This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/xNzlqIdQI7oMtKDxaXf_0TaLaUM.roa File: xNzlqIdQI7oMtKDxaXf_0TaLaUM.roa (raw, json) Hash identifier: WQ0y34fbNzqRc0qkAeQwgc+YtqaA9qqf5zWNsZic2fg= Subject key identifier: C4:DC:E5:A8:87:50:23:BA:0C:B4:A0:F1:69:77:FF:D1:36:8B:69:43 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B791074FB749B7F176F3D3198D77F5C6D Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/xNzlqIdQI7oMtKDxaXf_0TaLaUM.roa Signing time: Thu 01 Jan 2026 10:18:00 +0000 ROA not before: Thu 01 Jan 2026 10:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215531 IP address blocks: 78.135.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:74:fb:74:9b:7f:17:6f:3d:31:98:d7:7f:5c:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4dce5a8875023ba0cb4a0f16977ffd1368b6943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:37:b7:e5:9d:f4:a0:09:75:94:12:67:ad:21: 3a:6e:c8:d5:92:27:b2:41:ed:e7:28:11:60:d1:52: 3e:ad:9f:44:e4:db:2f:04:5e:67:c7:d1:e4:e7:0b: 45:19:c8:5a:42:24:1b:40:1d:7c:49:28:20:ea:1a: 33:b3:75:49:26:ba:83:50:09:e7:b1:58:e3:74:e9: dc:ec:5b:22:75:2a:ac:eb:fc:4f:e0:0e:8b:ee:83: 30:44:e0:ec:6c:0f:b5:58:66:82:53:1c:47:85:30: 9f:de:d3:02:64:e9:15:7a:3f:24:e5:d2:26:7c:e5: 23:66:3d:3f:e7:97:99:5a:a5:2c:9a:2e:39:18:aa: e9:96:21:6a:c0:dd:6c:a5:ea:5d:93:61:0c:8e:5e: d7:91:0b:20:53:7a:81:62:39:6d:95:8d:56:fc:4b: a2:db:2a:70:6c:3b:87:5a:f5:ba:15:f0:57:5e:a3: 4e:fd:4e:7c:6c:b2:98:95:ea:f1:6f:3b:e2:32:68: 82:bd:60:3c:97:c0:f7:ef:10:98:47:2e:de:ef:51: c4:49:3f:32:3f:1e:fe:89:58:0d:3d:fe:76:1e:24: d6:40:49:db:2b:e1:42:52:75:86:d8:23:02:d3:84: 41:40:62:88:a5:be:f2:d5:c1:5e:a8:95:7b:3d:2f: f3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DC:E5:A8:87:50:23:BA:0C:B4:A0:F1:69:77:FF:D1:36:8B:69:43 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/xNzlqIdQI7oMtKDxaXf_0TaLaUM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.135.81.0/24 Signature Algorithm: sha256WithRSAEncryption 01:03:d4:75:73:3d:5d:10:e5:76:59:66:0a:4d:19:ed:f1:78: e3:82:d3:a3:7f:94:cf:19:c1:3b:de:0f:e5:47:28:ea:20:84: 71:39:30:93:1d:2b:80:81:a3:68:24:54:96:a7:50:81:f3:ed: a7:17:f6:f1:2d:85:8e:c7:69:0f:ff:eb:b1:a2:cf:a0:6e:d8: a4:92:01:25:bb:43:3e:ee:2d:df:d8:d8:ad:ca:1b:15:41:db: 40:bf:f5:29:90:6c:dd:b0:6a:b9:bb:81:7b:42:6e:6c:96:f7: f1:d6:c6:5b:22:c8:bb:d4:de:8a:3f:23:d4:d1:2b:00:3e:66: 8e:85:d5:5e:09:36:83:38:0b:c9:aa:95:49:c8:a0:47:e5:b5: af:2d:6c:ec:75:8c:20:5d:1d:af:1e:ab:fc:3e:41:ac:66:e6: 3a:00:8f:11:3c:6e:47:71:d5:dd:b2:ca:6f:38:2c:d2:d5:84: 16:12:48:b6:69:07:27:ee:df:55:97:91:01:a1:94:ba:5e:42: e4:4f:27:96:fa:a9:75:78:18:da:be:84:32:df:cb:1f:fb:0d: 7e:d6:15:48:62:54:9c:bf:20:6e:2f:71:10:9d:54:ee:6a:3a: d9:2c:7b:47:04:09:1d:3a:90:d6:d4:42:86:c6:0b:2e:ec:a2: 39:e6:d2:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EHT7dJt/F289MZjXf1xtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGRjZTVhODg3NTAyM2JhMGNiNGEwZjE2OTc3ZmZkMTM2OGI2OTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyje35Z30oAl1lBJnrSE6bsjVkiey Qe3nKBFg0VI+rZ9E5NsvBF5nx9Hk5wtFGchaQiQbQB18SSgg6hozs3VJJrqDUAnn sVjjdOnc7FsidSqs6/xP4A6L7oMwRODsbA+1WGaCUxxHhTCf3tMCZOkVej8k5dIm fOUjZj0/55eZWqUsmi45GKrpliFqwN1spepdk2EMjl7XkQsgU3qBYjltlY1W/Eui 2ypwbDuHWvW6FfBXXqNO/U58bLKYlerxbzviMmiCvWA8l8D37xCYRy7e71HEST8y Px7+iVgNPf52HiTWQEnbK+FCUnWG2CMC04RBQGKIpb7y1cFeqJV7PS/z+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMTc5aiHUCO6DLSg8Wl3/9E2i2lDMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEveE56bHFJZFFJN29NdEtEeGFYZl8wVGFMYVVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATodRMA0G CSqGSIb3DQEBCwUAA4IBAQABA9R1cz1dEOV2WWYKTRnt8XjjgtOjf5TPGcE73g/l RyjqIIRxOTCTHSuAgaNoJFSWp1CB8+2nF/bxLYWOx2kP/+uxos+gbtikkgElu0M+ 7i3f2NityhsVQdtAv/UpkGzdsGq5u4F7Qm5slvfx1sZbIsi71N6KPyPU0SsAPmaO hdVeCTaDOAvJqpVJyKBH5bWvLWzsdYwgXR2vHqv8PkGsZuY6AI8RPG5HcdXdsspv OCzS1YQWEki2aQcn7t9Vl5EBoZS6XkLkTyeW+ql1eBjavoQy38sf+w1+1hVIYlSc vyBuL3EQnVTuajrZLHtHBAkdOpDW1EKGxgsu7KI55tKd -----END CERTIFICATE-----Generated at Wed Jan 21 13:34:39 2026 by rpki-client