This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-_hC_5l513PuF6Kifbfu8yixQvE.roa File: 1-_hC_5l513PuF6Kifbfu8yixQvE.roa (raw, json) Hash identifier: ugepaPKohvBnGNSJ0FFNqfqBaofHjulooq6AYKEtMYo= Subject key identifier: FB:F8:42:FF:99:79:D7:73:EE:17:A2:A2:7D:B7:EE:F3:28:B1:42:F1 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019BC0948CBDCF3893DD1C6786A68C213DE7 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-_hC_5l513PuF6Kifbfu8yixQvE.roa Signing time: Thu 15 Jan 2026 07:35:19 +0000 ROA not before: Thu 15 Jan 2026 07:35:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51722 IP address blocks: 78.135.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 01:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c0:94:8c:bd:cf:38:93:dd:1c:67:86:a6:8c:21:3d:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 15 07:35:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fbf842ff9979d773ee17a2a27db7eef328b142f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:41:81:3d:26:e7:c2:9f:90:30:cb:78:cc:35: 07:14:ab:05:c3:e1:34:8d:e9:4e:d7:04:ae:7e:74: d3:8d:56:c6:dd:65:53:38:fd:ca:c2:d0:d6:c8:05: c7:18:bf:fd:4e:c0:b2:0f:67:b1:5f:00:a1:1a:bb: 98:f2:62:90:af:d5:a2:3b:59:12:7c:bd:b3:19:b4: 0e:cf:92:b3:bd:ed:73:f7:bb:c7:dd:9a:9b:39:a1: 7c:28:bd:f2:44:7d:f0:cc:da:01:a1:1f:07:5d:13: 73:aa:77:9a:04:b0:16:48:56:6d:11:5c:a9:5a:da: ea:ad:79:f7:14:b8:a6:c3:b8:77:2a:27:c2:8e:44: 37:bd:26:ed:76:22:4a:40:4b:8b:9f:61:86:c2:eb: ef:f4:ed:a3:11:2d:8e:16:3a:de:1b:79:f5:62:ac: f1:30:bb:3d:ee:8a:49:aa:4b:64:7a:47:89:9f:0e: 0f:29:47:aa:3f:9b:a1:aa:33:3f:74:be:58:bd:a4: f7:b5:a9:d1:83:63:59:fa:86:2f:ce:49:b3:89:9f: c9:98:9e:ab:d0:36:c7:f9:42:96:61:7f:c4:40:3c: 2c:3e:68:e3:17:fe:1d:2c:45:4c:7a:d9:2f:6a:8b: a5:ee:27:10:c2:00:22:3e:d1:12:59:29:e5:4e:ef: 52:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F8:42:FF:99:79:D7:73:EE:17:A2:A2:7D:B7:EE:F3:28:B1:42:F1 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/1-_hC_5l513PuF6Kifbfu8yixQvE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.135.73.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:b1:f6:25:d0:a5:b1:60:57:71:aa:c9:98:fb:9a:40:fb:e5: c4:a3:52:48:b7:51:0a:a7:65:48:cf:ad:15:b7:8b:6d:d4:fe: 77:7c:9b:80:6f:86:0c:bf:49:70:ff:20:6d:b5:01:f6:e6:09: 1a:1e:1d:cd:09:98:76:e6:75:48:98:ad:c4:80:bb:80:fb:17: 12:88:a9:88:94:b2:1a:e8:41:24:2c:f2:c0:4c:3b:a9:55:a4: 3b:41:9e:00:30:f9:ff:50:7a:ba:87:c9:cd:65:2b:a3:95:c3: a0:a9:c4:f1:5d:b8:8c:72:c2:3e:bb:c8:1b:bb:b9:8d:89:75: 84:d3:c3:4d:9a:56:45:5a:6f:6d:3c:c4:ba:66:6e:44:ff:11: 41:47:07:6f:db:ce:48:e3:f9:7f:00:c2:8b:73:59:c8:61:fe: 75:5f:88:83:ad:39:9b:7a:b9:3a:24:59:68:29:7c:6e:fa:2c: 82:87:66:dd:36:87:45:10:ad:58:d3:bb:b1:0f:ac:9e:18:ba: 32:b2:c4:56:8f:d3:81:2b:e5:2e:b5:c7:b4:41:43:16:1b:01: d5:ee:73:e2:80:dc:af:73:a4:42:6f:8b:7f:c5:5f:48:a5:cb: 85:0a:df:cd:fc:8a:ce:39:c3:b0:4f:5a:4a:c1:b2:3a:71:b7: 6f:74:d9:e4 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZvAlIy9zziT3RxnhqaMIT3nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTE1MDczNTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYmY4NDJmZjk5NzlkNzczZWUxN2EyYTI3ZGI3ZWVmMzI4YjE0MmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEGBPSbnwp+QMMt4zDUHFKsFw+E0 jelO1wSufnTTjVbG3WVTOP3KwtDWyAXHGL/9TsCyD2exXwChGruY8mKQr9WiO1kS fL2zGbQOz5Kzve1z97vH3ZqbOaF8KL3yRH3wzNoBoR8HXRNzqneaBLAWSFZtEVyp WtrqrXn3FLimw7h3KifCjkQ3vSbtdiJKQEuLn2GGwuvv9O2jES2OFjreG3n1Yqzx MLs97opJqktkekeJnw4PKUeqP5uhqjM/dL5YvaT3tanRg2NZ+oYvzkmziZ/JmJ6r 0DbH+UKWYX/EQDwsPmjjF/4dLEVMetkvaoul7icQwgAiPtESWSnlTu9SrQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPv4Qv+Zeddz7heion237vMosULxMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvMS1faENfNWw1MTNQdUY2S2lmYmZ1OHlpeFF2RS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNGQvMTU4NmZkLWZkMmMtNDFmOC04ZmU5LTRlMTk4ZjBhNjAx My8xL3lkVjBSLU5DQzRVNGRiYjZRRGNxcmVNWkxLSS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAE6HSTAN BgkqhkiG9w0BAQsFAAOCAQEAm7H2JdClsWBXcarJmPuaQPvlxKNSSLdRCqdlSM+t FbeLbdT+d3ybgG+GDL9JcP8gbbUB9uYJGh4dzQmYduZ1SJitxIC7gPsXEoipiJSy GuhBJCzywEw7qVWkO0GeADD5/1B6uofJzWUro5XDoKnE8V24jHLCPrvIG7u5jYl1 hNPDTZpWRVpvbTzEumZuRP8RQUcHb9vOSOP5fwDCi3NZyGH+dV+Ig605m3q5OiRZ aCl8bvosgodm3TaHRRCtWNO7sQ+snhi6MrLEVo/TgSvlLrXHtEFDFhsB1e5z4oDc r3OkQm+Lf8VfSKXLhQrfzfyKzjnDsE9aSsGyOnG3b3TZ5A== -----END CERTIFICATE-----Generated at Wed Jan 21 11:14:25 2026 by rpki-client