This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/gU_DFsw1i7Mrmms493aHhV3X97I.roa File: gU_DFsw1i7Mrmms493aHhV3X97I.roa (raw, json) Hash identifier: Xuww54GOBuOopCkJwxsjxENEGeQxpUGHwuosFzJt3EU= Subject key identifier: 81:4F:C3:16:CC:35:8B:B3:2B:9A:6B:38:F7:76:87:85:5D:D7:F7:B2 Certificate issuer: /CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa Certificate serial: 019B77595713D3BAD0297F32B4F86F5707DE Authority key identifier: 3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/gU_DFsw1i7Mrmms493aHhV3X97I.roa Signing time: Thu 01 Jan 2026 02:18:22 +0000 ROA not before: Thu 01 Jan 2026 02:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51664 IP address blocks: 78.40.88.0/24 maxlen: 24 78.40.89.0/24 maxlen: 24 78.40.90.0/24 maxlen: 24 78.40.91.0/24 maxlen: 24 78.40.92.0/24 maxlen: 24 78.40.93.0/24 maxlen: 24 78.40.94.0/24 maxlen: 24 78.40.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.mft rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:57:13:d3:ba:d0:29:7f:32:b4:f8:6f:57:07:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ff7789346a9f92915f1f75b10af94f97b6e24fa Validity Not Before: Jan 1 02:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=814fc316cc358bb32b9a6b38f77687855dd7f7b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:44:fa:2f:c4:20:f5:ec:d8:2c:05:7e:21:55: 75:e3:55:e7:93:6d:eb:a6:a9:ee:1c:7b:af:5e:f8: 3e:f8:ca:86:c1:f9:ab:70:85:db:73:e9:4d:8e:5a: 50:9e:e3:e9:55:03:74:fb:2f:b9:93:4c:e8:99:35: 02:dd:03:c1:90:ec:2e:2b:f5:d9:76:eb:2a:de:08: c3:f8:f3:d8:47:35:1c:a7:32:a0:9c:e2:b1:4d:09: 13:e7:93:d1:55:62:18:d9:47:05:f9:ae:d4:a3:f7: cf:45:c5:48:61:95:06:cc:19:e3:e9:91:79:da:d9: f8:dc:3c:9e:b5:87:bf:80:0b:ec:69:5f:e8:ba:8f: ab:78:7b:94:f2:08:1c:d7:8c:e4:68:e1:12:51:f6: 61:03:5c:1c:f9:b9:03:3f:5e:05:60:e6:29:89:96: 55:08:45:63:71:2a:b4:da:5b:d3:3d:98:8d:9a:82: fb:28:a0:13:b7:83:8b:f7:bf:d4:55:c6:40:4f:7a: 8f:cb:b1:1c:56:23:9a:76:61:61:5e:d4:47:55:90: e9:06:5d:26:77:03:a3:ea:55:ec:c5:06:38:2c:b4: 2a:73:c5:aa:55:e0:0e:e1:26:5a:9e:5d:df:4c:89: dc:14:a5:58:aa:84:1b:b5:eb:df:4b:ce:af:01:3b: 6d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:4F:C3:16:CC:35:8B:B3:2B:9A:6B:38:F7:76:87:85:5D:D7:F7:B2 X509v3 Authority Key Identifier: keyid:3F:F7:78:93:46:A9:F9:29:15:F1:F7:5B:10:AF:94:F9:7B:6E:24:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_d4k0ap-SkV8fdbEK-U-XtuJPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/gU_DFsw1i7Mrmms493aHhV3X97I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/481a35-2434-46e3-aee1-ae13053133cb/1/P_d4k0ap-SkV8fdbEK-U-XtuJPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.88.0/21 