This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/iN8E5J8FWFCEMY65ALgZit2wZ5o.roa File: iN8E5J8FWFCEMY65ALgZit2wZ5o.roa (raw, json) Hash identifier: 3gIZ7quZRp5VH+343KfEOmSv0A/IFrhSpW84UgHzh6Y= Subject key identifier: 88:DF:04:E4:9F:05:58:50:84:31:8E:B9:00:B8:19:8A:DD:B0:67:9A Certificate issuer: /CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39 Certificate serial: 019B79105F8CF0ABC294F6BB3AF526F83BD1 Authority key identifier: 68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/iN8E5J8FWFCEMY65ALgZit2wZ5o.roa Signing time: Thu 01 Jan 2026 10:17:54 +0000 ROA not before: Thu 01 Jan 2026 10:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 147.78.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.mft rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:5f:8c:f0:ab:c2:94:f6:bb:3a:f5:26:f8:3b:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68e8baea95d4040348f0a89ec4e4bd15275f6c39 Validity Not Before: Jan 1 10:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88df04e49f05585084318eb900b8198addb0679a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:fc:79:bf:ba:17:6e:95:3d:64:ed:ee:48:ee: 43:10:86:9e:17:74:16:c4:e4:c4:c4:34:84:91:da: 0e:8a:b4:1c:b7:87:19:da:f6:73:4c:26:64:40:44: 13:30:06:92:a3:96:92:e6:ce:da:e2:d9:22:f1:42: 5d:c5:90:5b:70:36:4a:36:e0:a6:cc:6a:b5:f0:1f: a6:df:88:6f:77:6f:63:35:aa:f4:1c:5d:17:f1:21: 03:8b:18:2b:3a:92:b6:0b:3f:95:16:85:88:f8:07: 18:e5:4a:4b:45:fe:a1:47:d5:53:8f:b1:ac:4b:6c: ef:40:01:71:95:94:a9:2b:c7:23:5b:27:cb:6d:38: 4b:ff:74:04:82:b3:e5:dc:35:4a:df:6f:7a:26:af: 87:e3:f5:c8:5e:25:da:4b:8b:0e:7e:c5:b1:38:cc: 94:5e:fd:4c:ce:85:3e:e4:d8:e7:6c:22:ca:ab:a6: eb:47:95:7b:65:57:81:03:83:0e:25:ea:f2:87:ef: 56:11:d7:66:a0:a0:60:e6:2c:be:37:f9:21:cf:3b: ee:a4:a6:f0:80:3e:c1:0c:d8:e5:0a:e3:1a:9c:d2: 9c:1b:22:ad:05:15:48:9a:ab:ae:a4:5e:f1:19:e3: 53:cc:0f:31:fd:c2:b4:7c:20:77:75:6f:e7:70:b3: 32:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:DF:04:E4:9F:05:58:50:84:31:8E:B9:00:B8:19:8A:DD:B0:67:9A X509v3 Authority Key Identifier: keyid:68:E8:BA:EA:95:D4:04:03:48:F0:A8:9E:C4:E4:BD:15:27:5F:6C:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aOi66pXUBANI8KiexOS9FSdfbDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/iN8E5J8FWFCEMY65ALgZit2wZ5o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7653e0-8a72-4351-bfce-3711fae8ca77/1/aOi66pXUBANI8KiexOS9FSdfbDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.32.0/24 Signature Algorithm: sha256WithRSAEncryption