This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/XiD6lDrgMPuS8eayCDVkIbui-4s.roa File: XiD6lDrgMPuS8eayCDVkIbui-4s.roa (raw, json) Hash identifier: SBkJkhDft5A8cF6t/KuhZfif5su+kzjqoUhMEaiSsSk= Subject key identifier: 5E:20:FA:94:3A:E0:30:FB:92:F1:E6:B2:08:35:64:21:BB:A2:FB:8B Certificate issuer: /CN=bd7d8178cec5cd376548a9049117f469c0a7431c Certificate serial: 019B7DCA043C5DE613D1C29231644AAC92C7 Authority key identifier: BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/XiD6lDrgMPuS8eayCDVkIbui-4s.roa Signing time: Fri 02 Jan 2026 08:19:09 +0000 ROA not before: Fri 02 Jan 2026 08:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 78.24.53.0/24 maxlen: 24 78.24.54.0/24 maxlen: 24 82.116.140.0/24 maxlen: 24 82.116.144.0/24 maxlen: 24 178.255.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.mft rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 14:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:04:3c:5d:e6:13:d1:c2:92:31:64:4a:ac:92:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd7d8178cec5cd376548a9049117f469c0a7431c Validity Not Before: Jan 2 08:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5e20fa943ae030fb92f1e6b208356421bba2fb8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e7:9a:6d:b2:7a:71:99:50:0b:0f:b3:54:c2: 92:80:da:7d:ca:29:7b:86:38:8f:ed:d3:23:00:5b: 60:63:ca:a0:bd:b3:47:2c:5d:69:c5:b6:ff:e8:1c: c1:b9:bd:ee:56:93:1f:9b:12:e6:2a:c1:a7:ab:8b: e1:7d:59:93:47:32:3e:13:a8:5d:75:76:ef:a2:91: ce:5a:3a:61:0a:9f:d7:a3:54:0a:68:09:38:23:d2: de:7f:19:4c:8c:f2:76:1a:5a:5e:8d:a1:7e:3a:15: 4f:39:fb:11:19:82:da:e8:12:d0:b3:80:61:75:28: d2:b7:35:f6:88:59:56:db:e3:32:99:47:c0:25:70: 77:95:c9:8c:94:9e:1d:b6:61:fb:6b:cc:c7:71:7e: ed:78:65:ee:e8:cb:75:5f:f3:7c:cf:7f:fc:7f:17: ba:d4:6f:f4:49:bc:d8:27:bd:c4:de:57:a4:eb:25: 43:bb:58:d6:49:cc:a3:9b:5c:74:62:a7:ee:59:64: 3d:81:d7:27:71:f3:d2:47:1e:18:ef:87:52:aa:84: f3:bb:f6:63:e7:e5:0f:b0:b8:4a:78:84:4a:0e:f4: 71:cb:16:d1:6b:f6:60:f4:23:bd:ed:2c:b7:b8:52: bd:f2:89:53:2c:1a:8c:4a:45:b4:77:5e:ae:3b:11: f3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:20:FA:94:3A:E0:30:FB:92:F1:E6:B2:08:35:64:21:BB:A2:FB:8B X509v3 Authority Key Identifier: keyid:BD:7D:81:78:CE:C5:CD:37:65:48:A9:04:91:17:F4:69:C0:A7:43:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX2BeM7FzTdlSKkEkRf0acCnQxw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/XiD6lDrgMPuS8eayCDVkIbui-4s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f317b3-0668-4e04-9b6d-615aca51e2f6/1/vX2BeM7FzTdlSKkEkRf0acCnQxw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.24.53.0-78.24.54.255 82.116.140.0/24 