This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/9V3Bc5x26_CKqw7Ae_9X_KqyiVU.roa File: 9V3Bc5x26_CKqw7Ae_9X_KqyiVU.roa (raw, json) Hash identifier: Z95UhtYJCDS8JPYEVtM0IffpK2/NPQigmX2/dl4ICsc= Subject key identifier: F5:5D:C1:73:9C:76:EB:F0:8A:AB:0E:C0:7B:FF:57:FC:AA:B2:89:55 Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Certificate serial: 019B7BA539D0E78D5432ACB1266FCA383827 Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/9V3Bc5x26_CKqw7Ae_9X_KqyiVU.roa Signing time: Thu 01 Jan 2026 22:19:44 +0000 ROA not before: Thu 01 Jan 2026 22:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206766 IP address blocks: 78.108.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:39:d0:e7:8d:54:32:ac:b1:26:6f:ca:38:38:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Validity Not Before: Jan 1 22:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f55dc1739c76ebf08aab0ec07bff57fcaab28955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dc:94:61:94:77:6a:bb:53:8f:48:3d:84:7b: 0c:0a:a1:84:b1:de:b8:73:5d:09:61:3e:24:68:ff: 44:91:26:ca:9a:75:9e:f6:76:5b:1a:2c:23:8f:81: 7b:72:c1:59:46:69:bd:ce:6c:80:02:10:ae:51:fb: 57:e8:4c:90:af:d3:67:ca:67:9a:e7:28:43:cd:d9: 47:33:c9:f3:ca:11:d1:f7:69:4c:5e:79:20:0e:80: cf:69:5c:f8:af:82:78:82:21:39:cd:82:3f:b4:15: 14:aa:28:a2:49:20:d9:14:28:7f:95:3e:e7:a6:e8: 73:42:24:0c:48:ad:a7:5c:1e:5e:23:25:2a:0f:eb: c4:f7:64:be:5c:34:22:43:24:ed:8e:65:7a:ed:2b: 47:ff:64:ad:c5:9c:02:ee:2e:ba:da:11:a1:f4:51: c7:83:f7:46:06:36:71:42:6e:d9:57:0e:2b:ac:d1: 39:e1:29:ba:79:20:df:9f:a3:3a:04:94:e5:40:a8: 68:17:fe:fd:1c:19:39:54:a8:0f:3a:75:7b:3a:a4: d0:f2:b2:91:08:41:9e:5e:e9:2c:26:17:f9:a6:c5: 1e:d4:e0:32:86:32:9c:24:e7:50:13:4b:6e:01:4a: 07:68:08:a0:eb:14:2c:dc:03:db:51:f0:5f:11:53: d8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:5D:C1:73:9C:76:EB:F0:8A:AB:0E:C0:7B:FF:57:FC:AA:B2:89:55 X509v3 Authority Key Identifier: keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/9V3Bc5x26_CKqw7Ae_9X_KqyiVU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.108.56.0/24 Signature Algorithm: sha256WithRSAEncryption c0:94:35:1f:ae:26:0a:3e:91:de:49:59:dc:23:eb:b5:f7:5e: fc:7c:79:c1:b4:ff:97:63:d2:44:84:52:53:c4:26:12:68:02: 55:0f:f6:33:cf:bf:da:70:c6:8b:89:77:a7:18:fb:72:01:a5: 19:00:70:01:3d:d4:42:96:81:02:7e:84:4e:28:25:69:b6:8c: 99:60:fb:a6:41:e0:df:07:6c:d4:57:2b:73:35:05:42:75:04: c7:38:14:d1:70:c8:f9:f9:c9:da:5d:cc:ba:f3:24:1b:f6:4e: e7:0d:dc:dc:cf:6e:36:52:45:e1:36:be:c5:97:79:a9:92:ff: 8a:c1:19:3b:21:19:82:d7:ce:0b:41:ac:de:03:74:34:7d:1d: e0:08:dc:b6:db:f1:da:29:39:1d:2e:0b:96:a4:4b:6e:91:90: 2a:73:ad:e8:a7:83:e0:9d:3e:29:a2:76:83:80:a7:af:68:86: 25:77:f7:bd:91:2c:bd:1c:38:3e:c9:ec:27:20:f1:8b:f1:61: b4:18:80:97:47:dc:dd:d3:f1:97:26:30:3f:0b:10:66:c8:fd: 87:61:ef:36:39:ef:63:6e:33:ad:39:09:11:5f:ca:c4:e3:b6: d4:ff:8c:64:ce:69:f2:af:d5:1d:ab:5f:22:6b:28:ed:3e:b2: 65:d5:fe:19 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTnQ541UMqyxJm/KODgnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz NTNkY2UwHhcNMjYwMTAxMjIxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTVkYzE3MzljNzZlYmYwOGFhYjBlYzA3YmZmNTdmY2FhYjI4OTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdyUYZR3artTj0g9hHsMCqGEsd64 c10JYT4kaP9EkSbKmnWe9nZbGiwjj4F7csFZRmm9zmyAAhCuUftX6EyQr9Nnymea 5yhDzdlHM8nzyhHR92lMXnkgDoDPaVz4r4J4giE5zYI/tBUUqiiiSSDZFCh/lT7n puhzQiQMSK2nXB5eIyUqD+vE92S+XDQiQyTtjmV67StH/2StxZwC7i662hGh9FHH g/dGBjZxQm7ZVw4rrNE54Sm6eSDfn6M6BJTlQKhoF/79HBk5VKgPOnV7OqTQ8rKR CEGeXuksJhf5psUe1OAyhjKcJOdQE0tuAUoHaAig6xQs3APbUfBfEVPYPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPVdwXOcduvwiqsOwHv/V/yqsolVMB8GA1UdIwQY MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt ODI3NmM4YWFjNTBlLzEvOVYzQmM1eDI2X0NLcXc3QWVfOVhfS3F5aVZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATmw4MA0G CSqGSIb3DQEBCwUAA4IBAQDAlDUfriYKPpHeSVncI+u19178fHnBtP+XY9JEhFJT xCYSaAJVD/Yzz7/acMaLiXenGPtyAaUZAHABPdRCloECfoROKCVptoyZYPumQeDf B2zUVytzNQVCdQTHOBTRcMj5+cnaXcy68yQb9k7nDdzcz242UkXhNr7Fl3mpkv+K wRk7IRmC184LQazeA3Q0fR3gCNy22/HaKTkdLguWpEtukZAqc63op4PgnT4ponaD gKevaIYld/e9kSy9HDg+yewnIPGL8WG0GICXR9zd0/GXJjA/CxBmyP2HYe82Oe9j bjOtOQkRX8rE47bU/4xkzmnyr9Udq18iayjtPrJl1f4Z -----END CERTIFICATE-----Generated at Tue Jan 20 06:03:47 2026 by rpki-client