This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Pa_c471kK1k0jSZ5K_TYQ9f6pzo.roa File: Pa_c471kK1k0jSZ5K_TYQ9f6pzo.roa (raw, json) Hash identifier: 9BuCf10A30Z8kZ2AUTc7kHGtUyh6z7s1TczZLhMQy78= Subject key identifier: 3D:AF:DC:E3:BD:64:2B:59:34:8D:26:79:2B:F4:D8:43:D7:FA:A7:3A Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79106A787F9D6F99B8691509A8969BE1 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Pa_c471kK1k0jSZ5K_TYQ9f6pzo.roa Signing time: Thu 01 Jan 2026 10:17:57 +0000 ROA not before: Thu 01 Jan 2026 10:17:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211711 IP address blocks: 78.135.70.0/24 maxlen: 24 188.132.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6a:78:7f:9d:6f:99:b8:69:15:09:a8:96:9b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3dafdce3bd642b59348d26792bf4d843d7faa73a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:98:90:c9:c1:31:9d:72:3d:b8:36:d0:91:27: e4:23:e3:43:02:da:61:14:1c:fb:e2:d5:a9:b8:e1: 95:c3:b5:ed:0d:25:c4:91:81:a7:36:9b:c6:ac:ab: 48:8a:80:b8:27:bb:7a:d9:ad:28:7e:ab:69:ae:b0: 8d:c9:50:5d:7f:57:e4:3e:64:78:f7:ef:28:cd:b3: f1:7e:a4:16:2b:5b:59:d7:be:25:e6:2c:04:2f:c4: 86:55:ce:6e:b2:e3:cf:88:cd:24:d3:e5:32:50:b2: f0:2e:33:86:39:ff:ca:f2:a2:75:9b:2d:1c:8c:7d: e6:f3:f2:4d:f0:1d:30:9c:73:eb:6c:ea:f6:3d:f1: 12:5c:9b:a9:2e:a6:b4:4c:ad:21:07:d4:b8:2b:3a: 8b:57:ed:4a:5b:45:cb:ed:ae:3a:e0:10:21:51:3f: 8f:27:bc:e3:94:99:da:f0:21:4d:0b:cd:d5:d6:9e: ee:3b:6b:a6:42:b0:81:91:54:df:6c:ef:5c:df:43: 3b:77:09:3a:d4:8c:cc:e1:84:89:69:d3:98:c6:ea: 4d:b5:ce:09:e5:c0:78:5b:af:73:dd:24:6d:50:75: 47:ef:9f:f0:52:74:66:db:f9:0f:45:d0:9d:1d:66: 15:7e:81:c6:2f:4c:ef:c4:a4:73:27:f1:a3:01:ec: e5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AF:DC:E3:BD:64:2B:59:34:8D:26:79:2B:F4:D8:43:D7:FA:A7:3A X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/Pa_c471kK1k0jSZ5K_TYQ9f6pzo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.135.70.0/24 188.132.159.0/24 Signature Algorithm: sha256WithRSAEncryption a0:49:87:60:3a:28:63:9a:80:76:77:aa:36:60:90:d6:7a:5a: c8:0f:59:6a:6f:0d:f7:87:c7:07:4f:3e:71:a6:ac:93:b6:0b: 04:65:6e:f8:e2:b9:a8:dc:79:6d:57:1d:06:eb:f8:f8:fe:ca: cc:2d:01:55:77:6b:80:8a:21:3d:59:3b:5f:06:3f:30:d7:08: 80:ff:df:d9:4a:8d:e8:48:4e:6e:c3:dc:73:bf:85:2d:ca:eb: 32:29:33:f6:00:c0:de:86:b8:fc:bc:c0:b3:df:a3:41:44:0c: b3:c3:52:d3:6b:ef:76:65:00:71:f3:a6:f4:5e:3b:1f:94:8a: 7f:1a:ec:54:26:dd:f8:5a:b1:19:69:d1:1c:97:b6:68:f9:8d: 99:de:36:13:07:69:0e:df:ec:cc:f4:10:6a:c6:46:78:12:81: e8:26:3d:ea:59:40:f2:bc:83:b3:bb:ea:8d:df:23:d1:00:ff: ca:16:33:a9:61:30:10:f1:9b:85:45:92:56:78:7b:ef:5e:30: a8:bb:db:f8:4a:e9:e3:ca:a0:4b:24:36:9d:ed:73:ce:22:a4: 55:ba:30:0b:4b:04:4a:54:dd:84:fe:32:2f:ad:37:0a:ac:ac: 36:c0:10:ff:d9:5d:1f:dd:d4:2e:6e:01:be:fc:b4:fb:06:71: a2:58:6a:f6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EGp4f51vmbhpFQmolpvhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGFmZGNlM2JkNjQyYjU5MzQ4ZDI2NzkyYmY0ZDg0M2Q3ZmFhNzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJiQycExnXI9uDbQkSfkI+NDAtph FBz74tWpuOGVw7XtDSXEkYGnNpvGrKtIioC4J7t62a0ofqtprrCNyVBdf1fkPmR4 9+8ozbPxfqQWK1tZ174l5iwEL8SGVc5usuPPiM0k0+UyULLwLjOGOf/K8qJ1my0c jH3m8/JN8B0wnHPrbOr2PfESXJupLqa0TK0hB9S4KzqLV+1KW0XL7a464BAhUT+P J7zjlJna8CFNC83V1p7uO2umQrCBkVTfbO9c30M7dwk61IzM4YSJadOYxupNtc4J 5cB4W69z3SRtUHVH75/wUnRm2/kPRdCdHWYVfoHGL0zvxKRzJ/GjAezl2QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFD2v3OO9ZCtZNI0meSv02EPX+qc6MB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvUGFfYzQ3MWtLMWswalNaNUtfVFlROWY2cHpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATodGAwQA vISfMA0GCSqGSIb3DQEBCwUAA4IBAQCgSYdgOihjmoB2d6o2YJDWelrID1lqbw33 h8cHTz5xpqyTtgsEZW744rmo3HltVx0G6/j4/srMLQFVd2uAiiE9WTtfBj8w1wiA /9/ZSo3oSE5uw9xzv4UtyusyKTP2AMDehrj8vMCz36NBRAyzw1LTa+92ZQBx86b0 XjsflIp/GuxUJt34WrEZadEcl7Zo+Y2Z3jYTB2kO3+zM9BBqxkZ4EoHoJj3qWUDy vIOzu+qN3yPRAP/KFjOpYTAQ8ZuFRZJWeHvvXjCou9v4SunjyqBLJDad7XPOIqRV ujALSwRKVN2E/jIvrTcKrKw2wBD/2V0f3dQubgG+/LT7BnGiWGr2 -----END CERTIFICATE-----Generated at Wed Jan 21 13:33:07 2026 by rpki-client