CcoEFKJyA2 yEKvANQrI2wAlElzVF+O/5opR9HxRmV2D08nUo8Wu03xbK1fdnN8c5JUIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL84Iybmdo3BTjW07dfMbO20WwOjMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvdnpnakp1WjJqY0ZPTmJUdDE4eHM3YlJiQTZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAToA9MA0G CSqGSIb3DQEBCwUAA4IBAQCzdbh48rFv4tSHjZ+m8oHi+1shVa4on6K0+rgoYApb 1CIoEKMgnD0SWtEXq0ZL7qu6+/XtX+DeDUApUQM+b5v+RyvkiEiOKskS9OyuqHiv SqAqegP6T4gnNztKBHgBVRjf5aEF4gVUGWrAfxnvnGCWTgs46vat42nRg0lW9vvV bUfxfuEDJHosI5VCAuAB4kfbAcV7e05tySEHBmVwA74YPJHy1/1n0eKT213BaQ4X sjKtnF31LDBWCXuTCByaGAZ5CHj/d/a9S4D2OXle40Fso359UIaTw4Be2DP2QSDg IpbYYMcTT+89IJ/W4BWoKQfBb+mvbm/lrp1fXUCMPr57 -----END CERTIFICATE-----Generated at Fri Jan 23 18:49:56 2026 by rpki-client