This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ffWKXCX2SRbQNtfq-Rcohy9O4qY.roa File: ffWKXCX2SRbQNtfq-Rcohy9O4qY.roa (raw, json) Hash identifier: XuNCDuYWtO2qmq4p+igvolh9EYIBZEqNJF5hd1HIAeE= Subject key identifier: 7D:F5:8A:5C:25:F6:49:16:D0:36:D7:EA:F9:17:28:87:2F:4E:E2:A6 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79105075770FD1EA0BB4380365E6966D Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ffWKXCX2SRbQNtfq-Rcohy9O4qY.roa Signing time: Thu 01 Jan 2026 10:17:50 +0000 ROA not before: Thu 01 Jan 2026 10:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44714 IP address blocks: 78.135.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 15 Jan 2026 04:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:50:75:77:0f:d1:ea:0b:b4:38:03:65:e6:96:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7df58a5c25f64916d036d7eaf91728872f4ee2a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7d:ef:f4:52:1b:10:d4:c6:d2:3a:9c:d3:19: 3e:0a:1c:18:2c:71:f8:aa:16:1c:65:87:b1:17:a7: 7b:d5:32:03:db:86:d3:e4:69:b5:d7:23:6b:fe:a5: 68:89:f0:e8:c0:c2:98:60:dd:25:22:54:13:1f:e5: c4:71:98:4d:86:5b:fa:b8:89:d7:db:76:53:e7:00: 91:cb:d4:d0:a4:c3:c9:08:4d:74:23:3a:ac:11:48: 6f:ec:4a:59:04:e4:2f:a9:de:91:06:cc:d4:16:c9: 6d:cf:8f:88:dc:8b:c2:c3:3e:84:61:2c:54:a5:88: 97:88:31:47:dc:f0:90:b8:5d:f5:57:98:00:23:c6: a5:fe:ff:5e:8a:c9:1a:45:87:23:ef:84:99:32:d1: 65:2c:78:4a:01:40:4e:19:7c:ef:68:a0:04:6c:3c: b5:e5:53:b3:3f:f8:d4:6c:cd:3c:61:26:11:a7:bd: 9f:b8:a2:f7:dc:25:a2:03:5c:e8:57:4e:53:9a:51: da:6e:42:47:fb:0d:fd:42:1b:d4:5f:ea:e3:a7:31: 79:90:31:f4:ad:d8:32:13:7c:1f:08:87:71:bb:46: 3c:a7:c2:82:b0:d5:c8:54:96:dc:c8:89:51:5b:b3: 6b:06:f7:fc:15:ad:d8:53:e0:02:4d:9f:4b:61:da: 0b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:F5:8A:5C:25:F6:49:16:D0:36:D7:EA:F9:17:28:87:2F:4E:E2:A6 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ffWKXCX2SRbQNtfq-Rcohy9O4qY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.135.81.0/24 Signature Algorithm: sha256WithRSAEncryption 90:5f:85:50:98:30:9c:27:ff:9e:c5:62:1a:4b:82:bd:50:48: 79:d1:7c:e3:de:a5:b4:2a:72:ba:38:65:07:b4:0e:92:9e:60: 42:6a:4c:01:74:b7:9a:25:b4:17:81:ec:60:8b:8c:86:7a:ca: 04:0b:45:84:8d:a4:0c:38:55:e6:54:d1:3b:b0:37:7a:d0:ce: 91:5d:87:f6:01:f3:f5:6a:6c:bd:b3:75:2e:50:d9:74:c1:b1: 60:8d:c6:fe:3b:42:7c:7e:62:ef:e5:41:77:f0:c5:b8:64:2d: 6f:96:1c:e6:ab:ed:3c:f5:db:cc:10:83:72:9d:0d:8b:88:85: 0e:dc:10:7a:03:25:82:df:8a:ae:54:86:ef:42:77:02:63:61: b9:d0:12:c1:84:00:29:3b:ba:70:c8:53:13:7b:ec:68:0b:e6: 54:a7:05:22:cc:cf:50:87:b9:44:e4:b7:ea:58:81:64:46:46: de:5c:f4:98:ce:8b:f4:63:a3:30:2d:50:57:a7:6e:e9:af:3d: a4:7e:ff:aa:af:74:fa:82:5d:2c:6b:07:e5:8f:a1:86:53:1d: 55:84:3a:10:7f:9c:9f:6f:b4:79:6d:52:3b:1b:aa:c4:2b:0f: d3:ee:c1:2d:e2:f2:1e:c7:02:ed:72:c5:31:56:92:33:9a:eb: 67:52:d2:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EFB1dw/R6gu0OANl5pZtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGY1OGE1YzI1ZjY0OTE2ZDAzNmQ3ZWFmOTE3Mjg4NzJmNGVlMmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X3v9FIbENTG0jqc0xk+ChwYLHH4 qhYcZYexF6d71TID24bT5Gm11yNr/qVoifDowMKYYN0lIlQTH+XEcZhNhlv6uInX 23ZT5wCRy9TQpMPJCE10IzqsEUhv7EpZBOQvqd6RBszUFsltz4+I3IvCwz6EYSxU pYiXiDFH3PCQuF31V5gAI8al/v9eiskaRYcj74SZMtFlLHhKAUBOGXzvaKAEbDy1 5VOzP/jUbM08YSYRp72fuKL33CWiA1zoV05TmlHabkJH+w39QhvUX+rjpzF5kDH0 rdgyE3wfCIdxu0Y8p8KCsNXIVJbcyIlRW7NrBvf8Fa3YU+ACTZ9LYdoLmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH31ilwl9kkW0DbX6vkXKIcvTuKmMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvZmZXS1hDWDJTUmJRTnRmcS1SY29oeTlPNHFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATodRMA0G CSqGSIb3DQEBCwUAA4IBAQCQX4VQmDCcJ/+exWIaS4K9UEh50Xzj3qW0KnK6OGUH tA6SnmBCakwBdLeaJbQXgexgi4yGesoEC0WEjaQMOFXmVNE7sDd60M6RXYf2AfP1 amy9s3UuUNl0wbFgjcb+O0J8fmLv5UF38MW4ZC1vlhzmq+089dvMEINynQ2LiIUO 3BB6AyWC34quVIbvQncCY2G50BLBhAApO7pwyFMTe+xoC+ZUpwUizM9Qh7lE5Lfq WIFkRkbeXPSYzov0Y6MwLVBXp27prz2kfv+qr3T6gl0sawflj6GGUx1VhDoQf5yf b7R5bVI7G6rEKw/T7sEt4vIexwLtcsUxVpIzmutnUtI9 -----END CERTIFICATE-----Generated at Wed Jan 14 09:31:05 2026 by rpki-client