This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/rkV3SDP19OQE0LF_g47eoLW0kdQ.roa File: rkV3SDP19OQE0LF_g47eoLW0kdQ.roa (raw, json) Hash identifier: WeYDPKsZ8dv4/mxbMaGVfQRu6h+w3pCGRVmTTR7BPpE= Subject key identifier: AE:45:77:48:33:F5:F4:E4:04:D0:B1:7F:83:8E:DE:A0:B5:B4:91:D4 Certificate issuer: /CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759 Certificate serial: 019B7D5C5C32F6EE2E40B1965A1ECAC6105A Authority key identifier: 1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/rkV3SDP19OQE0LF_g47eoLW0kdQ.roa Signing time: Fri 02 Jan 2026 06:19:23 +0000 ROA not before: Fri 02 Jan 2026 06:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43277 IP address blocks: 78.109.96.0/24 maxlen: 24 78.109.104.0/22 maxlen: 22 78.109.108.0/22 maxlen: 22 185.90.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.mft rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:5c:32:f6:ee:2e:40:b1:96:5a:1e:ca:c6:10:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1bc1994ea63d50dbc8b43acecad2842b4dc15759 Validity Not Before: Jan 2 06:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ae45774833f5f4e404d0b17f838edea0b5b491d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d5:bf:7e:d5:20:01:19:68:84:93:9e:74:73: f5:01:76:4b:f4:56:93:41:7b:49:16:ff:01:aa:f7: c5:0b:d3:7b:57:3f:a3:2d:02:85:b9:96:db:97:78: 78:a4:cb:72:71:7b:d3:41:54:d0:7d:cf:87:c0:4a: a0:c5:0f:d9:3c:d1:95:93:8e:79:05:b6:eb:7e:f8: b0:8c:b3:ff:9f:29:a6:04:29:ff:f3:4b:b7:7e:60: 76:66:cd:7a:0c:5d:33:2f:18:e5:8b:88:5a:ef:98: d3:5d:c8:d1:29:32:7e:5d:30:3e:79:83:55:19:ea: 50:c8:24:75:4a:3d:c4:2c:01:41:d8:e4:d9:3d:45: 07:6d:0a:37:cf:f3:a7:ef:c1:fa:a8:e8:53:4b:0c: 31:62:02:89:e5:20:a1:a2:d5:55:47:1c:0b:d8:39: c9:10:25:40:26:fa:35:d1:8b:8b:61:37:c7:85:2a: a9:c1:4b:64:90:31:dd:f4:43:72:9e:d7:a2:25:0b: 96:d2:fd:45:a7:38:04:e0:b5:cd:f1:ea:a5:b1:b0: 68:e9:d2:a0:e1:5d:d6:26:d4:4c:46:7d:22:57:e2: 47:88:e6:68:23:de:5d:63:e1:c0:6a:a0:2b:a2:07: 8c:15:4a:71:d7:c3:61:4a:f2:d8:23:3d:78:e3:33: db:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:45:77:48:33:F5:F4:E4:04:D0:B1:7F:83:8E:DE:A0:B5:B4:91:D4 X509v3 Authority Key Identifier: keyid:1B:C1:99:4E:A6:3D:50:DB:C8:B4:3A:CE:CA:D2:84:2B:4D:C1:57:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G8GZTqY9UNvItDrOytKEK03BV1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/rkV3SDP19OQE0LF_g47eoLW0kdQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/13bdba-0715-4e26-b076-af5867476309/1/G8GZTqY9UNvItDrOytKEK03BV1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.109.96.0/24 78.109.104.0/21 