This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/DDJ2Ku9PtCg5SsS6DZq5i7HooGA.roa
File: DDJ2Ku9PtCg5SsS6DZq5i7HooGA.roa (raw, json)
Hash identifier: KxL6L8WMtAezvZY85hKd4t9cB3JBSMBU1InlyKDbFbo=
Subject key identifier: 0C:32:76:2A:EF:4F:B4:28:39:4A:C4:BA:0D:9A:B9:8B:B1:E8:A0:60
Certificate issuer: /CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Certificate serial: 019BE507C4FCD80C73C9E114915D165E0994
Authority key identifier: 5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/DDJ2Ku9PtCg5SsS6DZq5i7HooGA.roa
Signing time: Thu 22 Jan 2026 09:27:30 +0000
ROA not before: Thu 22 Jan 2026 09:27:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43242
IP address blocks: 78.135.0.0/22 maxlen: 22
78.135.4.0/22 maxlen: 22
78.135.8.0/21 maxlen: 21
78.135.16.0/20 maxlen: 20
78.135.32.0/19 maxlen: 19
78.135.32.0/22 maxlen: 22
78.135.36.0/22 maxlen: 22
78.135.40.0/22 maxlen: 22
78.135.44.0/22 maxlen: 22
78.135.48.0/22 maxlen: 22
78.135.52.0/22 maxlen: 22
78.135.56.0/22 maxlen: 22
78.135.60.0/22 maxlen: 22
185.171.92.0/22 maxlen: 22
185.171.92.0/24 maxlen: 24
185.171.93.0/24 maxlen: 24
185.171.94.0/24 maxlen: 24
185.171.95.0/24 maxlen: 24
2a0a:1900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 18:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:e5:07:c4:fc:d8:0c:73:c9:e1:14:91:5d:16:5e:09:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a94c4bc4d2563e252ebfcc0fbc2ac199cce608a
Validity
Not Before: Jan 22 09:27:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c32762aef4fb428394ac4ba0d9ab98bb1e8a060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:74:32:61:57:b8:33:b6:05:12:3c:ce:3d:ff:
8f:06:15:17:98:92:be:18:0d:c7:0b:25:8d:bf:e4:
5b:ee:88:1f:4b:fa:f6:ff:b1:72:01:4b:58:b3:83:
08:63:4c:6e:b6:cd:db:81:20:86:b3:8f:3d:21:02:
14:30:48:b1:02:38:86:e2:48:7d:30:b4:ba:ed:26:
6e:a7:fe:1f:09:54:07:f4:68:4e:76:2a:f9:25:69:
c5:e7:9e:09:d3:e6:ce:f5:34:df:7c:1e:46:52:0b:
2d:89:4e:21:f6:cb:5e:bd:f4:ae:3c:2e:ae:6c:e0:
f6:74:5b:a1:f1:42:2a:39:68:6c:c0:05:04:04:30:
bb:04:54:0d:36:e6:51:8d:8f:c8:4d:26:5f:24:01:
4d:06:af:fe:6c:11:54:fc:a9:8c:76:3e:fc:a2:0c:
66:3e:1e:75:d9:d9:dd:6a:12:70:71:9d:ca:65:73:
28:53:29:41:cf:bd:fc:dc:03:df:e6:0c:79:16:1c:
cb:04:eb:b0:b6:4c:91:7e:a6:8d:6b:83:c6:00:03:
17:6a:9c:42:29:3b:e3:ad:cc:0d:bc:dc:11:4c:0f:
d3:72:20:3b:8e:58:84:30:6f:4d:9c:6e:1a:8e:83:
a3:dc:9f:f5:05:1f:fe:4c:36:cb:7d:b6:33:96:f2:
71:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:32:76:2A:EF:4F:B4:28:39:4A:C4:BA:0D:9A:B9:8B:B1:E8:A0:60
X509v3 Authority Key Identifier:
keyid:5A:94:C4:BC:4D:25:63:E2:52:EB:FC:C0:FB:C2:AC:19:9C:CE:60:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpTEvE0lY-JS6_zA-8KsGZzOYIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/DDJ2Ku9PtCg5SsS6DZq5i7HooGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/c4ccc3-65d6-485d-9be0-a7a5f478dd72/1/WpTEvE0lY-JS6_zA-8KsGZzOYIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.0.0/18
