This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/0rNoESpAqZ7s2Ti898AnDHcoBRY.roa File: 0rNoESpAqZ7s2Ti898AnDHcoBRY.roa (raw, json) Hash identifier: k1laR98RBM1pgcBRG/JSlPGQHjYS4qfoYBq8kh6MnD8= Subject key identifier: D2:B3:68:11:2A:40:A9:9E:EC:D9:38:BC:F7:C0:27:0C:77:28:05:16 Certificate issuer: /CN=51e0dfc9371a9491caa858700fd9452366d9eddc Certificate serial: 019B79112C74AA28276010F3C20F012E795D Authority key identifier: 51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/0rNoESpAqZ7s2Ti898AnDHcoBRY.roa Signing time: Thu 01 Jan 2026 10:18:47 +0000 ROA not before: Thu 01 Jan 2026 10:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213531 IP address blocks: 78.41.62.0/24 maxlen: 24 78.41.62.0/29 maxlen: 29 78.41.62.192/26 maxlen: 26 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.mft rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2c:74:aa:28:27:60:10:f3:c2:0f:01:2e:79:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51e0dfc9371a9491caa858700fd9452366d9eddc Validity Not Before: Jan 1 10:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d2b368112a40a99eecd938bcf7c0270c77280516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:75:0b:47:b2:17:2e:00:62:b7:12:f2:2c:0e: 71:41:fe:fd:58:0c:38:35:46:4e:e8:44:ab:49:ba: 41:de:9b:f4:d4:37:6c:ea:b1:34:37:dc:9b:69:a0: 9a:7d:ab:4d:86:df:64:98:87:fb:91:3f:52:80:be: 63:03:67:fc:f0:71:ea:2f:90:4b:3a:a0:75:fb:1c: b2:a8:63:a3:a2:a8:41:af:9a:c0:76:a8:f9:6d:20: 49:5e:b9:5f:f4:29:10:3d:01:72:47:95:bc:d0:68: 7c:b6:a5:8f:5d:29:fe:67:37:5e:aa:bc:fc:48:b2: 6d:a0:26:a3:92:de:b5:a6:41:dd:67:c7:dc:c1:e8: d2:9e:de:e7:2c:05:7c:81:b7:b2:dd:ba:08:cf:fd: 53:33:1a:67:29:a8:c1:09:09:25:7d:95:27:3b:fd: 16:fd:a2:f9:a8:8b:a1:f3:f7:52:6f:b8:5e:5f:f3: a6:eb:4f:cd:dd:b2:98:b3:a7:5a:c9:d3:59:e3:fe: c6:7d:58:19:4c:37:da:91:52:c0:4a:bf:92:93:40: 7a:24:4a:db:42:87:21:1c:db:c6:97:19:42:37:69: af:53:cf:1b:4e:3d:cc:24:84:4a:94:28:c2:36:9b: 19:9d:9c:0d:ae:4c:be:57:42:57:38:4c:59:ca:65: f4:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B3:68:11:2A:40:A9:9E:EC:D9:38:BC:F7:C0:27:0C:77:28:05:16 X509v3 Authority Key Identifier: keyid:51:E0:DF:C9:37:1A:94:91:CA:A8:58:70:0F:D9:45:23:66:D9:ED:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeDfyTcalJHKqFhwD9lFI2bZ7dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/0rNoESpAqZ7s2Ti898AnDHcoBRY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3abe20-1e75-4abe-9e89-6ac35370fd73/1/UeDfyTcalJHKqFhwD9lFI2bZ7dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.41.62.0/24 Signature