This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/49joF_4IAz2wl7KbPrKLoLa3pRQ.roa File: 49joF_4IAz2wl7KbPrKLoLa3pRQ.roa (raw, json) Hash identifier: fdsATKk2aFvQW4eJks7KIlsXE+EQbgWm1W06MslxugE= Subject key identifier: E3:D8:E8:17:FE:08:03:3D:B0:97:B2:9B:3E:B2:8B:A0:B6:B7:A5:14 Certificate issuer: /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113 Certificate serial: 019B7DCA952290487CFBDF0A50C2EE2CA27C Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/49joF_4IAz2wl7KbPrKLoLa3pRQ.roa Signing time: Fri 02 Jan 2026 08:19:47 +0000 ROA not before: Fri 02 Jan 2026 08:19:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209372 IP address blocks: 78.136.255.0/24 maxlen: 24 194.76.192.0/24 maxlen: 24 194.76.218.0/24 maxlen: 24 194.76.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 13:16:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:95:22:90:48:7c:fb:df:0a:50:c2:ee:2c:a2:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113 Validity Not Before: Jan 2 08:19:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3d8e817fe08033db097b29b3eb28ba0b6b7a514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:80:e9:46:2a:eb:45:20:28:5a:2d:e7:74:e6: b1:0a:4c:36:9d:61:ad:6c:2b:1f:a7:65:01:dc:2c: 71:42:dc:7d:31:41:1b:69:32:4f:fe:e0:91:28:33: 4c:96:57:aa:bc:c2:95:31:3a:0a:b9:15:b1:4b:e5: f7:dc:c7:64:82:0f:71:ab:4a:83:3e:05:60:a3:6d: 6f:c6:30:c0:20:fb:fc:c5:44:ca:18:f7:80:43:0a: a7:31:e9:09:f8:ad:15:80:08:4b:4e:5e:ed:59:8f: 9f:d4:2c:51:15:92:bb:e2:42:cb:7c:9d:ac:cf:23: e0:ab:ef:f9:09:86:7b:8d:70:94:76:f1:8e:a3:7a: 23:10:2f:b0:88:fc:80:44:ac:6b:5f:d5:74:c8:d6: e0:5b:1a:a2:1b:4e:18:9b:4f:55:f2:3d:51:2d:2e: dc:ee:e7:84:42:00:05:5e:55:3c:4c:4d:ef:4f:f6: 4d:df:ed:ea:ef:69:30:c5:b1:70:46:78:fc:0f:78: bf:92:62:ba:39:8b:4f:ca:de:c6:c5:ac:4c:9f:ba: 8a:55:5c:28:42:0a:a7:4b:56:05:55:ba:09:61:cf: 84:ca:db:66:68:06:cd:c0:6b:3a:55:b1:89:d3:7f: f9:ce:96:b4:c4:13:16:a7:bb:ec:b6:e3:6d:48:0c: 52:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D8:E8:17:FE:08:03:3D:B0:97:B2:9B:3E:B2:8B:A0:B6:B7:A5:14 X509v3 Authority Key Identifier: keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/49joF_4IAz2wl7KbPrKLoLa3pRQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.136.255.0/24 194.76.192.0/24 194.76.218.0/24 194.76.238.0/24 Signature Algorithm: sha256WithRSAEncryption 93:88:da:9e:ce:9b:8e:82:4c:b9:0b:79:fe:49:08:bf:26:35: ec:f4:15:7a:20:ff:c3:4f:71:51:8f:53:fb:15:b7:cc:1d:b3: 32:d5:b9:fc:33:fb:eb:a2:1e:51:af:8c:65:bc:d9:04:3c:71: 4a:80:7c:23:d8:0e:38:21:85:75:66:4f:51:e3:ae:29:25:1c: 33:1d:91:1c:5d:75:27:39:2b:a2:08:2a:bf:f8:dc:16:e0:90: 61:a5:c5:de:25:3f:41:d8:e1:9d:42:22:5b:ac:f2:50:dc:7f: a9:0c:96:bf:8a:a1:f1:cf:f8:90:4b:13:f9:bb:63:35:02:0f: 9b:fc:35:23:f0:63:ae:38:8a:e7:04:18:d4:f5:78:cc:32:5c: 0b:99:db:ed:99:27:04:04:6a:10:cc:52:12:12:4d:db:00:9d: 7d:64:8b:90:56:6c:62:25:21:45:d9:e8:06:82:e2:ec:96:1a: 3f:ad:c6:3d:d7:a1:4d:ac:d6:a8:81:3c:50:f2:f5:ad:9c:31: 72:9f:8f:ec:35:44:6a:dd:74:a0:78:28:7f:dd:2c:47:30:83: ad:76:91:3e:00:22:44:a8:07:89:d0:c2:bb:de:75:cf:8e:ec: 18:0f:61:a2:e2:56:b2:a0:3d:0e:e6:28:b6:15:b2:16:01:fa: 28:6e:57:17 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9ypUikEh8+98KUMLuLKJ8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MzA2ZjY4YWVhNGJhZTEyNGZhYzg1ZjJjOWFhM2Y1YWU4 NTAxMTMwHhcNMjYwMTAyMDgxOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2Q4ZTgxN2ZlMDgwMzNkYjA5N2IyOWIzZWIyOGJhMGI2YjdhNTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYDpRirrRSAoWi3ndOaxCkw2nWGt bCsfp2UB3CxxQtx9MUEbaTJP/uCRKDNMlleqvMKVMToKuRWxS+X33Mdkgg9xq0qD PgVgo21vxjDAIPv8xUTKGPeAQwqnMekJ+K0VgAhLTl7tWY+f1CxRFZK74kLLfJ2s zyPgq+/5CYZ7jXCUdvGOo3ojEC+wiPyARKxrX9V0yNbgWxqiG04Ym09V8j1RLS7c 7ueEQgAFXlU8TE3vT/ZN3+3q72kwxbFwRnj8D3i/kmK6OYtPyt7GxaxMn7qKVVwo QgqnS1YFVboJYc+EyttmaAbNwGs6VbGJ03/5zpa0xBMWp7vstuNtSAxS/wIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOPY6Bf+CAM9sJeymz6yi6C2t6UUMB8GA1UdIwQY MBaAFJQwb2iupLrhJPrIXyyao/WuhQETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC81ZmQ4OGUtZmZiNi00NjUyLWE5OTAt M2Q4YmM4OWI0NDI3LzEvNDlqb0ZfNElBejJ3bDdLYlByS0xvTGEzcFJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC81ZmQ4OGUtZmZiNi00NjUyLWE5OTAtM2Q4YmM4OWI0NDI3 LzEvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAToj/AwQA wkzAAwQAwkzaAwQAwkzuMA0GCSqGSIb3DQEBCwUAA4IBAQCTiNqezpuOgky5C3n+ SQi/JjXs9BV6IP/DT3FRj1P7FbfMHbMy1bn8M/vroh5Rr4xlvNkEPHFKgHwj2A44 IYV1Zk9R464pJRwzHZEcXXUnOSuiCCq/+NwW4JBhpcXeJT9B2OGdQiJbrPJQ3H+p DJa/iqHxz/iQSxP5u2M1Ag+b/DUj8GOuOIrnBBjU9XjMMlwLmdvtmScEBGoQzFIS Ek3bAJ19ZIuQVmxiJSFF2egGguLslho/rcY916FNrNaogTxQ8vWtnDFyn4/sNURq 3XSgeCh/3SxHMIOtdpE+ACJEqAeJ0MK73nXPjuwYD2Gi4layoD0O5ii2FbIWAfoo blcX -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:53 2026 by rpki-client