This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/1cNh9QzgaEZRY3HBWYDA_XSMyzU.roa File: 1cNh9QzgaEZRY3HBWYDA_XSMyzU.roa (raw, json) Hash identifier: MIj0qg85z6h5egTAzLHcmlxkQavQ6nG85qJzA856+ms= Subject key identifier: D5:C3:61:F5:0C:E0:68:46:51:63:71:C1:59:80:C0:FD:74:8C:CB:35 Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8CD1224E2BEC26B5776C60C1FC8D8 Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/1cNh9QzgaEZRY3HBWYDA_XSMyzU.roa Signing time: Thu 01 Jan 2026 18:18:58 +0000 ROA not before: Thu 01 Jan 2026 18:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204380 IP address blocks: 78.28.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:cd:12:24:e2:be:c2:6b:57:76:c6:0c:1f:c8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5c361f50ce06846516371c15980c0fd748ccb35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:88:ec:d2:b0:33:36:d8:9c:03:27:fb:28:69: f8:b8:03:df:74:e7:40:38:f1:cb:c9:b5:9c:09:f1: ff:70:e4:1c:67:f1:c2:14:d6:20:25:c4:14:91:96: bb:d6:de:9c:63:e6:24:41:eb:67:0f:64:8f:f1:90: e6:a8:7d:93:92:d0:a0:f2:7a:ee:7c:43:e0:1f:18: 36:92:ab:90:17:c4:ee:e6:43:e8:e9:c2:92:db:ef: 1b:85:04:3c:6f:c8:8e:6c:0b:68:d4:10:af:2b:40: ce:3c:fe:8f:db:dc:81:36:aa:92:69:31:b7:a5:15: 7b:fa:1e:b7:7a:7c:93:b2:b3:70:b0:4b:24:7c:41: 37:19:86:74:d1:c9:3f:aa:61:a0:0e:36:86:18:7c: 83:74:e1:bc:af:8b:c1:ca:61:7f:79:cc:f0:e2:84: 15:06:ec:d7:32:b1:20:77:ae:c6:78:e3:a3:9c:e2: 3d:e8:fa:7b:7c:4c:9f:07:fc:ea:05:f4:17:31:43: 4b:7b:39:d7:39:4e:8a:52:af:f0:ca:ea:c8:2f:61: f8:25:c8:d1:14:af:4e:f8:7e:c1:d4:59:93:f6:2c: 4a:be:5a:d0:11:03:19:fd:c6:a1:d8:5e:34:25:fc: e3:eb:f2:a0:b8:00:ca:7e:cc:9d:2f:13:47:dc:bb: f1:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C3:61:F5:0C:E0:68:46:51:63:71:C1:59:80:C0:FD:74:8C:CB:35 X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/1cNh9QzgaEZRY3HBWYDA_XSMyzU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.28.225.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:a0:a1:d2:82:67:5c:2c:fa:fd:d4:88:3e:63:5b:1c:a9:61: 5b:7c:63:81:cc:d6:d9:49:ed:d6:88:34:92:a6:75:97:b6:2d: 31:03:fb:a1:f8:41:c9:7d:18:54:8e:7f:de:bd:a0:20:41:be: 41:44:40:32:d9:b7:82:c4:89:a9:8e:8f:81:a7:7d:5d:67:91: 90:44:ba:e1:36:d3:7a:e0:ed:38:b3:f1:9f:11:7d:5f:c7:1a: 5b:45:6c:48:c9:18:10:64:23:5d:73:b8:5a:fb:16:19:4c:b6: 1b:d9:20:ec:c4:e9:cc:db:3c:3f:3a:a0:3a:19:47:77:10:8a: a0:07:8c:0c:27:3a:77:c4:cc:0e:13:80:13:d0:91:19:95:f8: 7a:c7:5b:90:27:dd:00:14:43:51:3a:62:1d:ac:03:b3:54:72: fe:8a:7d:e9:d9:71:cc:02:38:9b:9e:02:c2:1d:8e:86:a6:e2: b0:98:01:13:fc:8b:5d:d6:88:11:6f:25:9c:c7:11:d6:e4:d6: bc:4f:73:9e:4b:af:c3:25:a7:34:d0:c9:c6:1f:0e:b8:a1:2e: 19:b4:ce:c0:cd:ba:f9:02:0b:fe:6d:a9:7e:44:b4:c8:33:69: 35:ed:a1:0d:f4:f4:31:0e:b7:aa:42:23:cd:d9:d0:77:53:32: e0:3d:7d:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yM0SJOK+wmtXdsYMH8jYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWMzNjFmNTBjZTA2ODQ2NTE2MzcxYzE1OTgwYzBmZDc0OGNjYjM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYjs0rAzNticAyf7KGn4uAPfdOdA OPHLybWcCfH/cOQcZ/HCFNYgJcQUkZa71t6cY+YkQetnD2SP8ZDmqH2TktCg8nru fEPgHxg2kquQF8Tu5kPo6cKS2+8bhQQ8b8iObAto1BCvK0DOPP6P29yBNqqSaTG3 pRV7+h63enyTsrNwsEskfEE3GYZ00ck/qmGgDjaGGHyDdOG8r4vBymF/eczw4oQV BuzXMrEgd67GeOOjnOI96Pp7fEyfB/zqBfQXMUNLeznXOU6KUq/wyurIL2H4JcjR FK9O+H7B1FmT9ixKvlrQEQMZ/cah2F40Jfzj6/KguADKfsydLxNH3LvxRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNXDYfUM4GhGUWNxwVmAwP10jMs1MB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvMWNOaDlRemdhRVpSWTNIQldZREFfWFNNeXpVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAThzhMA0G CSqGSIb3DQEBCwUAA4IBAQBKoKHSgmdcLPr91Ig+Y1scqWFbfGOBzNbZSe3WiDSS pnWXti0xA/uh+EHJfRhUjn/evaAgQb5BREAy2beCxImpjo+Bp31dZ5GQRLrhNtN6 4O04s/GfEX1fxxpbRWxIyRgQZCNdc7ha+xYZTLYb2SDsxOnM2zw/OqA6GUd3EIqg B4wMJzp3xMwOE4AT0JEZlfh6x1uQJ90AFENROmIdrAOzVHL+in3p2XHMAjibngLC HY6GpuKwmAET/Itd1ogRbyWcxxHW5Na8T3OeS6/DJac00MnGHw64oS4ZtM7Azbr5 Agv+bal+RLTIM2k17aEN9PQxDreqQiPN2dB3UzLgPX0s -----END CERTIFICATE-----Generated at Tue Jan 20 02:47:21 2026 by rpki-client