c0:16:d1:30:af:55:d9:d8:9e:98:dc:b1:32:10:93:f0:f7:71: 13:e0:d3:78:7b:6c:a8:3a:41:f0:a9:7b:01:38:ce:aa:04:3f: d6:5f:bb:fb:12:05:8b:49:b2:96:53:4a:fd:d6:87:6e:4f:d2: 17:48:14:24:13:6d:0d:f3:19:7e:73:23:d4:5b:04:9e:d3:3c: 25:84:26:2e:17:e3:f2:b1:18:d3:fa:0f:1d:40:2b:75:48:14: 72:6c:0e:43:5f:d9:e8:87:09:ff:8a:ff:40:5a:e9:88:e0:6b: d4:94:53:d8:c5:1f:ec:7b:67:06:7d:1f:66:0d:7d:a8:6b:3d: d0:23:a2:42:13:1c:4c:4e:d4:48:7d:ca:ed:8b:a4:48:d8:a7: a5:91:13:24:74:a5:b7:f5:cb:60:5e:ac:e2:c0:ce:d9:27:55: 3e:3e:4b:b0:2b:d5:3d:f9:a9:7e:cd:7e:92:19:01:a7:99:a8: 31:51:e4:3d:b5:b5:62:f3:15:1e:72:17:87:a4:87:b8:1d:73: 27:14:4e:0d:89:a7:6b:58:b7:58:01:64:f8:4c:74:cb:ec:6e: 0a:c2:e5:d8:a8:64:2f:4c:62:02:39:c3:36:7f:8f:6d:9f:a8: 40:41:f6:5b:e5:b8:10:65:1e:d9:c5:8c:b6:f8:22:1b:b9:50: c7:33:da:35 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EF+M8KvClPa7OvUm+DvRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZThiYWVhOTVkNDA0MDM0OGYwYTg5ZWM0ZTRiZDE1Mjc1 ZjZjMzkwHhcNMjYwMTAxMTAxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGRmMDRlNDlmMDU1ODUwODQzMThlYjkwMGI4MTk4YWRkYjA2NzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8fx5v7oXbpU9ZO3uSO5DEIaeF3QW xOTExDSEkdoOirQct4cZ2vZzTCZkQEQTMAaSo5aS5s7a4tki8UJdxZBbcDZKNuCm zGq18B+m34hvd29jNar0HF0X8SEDixgrOpK2Cz+VFoWI+AcY5UpLRf6hR9VTj7Gs S2zvQAFxlZSpK8cjWyfLbThL/3QEgrPl3DVK3296Jq+H4/XIXiXaS4sOfsWxOMyU Xv1MzoU+5NjnbCLKq6brR5V7ZVeBA4MOJeryh+9WEddmoKBg5iy+N/khzzvupKbw gD7BDNjlCuManNKcGyKtBRVImquupF7xGeNTzA8x/cK0fCB3dW/ncLMyuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIjfBOSfBVhQhDGOuQC4GYrdsGeaMB8GA1UdIwQY MBaAFGjouuqV1AQDSPConsTkvRUnX2w5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU9pNjZwWFVCQU5JOEtpZXhPUzlGU2RmYkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83NjUzZTAtOGE3Mi00MzUxLWJmY2Ut MzcxMWZhZThjYTc3LzEvaU44RTVKOEZXRkNFTVk2NUFMZ1ppdDJ3WjVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny83NjUzZTAtOGE3Mi00MzUxLWJmY2UtMzcxMWZhZThjYTc3 LzEvYU9pNjZwWFVCQU5JOEtpZXhPUzlGU2RmYkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk04gMA0G CSqGSIb3DQEBCwUAA4IBAQDAFtEwr1XZ2J6Y3LEyEJPw93ET4NN4e2yoOkHwqXsB OM6qBD/WX7v7EgWLSbKWU0r91oduT9IXSBQkE20N8xl+cyPUWwSe0zwlhCYuF+Py sRjT+g8dQCt1SBRybA5DX9nohwn/iv9AWumI4GvUlFPYxR/se2cGfR9mDX2oaz3Q I6JCExxMTtRIfcrti6RI2KelkRMkdKW39ctgXqziwM7ZJ1U+PkuwK9U9+al+zX6S GQGnmagxUeQ9tbVi8xUecheHpIe4HXMnFE4NiadrWLdYAWT4THTL7G4KwuXYqGQv TGICOcM2f49tn6hAQfZb5bgQZR7ZxYy2+CIbuVDHM9o1 -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:46 2026 by rpki-client