This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/nDwfIo5saGj88LUS8elZ2qwUrSQ.roa File: nDwfIo5saGj88LUS8elZ2qwUrSQ.roa (raw, json) Hash identifier: ooowu32q8bCUvHLcrXAQSaLMBllvF3r6TgZWOqyoYoE= Subject key identifier: 9C:3C:1F:22:8E:6C:68:68:FC:F0:B5:12:F1:E9:59:DA:AC:14:AD:24 Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Certificate serial: 019B7F15C4949A42057720293F2197723A15 Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/nDwfIo5saGj88LUS8elZ2qwUrSQ.roa Signing time: Fri 02 Jan 2026 14:21:31 +0000 ROA not before: Fri 02 Jan 2026 14:21:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199737 IP address blocks: 147.78.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:c4:94:9a:42:05:77:20:29:3f:21:97:72:3a:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe