This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/eN5E1N2fbNIwZ9RyYdP9j32arcA.roa File: eN5E1N2fbNIwZ9RyYdP9j32arcA.roa (raw, json) Hash identifier: Vg/cG2oIlWZ3XVorMkNOVvWySOFv00wWS3oGrbEzxmU= Subject key identifier: 78:DE:44:D4:DD:9F:6C:D2:30:67:D4:72:61:D3:FD:8F:7D:9A:AD:C0 Certificate issuer: /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42 Certificate serial: 019B7F1523A9451B33DF7F4E99B20B9DF9AD Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/eN5E1N2fbNIwZ9RyYdP9j32arcA.roa Signing time: Fri 02 Jan 2026 14:20:50 +0000 ROA not before: Fri 02 Jan 2026 14:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215383 IP address blocks: 92.114.1.0/24 maxlen: 24 93.117.64.0/24 maxlen: 24 93.118.44.0/24 maxlen: 24 188.241.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:23:a9:45:1b:33:df:7f:4e:99:b2:0b:9d:f9:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42 Validity Not Before: Jan 2 14:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78de44d4dd9f6cd23067d47261d3fd8f7d9aadc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5c:37:93:e7:10:bb:25:91:bb:3b:8d:a5:02: 70:80:e8:64:5e:29:9b:fc:0b:d3:b5:16:7e:cd:3c: fa:d5:ca:12:d0:5c:43:7e:c2:b4:68:2c:d6:d1:55: 37:9a:dd:3d:bf:e5:45:46:c3:4b:af:13:ca:73:36: c1:69:ce:b3:5e:58:32:de:1b:7f:4e:45:cb:9f:dd: 07:04:10:d5:29:ae:c4:ef:c5:9a:75:4f:a8:97:9a: 84:4a:28:49:5f:07:9f:6d:b1:15:a6:b4:37:69:37: c2:5f:08:5d:5a:03:f5:58:4f:9d:3c:3a:2c:ef:1d: eb:13:27:77:ad:6e:40:1f:fd:09:ff:ab:9b:28:47: d0:a7:4d:86:f4:dc:87:88:ba:f9:af:55:96:d2:f7: 0b:cc:46:1c:fe:82:05:f5:bf:5e:bc:d9:06:47:f6: ed:b9:f2:e4:02:c0:d4:22:04:b9:95:7e:32:d0:4c: 1b:1e:67:dc:8f:52:ea:f6:a2:b9:0b:af:d4:18:00: 1b:51:04:10:20:8d:b3:db:7e:56:1b:2f:ce:fc:a5: 54:8c:64:d3:78:a8:93:30:7f:75:8b:49:8b:10:e4: 0e:04:36:9f:1d:bc:67:4d:32:0f:4c:c2:38:40:60: 30:c8:39:99:3f:a6:5d:78:2c:56:4e:3e:a9:d6:25: 64:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DE:44:D4:DD:9F:6C:D2:30:67:D4:72:61:D3:FD:8F:7D:9A:AD:C0 X509v3 Authority Key Identifier: keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/eN5E1N2fbNIwZ9RyYdP9j32arcA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.114.1.0/24 93.117.64.0/24 93.118.44.0/24 188.241.70.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:dc:6f:2e:8c:0a:e5:3b:34:2d:3a:81:a7:77:b2:a5:96:95: 10:ce:a9:6e:74:71:1c:63:c2:d4:68:35:3e:8b:0d:88:a5:9e: 3e:07:37:10:08:16:22:ed:d6:dd:c2:3f:c0:84:01:0b:48:06: fc:00:0a:27:7c:c2:d2:4a:22:c8:52:8f:d6:36:0d:6a:1c:66: 6a:1a:2b:cf:2a:0b:a6:6e:d7:84:03:a7:ae:76:a2:66:80:cc: 97:1e:7f:ad:bf:b1:55:88:eb:4a:c3:48:0a:b8:b7:75:10:d7: e0:e4:c2:e0:e4:96:3a:f1:27:48:47:99:1f:5e:e8:2b:6e:06: 90:96:4c:53:e7:bb:a8:78:8c:7d:10:3a:d7:dd:8a:fb:2f:3f: 07:e3:3d:fe:4d:37:43:16:70:08:cf:7a:b3:31:7f:f6:58:67: 4f:83:55:ee:83:01:c2:4d:32:1e:2e:a0:b0:be:1b:7e:c3:4b: cb:f2:d8:54:1c:a8:fd:93:2c:bd:e9:97:2b:ac:ba:a3:03:6c: fb:e8:cd:f1:d8:3d:bf:fe:b2:8c:30:9b:39:08:3e:09:8a:1a: 51:9f:9f:9b:02:54:07:0b:68:30:39:65:67:0f:c5:39:d7:f2: 07:d2:33:a8:8c:33:94:cb:bf:3d:76:80:a9:6b:30:1d:a3:0e: 4f:ca:7e:d6 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/FSOpRRsz339OmbILnfmtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMmEzMDU2ZTYyNTkyNDlmNDY2ZjAwNTViYjExYjgzYTZh MzBhNDIwHhcNMjYwMTAyMTQyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OGRlNDRkNGRkOWY2Y2QyMzA2N2Q0NzI2MWQzZmQ4ZjdkOWFhZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Vw3k+cQuyWRuzuNpQJwgOhkXimb /AvTtRZ+zTz61coS0FxDfsK0aCzW0VU3mt09v+VFRsNLrxPKczbBac6zXlgy3ht/ TkXLn90HBBDVKa7E78WadU+ol5qESihJXwefbbEVprQ3aTfCXwhdWgP1WE+dPDos 7x3rEyd3rW5AH/0J/6ubKEfQp02G9NyHiLr5r1WW0vcLzEYc/oIF9b9evNkGR/bt ufLkAsDUIgS5lX4y0EwbHmfcj1Lq9qK5C6/UGAAbUQQQII2z235WGy/O/KVUjGTT eKiTMH91i0mLEOQOBDafHbxnTTIPTMI4QGAwyDmZP6ZdeCxWTj6p1iVkWwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHjeRNTdn2zSMGfUcmHT/Y99mq3AMB8GA1UdIwQY MBaAFEwqMFbmJZJJ9GbwBVuxG4OmowpCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVENvd1Z1WWxra24wWnZBRlc3RWJnNmFqQ2tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NzhhZjItYjJjMC00NzA0LTlmYTIt Mjg0MTAxM2JjY2I0LzEvZU41RTFOMmZiTkl3WjlSeVlkUDlqMzJhcmNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC83NzhhZjItYjJjMC00NzA0LTlmYTItMjg0MTAxM2JjY2I0 LzEvVENvd1Z1WWxra24wWnZBRlc3RWJnNmFqQ2tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAXHIBAwQA XXVAAwQAXXYsAwQAvPFGMA0GCSqGSIb3DQEBCwUAA4IBAQBu3G8ujArlOzQtOoGn d7KllpUQzqludHEcY8LUaDU+iw2IpZ4+BzcQCBYi7dbdwj/AhAELSAb8AAonfMLS SiLIUo/WNg1qHGZqGivPKgumbteEA6eudqJmgMyXHn+tv7FViOtKw0gKuLd1ENfg 5MLg5JY68SdIR5kfXugrbgaQlkxT57uoeIx9EDrX3Yr7Lz8H4z3+TTdDFnAIz3qz MX/2WGdPg1XugwHCTTIeLqCwvht+w0vL8thUHKj9kyy96ZcrrLqjA2z76M3x2D2/ /rKMMJs5CD4JihpRn5+bAlQHC2gwOWVnD8U51/IH0jOojDOUy789doCpazAdow5P yn7W -----END CERTIFICATE-----Generated at Wed Jan 21 15:53:13 2026 by rpki-client