This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/edfSmSATlimfy6rbS3P2M2_zGfU.roa File: edfSmSATlimfy6rbS3P2M2_zGfU.roa (raw, json) Hash identifier: 5tDrfp0uGBh3LhCzIBga8g4gjZ1N135rciTX2PLk4yk= Subject key identifier: 79:D7:D2:99:20:13:96:29:9F:CB:AA:DB:4B:73:F6:33:6F:F3:19:F5 Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D406343B92A654316817E410A87F0 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/edfSmSATlimfy6rbS3P2M2_zGfU.roa Signing time: Fri 02 Jan 2026 06:20:21 +0000 ROA not before: Fri 02 Jan 2026 06:20:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47583 IP address blocks: 78.142.242.0/24 maxlen: 24 185.9.54.0/24 maxlen: 24 193.19.106.0/24 maxlen: 24 223.27.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 11:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:40:63:43:b9:2a:65:43:16:81:7e:41:0a:87:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79d7d299201396299fcbaadb4b73f6336ff319f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:9d:75:7c:76:c2:ac:cc:86:f4:75:38:4d:2f: f9:2e:7f:bf:be:41:1a:a8:4c:5f:2f:90:ee:b3:33: ab:dd:72:b3:81:c6:70:bd:86:c4:bf:a1:cf:ef:e7: 50:88:2b:3e:41:b8:36:4e:e8:e3:7f:dd:ee:14:e5: e6:32:0b:12:6f:11:08:3e:3b:f0:60:fe:f8:fe:60: 66:cb:44:7b:a7:98:d1:d0:b6:ea:33:d1:c6:ea:ba: 6a:13:86:36:9f:fe:5e:79:6f:b4:22:de:58:87:6a: cd:24:34:d4:52:c5:b1:30:84:ea:2f:de:9a:73:35: 69:39:27:b4:8e:63:5a:d5:5e:a0:19:6a:46:93:62: 8e:d1:7a:5d:44:36:06:e2:ff:90:fc:32:9d:b2:41: 64:de:54:f2:0d:d1:96:3d:13:1c:ab:39:60:aa:15: e9:fd:d5:6d:2c:af:0d:14:ab:79:3a:91:1e:eb:e3: 38:25:a6:1e:52:0f:fa:50:09:3e:45:40:fb:6c:4d: 88:0e:20:28:01:74:5d:71:e1:2a:5d:de:35:86:da: 18:47:52:50:6d:6c:d2:ab:3c:bf:70:b5:88:1a:88: 9d:b9:d7:b1:bc:30:c9:66:ce:fc:86:02:66:bf:53: 88:54:2f:27:b0:a1:1b:89:72:3a:c9:2d:a7:5f:7d: 0a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D7:D2:99:20:13:96:29:9F:CB:AA:DB:4B:73:F6:33:6F:F3:19:F5 X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/edfSmSATlimfy6rbS3P2M2_zGfU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.142.242.0/24 185.9.54.0/24 193.19.106.0/24 223.27.112.0/24 Signature Algorithm: sha256WithRSAEncryption 40:00:b5:aa:70:e1:f5:b0:e0:2b:ca:a1:8d:29:4f:58:e7:5c: c5:66:95:36:35:71:af:9b:70:be:99:6e:7e:81:4a:15:99:3c: 6a:9d:41:e9:b2:6d:ce:04:dd:46:73:06:c8:f1:32:0f:09:6c: ed:c3:bb:fb:71:f7:a8:92:bc:cc:3f:c1:d5:1b:e6:1a:54:1c: 71:7f:a9:61:8d:4c:be:f3:f2:a7:e9:dd:36:63:ac:0f:8c:92: f5:4d:d8:25:78:e1:7a:aa:26:b8:89:98:69:a6:7d:48:15:48: 7d:05:64:0b:0d:ce:9d:ff:68:0c:7b:d1:2c:88:b7:79:c7:83: 55:72:3c:5b:95:6a:0c:af:30:f7:c3:32:3e:66:b1:92:df:99: f5:03:7c:0c:26:97:c5:aa:34:04:8a:b5:85:c4:71:30:67:a7: db:87:d3:4c:08:f3:11:ef:e5:dd:17:4e:fa:63:9b:70:4c:d2: e2:81:8a:01:79:36:ba:66:59:b8:02:5b:1d:4b:e9:81:e4:1c: e4:dc:e4:15:c1:b9:0a:da:1f:41:23:a8:84:9c:3f:d7:d5:64: aa:d6:13:88:a5:23:1f:42:57:7e:95:3c:f9:f0:3a:9a:f6:df: a0:d7:2e:f4:68:67:cc:bb:27:65:55:56:88:e5:33:b7:0c:20: 94:e8:70:6b -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9XUBjQ7kqZUMWgX5BCofwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWQ3ZDI5OTIwMTM5NjI5OWZjYmFhZGI0YjczZjYzMzZmZjMxOWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp11fHbCrMyG9HU4TS/5Ln+/vkEa qExfL5DuszOr3XKzgcZwvYbEv6HP7+dQiCs+Qbg2Tujjf93uFOXmMgsSbxEIPjvw YP74/mBmy0R7p5jR0LbqM9HG6rpqE4Y2n/5eeW+0It5Yh2rNJDTUUsWxMITqL96a czVpOSe0jmNa1V6gGWpGk2KO0XpdRDYG4v+Q/DKdskFk3lTyDdGWPRMcqzlgqhXp /dVtLK8NFKt5OpEe6+M4JaYeUg/6UAk+RUD7bE2IDiAoAXRdceEqXd41htoYR1JQ bWzSqzy/cLWIGoidudexvDDJZs78hgJmv1OIVC8nsKEbiXI6yS2nX30KHQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFHnX0pkgE5Ypn8uq20tz9jNv8xn1MB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvZWRmU21TQVRsaW1meTZyYlMzUDJNMl96R2ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATo7yAwQA uQk2AwQAwRNqAwQA3xtwMA0GCSqGSIb3DQEBCwUAA4IBAQBAALWqcOH1sOAryqGN KU9Y51zFZpU2NXGvm3C+mW5+gUoVmTxqnUHpsm3OBN1GcwbI8TIPCWztw7v7cfeo krzMP8HVG+YaVBxxf6lhjUy+8/Kn6d02Y6wPjJL1TdgleOF6qia4iZhppn1IFUh9 BWQLDc6d/2gMe9EsiLd5x4NVcjxblWoMrzD3wzI+ZrGS35n1A3wMJpfFqjQEirWF xHEwZ6fbh9NMCPMR7+XdF076Y5twTNLigYoBeTa6Zlm4AlsdS+mB5Bzk3OQVwbkK 2h9BI6iEnD/X1WSq1hOIpSMfQld+lTz58Dqa9t+g1y70aGfMuydlVVaI5TO3DCCU 6HBr -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:27 2026 by rpki-client