This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/pN_P1IlTK7N9Tsyo-7qDne3seo8.roa File: pN_P1IlTK7N9Tsyo-7qDne3seo8.roa (raw, json) Hash identifier: 4JuBbaWoHsvx0AsZc9fY1wPJc+hsLORDmTae2tdrxYs= Subject key identifier: A4:DF:CF:D4:89:53:2B:B3:7D:4E:CC:A8:FB:BA:83:9D:ED:EC:7A:8F Certificate issuer: /CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e Certificate serial: 019B7F81433743A85F57EF19BC3FCDB1AEBE Authority key identifier: C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/pN_P1IlTK7N9Tsyo-7qDne3seo8.roa Signing time: Fri 02 Jan 2026 16:18:56 +0000 ROA not before: Fri 02 Jan 2026 16:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51405 IP address blocks: 78.111.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.mft rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:43:37:43:a8:5f:57:ef:19:bc:3f:cd:b1:ae:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c453f5e230420bc4a70d0a61de3b47dcda1a8d0e Validity Not Before: Jan 2 16:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4dfcfd489532bb37d4ecca8fbba839dedec7a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:17:07:c4:26:d9:ce:fc:67:c7:68:e0:f9:5d: 7b:79:0e:74:c3:c1:a5:37:b9:f0:d3:0a:ca:09:a7: a5:73:a7:1f:42:ed:76:dc:50:b0:fb:11:2a:a5:44: b7:1f:db:c5:69:8b:76:5c:48:24:0b:4e:7b:08:3d: 89:a5:58:a3:e7:88:12:06:8c:9f:8a:42:e2:01:41: 73:b4:b4:61:8f:cf:9d:55:db:7b:d4:12:9a:1c:bf: 90:1c:d1:05:ed:6b:fc:c9:28:04:00:f2:b5:36:42: 73:c0:44:41:f3:6d:e1:e9:da:7c:8c:ca:07:cb:5a: 31:07:34:84:66:92:b7:74:06:af:47:60:20:ef:e9: a5:fd:3e:15:06:c3:bb:77:3c:66:69:81:ec:58:fa: 93:d7:59:05:75:53:39:d4:f4:a0:69:50:c7:7e:4c: c8:02:7d:75:d0:72:0a:36:86:85:91:d8:71:6b:b2: 48:5a:be:9e:02:29:0f:a9:29:84:be:92:6c:73:c3: 0b:08:ed:34:c6:28:c9:4a:9f:a0:11:10:6c:b3:78: 36:7f:2a:c2:ee:e9:d0:10:0a:cb:c8:dd:b9:6a:8d: 50:5e:d0:2c:06:78:bd:0b:ef:be:ef:ad:1d:e5:de: 41:db:4b:4f:2f:5c:58:2f:2b:a6:4a:94:81:b4:87: 7c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DF:CF:D4:89:53:2B:B3:7D:4E:CC:A8:FB:BA:83:9D:ED:EC:7A:8F X509v3 Authority Key Identifier: keyid:C4:53:F5:E2:30:42:0B:C4:A7:0D:0A:61:DE:3B:47:DC:DA:1A:8D:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFP14jBCC8SnDQph3jtH3NoajQ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/pN_P1IlTK7N9Tsyo-7qDne3seo8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/487562-d171-4686-8569-e6cf17cdda4f/1/xFP14jBCC8SnDQph3jtH3NoajQ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.111.132.0/24 