This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/iaT8T-zBvJWCqZtzxdkEvjdr-Nk.roa File: iaT8T-zBvJWCqZtzxdkEvjdr-Nk.roa (raw, json) Hash identifier: AV5buPVJEwaqANFHu8JsuNhG+V509KsjDbnRODyslP0= Subject key identifier: 89:A4:FC:4F:EC:C1:BC:95:82:A9:9B:73:C5:D9:04:BE:37:6B:F8:D9 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B79104AD377C316744059FD6495341880 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/iaT8T-zBvJWCqZtzxdkEvjdr-Nk.roa Signing time: Thu 01 Jan 2026 10:17:49 +0000 ROA not before: Thu 01 Jan 2026 10:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8685 IP address blocks: 78.135.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:4a:d3:77:c3:16:74:40:59:fd:64:95:34:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89a4fc4fecc1bc9582a99b73c5d904be376bf8d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:16:35:12:04:71:05:85:23:af:80:f8:58:4c: 46:57:19:76:62:ed:0a:ff:d9:af:01:4e:2f:24:3d: c4:a2:ac:fc:37:d7:8e:f1:4e:7c:9b:e3:e3:5d:79: 83:c4:e2:62:29:01:05:61:4b:0e:62:4a:db:b8:78: f3:fe:8c:4c:c6:ee:48:24:e4:8d:fc:ea:ef:62:a3: ae:89:16:62:cd:9f:1e:09:bd:59:99:0c:4b:c1:97: 21:f5:49:06:ba:ff:94:f5:3e:64:50:df:69:cc:9c: 45:26:61:1c:d0:bc:62:67:a1:3b:5a:7f:39:7b:e4: ad:1f:64:d0:0f:4a:58:29:d6:11:7e:0b:a3:77:b6: 38:5c:7b:2d:81:e1:66:8d:4b:31:d9:12:e8:cb:b3: ef:14:cb:72:3a:90:ba:c5:61:e9:c8:4a:79:e1:cd: 0a:22:6f:da:93:81:2a:d2:29:27:0d:68:3a:fe:3e: 9e:06:9b:1d:06:76:9c:86:90:93:9a:d7:b2:1b:77: 97:23:d9:e0:e6:a5:30:10:ac:2d:01:81:6f:2c:f5: 9b:c0:c5:a9:33:d9:80:4a:4e:b9:e0:79:2f:f5:83: f8:75:e0:38:e7:b5:d8:4e:42:c8:b4:c5:a6:fb:e7: 24:bf:ba:3e:b1:f8:3c:7b:6b:49:89:f1:16:7f:ac: 2e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A4:FC:4F:EC:C1:BC:95:82:A9:9B:73:C5:D9:04:BE:37:6B:F8:D9 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/iaT8T-zBvJWCqZtzxdkEvjdr-Nk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.135.102.0/24 Signature Algorithm: sha256WithRSAEncryption 73:5b:76:a1:43:d0:4d:38:04:7e:3e:eb:3e:29:6e:bd:8b:f0: 6f:27:9a:8c:1d:68:7f:fa:36:83:3b:e6:65:40:da:6a:c1:98: 3b:2e:c5:06:37:89:07:02:32:5f:8f:fe:87:94:fa:d4:1a:03: 1c:e7:c9:0e:bf:cf:c8:b9:40:6e:8e:1c:5a:5c:0d:37:80:45: 8e:7d:a4:e5:00:15:05:ee:25:a7:3d:c8:3f:38:00:6f:2e:d4: 45:2c:47:35:d7:a2:8e:48:43:f0:80:17:a4:2a:17:60:20:2b: 84:e1:e0:37:41:a9:3e:0b:07:d7:46:a6:ca:4d:ed:41:02:1f: 2a:24:69:2b:5b:d8:2b:3d:b8:d0:6e:84:e0:d2:1f:a5:b0:2d: 1d:f4:5c:cb:4c:6f:7a:43:83:25:eb:ea:bb:cb:3e:9e:85:4d: 6b:40:79:7c:fb:96:35:3d:2f:33:4c:90:d1:3e:3a:42:e0:9a: 22:59:24:23:32:65:8b:c1:5a:83:c0:cb:96:22:76:0c:19:dc: ca:83:27:bd:99:94:4f:41:53:12:80:3d:21:3e:9c:da:54:71: 95:2a:44:b1:9d:c6:38:ac:08:20:8c:8a:e7:38:68:fc:b5:10: 65:cf:7f:03:95:f9:5e:25:a2:09:5b:5c:a9:0b:a9:ab:1e:a0: 63:af:94:6b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EErTd8MWdEBZ/WSVNBiAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OWE0ZmM0ZmVjYzFiYzk1ODJhOTliNzNjNWQ5MDRiZTM3NmJmOGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRY1EgRxBYUjr4D4WExGVxl2Yu0K /9mvAU4vJD3Eoqz8N9eO8U58m+PjXXmDxOJiKQEFYUsOYkrbuHjz/oxMxu5IJOSN /OrvYqOuiRZizZ8eCb1ZmQxLwZch9UkGuv+U9T5kUN9pzJxFJmEc0LxiZ6E7Wn85 e+StH2TQD0pYKdYRfgujd7Y4XHstgeFmjUsx2RLoy7PvFMtyOpC6xWHpyEp54c0K Im/ak4Eq0iknDWg6/j6eBpsdBnachpCTmteyG3eXI9ng5qUwEKwtAYFvLPWbwMWp M9mASk654Hkv9YP4deA457XYTkLItMWm++ckv7o+sfg8e2tJifEWf6wuswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFImk/E/swbyVgqmbc8XZBL43a/jZMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvaWFUOFQtekJ2SldDcVp0enhka0V2amRyLU5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATodmMA0G CSqGSIb3DQEBCwUAA4IBAQBzW3ahQ9BNOAR+Pus+KW69i/BvJ5qMHWh/+jaDO+Zl QNpqwZg7LsUGN4kHAjJfj/6HlPrUGgMc58kOv8/IuUBujhxaXA03gEWOfaTlABUF 7iWnPcg/OABvLtRFLEc116KOSEPwgBekKhdgICuE4eA3Qak+CwfXRqbKTe1BAh8q JGkrW9grPbjQboTg0h+lsC0d9FzLTG96Q4Ml6+q7yz6ehU1rQHl8+5Y1PS8zTJDR PjpC4JoiWSQjMmWLwVqDwMuWInYMGdzKgye9mZRPQVMSgD0hPpzaVHGVKkSxncY4 rAggjIrnOGj8tRBlz38DlfleJaIJW1ypC6mrHqBjr5Rr -----END CERTIFICATE-----Generated at Wed Jan 21 13:34:51 2026 by rpki-client