82.116.144.0/24 178.255.10.0/24 Signature Algorithm: sha256WithRSAEncryption 70:e2:76:62:b3:cb:61:76:90:65:31:57:e2:28:64:36:a2:79: 72:5f:40:a1:94:21:f4:0d:c1:07:46:40:d2:69:85:b7:16:b4: 38:df:ab:2a:53:e2:82:02:3e:df:11:64:6d:25:bc:3b:38:2e: 31:60:f4:a4:a4:6f:77:08:88:2b:59:bd:3e:74:c0:78:7f:c7: b1:a3:46:6c:0e:9d:59:f2:4f:d8:da:2c:47:26:f2:36:04:7d: 9b:77:f0:02:b3:6a:8e:96:5c:93:31:f7:ee:50:25:41:03:63: 3b:95:f6:81:6e:7e:f9:66:84:87:93:66:3b:1f:4a:a7:21:05: 6a:53:c8:9b:c3:e5:a3:0a:68:42:cb:6c:f8:62:08:59:12:88: be:53:48:9d:0f:16:78:b6:ca:bf:35:f1:fc:71:f1:3a:94:ea: 04:32:ed:62:b7:41:ea:a7:6d:fd:cc:46:a4:47:c0:d0:83:e5: c9:a4:b3:eb:69:a7:22:7d:d6:01:5e:5d:2d:12:4c:eb:de:e3: 3b:93:dc:77:01:03:e1:d4:2b:5f:71:6a:72:a3:71:a4:fe:ec: db:ec:06:3f:03:bf:31:4b:1a:c5:0e:07:8b:d3:56:56:3f:cf: 68:00:91:e2:fa:3c:a0:83:d1:15:7d:02:1e:15:68:65:e4:44: 5d:70:80:d8 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt9ygQ8XeYT0cKSMWRKrJLHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkN2Q4MTc4Y2VjNWNkMzc2NTQ4YTkwNDkxMTdmNDY5YzBh NzQzMWMwHhcNMjYwMTAyMDgxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZTIwZmE5NDNhZTAzMGZiOTJmMWU2YjIwODM1NjQyMWJiYTJmYjhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmueabbJ6cZlQCw+zVMKSgNp9yil7 hjiP7dMjAFtgY8qgvbNHLF1pxbb/6BzBub3uVpMfmxLmKsGnq4vhfVmTRzI+E6hd dXbvopHOWjphCp/Xo1QKaAk4I9LefxlMjPJ2GlpejaF+OhVPOfsRGYLa6BLQs4Bh dSjStzX2iFlW2+MymUfAJXB3lcmMlJ4dtmH7a8zHcX7teGXu6Mt1X/N8z3/8fxe6 1G/0SbzYJ73E3lek6yVDu1jWScyjm1x0YqfuWWQ9gdcncfPSRx4Y74dSqoTzu/Zj 5+UPsLhKeIRKDvRxyxbRa/Zg9CO97Sy3uFK98olTLBqMSkW0d16uOxHzPwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFF4g+pQ64DD7kvHmsgg1ZCG7ovuLMB8GA1UdIwQY MBaAFL19gXjOxc03ZUipBJEX9GnAp0McMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlgyQmVNN0Z6VGRsU0trRWtSZjBhY0NuUXh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mMzE3YjMtMDY2OC00ZTA0LTliNmQt NjE1YWNhNTFlMmY2LzEvWGlENmxEcmdNUHVTOGVheUNEVmtJYnVpLTRzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9mMzE3YjMtMDY2OC00ZTA0LTliNmQtNjE1YWNhNTFlMmY2 LzEvdlgyQmVNN0Z6VGRsU0trRWtSZjBhY0NuUXh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBABOGDUD BABOGDYDBABSdIwDBABSdJADBACy/wowDQYJKoZIhvcNAQELBQADggEBAHDidmKz y2F2kGUxV+IoZDaieXJfQKGUIfQNwQdGQNJphbcWtDjfqypT4oICPt8RZG0lvDs4 LjFg9KSkb3cIiCtZvT50wHh/x7GjRmwOnVnyT9jaLEcm8jYEfZt38AKzao6WXJMx 9+5QJUEDYzuV9oFufvlmhIeTZjsfSqchBWpTyJvD5aMKaELLbPhiCFkSiL5TSJ0P Fni2yr818fxx8TqU6gQy7WK3Qeqnbf3MRqRHwNCD5cmks+tppyJ91gFeXS0STOve 4zuT3HcBA+HUK19xanKjcaT+7NvsBj8DvzFLGsUOB4vTVlY/z2gAkeL6PKCD0RV9 Ah4VaGXkRF1wgNg= -----END CERTIFICATE-----Generated at Wed Jan 7 22:33:33 2026 by rpki-client