This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/SX9U68Arj-_uoekiWex6QgdNbwQ.roa File: SX9U68Arj-_uoekiWex6QgdNbwQ.roa (raw, json) Hash identifier: joN8VUGdRybF07eLYHwoTuABQ2kur7JqOJpxlpvlHks= Subject key identifier: 49:7F:54:EB:C0:2B:8F:EF:EE:A1:E9:22:59:EC:7A:42:07:4D:6F:04 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 019B7F8362A469C0D619DA6B115DC0B58F41 Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/SX9U68Arj-_uoekiWex6QgdNbwQ.roa Signing time: Fri 02 Jan 2026 16:21:15 +0000 ROA not before: Fri 02 Jan 2026 16:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207713 IP address blocks: 78.153.139.0/24 maxlen: 24 78.153.148.0/24 maxlen: 24 78.153.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 19:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:62:a4:69:c0:d6:19:da:6b:11:5d:c0:b5:8f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Jan 2 16:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=497f54ebc02b8fefeea1e92259ec7a42074d6f04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c2:b4:26:0d:7b:ce:28:03:a3:ba:de:4d:e1: 84:17:93:0d:bd:f1:41:9c:45:c6:a0:17:ee:9b:68: 5e:79:7d:52:e3:76:d9:d1:4e:03:ea:94:80:f5:9b: 1e:74:8d:03:af:f3:c8:a3:6b:f6:88:0f:b4:bf:63: d1:08:26:58:b4:f2:1a:93:9f:34:b3:57:4a:48:18: 0b:df:86:4f:f8:5f:1e:a5:b3:d1:56:60:a4:16:30: b8:a9:9f:f2:a1:07:de:2f:2d:bf:20:41:12:c0:45: 31:cf:b8:ef:02:08:81:33:ea:01:4c:9e:c0:71:9a: 4e:52:89:cd:35:2c:e8:05:17:7a:6f:d5:df:28:92: 73:fa:e1:4c:c2:16:8a:42:8f:ee:6f:58:6c:3c:eb: 7f:7f:dd:24:75:11:16:e4:8b:23:7d:be:59:bf:b9: f7:b9:d4:8e:91:5b:4e:70:6f:43:44:5a:09:be:2a: 89:12:4c:19:af:6c:6b:d2:38:8b:8d:80:b4:60:26: a3:a0:2c:3b:bd:91:53:cb:73:ca:5b:b7:61:ab:26: f0:99:16:24:96:c4:4c:58:61:35:56:61:b9:da:95: 6f:b4:04:f2:56:7c:23:6b:a2:de:cc:8f:80:7c:26: 40:1f:51:1f:84:21:0a:c9:35:8a:aa:90:47:19:37: 07:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7F:54:EB:C0:2B:8F:EF:EE:A1:E9:22:59:EC:7A:42:07:4D:6F:04 X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/SX9U68Arj-_uoekiWex6QgdNbwQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.153.139.0/24 78.153.148.0/23 Signature Algorithm: sha256WithRSAEncryption 01:25:33:97:50:a3:41:6e:32:d9:b9:ae:e1:67:cc:6b:1d:cd: 5e:8e:0f:c0:9b:5e:40:74:d5:cd:c8:c9:bd:53:b0:5b:f1:89: 79:69:bd:3f:68:fa:02:64:16:a8:82:bf:3f:1e:6b:fd:f2:e2: 5e:c3:4c:92:71:35:72:56:35:32:d3:c5:c9:51:34:b4:1a:25: 8e:da:e2:5d:a7:46:47:80:74:c5:16:3a:b8:35:b4:bd:44:cc: af:70:e1:7e:85:4c:dd:81:fd:13:32:7f:53:39:37:93:01:b8: b5:60:ac:9e:e3:9a:20:63:4d:6d:7a:0f:be:8d:01:16:f3:29: a6:e0:4b:8a:fd:31:bd:fa:f9:cf:1c:c8:ef:5c:06:20:3a:bf: 1e:18:95:84:23:2d:e0:1e:20:05:e2:a9:6a:a9:81:19:3a:01: a6:74:7a:fd:05:a1:a7:e9:ea:86:6b:8f:89:52:1f:9a:e9:a6: 07:16:33:27:0b:07:c3:6e:7d:70:36:53:9e:0a:17:36:d3:e1: 41:f6:6f:3e:ab:75:5b:fb:9f:d6:e4:bc:8d:2a:0e:85:fd:5a: 37:72:e2:c9:47:4c:46:5b:cf:7f:05:e8:e8:5e:d6:1d:b0:9f: 26:43:45:8b:4f:c3:63:e8:0f:75:ba:95:e8:e6:8d:aa:42:64: 80:d8:df:d0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/g2KkacDWGdprEV3AtY9BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjYwMTAyMTYyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTdmNTRlYmMwMmI4ZmVmZWVhMWU5MjI1OWVjN2E0MjA3NGQ2ZjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9MK0Jg17zigDo7reTeGEF5MNvfFB nEXGoBfum2heeX1S43bZ0U4D6pSA9ZsedI0Dr/PIo2v2iA+0v2PRCCZYtPIak580 s1dKSBgL34ZP+F8epbPRVmCkFjC4qZ/yoQfeLy2/IEESwEUxz7jvAgiBM+oBTJ7A cZpOUonNNSzoBRd6b9XfKJJz+uFMwhaKQo/ub1hsPOt/f90kdREW5Isjfb5Zv7n3 udSOkVtOcG9DRFoJviqJEkwZr2xr0jiLjYC0YCajoCw7vZFTy3PKW7dhqybwmRYk lsRMWGE1VmG52pVvtATyVnwja6LezI+AfCZAH1EfhCEKyTWKqpBHGTcHZwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEl/VOvAK4/v7qHpIlnsekIHTW8EMB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvU1g5VTY4QXJqLV91b2VraVdleDZRZ2ROYndRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATpmLAwQB TpmUMA0GCSqGSIb3DQEBCwUAA4IBAQABJTOXUKNBbjLZua7hZ8xrHc1ejg/Am15A dNXNyMm9U7Bb8Yl5ab0/aPoCZBaogr8/Hmv98uJew0yScTVyVjUy08XJUTS0GiWO 2uJdp0ZHgHTFFjq4NbS9RMyvcOF+hUzdgf0TMn9TOTeTAbi1YKye45ogY01teg++ jQEW8ymm4EuK/TG9+vnPHMjvXAYgOr8eGJWEIy3gHiAF4qlqqYEZOgGmdHr9BaGn 6eqGa4+JUh+a6aYHFjMnCwfDbn1wNlOeChc20+FB9m8+q3Vb+5/W5LyNKg6F/Vo3 cuLJR0xGW89/BejoXtYdsJ8mQ0WLT8Nj6A91upXo5o2qQmSA2N/Q -----END CERTIFICATE-----Generated at Sat Jan 10 03:16:07 2026 by rpki-client