This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/0a-Ufktw1anq6_8TipcjS3c51LA.roa File: 0a-Ufktw1anq6_8TipcjS3c51LA.roa (raw, json) Hash identifier: 3elk+xvBFnatLEkyYTcr0t1zm4E3QmOUvTpsyTMtfXo= Subject key identifier: D1:AF:94:7E:4B:70:D5:A9:EA:EB:FF:13:8A:97:23:4B:77:39:D4:B0 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B791067983261F5AC043B502DB79AA532 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/0a-Ufktw1anq6_8TipcjS3c51LA.roa Signing time: Thu 01 Jan 2026 10:17:56 +0000 ROA not before: Thu 01 Jan 2026 10:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210410 IP address blocks: 78.135.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:67:98:32:61:f5:ac:04:3b:50:2d:b7:9a:a5:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d1af947e4b70d5a9eaebff138a97234b7739d4b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cb:fd:04:2e:95:7f:b4:8c:58:0d:30:33:e3: 7c:67:17:9a:b7:62:c8:bc:21:fa:ac:21:b1:ea:11: e2:c0:2e:fc:4c:e7:e8:30:87:eb:76:6e:84:45:9e: 04:80:3a:f6:cc:89:bc:a0:cd:92:18:fb:e5:32:b8: 98:f7:bf:a1:a1:a1:a1:01:ad:3b:e7:37:b6:37:82: 9d:37:c3:e6:8e:c4:36:06:37:12:50:a3:7d:df:0b: f0:90:eb:f2:0e:bb:3c:9d:47:4c:a4:fe:9b:10:8c: e3:9b:6e:c2:3a:d9:c6:0b:fd:95:48:99:49:8f:f1: 1f:32:14:76:90:6d:04:15:1e:68:78:2c:b4:c6:e8: 92:06:c6:ad:a6:59:c5:af:2f:38:20:4a:ea:b5:69: 3e:65:30:6b:e3:d8:89:2b:44:61:65:88:5b:d7:05: 90:3a:cb:4c:f0:46:e9:6e:48:e3:db:3d:53:3d:c5: 9c:4e:85:d2:a4:c5:f3:8c:b8:2c:80:ef:83:92:cd: f5:14:e1:df:d9:8c:4e:c2:5c:1c:18:80:81:3b:dd: 23:7e:86:7b:41:34:fd:cc:80:de:56:a1:cb:d8:1e: 6d:25:b8:fe:bf:25:8e:28:33:41:1b:41:8f:91:b1: f1:c6:79:0c:81:e0:4a:67:33:6a:e0:a3:2f:7e:b8: 0e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:AF:94:7E:4B:70:D5:A9:EA:EB:FF:13:8A:97:23:4B:77:39:D4:B0 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/0a-Ufktw1anq6_8TipcjS3c51LA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.135.68.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:38:bb:bc:bf:2d:c1:4b:ed:c7:4c:b1:63:18:3f:18:bb:ce: 63:53:50:a1:6c:30:c0:2e:22:1e:12:fd:6c:ae:f3:d9:18:7d: 9b:83:75:34:7b:8a:ff:e7:9b:cb:06:95:80:f9:58:13:ee:f3: 10:b3:a6:c7:94:15:fe:32:82:9b:d4:fb:27:b4:17:e3:55:b0: 96:b0:f1:6f:e6:92:d8:29:90:d1:f6:3e:b3:f4:46:e9:57:3b: b6:68:43:bd:a9:e4:8d:76:91:e0:bc:86:7a:76:8e:8b:ca:c1: 01:1b:3d:5b:c6:e8:d9:01:20:ae:60:7b:1d:d2:13:d1:4b:85: dd:11:8a:73:2d:b4:a1:f1:ae:f8:1b:a0:89:f7:90:a9:39:a2: 6e:2f:29:9d:96:cd:d1:04:b2:9c:7e:51:ff:46:0d:2c:d1:d7: 47:42:e3:03:85:e0:86:b2:3f:7a:e6:ad:d7:64:87:97:9b:7d: 72:ca:36:2f:25:da:fb:b1:9e:f5:1a:f8:89:b0:be:01:85:dd: e9:75:72:f4:a6:36:bd:e1:7e:b6:95:bd:ca:5f:4c:d9:49:79: 3c:4d:b3:d7:d4:63:3b:4c:40:d6:fa:d8:71:3b:50:e6:61:48: 52:63:0d:e2:20:62:35:21:b9:bf:be:92:34:a6:66:2a:e9:bb: 4b:92:82:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGeYMmH1rAQ7UC23mqUyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMWFmOTQ3ZTRiNzBkNWE5ZWFlYmZmMTM4YTk3MjM0Yjc3MzlkNGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcv9BC6Vf7SMWA0wM+N8Zxeat2LI vCH6rCGx6hHiwC78TOfoMIfrdm6ERZ4EgDr2zIm8oM2SGPvlMriY97+hoaGhAa07 5ze2N4KdN8PmjsQ2BjcSUKN93wvwkOvyDrs8nUdMpP6bEIzjm27COtnGC/2VSJlJ j/EfMhR2kG0EFR5oeCy0xuiSBsatplnFry84IErqtWk+ZTBr49iJK0RhZYhb1wWQ OstM8Ebpbkjj2z1TPcWcToXSpMXzjLgsgO+Dks31FOHf2YxOwlwcGICBO90jfoZ7 QTT9zIDeVqHL2B5tJbj+vyWOKDNBG0GPkbHxxnkMgeBKZzNq4KMvfrgOpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNGvlH5LcNWp6uv/E4qXI0t3OdSwMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvMGEtVWZrdHcxYW5xNl84VGlwY2pTM2M1MUxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATodEMA0G CSqGSIb3DQEBCwUAA4IBAQArOLu8vy3BS+3HTLFjGD8Yu85jU1ChbDDALiIeEv1s rvPZGH2bg3U0e4r/55vLBpWA+VgT7vMQs6bHlBX+MoKb1PsntBfjVbCWsPFv5pLY KZDR9j6z9EbpVzu2aEO9qeSNdpHgvIZ6do6LysEBGz1bxujZASCuYHsd0hPRS4Xd EYpzLbSh8a74G6CJ95CpOaJuLymdls3RBLKcflH/Rg0s0ddHQuMDheCGsj965q3X ZIeXm31yyjYvJdr7sZ71GviJsL4Bhd3pdXL0pja94X62lb3KX0zZSXk8TbPX1GM7 TEDW+thxO1DmYUhSYw3iIGI1Ibm/vpI0pmYq6btLkoJT -----END CERTIFICATE-----Generated at Wed Jan 21 13:32:41 2026 by rpki-client