This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/SSxw2UyTdh8TO_sMC0CZq7SWuwY.roa File: SSxw2UyTdh8TO_sMC0CZq7SWuwY.roa (raw, json) Hash identifier: ATIxE9LR3RhyZ9vnBXUPCYZRNgLXIwXduwukGiza/E8= Subject key identifier: 49:2C:70:D9:4C:93:76:1F:13:3B:FB:0C:0B:40:99:AB:B4:96:BB:06 Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019B13C757B005A762CF3675D40AAA9D32C7 Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/SSxw2UyTdh8TO_sMC0CZq7SWuwY.roa Signing time: Fri 12 Dec 2025 18:16:29 +0000 ROA not before: Fri 12 Dec 2025 18:16:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 44486 IP address blocks: 78.40.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:c7:57:b0:05:a7:62:cf:36:75:d4:0a:aa:9d:32:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Dec 12 18:16:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=492c70d94c93761f133bfb0c0b4099abb496bb06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5e:c5:d5:07:2d:db:1e:10:18:42:95:32:d9: 4d:8b:6b:6d:1e:1a:25:6b:66:9d:cd:a0:95:9a:68: b7:37:39:11:ad:61:d4:14:26:ba:45:a5:95:98:d7: 14:e3:55:c9:1b:13:02:fb:ec:35:4c:2f:72:01:17: e8:e8:b1:27:28:c4:2c:05:40:e7:f8:88:01:ac:c2: ba:20:6b:79:13:fb:05:ac:c7:bc:f6:41:7f:d5:cd: 39:5a:60:a1:a6:d0:fe:08:66:c9:2b:80:b1:8a:9d: 16:da:4a:08:26:5b:31:a6:e9:23:df:42:2e:8b:d8: f2:28:a2:9c:3f:b7:45:5f:f5:f4:a8:bb:7b:57:9e: ce:70:b5:86:24:95:03:e1:65:66:3a:3f:19:f5:da: 01:53:b3:c1:14:dd:eb:b1:ed:6e:10:b3:7a:49:2d: 76:67:88:28:6f:bf:2e:08:aa:ca:ee:72:72:92:2d: 34:ad:f1:cb:a0:1d:52:3f:ce:6f:b3:a0:17:c7:f0: e8:62:95:42:c0:68:a7:8c:02:d2:aa:92:5e:fa:ab: d3:7f:6f:47:3e:47:18:9a:69:62:37:4f:b3:8e:33: a0:3e:88:10:1c:cc:bc:f9:67:70:27:8c:75:be:33: 12:ae:b6:6b:49:61:bd:5a:92:9e:1a:65:9f:08:41: ae:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:2C:70:D9:4C:93:76:1F:13:3B:FB:0C:0B:40:99:AB:B4:96:BB:06 X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/SSxw2UyTdh8TO_sMC0CZq7SWuwY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.211.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:83:60:6e:2a:a8:a5:41:25:fd:1a:74:29:30:11:5d:0f:75: de:a1:a1:c8:42:34:7e:c2:6d:14:00:c1:a0:d6:6f:72:0c:bf: 72:1b:8e:41:4c:bf:d1:8b:7d:79:ae:15:ec:6c:47:3a:46:4d: a3:db:b7:eb:c7:16:4a:99:f4:9a:86:40:d5:0d:b6:55:b3:e2: b6:8c:76:1d:c6:a9:6c:75:11:4b:97:c0:68:da:dc:46:40:e6: d1:8b:68:a8:e6:bb:98:76:aa:ca:63:b1:84:b4:2f:2f:c1:ce: 8e:a3:5f:fa:5c:0a:a4:24:23:6c:92:be:a7:8c:54:7f:b7:64: fb:df:10:22:bb:e0:81:b6:28:7b:bb:72:17:03:94:14:7d:dd: 68:50:84:82:29:a1:d3:ad:74:11:f1:7d:86:a6:02:0f:0a:29: 35:18:fd:b3:57:f3:6e:5e:95:be:49:3a:8f:bd:b0:d1:84:d1: d9:31:1b:9a:55:9d:3e:d7:f5:b9:3e:b6:d4:92:c3:ee:82:53: 8f:65:08:7c:f2:a9:b2:0b:58:60:8e:0a:c7:13:3a:db:92:52: fa:76:70:46:a3:8b:24:c0:43:e9:19:b5:1d:32:cc:d7:9d:f4: cd:f8:d7:d8:cb:85:bd:7e:66:a7:a3:a4:f3:3d:f4:1e:71:8f: d3:9f:9e:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsTx1ewBadizzZ11AqqnTLHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjUxMjEyMTgxNjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTJjNzBkOTRjOTM3NjFmMTMzYmZiMGMwYjQwOTlhYmI0OTZiYjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV7F1Qct2x4QGEKVMtlNi2ttHhol a2adzaCVmmi3NzkRrWHUFCa6RaWVmNcU41XJGxMC++w1TC9yARfo6LEnKMQsBUDn +IgBrMK6IGt5E/sFrMe89kF/1c05WmChptD+CGbJK4Cxip0W2koIJlsxpukj30Iu i9jyKKKcP7dFX/X0qLt7V57OcLWGJJUD4WVmOj8Z9doBU7PBFN3rse1uELN6SS12 Z4gob78uCKrK7nJyki00rfHLoB1SP85vs6AXx/DoYpVCwGinjALSqpJe+qvTf29H PkcYmmliN0+zjjOgPogQHMy8+WdwJ4x1vjMSrrZrSWG9WpKeGmWfCEGuwwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEkscNlMk3YfEzv7DAtAmau0lrsGMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvU1N4dzJVeVRkaDhUT19zTUMwQ1pxN1NXdXdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATijTMA0G CSqGSIb3DQEBCwUAA4IBAQB6g2BuKqilQSX9GnQpMBFdD3XeoaHIQjR+wm0UAMGg 1m9yDL9yG45BTL/Ri315rhXsbEc6Rk2j27frxxZKmfSahkDVDbZVs+K2jHYdxqls dRFLl8Bo2txGQObRi2io5ruYdqrKY7GEtC8vwc6Oo1/6XAqkJCNskr6njFR/t2T7 3xAiu+CBtih7u3IXA5QUfd1oUISCKaHTrXQR8X2GpgIPCik1GP2zV/NuXpW+STqP vbDRhNHZMRuaVZ0+1/W5PrbUksPuglOPZQh88qmyC1hgjgrHEzrbklL6dnBGo4sk wEPpGbUdMszXnfTN+NfYy4W9fmano6TzPfQecY/Tn56n -----END CERTIFICATE-----Generated at Sun Dec 14 06:13:32 2025 by rpki-client