This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/aIIL3zN4ZUN1hFPhWa5OB2tT7BE.roa File: aIIL3zN4ZUN1hFPhWa5OB2tT7BE.roa (raw, json) Hash identifier: fzKmg/Y3EsolCl+9NGvW6oDouQRm2edVgKukMEtlQJI= Subject key identifier: 68:82:0B:DF:33:78:65:43:75:84:53:E1:59:AE:4E:07:6B:53:EC:11 Certificate issuer: /CN=8017eaa1daaf225f453802a33baf9638cccd77a5 Certificate serial: 019B76EB17226CE37B45714FE2F24F814E2A Authority key identifier: 80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/aIIL3zN4ZUN1hFPhWa5OB2tT7BE.roa Signing time: Thu 01 Jan 2026 00:17:56 +0000 ROA not before: Thu 01 Jan 2026 00:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400810 IP address blocks: 78.24.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.mft rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:17:22:6c:e3:7b:45:71:4f:e2:f2:4f:81:4e:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8017eaa1daaf225f453802a33baf9638cccd77a5 Validity Not Before: Jan 1 00:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68820bdf33786543758453e159ae4e076b53ec11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2a:6d:6f:ce:62:cc:39:db:ed:37:00:5e:92: 4c:97:1f:74:6a:cc:3a:ef:7c:c7:40:74:3a:af:77: 4b:72:a4:10:d2:01:3e:32:a9:0d:c9:5d:ea:a1:2c: cd:24:de:7b:91:0c:bf:21:e1:9e:69:85:6b:4b:70: 6e:be:1d:4a:3a:97:c8:65:eb:c9:8c:98:60:85:90: 6d:11:26:e4:32:f0:3f:94:00:f0:e4:56:16:f1:3a: 0f:a0:b0:fd:f9:15:68:64:a4:a1:93:c1:07:43:d7: 34:fb:d2:0e:48:4e:22:8f:eb:2d:85:e3:70:06:55: 78:01:5b:cb:f2:00:e2:39:84:71:8e:a4:49:34:87: eb:ce:08:85:5c:9c:20:2d:da:ea:84:55:16:e5:eb: b6:31:80:a9:6d:6d:5a:80:2a:fd:e4:27:f4:a0:9e: 13:8e:b5:d0:f3:cd:d8:d2:ae:4b:9c:2f:9b:46:a8: e1:dd:a1:08:11:42:e6:2a:bb:67:b8:7b:d4:d2:95: 2e:b5:3f:1d:0b:0d:89:4b:7b:59:a5:22:bf:95:2b: 74:76:da:96:0e:f5:29:26:48:3e:35:e1:e4:af:58: 10:f4:16:71:8f:ca:98:43:6c:a5:97:31:07:6a:23: 20:86:dd:79:7e:76:5e:10:1b:32:89:f8:a5:3a:78: cf:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:82:0B:DF:33:78:65:43:75:84:53:E1:59:AE:4E:07:6B:53:EC:11 X509v3 Authority Key Identifier: keyid:80:17:EA:A1:DA:AF:22:5F:45:38:02:A3:3B:AF:96:38:CC:CD:77:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gBfqodqvIl9FOAKjO6-WOMzNd6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/aIIL3zN4ZUN1hFPhWa5OB2tT7BE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/4ccd40-e32b-436d-ad7c-62c7fde4838a/1/gBfqodqvIl9FOAKjO6-WOMzNd6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.24.205.0/24 Signature Algorithm: sha256WithRSAEncryption 