Algorithm: sha256WithRSAEncryption 15:6e:8e:a4:7a:4c:dc:70:7d:f2:c3:5a:f1:04:f9:ae:8a:4b: 66:cb:d0:32:f9:89:7f:29:09:79:24:5b:bc:42:7b:3f:87:24: 96:fd:f7:6a:fc:6b:87:8b:12:8b:3b:0f:03:63:fb:58:dc:f2: a8:fb:4d:04:3f:be:b5:84:32:c9:19:ab:f7:49:e5:50:41:fb: 4a:72:5f:64:63:29:21:43:05:65:c7:1c:2f:97:13:83:b9:1b: 95:62:07:5c:c3:b6:44:0f:85:86:cd:2e:6e:78:34:12:28:ad: 6b:13:11:09:bf:ae:10:04:8c:5b:58:92:11:5e:3a:a0:a0:8e: 25:55:5d:80:76:72:df:05:d7:fa:9c:6c:fe:d8:0a:ba:6b:83: cb:e5:a7:bf:6c:69:8f:5d:15:ea:8a:8d:37:a4:0f:78:3f:b0: 36:dc:b1:9e:26:98:34:f2:43:0f:75:a1:76:14:68:ec:a3:cc: 77:73:53:12:70:f4:0c:1f:6d:92:24:0f:26:13:f1:03:a3:da: 62:74:46:0a:a9:96:30:2a:4c:a2:7d:96:06:1c:71:eb:e0:ed: ed:3c:57:4c:d4:58:09:4e:97:d9:74:b9:54:2a:8d:9b:df:bc: bc:bf:df:13:4d:ba:5f:38:97:e8:e1:2c:af:64:0c:b2:ce:2d: 58:74:ac:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ESx0qignYBDzwg8BLnldMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUxZTBkZmM5MzcxYTk0OTFjYWE4NTg3MDBmZDk0NTIzNjZk OWVkZGMwHhcNMjYwMTAxMTAxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMmIzNjgxMTJhNDBhOTllZWNkOTM4YmNmN2MwMjcwYzc3MjgwNTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnULR7IXLgBitxLyLA5xQf79WAw4 NUZO6ESrSbpB3pv01Dds6rE0N9ybaaCafatNht9kmIf7kT9SgL5jA2f88HHqL5BL OqB1+xyyqGOjoqhBr5rAdqj5bSBJXrlf9CkQPQFyR5W80Gh8tqWPXSn+Zzdeqrz8 SLJtoCajkt61pkHdZ8fcwejSnt7nLAV8gbey3boIz/1TMxpnKajBCQklfZUnO/0W /aL5qIuh8/dSb7heX/Om60/N3bKYs6daydNZ4/7GfVgZTDfakVLASr+Sk0B6JErb QochHNvGlxlCN2mvU88bTj3MJIRKlCjCNpsZnZwNrky+V0JXOExZymX0NQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNKzaBEqQKme7Nk4vPfAJwx3KAUWMB8GA1UdIwQY MBaAFFHg38k3GpSRyqhYcA/ZRSNm2e3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVWVEZnlUY2FsSkhLcUZod0Q5bEZJMmJaN2R3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zYWJlMjAtMWU3NS00YWJlLTllODkt NmFjMzUzNzBmZDczLzEvMHJOb0VTcEFxWjdzMlRpODk4QW5ESGNvQlJZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8zYWJlMjAtMWU3NS00YWJlLTllODktNmFjMzUzNzBmZDcz LzEvVWVEZnlUY2FsSkhLcUZod0Q5bEZJMmJaN2R3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATik+MA0G CSqGSIb3DQEBCwUAA4IBAQAVbo6kekzccH3yw1rxBPmuiktmy9Ay+Yl/KQl5JFu8 Qns/hySW/fdq/GuHixKLOw8DY/tY3PKo+00EP761hDLJGav3SeVQQftKcl9kYykh QwVlxxwvlxODuRuVYgdcw7ZED4WGzS5ueDQSKK1rExEJv64QBIxbWJIRXjqgoI4l VV2AdnLfBdf6nGz+2Aq6a4PL5ae/bGmPXRXqio03pA94P7A23LGeJpg08kMPdaF2 FGjso8x3c1MScPQMH22SJA8mE/EDo9pidEYKqZYwKkyifZYGHHHr4O3tPFdM1FgJ TpfZdLlUKo2b37y8v98TTbpfOJfo4SyvZAyyzi1YdKx1 -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:04 2026 by rpki-client