185.90.132.0/23 Signature Algorithm: sha256WithRSAEncryption 10:a6:ac:2e:fc:2b:ca:ac:50:89:36:e5:7f:b2:98:3c:29:49: 07:40:6d:d7:b2:74:35:21:e2:9c:60:89:e4:1f:f2:19:c5:8a: 5d:3d:45:4f:c0:48:b9:a1:f1:3a:29:47:5d:d3:1d:bd:71:bb: ab:fc:a7:8d:af:ef:32:47:f7:80:6d:6f:e4:25:d6:ab:63:46: 22:45:70:10:e3:33:ce:4f:23:66:41:63:9d:35:1f:18:c4:f9: 0f:ce:fb:ed:bd:b1:96:8a:a2:1e:78:55:9e:b6:5a:66:80:81: a1:a9:d5:9b:dc:2c:79:9a:91:88:79:44:e2:62:b9:84:ec:45: cf:60:d8:6f:cc:ef:5d:f1:e2:78:7b:96:b8:05:d9:0c:c7:0b: 47:55:84:af:57:44:13:34:d6:98:11:be:da:01:ca:b9:26:8c: 39:09:6b:0f:f2:8a:50:8a:6c:28:94:63:d4:a7:32:9e:5e:a7: 55:a3:a2:40:a6:1a:64:f5:18:d7:b3:fe:62:94:44:7b:0f:e0: fe:2d:29:62:82:65:fd:cd:56:c0:b6:66:7f:c6:99:b7:ec:ca: 03:37:75:2a:ae:6e:c0:54:64:c9:62:1f:60:a3:c4:1e:4c:a2: d1:4e:0b:43:ab:4a:89:2d:25:0d:93:f7:6d:43:80:ba:b1:84: 8c:4a:99:48 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XFwy9u4uQLGWWh7KxhBaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFiYzE5OTRlYTYzZDUwZGJjOGI0M2FjZWNhZDI4NDJiNGRj MTU3NTkwHhcNMjYwMTAyMDYxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZTQ1Nzc0ODMzZjVmNGU0MDRkMGIxN2Y4MzhlZGVhMGI1YjQ5MWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdW/ftUgARlohJOedHP1AXZL9FaT QXtJFv8BqvfFC9N7Vz+jLQKFuZbbl3h4pMtycXvTQVTQfc+HwEqgxQ/ZPNGVk455 BbbrfviwjLP/nymmBCn/80u3fmB2Zs16DF0zLxjli4ha75jTXcjRKTJ+XTA+eYNV GepQyCR1Sj3ELAFB2OTZPUUHbQo3z/On78H6qOhTSwwxYgKJ5SChotVVRxwL2DnJ ECVAJvo10YuLYTfHhSqpwUtkkDHd9ENynteiJQuW0v1FpzgE4LXN8eqlsbBo6dKg 4V3WJtRMRn0iV+JHiOZoI95dY+HAaqArogeMFUpx18NhSvLYIz144zPb3QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFK5Fd0gz9fTkBNCxf4OO3qC1tJHUMB8GA1UdIwQY MBaAFBvBmU6mPVDbyLQ6zsrShCtNwVdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRzhHWlRxWTlVTnZJdERyT3l0S0VLMDNCVjFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xM2JkYmEtMDcxNS00ZTI2LWIwNzYt YWY1ODY3NDc2MzA5LzEvcmtWM1NEUDE5T1FFMExGX2c0N2VvTFcwa2RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8xM2JkYmEtMDcxNS00ZTI2LWIwNzYtYWY1ODY3NDc2MzA5 LzEvRzhHWlRxWTlVTnZJdERyT3l0S0VLMDNCVjFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATm1gAwQD Tm1oAwQBuVqEMA0GCSqGSIb3DQEBCwUAA4IBAQAQpqwu/CvKrFCJNuV/spg8KUkH QG3XsnQ1IeKcYInkH/IZxYpdPUVPwEi5ofE6KUdd0x29cbur/KeNr+8yR/eAbW/k JdarY0YiRXAQ4zPOTyNmQWOdNR8YxPkPzvvtvbGWiqIeeFWetlpmgIGhqdWb3Cx5 mpGIeUTiYrmE7EXPYNhvzO9d8eJ4e5a4BdkMxwtHVYSvV0QTNNaYEb7aAcq5Jow5 CWsP8opQimwolGPUpzKeXqdVo6JAphpk9RjXs/5ilER7D+D+LSligmX9zVbAtmZ/ xpm37MoDN3Uqrm7AVGTJYh9go8QeTKLRTgtDq0qJLSUNk/dtQ4C6sYSMSplI -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:04 2026 by rpki-client