This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/1-hhSM4eMmsTiLbPCZpcq2Ck0aV0.roa File: 1-hhSM4eMmsTiLbPCZpcq2Ck0aV0.roa (raw, json) Hash identifier: 4gk83pk4KN/M2N7zNy4kba1x3tC2aGnSA6i7cR5tf1Q= Subject key identifier: FA:18:52:33:87:8C:9A:C4:E2:2D:B3:C2:66:97:2A:D8:29:34:69:5D Certificate issuer: /CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8 Certificate serial: 019B797ECD9399ECC0D83E4ADAAEC430A176 Authority key identifier: A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/1-hhSM4eMmsTiLbPCZpcq2Ck0aV0.roa Signing time: Thu 01 Jan 2026 12:18:31 +0000 ROA not before: Thu 01 Jan 2026 12:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43566 IP address blocks: 78.110.224.0/20 maxlen: 24 78.110.224.0/21 maxlen: 24 78.110.232.0/21 maxlen: 24 78.110.233.0/24 maxlen: 24 178.23.24.0/21 maxlen: 24 178.23.24.0/22 maxlen: 24 178.23.24.0/24 maxlen: 24 178.23.25.0/24 maxlen: 24 178.23.26.0/23 maxlen: 24 178.23.28.0/22 maxlen: 24 2a11:7f80::/32 maxlen: 36 2a11:7f80::/33 maxlen: 36 2a11:7f80:8000::/33 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.mft rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:cd:93:99:ec:c0:d8:3e:4a:da:ae:c4:30:a1:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3ceb405987a3aa8bbe599d8ef4663c9242a34b8 Validity Not Before: Jan 1 12:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa185233878c9ac4e22db3c266972ad82934695d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:2f:d0:39:5a:b1:e4:95:3b:65:f8:c9:30:00: 0e:25:4c:66:c9:77:22:b9:f0:00:ee:a5:a5:ea:c9: b9:9c:e3:99:7a:45:5f:68:0c:17:3a:d5:3c:3e:b1: 65:22:e7:e3:38:5d:98:e1:49:8e:1c:b8:ec:cd:bd: d7:bc:90:9c:15:92:ca:db:33:91:fd:1f:e4:65:e8: 7e:bc:c2:0e:17:c0:be:fa:1f:29:66:4b:ac:e2:03: 28:d9:0d:59:69:a3:6e:a6:e4:35:f2:ac:07:6d:63: c1:74:45:3c:58:25:99:84:19:d8:a0:62:ff:ff:21: 39:0d:1c:f6:b4:86:31:af:82:e7:ea:00:c6:77:ad: e5:77:35:82:4a:83:cd:1c:de:28:46:36:00:5f:6a: 8e:97:c6:7f:43:e8:69:a7:53:00:2c:3a:89:46:74: 8a:ab:48:62:2a:8b:6d:0c:57:9d:e1:a2:24:8a:da: 02:1d:5e:c3:94:cb:37:54:f6:f8:4b:aa:2f:89:4f: d2:e0:a6:9c:c0:4c:a6:00:bb:77:77:d3:85:72:45: cd:39:d3:5f:5d:ec:76:23:32:67:a7:ec:a9:bc:73: b5:dd:0d:54:ac:18:8b:71:ff:ed:d5:10:fe:41:ed: ab:ef:82:b5:19:54:c3:ee:c1:94:93:a9:47:58:8e: 25:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:18:52:33:87:8C:9A:C4:E2:2D:B3:C2:66:97:2A:D8:29:34:69:5D X509v3 Authority Key Identifier: keyid:A3:CE:B4:05:98:7A:3A:A8:BB:E5:99:D8:EF:46:63:C9:24:2A:34:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o860BZh6Oqi75ZnY70ZjySQqNLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/1-hhSM4eMmsTiLbPCZpcq2Ck0aV0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a6831e-f3ae-455f-a395-5db851d6f086/1/o860BZh6Oqi75ZnY70ZjySQqNLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.110.224.0/20 