This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/z5wvHFBA3NpSmgXj1noCshK458E.roa File: z5wvHFBA3NpSmgXj1noCshK458E.roa (raw, json) Hash identifier: ODEUU/A8oRqFU9e6AQR3iDrW+ftJKk1jBAGRUXsEkgI= Subject key identifier: CF:9C:2F:1C:50:40:DC:DA:52:9A:05:E3:D6:7A:02:B2:12:B8:E7:C1 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B0DD2740B9BC7C0B8959D2F3C90FA Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/z5wvHFBA3NpSmgXj1noCshK458E.roa Signing time: Fri 02 Jan 2026 06:17:57 +0000 ROA not before: Fri 02 Jan 2026 06:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48584 IP address blocks: 78.128.124.0/23 maxlen: 24 78.142.52.0/23 maxlen: 24 78.142.54.0/23 maxlen: 24 176.241.178.0/23 maxlen: 24 176.241.180.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:0d:d2:74:0b:9b:c7:c0:b8:95:9d:2f:3c:90:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cf9c2f1c5040dcda529a05e3d67a02b212b8e7c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:42:7f:7b:45:a5:1c:d4:c9:7a:ed:89:3b:ec: 83:2d:54:b6:57:27:a5:30:61:e4:5b:82:2f:1b:8d: 2c:e0:78:e7:a7:c3:d2:1e:02:13:0e:6a:6d:61:4d: 0b:7d:11:bd:c4:72:f2:3e:be:5a:9c:7d:24:9f:79: e9:ea:a9:fb:9e:17:9c:2b:9c:80:00:1a:77:7e:2f: e1:01:32:28:09:00:e4:15:c7:ec:59:02:ec:f4:a0: 9d:ed:a7:2a:8f:62:c1:03:27:50:a0:35:9b:e7:12: 4b:cf:9a:5c:2f:67:fc:a8:06:47:ef:dd:db:3b:71: 6b:f8:c0:00:5b:27:ee:03:db:94:f3:85:1d:53:86: 47:04:c9:07:d6:be:46:47:5b:e1:6f:15:df:1c:9b: 0d:0f:0f:7f:3c:f1:ed:24:ae:74:2a:da:16:d0:21: 55:56:a8:bb:d0:0f:10:fb:fe:85:7c:b4:46:71:f9: 5d:2a:2b:b1:76:f5:a4:a0:a8:1d:46:74:91:2c:e1: 95:16:9d:e3:09:1d:b2:12:29:1a:7e:55:c8:7b:f4: 37:13:e5:d8:ff:9c:79:8f:ec:da:2d:4f:93:f6:fe: d0:7e:5e:49:b0:9b:bc:7e:18:fd:7e:36:df:f2:33: ff:8f:66:ba:6a:19:a2:35:0c:88:50:5e:b0:c5:be: 03:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:9C:2F:1C:50:40:DC:DA:52:9A:05:E3:D6:7A:02:B2:12:B8:E7:C1 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/z5wvHFBA3NpSmgXj1noCshK458E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.128.124.0/23 78.142.52.0/22 176.241.178.0-176.241.183.255 Signature Algorithm: sha256WithRSAEncryption 48:07:e7:44:9f:63:fb:f7:87:3f:0b:06:da:2b:3c:78:dc:4e: 0c:22:ca:31:2a:ae:3f:09:0e:e0:58:d4:bb:d3:56:f6:c7:44: 87:cc:25:a0:50:13:a0:56:ba:a9:bb:1d:3e:6e:57:34:de:1e: 26:87:e3:79:1a:37:69:37:00:da:f1:17:41:94:5c:58:f3:c6: ff:7b:3d:78:d0:2b:ed:54:3e:78:07:66:15:77:a6:8f:a6:71: 5c:a6:29:07:cb:72:fb:06:42:8b:fe:53:ff:26:71:d0:04:42: 05:c1:82:a4:2c:4e:9e:20:b3:59:5d:97:84:6d:9b:a9:d7:21: 71:09:a4:5f:fb:be:cf:08:81:52:f8:9f:aa:4a:f6:1c:12:54: 95:97:d5:bd:b1:90:7c:3b:52:3e:22:66:7a:79:2b:5b:02:37: df:61:77:38:e0:20:67:9d:6f:a0:73:af:b4:02:1c:67:02:c7: d1:67:0c:db:91:d7:75:15:53:a9:29:ef:67:93:e2:c2:af:63: e9:d1:3e:39:e7:c4:df:82:e8:4c:ea:43:df:7b:fb:c9:7f:9e: 62:5b:ac:d5:4b:bd:13:45:32:d8:01:0b:dc:06:90:da:3c:6d: db:3b:78:bd:c5:9d:af:32:20:09:0b:42:27:b0:38:b9:a0:b4: c8:20:a1:6c -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt9Ww3SdAubx8C4lZ0vPJD6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZjljMmYxYzUwNDBkY2RhNTI5YTA1ZTNkNjdhMDJiMjEyYjhlN2MxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EJ/e0WlHNTJeu2JO+yDLVS2Vyel MGHkW4IvG40s4Hjnp8PSHgITDmptYU0LfRG9xHLyPr5anH0kn3np6qn7nhecK5yA ABp3fi/hATIoCQDkFcfsWQLs9KCd7acqj2LBAydQoDWb5xJLz5pcL2f8qAZH793b O3Fr+MAAWyfuA9uU84UdU4ZHBMkH1r5GR1vhbxXfHJsNDw9/PPHtJK50KtoW0CFV Vqi70A8Q+/6FfLRGcfldKiuxdvWkoKgdRnSRLOGVFp3jCR2yEikaflXIe/Q3E+XY /5x5j+zaLU+T9v7Qfl5JsJu8fhj9fjbf8jP/j2a6ahmiNQyIUF6wxb4DswIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFM+cLxxQQNzaUpoF49Z6ArISuOfBMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvejV3dkhGQkEzTnBTbWdYajFub0NzaEs0NThFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBToB8AwQC To40MAwDBAGw8bIDBAOw8bAwDQYJKoZIhvcNAQELBQADggEBAEgH50SfY/v3hz8L BtorPHjcTgwiyjEqrj8JDuBY1LvTVvbHRIfMJaBQE6BWuqm7HT5uVzTeHiaH43ka N2k3ANrxF0GUXFjzxv97PXjQK+1UPngHZhV3po+mcVymKQfLcvsGQov+U/8mcdAE QgXBgqQsTp4gs1ldl4Rtm6nXIXEJpF/7vs8IgVL4n6pK9hwSVJWX1b2xkHw7Uj4i Znp5K1sCN99hdzjgIGedb6Bzr7QCHGcCx9FnDNuR13UVU6kp72eT4sKvY+nRPjnn xN+C6EzqQ997+8l/nmJbrNVLvRNFMtgBC9wGkNo8bds7eL3Fna8yIAkLQiewOLmg tMggoWw= -----END CERTIFICATE-----Generated at Fri Jan 23 18:50:57 2026 by rpki-client