This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/dQcwcIfbCmyvQIl_B7yqNkT8MfM.roa File: dQcwcIfbCmyvQIl_B7yqNkT8MfM.roa (raw, json) Hash identifier: zJWtjh6KXMTgXK8eIzTVcTHBJSyWVAfOU6vYD3+gn/U= Subject key identifier: 75:07:30:70:87:DB:0A:6C:AF:40:89:7F:07:BC:AA:36:44:FC:31:F3 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79106DD141DEE2345241A814F70D739A Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/dQcwcIfbCmyvQIl_B7yqNkT8MfM.roa Signing time: Thu 01 Jan 2026 10:17:58 +0000 ROA not before: Thu 01 Jan 2026 10:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213083 IP address blocks: 78.135.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6d:d1:41:de:e2:34:52:41:a8:14:f7:0d:73:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7507307087db0a6caf40897f07bcaa3644fc31f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5f:57:07:75:a5:38:b2:af:50:2c:91:bc:74: 38:18:e5:75:66:1e:62:cc:83:6d:02:86:7a:5d:1c: 70:af:96:ef:23:a3:ad:1e:da:39:83:42:69:ca:a4: e9:1e:01:59:f4:50:99:de:06:fd:8e:ef:5f:9f:a9: 77:89:9b:bc:5e:a4:6d:2f:5f:74:47:6b:e5:24:33: d0:09:3f:dc:fd:e9:dc:64:3b:71:ed:69:45:21:36: eb:17:67:eb:d5:7c:86:aa:55:0f:b9:63:f1:05:d6: f8:f8:29:eb:27:ad:4e:6d:1a:dd:04:d8:bb:f5:8c: be:ec:fb:bb:48:c8:3c:91:3c:0e:58:55:f6:7a:57: 4f:b8:91:b9:49:7c:06:52:e2:ed:6f:03:ea:d9:88: 3b:0d:cf:19:be:e4:3d:20:fa:50:51:8f:d8:71:10: a4:0e:21:cf:88:1f:7f:6c:e1:6b:9a:c1:5e:e7:e0: a7:a1:59:a3:8b:cb:b9:6e:fa:a0:ae:01:a3:af:ec: e7:8a:ef:a1:db:7e:c2:f5:c2:e2:f2:c8:de:d1:e1: e2:7f:3c:ed:66:9c:60:61:b4:cb:5b:7e:6f:00:60: 4b:d0:42:86:cf:e8:25:b0:6e:21:91:09:03:cb:5b: 9a:97:5c:50:38:71:60:1e:23:7b:9b:33:aa:cc:4f: ab:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:07:30:70:87:DB:0A:6C:AF:40:89:7F:07:BC:AA:36:44:FC:31:F3 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/dQcwcIfbCmyvQIl_B7yqNkT8MfM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.135.101.0/24 Signature Algorithm: sha256WithRSAEncryption 85:9b:56:40:90:65:eb:4a:c2:45:e1:8b:56:fb:7f:e4:51:58: aa:d2:2b:d0:8f:83:26:fe:7c:4c:50:99:d1:25:bf:36:aa:c8: c0:3f:de:2a:ce:a6:43:a3:29:78:59:3d:f8:99:91:e2:f6:73: b2:aa:6f:91:bf:d6:71:45:27:25:e3:21:b9:d8:f1:05:a2:ab: 88:e9:cf:51:6a:59:fd:36:e5:45:62:1f:a7:20:39:35:82:00: bd:2f:fc:d9:39:84:bc:cb:c5:8a:3c:35:be:2a:3d:c3:94:a9: 5c:5b:4b:46:cb:4d:d0:02:77:16:00:3a:1e:6e:f3:c1:ec:29: 70:45:e7:c3:46:97:1b:f9:d6:dc:ae:42:bf:4b:5b:8e:11:d3: df:0e:e5:8b:cc:75:9c:db:b2:e2:a4:b0:12:79:3f:75:95:3a: 85:bb:6c:26:8c:81:1b:67:21:3f:29:9e:28:ed:8d:08:da:8b: 8f:be:0c:9d:e8:e1:12:61:2d:9e:3a:3e:84:f1:33:76:4a:3c: fb:5c:11:80:12:d0:21:42:00:ff:36:e3:79:b3:61:b6:44:d6: 83:ef:44:62:02:57:6a:5e:d5:fb:94:cd:18:ff:09:ff:a0:51: 71:32:55:26:d5:4a:55:dc:b5:a4:a1:3e:25:6e:3e:ab:75:ec: 51:24:6d:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EG3RQd7iNFJBqBT3DXOaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTA3MzA3MDg3ZGIwYTZjYWY0MDg5N2YwN2JjYWEzNjQ0ZmMzMWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkl9XB3WlOLKvUCyRvHQ4GOV1Zh5i zINtAoZ6XRxwr5bvI6OtHto5g0JpyqTpHgFZ9FCZ3gb9ju9fn6l3iZu8XqRtL190 R2vlJDPQCT/c/encZDtx7WlFITbrF2fr1XyGqlUPuWPxBdb4+CnrJ61ObRrdBNi7 9Yy+7Pu7SMg8kTwOWFX2eldPuJG5SXwGUuLtbwPq2Yg7Dc8ZvuQ9IPpQUY/YcRCk DiHPiB9/bOFrmsFe5+CnoVmji8u5bvqgrgGjr+zniu+h237C9cLi8sje0eHifzzt ZpxgYbTLW35vAGBL0EKGz+glsG4hkQkDy1ual1xQOHFgHiN7mzOqzE+rGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHUHMHCH2wpsr0CJfwe8qjZE/DHzMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvZFFjd2NJZmJDbXl2UUlsX0I3eXFOa1Q4TWZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATodlMA0G CSqGSIb3DQEBCwUAA4IBAQCFm1ZAkGXrSsJF4YtW+3/kUViq0ivQj4Mm/nxMUJnR Jb82qsjAP94qzqZDoyl4WT34mZHi9nOyqm+Rv9ZxRScl4yG52PEFoquI6c9Raln9 NuVFYh+nIDk1ggC9L/zZOYS8y8WKPDW+Kj3DlKlcW0tGy03QAncWADoebvPB7Clw RefDRpcb+dbcrkK/S1uOEdPfDuWLzHWc27LipLASeT91lTqFu2wmjIEbZyE/KZ4o 7Y0I2ouPvgyd6OESYS2eOj6E8TN2Sjz7XBGAEtAhQgD/NuN5s2G2RNaD70RiAldq XtX7lM0Y/wn/oFFxMlUm1UpV3LWkoT4lbj6rdexRJG1E -----END CERTIFICATE-----Generated at Wed Jan 21 13:32:41 2026 by rpki-client