185.171.92.0/22
IPv6:
2a0a:1900::/29
Signature Algorithm: sha256WithRSAEncryption
06:a7:7f:7e:6f:8e:a9:5d:ad:73:03:ef:24:c4:f5:ef:62:8f:
8f:b4:64:0e:eb:9f:c8:52:0e:7f:4e:15:bc:3f:b1:de:40:23:
74:78:60:e9:76:87:36:c4:d9:44:75:b5:26:05:19:19:a3:a5:
ea:22:5d:47:20:da:91:c6:70:08:14:08:c6:82:ec:59:7a:31:
c3:31:3e:2e:b2:07:13:6e:64:6c:d3:c1:f9:3b:c0:f5:4d:4c:
17:50:a3:0d:b7:94:25:24:dc:4d:2c:00:b0:b4:3a:10:81:48:
4a:61:dc:0c:20:44:62:cf:e8:00:db:f6:d7:e8:b0:40:79:78:
7c:a0:dc:2f:d4:1b:10:dd:0f:a3:40:54:dd:b2:8a:7f:c1:a4:
dd:af:51:95:0a:67:aa:ce:51:94:0d:2d:ec:65:a9:5d:ce:d2:
8d:f0:1f:dd:89:d8:e8:7e:d5:fc:c1:43:c5:96:56:fd:19:4e:
54:ab:3d:ff:71:7e:22:0f:eb:4f:78:02:64:4a:cb:34:e1:c7:
23:b3:6d:14:e6:cf:68:18:14:fd:bc:74:81:31:70:ab:50:7d:
04:2c:ad:d8:ef:85:bb:7e:e7:53:0b:e6:2c:81:65:c8:5a:48:
ef:b2:6e:69:4b:36:0f:f8:52:4b:aa:15:17:38:0f:64:bd:2a:
65:8c:47:ed
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZvlB8T82AxzyeEUkV0WXgmUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhOTRjNGJjNGQyNTYzZTI1MmViZmNjMGZiYzJhYzE5OWNj
ZTYwOGEwHhcNMjYwMTIyMDkyNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzMyNzYyYWVmNGZiNDI4Mzk0YWM0YmEwZDlhYjk4YmIxZThhMDYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHQyYVe4M7YFEjzOPf+PBhUXmJK+
GA3HCyWNv+Rb7ogfS/r2/7FyAUtYs4MIY0xuts3bgSCGs489IQIUMEixAjiG4kh9
MLS67SZup/4fCVQH9GhOdir5JWnF554J0+bO9TTffB5GUgstiU4h9stevfSuPC6u
bOD2dFuh8UIqOWhswAUEBDC7BFQNNuZRjY/ITSZfJAFNBq/+bBFU/KmMdj78ogxm
Ph512dndahJwcZ3KZXMoUylBz7383APf5gx5FhzLBOuwtkyRfqaNa4PGAAMXapxC
KTvjrcwNvNwRTA/TciA7jliEMG9NnG4ajoOj3J/1BR/+TDbLfbYzlvJxQwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFAwydirvT7QoOUrEug2auYux6KBgMB8GA1UdIwQY
MBaAFFqUxLxNJWPiUuv8wPvCrBmczmCKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3BURXZFMGxZLUpTNl96QS04S3NHWnpPWUlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9jNGNjYzMtNjVkNi00ODVkLTliZTAt
YTdhNWY0NzhkZDcyLzEvRERKMkt1OVB0Q2c1U3NTNkRacTVpN0hvb0dBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC9jNGNjYzMtNjVkNi00ODVkLTliZTAtYTdhNWY0NzhkZDcy
LzEvV3BURXZFMGxZLUpTNl96QS04S3NHWnpPWUlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQGTocAAwQC
uatcMA0EAgACMAcDBQMqChkAMA0GCSqGSIb3DQEBCwUAA4IBAQAGp39+b46pXa1z
A+8kxPXvYo+PtGQO65/IUg5/ThW8P7HeQCN0eGDpdoc2xNlEdbUmBRkZo6XqIl1H
INqRxnAIFAjGguxZejHDMT4usgcTbmRs08H5O8D1TUwXUKMNt5QlJNxNLACwtDoQ
gUhKYdwMIERiz+gA2/bX6LBAeXh8oNwv1BsQ3Q+jQFTdsop/waTdr1GVCmeqzlGU
DS3sZaldztKN8B/didjoftX8wUPFllb9GU5Uqz3/cX4iD+tPeAJkSss04ccjs20U
5s9oGBT9vHSBMXCrUH0ELK3Y74W7fudTC+YsgWXIWkjvsm5pSzYP+FJLqhUXOA9k
vSpljEft
-----END CERTIFICATE-----
Generated at Tue Feb 10 04:14:38 2026 by rpki-client