This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HtydqjOKxyO4CtiU7u3RD5y2iYY.roa File: HtydqjOKxyO4CtiU7u3RD5y2iYY.roa (raw, json) Hash identifier: /a/FQZsgoxmAhsccUDjkJb12ZbfCjCbDQVx1ctu2KW4= Subject key identifier: 1E:DC:9D:AA:33:8A:C7:23:B8:0A:D8:94:EE:ED:D1:0F:9C:B6:89:86 Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Certificate serial: 019B78A2E2D6B4D2956CC54BC3251ED7A037 Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HtydqjOKxyO4CtiU7u3RD5y2iYY.roa Signing time: Thu 01 Jan 2026 08:18:19 +0000 ROA not before: Thu 01 Jan 2026 08:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20648 IP address blocks: 147.78.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 02:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e2:d6:b4:d2:95:6c:c5:4b:c3:25:1e:d7:a0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d Validity Not Before: Jan 1 08:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1edc9daa338ac723b80ad894eeedd10f9cb68986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:17:05:02:4f:2c:29:cf:af:22:f1:c2:87:5b: 85:3a:60:92:9d:07:be:a4:39:d5:cc:2d:01:ff:35: b4:b2:57:2e:b0:b5:d3:5b:fc:9a:c9:ed:8c:ef:5c: 5a:7e:98:fc:fb:2a:08:99:6d:86:40:a3:bf:f0:6a: da:58:b2:e5:2d:1b:24:64:db:d3:44:b8:d0:b8:e0: d0:e5:00:d9:2d:7b:db:4c:3a:f0:cb:e4:41:43:30: 28:c0:57:2d:ec:ac:4f:f6:7a:d0:8b:ef:bc:25:bb: 09:11:1f:09:08:79:e2:13:bd:1a:03:20:05:b3:a5: 19:07:b0:47:68:c9:77:64:3a:b8:c7:83:c7:ec:dc: 80:d8:b6:d4:14:ca:ad:07:41:d6:b4:a4:6b:63:7f: 30:e9:33:5d:05:50:fa:ae:43:57:74:c1:15:13:40: 7e:a1:21:df:22:ee:43:52:b9:c4:b4:f3:ad:5f:6a: 1b:fd:c4:f9:36:46:e1:13:95:ab:57:5c:b9:08:d4: 9b:03:7d:00:66:c4:44:82:2b:25:44:92:e8:21:50: 63:6b:2b:49:49:7a:d0:38:90:8b:fc:58:79:92:be: 1e:1d:8d:75:11:9d:4f:34:f8:65:f8:e3:d7:9e:49: fb:3e:82:db:d3:a1:77:df:ad:5b:81:97:02:75:d9: 23:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:DC:9D:AA:33:8A:C7:23:B8:0A:D8:94:EE:ED:D1:0F:9C:B6:89:86 X509v3 Authority Key Identifier: keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HtydqjOKxyO4CtiU7u3RD5y2iYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.102.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:b6:57:03:71:d7:20:ec:79:18:2a:a0:b7:29:46:96:dd:94: 1b:36:77:e9:a2:09:9a:57:c3:f4:66:7b:8e:9c:00:55:dc:c4: 7a:d4:56:4d:f6:53:da:20:c4:6e:7d:d5:0f:4a:29:f1:65:57: 3a:dd:c8:61:dd:93:ca:2b:ff:26:f4:cf:77:5d:3a:c9:c7:22: a5:f9:24:ee:19:b0:c8:d7:2d:2d:37:1c:7c:a7:96:f5:34:dc: 0a:c0:52:e5:af:22:ee:f6:d5:b4:e3:3c:d4:b5:41:97:da:06: 30:0c:6c:fb:7a:cf:e9:03:e0:18:d4:2a:81:58:ba:9f:03:15: f9:46:55:a5:9c:d7:be:bf:da:a3:ba:47:0c:4a:e7:b9:3c:fc: e7:d9:ba:ce:55:f3:2a:74:1e:9e:6c:fa:72:b8:d4:2a:1b:7d: b9:18:7f:32:4f:97:d3:f7:33:c0:77:26:64:7d:08:69:bf:e3: ec:cf:29:d7:23:ee:55:40:84:cc:9a:b2:a8:bf:5e:e5:16:af: 1e:84:3f:24:ba:7a:f9:4e:6c:bc:87:d0:38:95:27:d9:40:fd: f0:0c:95:5d:d1:4d:7a:53:71:8c:eb:c9:a5:e8:70:6f:5e:46: 66:32:cd:25:b0:d1:12:dc:ef:30:73:15:17:29:b5:78:71:8c: dd:91:4f:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ouLWtNKVbMVLwyUe16A3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3 NzVlOWQwHhcNMjYwMTAxMDgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxZWRjOWRhYTMzOGFjNzIzYjgwYWQ4OTRlZWVkZDEwZjljYjY4OTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBcFAk8sKc+vIvHCh1uFOmCSnQe+ pDnVzC0B/zW0slcusLXTW/yaye2M71xafpj8+yoImW2GQKO/8GraWLLlLRskZNvT RLjQuODQ5QDZLXvbTDrwy+RBQzAowFct7KxP9nrQi++8JbsJER8JCHniE70aAyAF s6UZB7BHaMl3ZDq4x4PH7NyA2LbUFMqtB0HWtKRrY38w6TNdBVD6rkNXdMEVE0B+ oSHfIu5DUrnEtPOtX2ob/cT5NkbhE5WrV1y5CNSbA30AZsREgislRJLoIVBjaytJ SXrQOJCL/Fh5kr4eHY11EZ1PNPhl+OPXnkn7PoLb06F3361bgZcCddkjgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFB7cnaoziscjuArYlO7t0Q+ctomGMB8GA1UdIwQY MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct Y2QzY2E1OTc1NzEyLzEvSHR5ZHFqT0t4eU80Q3RpVTd1M1JENXkyaVlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk05mMA0G CSqGSIb3DQEBCwUAA4IBAQArtlcDcdcg7HkYKqC3KUaW3ZQbNnfpogmaV8P0ZnuO nABV3MR61FZN9lPaIMRufdUPSinxZVc63chh3ZPKK/8m9M93XTrJxyKl+STuGbDI 1y0tNxx8p5b1NNwKwFLlryLu9tW04zzUtUGX2gYwDGz7es/pA+AY1CqBWLqfAxX5 RlWlnNe+v9qjukcMSue5PPzn2brOVfMqdB6ebPpyuNQqG325GH8yT5fT9zPAdyZk fQhpv+PszynXI+5VQITMmrKov17lFq8ehD8kunr5Tmy8h9A4lSfZQP3wDJVd0U16 U3GM68ml6HBvXkZmMs0lsNES3O8wcxUXKbV4cYzdkU9p -----END CERTIFICATE-----Generated at Fri Jan 2 12:09:43 2026 by rpki-client