71:6e:10:05:7d:65:56:37:92:52:2b:5f:1c:96:41:31:41:67: 68:72:27:8c:73:70:43:88:09:f5:5c:9e:c1:c8:69:8e:f9:53: 6b:e2:2c:f5:ee:fc:43:c7:81:7e:e4:ff:41:f8:91:cc:89:41: f5:8f:68:e3:03:29:a6:74:ee:ea:fc:43:47:c5:d1:13:58:04: cf:3e:10:f7:fb:50:e0:a0:15:96:61:89:ab:8d:54:f7:83:c0: 14:52:4c:af:e0:f4:1e:56:3a:85:a3:42:ad:1f:cc:c3:7f:18: b5:c3:3c:aa:a3:46:c4:53:b3:4e:98:91:d4:2d:fb:90:d4:ac: 8c:4b:d5:d0:b5:00:30:f2:df:38:4c:84:c5:87:e7:89:29:d8: 11:b1:df:0d:69:4e:0a:8c:4b:be:cf:90:6e:a2:6f:81:19:7c: ae:ee:a4:d5:a8:11:6b:44:7b:16:87:5e:49:97:30:46:70:37: b6:0f:ae:06:15:2e:7f:ec:bd:75:15:bf:c2:8b:1f:3a:fb:c1: 78:79:08:ab:73:e4:fb:67:22:a7:f3:fd:4a:94:2a:aa:57:97: 3d:e8:3c:b5:bc:c0:57:98:bf:9e:3a:28:59:d7:4c:7d:69:88: f9:a5:15:78:68:13:46:fc:ac:56:a7:c0:94:99:fc:06:0d:80: a3:e5:e7:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26xcibON7RXFP4vJPgU4qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwMTdlYWExZGFhZjIyNWY0NTM4MDJhMzNiYWY5NjM4Y2Nj ZDc3YTUwHhcNMjYwMTAxMDAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODgyMGJkZjMzNzg2NTQzNzU4NDUzZTE1OWFlNGUwNzZiNTNlYzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSptb85izDnb7TcAXpJMlx90asw6 73zHQHQ6r3dLcqQQ0gE+MqkNyV3qoSzNJN57kQy/IeGeaYVrS3Buvh1KOpfIZevJ jJhghZBtESbkMvA/lADw5FYW8ToPoLD9+RVoZKShk8EHQ9c0+9IOSE4ij+stheNw BlV4AVvL8gDiOYRxjqRJNIfrzgiFXJwgLdrqhFUW5eu2MYCpbW1agCr95Cf0oJ4T jrXQ883Y0q5LnC+bRqjh3aEIEULmKrtnuHvU0pUutT8dCw2JS3tZpSK/lSt0dtqW DvUpJkg+NeHkr1gQ9BZxj8qYQ2yllzEHaiMght15fnZeEBsyifilOnjP1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGiCC98zeGVDdYRT4VmuTgdrU+wRMB8GA1UdIwQY MBaAFIAX6qHaryJfRTgCozuvljjMzXelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0JmcW9kcXZJbDlGT0FLak82LVdPTXpOZDZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi80Y2NkNDAtZTMyYi00MzZkLWFkN2Mt NjJjN2ZkZTQ4MzhhLzEvYUlJTDN6TjRaVU4xaEZQaFdhNU9CMnRUN0JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi80Y2NkNDAtZTMyYi00MzZkLWFkN2MtNjJjN2ZkZTQ4Mzhh LzEvZ0JmcW9kcXZJbDlGT0FLak82LVdPTXpOZDZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAThjNMA0G CSqGSIb3DQEBCwUAA4IBAQBxbhAFfWVWN5JSK18clkExQWdocieMc3BDiAn1XJ7B yGmO+VNr4iz17vxDx4F+5P9B+JHMiUH1j2jjAymmdO7q/ENHxdETWATPPhD3+1Dg oBWWYYmrjVT3g8AUUkyv4PQeVjqFo0KtH8zDfxi1wzyqo0bEU7NOmJHULfuQ1KyM S9XQtQAw8t84TITFh+eJKdgRsd8NaU4KjEu+z5Buom+BGXyu7qTVqBFrRHsWh15J lzBGcDe2D64GFS5/7L11Fb/Cix86+8F4eQirc+T7ZyKn8/1KlCqqV5c96Dy1vMBX mL+eOihZ10x9aYj5pRV4aBNG/KxWp8CUmfwGDYCj5efv -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:34 2026 by rpki-client