178.23.24.0/21 IPv6: 2a11:7f80::/32 Signature Algorithm: sha256WithRSAEncryption 42:86:ee:6f:ec:1a:e8:e4:a3:94:84:4e:f7:e7:b1:52:6a:31: b2:d5:d7:7c:ac:1f:cc:0a:94:f1:74:16:0e:1e:d0:60:6e:38: 4d:b8:d3:e1:4a:05:42:43:2e:17:c1:c9:9a:2e:9d:7a:e3:16: e2:d1:86:63:24:9e:c0:d9:52:41:be:2e:d5:f9:a8:d7:2f:6f: 3e:8d:40:93:ea:d3:a9:2e:21:74:2a:68:99:f5:71:69:b1:60: 10:c4:d9:f4:53:20:d7:63:c0:ad:d3:34:c7:7f:c9:c1:1f:a2: be:df:7f:1c:63:38:aa:69:81:e1:cb:75:e1:ad:90:55:9c:f7: d1:2e:75:4e:ae:31:66:8f:1a:f1:d8:03:b6:f0:cf:19:6a:a3: 89:bf:f0:4b:cc:4d:21:ab:98:4f:4d:ad:03:c5:3c:3d:4c:43: 64:4b:5c:83:d6:94:4e:5c:1e:4b:9c:ca:57:6e:48:b5:fd:a5: 8b:c6:af:d8:4c:2f:17:03:3c:1d:15:f8:0d:80:b1:c4:e6:e7: cf:72:e4:c2:08:7e:b4:6b:cf:31:4a:e2:ce:c3:22:ab:97:ff: 96:aa:3d:ad:9e:29:9b:8f:4c:3d:06:0e:a2:10:5d:42:fb:3f: 0f:61:99:f2:7b:83:ec:8b:01:a5:cb:a3:6c:89:ad:fe:39:47: 23:34:64:1f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt5fs2TmezA2D5K2q7EMKF2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzY2ViNDA1OTg3YTNhYThiYmU1OTlkOGVmNDY2M2M5MjQy YTM0YjgwHhcNMjYwMTAxMTIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTE4NTIzMzg3OGM5YWM0ZTIyZGIzYzI2Njk3MmFkODI5MzQ2OTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S/QOVqx5JU7ZfjJMAAOJUxmyXci ufAA7qWl6sm5nOOZekVfaAwXOtU8PrFlIufjOF2Y4UmOHLjszb3XvJCcFZLK2zOR /R/kZeh+vMIOF8C++h8pZkus4gMo2Q1ZaaNupuQ18qwHbWPBdEU8WCWZhBnYoGL/ /yE5DRz2tIYxr4Ln6gDGd63ldzWCSoPNHN4oRjYAX2qOl8Z/Q+hpp1MALDqJRnSK q0hiKottDFed4aIkitoCHV7DlMs3VPb4S6oviU/S4KacwEymALt3d9OFckXNOdNf Xex2IzJnp+ypvHO13Q1UrBiLcf/t1RD+Qe2r74K1GVTD7sGUk6lHWI4llQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFPoYUjOHjJrE4i2zwmaXKtgpNGldMB8GA1UdIwQY MBaAFKPOtAWYejqou+WZ2O9GY8kkKjS4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzg2MEJaaDZPcWk3NVpuWTcwWmp5U1FxTkxnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9hNjgzMWUtZjNhZS00NTVmLWEzOTUt NWRiODUxZDZmMDg2LzEvMS1oaFNNNGVNbXNUaUxiUENacGNxMkNrMGFWMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMmQvYTY4MzFlLWYzYWUtNDU1Zi1hMzk1LTVkYjg1MWQ2ZjA4 Ni8xL284NjBCWmg2T3FpNzVablk3MFpqeVNRcU5MZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQlMCMwEgQCAAEwDAMEBE5u4AME A7IXGDANBAIAAjAHAwUAKhF/gDANBgkqhkiG9w0BAQsFAAOCAQEAQobub+wa6OSj lIRO9+exUmoxstXXfKwfzAqU8XQWDh7QYG44TbjT4UoFQkMuF8HJmi6deuMW4tGG YySewNlSQb4u1fmo1y9vPo1Ak+rTqS4hdCpomfVxabFgEMTZ9FMg12PArdM0x3/J wR+ivt9/HGM4qmmB4ct14a2QVZz30S51Tq4xZo8a8dgDtvDPGWqjib/wS8xNIauY T02tA8U8PUxDZEtcg9aUTlweS5zKV25Itf2li8av2EwvFwM8HRX4DYCxxObnz3Lk wgh+tGvPMUrizsMiq5f/lqo9rZ4pm49MPQYOohBdQvs/D2GZ8nuD7IsBpcujbImt /jlHIzRkHw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:59 2026 by rpki-client