This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/rfvJbHRZSe3sgjzCEZ4JPvMBhhY.roa File: rfvJbHRZSe3sgjzCEZ4JPvMBhhY.roa (raw, json) Hash identifier: 7abwDWSK63iX+gVofJy2we8eWy7SgGApq/w6ny7NFpA= Subject key identifier: AD:FB:C9:6C:74:59:49:ED:EC:82:3C:C2:11:9E:09:3E:F3:01:86:16 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019AD93E463353D73C55D755F1782097574F Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/rfvJbHRZSe3sgjzCEZ4JPvMBhhY.roa Signing time: Mon 01 Dec 2025 09:28:48 +0000 ROA not before: Mon 01 Dec 2025 09:28:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 215531 IP address blocks: 78.135.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:d9:3e:46:33:53:d7:3c:55:d7:55:f1:78:20:97:57:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Dec 1 09:28:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=adfbc96c745949edec823cc2119e093ef3018616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:89:ab:c3:77:28:1c:28:b0:f8:7e:0e:3a:19: b0:38:34:84:c4:5b:2f:86:18:19:80:08:b2:f1:14: e5:38:2c:b5:32:a3:c8:30:8f:05:86:57:76:00:42: 6f:31:25:be:36:58:91:6a:17:26:2a:fc:c0:94:c5: a0:73:d6:d3:30:43:10:f7:a9:94:2e:fc:0a:ac:f0: 10:48:b7:18:a7:3c:d3:fa:a3:8d:74:92:7b:8b:ee: 45:be:ae:56:03:f6:6d:1d:39:1d:d8:f0:34:80:c4: d5:02:01:7c:90:83:fc:c4:55:63:33:e9:10:de:91: bb:42:b2:24:ff:77:75:6b:fb:40:d4:12:89:e5:e3: 85:37:97:38:ed:36:28:fe:5e:0c:18:e1:9a:ef:33: 76:da:ff:06:d9:a9:17:a8:26:a1:3d:1f:0f:39:47: 8e:f7:61:68:9e:ff:f5:42:99:e4:a4:cf:6d:2c:07: d3:48:c9:fe:e3:82:73:41:a7:73:48:4e:36:51:35: f7:df:b8:09:99:1e:03:79:a5:77:82:bf:1c:10:3d: 6b:d4:ee:ff:bd:49:96:d8:6f:48:a0:f5:09:27:b3: ef:3f:68:2b:31:1f:70:5e:80:75:b1:da:d4:37:20: 0e:8c:97:f9:6c:32:bc:19:09:c5:40:45:ab:ce:b2: 52:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FB:C9:6C:74:59:49:ED:EC:82:3C:C2:11:9E:09:3E:F3:01:86:16 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/rfvJbHRZSe3sgjzCEZ4JPvMBhhY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.135.81.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:f8:9b:b6:20:16:d4:34:20:5f:bc:e9:87:3d:06:f1:4d:4f: fc:27:e6:96:89:e5:c8:f4:20:de:31:5b:ff:2d:08:5e:65:8b: bc:14:96:9e:ba:be:9e:cf:cc:d3:61:f5:03:89:7e:8f:f2:70: 27:04:22:c9:ee:7a:48:3f:72:69:20:83:88:0d:66:2e:87:c2: 2b:54:d6:48:24:f4:01:24:df:d0:97:e2:51:f8:76:96:87:4c: 7a:14:de:8d:57:dd:90:4a:6f:0b:11:36:a4:cf:e2:54:e9:e4: 90:4c:63:43:f0:de:29:21:de:ac:b3:13:2c:97:95:a7:d4:79: d2:4a:82:23:9a:41:f4:f1:a6:f6:03:54:28:b4:d5:9f:67:c8: 83:11:e5:32:70:2d:44:12:3c:2a:7f:d0:40:5b:40:39:51:46: 92:62:34:33:f5:60:9b:39:e2:53:1c:a9:62:5c:08:29:19:43: 5c:f8:22:86:bb:5b:2f:3e:54:a7:35:4e:2a:49:b7:11:19:c5: 4a:99:73:e8:07:5d:0f:37:e1:9f:86:0e:cd:25:a4:2e:9e:d9: c7:f8:5e:20:ab:66:31:a0:81:94:35:a8:dc:d6:a1:82:2d:04: 12:b5:d1:78:42:e7:d5:55:7d:24:66:58:a2:5a:26:ce:92:85: ed:f2:af:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrZPkYzU9c8VddV8Xggl1dPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjUxMjAxMDkyODQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGZiYzk2Yzc0NTk0OWVkZWM4MjNjYzIxMTllMDkzZWYzMDE4NjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwImrw3coHCiw+H4OOhmwODSExFsv hhgZgAiy8RTlOCy1MqPIMI8Fhld2AEJvMSW+NliRahcmKvzAlMWgc9bTMEMQ96mU LvwKrPAQSLcYpzzT+qONdJJ7i+5Fvq5WA/ZtHTkd2PA0gMTVAgF8kIP8xFVjM+kQ 3pG7QrIk/3d1a/tA1BKJ5eOFN5c47TYo/l4MGOGa7zN22v8G2akXqCahPR8POUeO 92Fonv/1QpnkpM9tLAfTSMn+44JzQadzSE42UTX337gJmR4DeaV3gr8cED1r1O7/ vUmW2G9IoPUJJ7PvP2grMR9wXoB1sdrUNyAOjJf5bDK8GQnFQEWrzrJSbwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK37yWx0WUnt7II8whGeCT7zAYYWMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvcmZ2SmJIUlpTZTNzZ2p6Q0VaNEpQdk1CaGhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATodRMA0G CSqGSIb3DQEBCwUAA4IBAQAK+Ju2IBbUNCBfvOmHPQbxTU/8J+aWieXI9CDeMVv/ LQheZYu8FJaeur6ez8zTYfUDiX6P8nAnBCLJ7npIP3JpIIOIDWYuh8IrVNZIJPQB JN/Ql+JR+HaWh0x6FN6NV92QSm8LETakz+JU6eSQTGND8N4pId6ssxMsl5Wn1HnS SoIjmkH08ab2A1QotNWfZ8iDEeUycC1EEjwqf9BAW0A5UUaSYjQz9WCbOeJTHKli XAgpGUNc+CKGu1svPlSnNU4qSbcRGcVKmXPoB10PN+Gfhg7NJaQuntnH+F4gq2Yx oIGUNajc1qGCLQQStdF4QufVVX0kZliiWibOkoXt8q/K -----END CERTIFICATE-----Generated at Sun Dec 7 03:27:02 2025 by rpki-client