Signature Algorithm: sha256WithRSAEncryption 13:20:61:d0:5c:cd:16:bb:0c:a6:fb:e2:b3:e8:fe:85:55:b8: 70:5e:ea:8f:8f:44:a7:ef:c9:8e:92:0a:5d:1d:4b:53:c9:fd: df:eb:25:d5:71:23:60:a0:30:49:db:23:6d:f7:48:87:80:4d: a7:44:6d:81:8d:5b:43:5f:28:10:ed:17:16:6e:ed:8f:2f:15: bc:eb:cb:6a:1b:03:5d:2a:70:a7:a5:38:80:f1:f1:bf:f9:64: 58:20:01:c8:be:83:d3:07:96:19:a2:b8:0d:00:3a:0e:e5:d4: 27:4c:56:83:5b:c3:23:f5:ec:22:db:08:ef:24:00:d6:aa:24: 19:84:49:b6:65:e5:0a:8c:e3:59:b5:ad:ef:c7:49:8b:42:b2: 49:3a:be:1c:58:5d:97:7a:68:4a:5e:81:9e:c1:17:54:f1:e0: e2:7c:27:6a:49:32:f3:04:cd:2e:ee:bb:34:60:fc:bb:72:a1: 6a:ee:32:d3:97:3e:01:1e:8c:06:e8:eb:4f:2b:15:90:4e:e2: 82:c8:5b:d0:69:af:98:c7:e2:15:a1:03:c4:57:75:0e:5e:3c: 31:e9:05:c6:e3:a3:78:c7:e0:45:09:45:de:a7:4c:96:b9:43: c5:a6:84:86:27:3c:0d:b2:52:db:b1:f6:25:83:43:e0:d3:c5: 87:6a:1d:eb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WVcT07rQKX8ytPhvVwfeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZjc3ODkzNDZhOWY5MjkxNWYxZjc1YjEwYWY5NGY5N2I2 ZTI0ZmEwHhcNMjYwMTAxMDIxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTRmYzMxNmNjMzU4YmIzMmI5YTZiMzhmNzc2ODc4NTVkZDdmN2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUT6L8Qg9ezYLAV+IVV141Xnk23r pqnuHHuvXvg++MqGwfmrcIXbc+lNjlpQnuPpVQN0+y+5k0zomTUC3QPBkOwuK/XZ dusq3gjD+PPYRzUcpzKgnOKxTQkT55PRVWIY2UcF+a7Uo/fPRcVIYZUGzBnj6ZF5 2tn43DyetYe/gAvsaV/ouo+reHuU8ggc14zkaOESUfZhA1wc+bkDP14FYOYpiZZV CEVjcSq02lvTPZiNmoL7KKATt4OL97/UVcZAT3qPy7EcViOadmFhXtRHVZDpBl0m dwOj6lXsxQY4LLQqc8WqVeAO4SZanl3fTIncFKVYqoQbtevfS86vATttKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIFPwxbMNYuzK5prOPd2h4Vd1/eyMB8GA1UdIwQY MBaAFD/3eJNGqfkpFfH3WxCvlPl7biT6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUF9kNGswYXAtU2tWOGZkYkVLLVUtWHR1SlBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80ODFhMzUtMjQzNC00NmUzLWFlZTEt YWUxMzA1MzEzM2NiLzEvZ1VfREZzdzFpN01ybW1zNDkzYUhoVjNYOTdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80ODFhMzUtMjQzNC00NmUzLWFlZTEtYWUxMzA1MzEzM2Ni LzEvUF9kNGswYXAtU2tWOGZkYkVLLVUtWHR1SlBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTihYMA0G CSqGSIb3DQEBCwUAA4IBAQATIGHQXM0Wuwym++Kz6P6FVbhwXuqPj0Sn78mOkgpd HUtTyf3f6yXVcSNgoDBJ2yNt90iHgE2nRG2BjVtDXygQ7RcWbu2PLxW868tqGwNd KnCnpTiA8fG/+WRYIAHIvoPTB5YZorgNADoO5dQnTFaDW8Mj9ewi2wjvJADWqiQZ hEm2ZeUKjONZta3vx0mLQrJJOr4cWF2XemhKXoGewRdU8eDifCdqSTLzBM0u7rs0 YPy7cqFq7jLTlz4BHowG6OtPKxWQTuKCyFvQaa+Yx+IVoQPEV3UOXjwx6QXG46N4 x+BFCUXep0yWuUPFpoSGJzwNslLbsfYlg0Pg08WHah3r -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:17 2026 by rpki-client