Signature Algorithm: sha256WithRSAEncryption 47:54:a1:b4:6d:7a:7d:5e:96:05:71:80:63:6c:85:f0:2e:3f: bb:e1:7e:11:70:e8:98:8e:24:99:c8:d6:d8:5e:e7:24:c5:fa: 14:0e:39:0f:00:1e:3c:81:cc:f9:d0:c6:ce:6a:93:aa:eb:7d: 9e:b4:e0:2f:40:c4:2c:6c:3f:56:fb:bc:ee:86:67:af:2f:07: dd:0d:5e:ec:10:f0:03:49:8e:b7:3d:b9:fc:86:52:5a:34:09: ef:0a:e8:f1:85:05:b3:e5:6c:92:39:41:15:6d:5c:fd:c2:ce: ad:53:48:d0:18:de:ca:ac:37:cb:fc:54:27:2d:3a:19:93:3f: ba:2b:0c:fa:20:ad:7b:6d:97:05:17:24:88:2f:bc:30:52:7c: c3:80:61:6b:21:cc:ab:54:29:75:e7:ab:23:27:76:a8:ee:b2: 1d:e2:9e:4d:a0:a4:d2:e7:b0:38:cf:b2:5b:f8:22:41:3a:18: 4a:0c:c5:dc:2c:8b:fe:c0:db:71:b5:40:50:51:d1:91:90:9f: 14:9f:44:7a:47:b4:46:7e:12:6e:0d:ab:71:0a:de:02:bd:1a: 47:50:ce:7d:4c:19:e3:e5:c3:ea:89:8f:a2:3a:90:40:ac:d3: 88:72:35:fd:f0:e5:03:1f:cd:e3:62:90:5d:e4:0b:7a:76:06: 2b:8e:a8:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gUM3Q6hfV+8ZvD/Nsa6+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NTNmNWUyMzA0MjBiYzRhNzBkMGE2MWRlM2I0N2RjZGEx YThkMGUwHhcNMjYwMTAyMTYxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGRmY2ZkNDg5NTMyYmIzN2Q0ZWNjYThmYmJhODM5ZGVkZWM3YThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRcHxCbZzvxnx2jg+V17eQ50w8Gl N7nw0wrKCaelc6cfQu123FCw+xEqpUS3H9vFaYt2XEgkC057CD2JpVij54gSBoyf ikLiAUFztLRhj8+dVdt71BKaHL+QHNEF7Wv8ySgEAPK1NkJzwERB823h6dp8jMoH y1oxBzSEZpK3dAavR2Ag7+ml/T4VBsO7dzxmaYHsWPqT11kFdVM51PSgaVDHfkzI An110HIKNoaFkdhxa7JIWr6eAikPqSmEvpJsc8MLCO00xijJSp+gERBss3g2fyrC 7unQEArLyN25ao1QXtAsBni9C+++760d5d5B20tPL1xYLyumSpSBtId8PwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKTfz9SJUyuzfU7MqPu6g53t7HqPMB8GA1UdIwQY MBaAFMRT9eIwQgvEpw0KYd47R9zaGo0OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1Njkt ZTZjZjE3Y2RkYTRmLzEvcE5fUDFJbFRLN045VHN5by03cURuZTNzZW84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80ODc1NjItZDE3MS00Njg2LTg1NjktZTZjZjE3Y2RkYTRm LzEveEZQMTRqQkNDOFNuRFFwaDNqdEgzTm9halE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATm+EMA0G CSqGSIb3DQEBCwUAA4IBAQBHVKG0bXp9XpYFcYBjbIXwLj+74X4RcOiYjiSZyNbY XuckxfoUDjkPAB48gcz50MbOapOq632etOAvQMQsbD9W+7zuhmevLwfdDV7sEPAD SY63Pbn8hlJaNAnvCujxhQWz5WySOUEVbVz9ws6tU0jQGN7KrDfL/FQnLToZkz+6 Kwz6IK17bZcFFySIL7wwUnzDgGFrIcyrVCl156sjJ3ao7rId4p5NoKTS57A4z7Jb +CJBOhhKDMXcLIv+wNtxtUBQUdGRkJ8Un0R6R7RGfhJuDatxCt4CvRpHUM59TBnj 5cPqiY+iOpBArNOIcjX98OUDH83jYpBd5At6dgYrjqhk -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:31 2026 by rpki-client