This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/4L07KDZJVWtZX3Lep8UDG7SBihM.roa File: 4L07KDZJVWtZX3Lep8UDG7SBihM.roa (raw, json) Hash identifier: Ez8jgTTbdzmSJDZ44oQE+jlwZbU1+dPbxSczOAWSAho= Subject key identifier: E0:BD:3B:28:36:49:55:6B:59:5F:72:DE:A7:C5:03:1B:B4:81:8A:13 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B791063016262E760A2D6EEEED502B118 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/4L07KDZJVWtZX3Lep8UDG7SBihM.roa Signing time: Thu 01 Jan 2026 10:17:55 +0000 ROA not before: Thu 01 Jan 2026 10:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207617 IP address blocks: 78.135.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:63:01:62:62:e7:60:a2:d6:ee:ee:d5:02:b1:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0bd3b283649556b595f72dea7c5031bb4818a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7b:e0:5c:5b:46:4a:f6:65:1b:23:4c:94:a0: 05:5d:8b:aa:39:ac:c4:21:7e:4f:d3:73:49:71:f9: d1:d0:d4:88:6c:ac:79:f7:1a:a7:58:ec:a3:03:eb: e3:4a:e4:0d:d2:b9:89:b4:9b:0c:88:92:e5:39:b0: 97:29:fe:e7:aa:9a:24:9d:b6:e0:2c:9e:6a:e8:59: 5b:c5:bf:43:56:49:7a:fd:68:de:6c:7a:73:5a:df: 1f:33:d0:d4:85:30:f5:b7:22:80:da:7a:de:a7:39: 2b:59:22:45:dd:7f:e7:be:b8:4d:90:53:24:46:d5: 9a:b6:31:46:56:19:30:f8:31:b8:e5:21:83:47:b3: 3d:e9:ea:43:bd:78:c7:64:d3:da:29:d6:e1:fe:3c: b0:a4:4e:97:88:b4:35:df:a2:3f:c1:f7:e3:16:4e: f6:dc:b8:cb:ad:90:4d:43:ba:76:a2:ad:bd:46:8d: b9:15:e7:03:85:94:d4:46:93:e7:31:77:8d:4b:cd: 56:93:b8:87:8a:bc:8e:6b:fc:fd:53:53:d9:ea:d5: 14:63:2a:8a:4e:74:46:04:78:44:74:f0:23:e0:40: 9b:2d:2e:15:51:b5:95:07:1b:ef:de:8e:7a:41:4d: 1c:8d:47:47:12:d6:f2:a2:1c:1a:86:16:6d:0e:59: f4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BD:3B:28:36:49:55:6B:59:5F:72:DE:A7:C5:03:1B:B4:81:8A:13 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/4L07KDZJVWtZX3Lep8UDG7SBihM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.135.71.0/24 Signature Algorithm: sha256WithRSAEncryption 86:9f:a5:9b:3c:2b:77:55:17:12:a3:33:bc:49:7f:11:31:82: 55:e7:57:e0:59:6e:0c:69:1f:7b:65:1d:7a:dc:49:8b:1a:b0: 88:bb:a2:ae:b6:b8:46:ac:f6:27:87:61:1e:16:b7:81:ac:33: 95:6d:73:50:5d:e8:84:08:f6:bd:1b:b4:31:06:36:42:7b:55: f2:77:20:e6:da:29:5f:34:da:a2:db:95:6e:4f:98:ee:cb:bc: ca:76:f4:cb:bc:6d:9f:58:65:b3:5f:25:81:52:3c:5c:1c:2d: 6d:f1:d0:7c:8d:40:92:22:fe:a9:83:7b:ce:b5:02:16:29:e6: fd:81:bf:01:d9:4e:17:20:ef:2e:1c:77:39:13:8b:92:57:19: 66:47:53:b0:5e:f9:5b:92:48:f2:33:ba:e2:cf:df:01:c9:f2: 0a:16:29:02:8b:cd:0d:84:05:39:4f:f7:76:a9:bd:87:6a:be: 5f:5a:f9:38:73:00:a5:10:f6:27:67:0a:ce:1d:1d:06:d4:1a: de:63:9a:34:2b:f6:dd:81:12:74:41:91:38:bc:01:1f:2b:18: 7c:43:c4:d3:e0:11:80:c5:e3:b3:bb:cc:48:d4:43:1a:f1:91: fd:d6:b0:d0:e7:0b:33:69:a9:4a:5c:d4:b8:bd:86:2a:54:f0: fe:25:b8:42 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGMBYmLnYKLW7u7VArEYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGJkM2IyODM2NDk1NTZiNTk1ZjcyZGVhN2M1MDMxYmI0ODE4YTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nvgXFtGSvZlGyNMlKAFXYuqOazE IX5P03NJcfnR0NSIbKx59xqnWOyjA+vjSuQN0rmJtJsMiJLlObCXKf7nqpoknbbg LJ5q6Flbxb9DVkl6/WjebHpzWt8fM9DUhTD1tyKA2nrepzkrWSJF3X/nvrhNkFMk RtWatjFGVhkw+DG45SGDR7M96epDvXjHZNPaKdbh/jywpE6XiLQ136I/wffjFk72 3LjLrZBNQ7p2oq29Ro25FecDhZTURpPnMXeNS81Wk7iHiryOa/z9U1PZ6tUUYyqK TnRGBHhEdPAj4ECbLS4VUbWVBxvv3o56QU0cjUdHEtbyohwahhZtDln0QQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOC9Oyg2SVVrWV9y3qfFAxu0gYoTMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvNEwwN0tEWkpWV3RaWDNMZXA4VURHN1NCaWhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATodHMA0G CSqGSIb3DQEBCwUAA4IBAQCGn6WbPCt3VRcSozO8SX8RMYJV51fgWW4MaR97ZR16 3EmLGrCIu6KutrhGrPYnh2EeFreBrDOVbXNQXeiECPa9G7QxBjZCe1XydyDm2ilf NNqi25VuT5juy7zKdvTLvG2fWGWzXyWBUjxcHC1t8dB8jUCSIv6pg3vOtQIWKeb9 gb8B2U4XIO8uHHc5E4uSVxlmR1OwXvlbkkjyM7riz98ByfIKFikCi80NhAU5T/d2 qb2Har5fWvk4cwClEPYnZwrOHR0G1BreY5o0K/bdgRJ0QZE4vAEfKxh8Q8TT4BGA xeOzu8xI1EMa8ZH91rDQ5wszaalKXNS4vYYqVPD+JbhC -----END CERTIFICATE-----Generated at Wed Jan 21 13:31:57 2026 by rpki-client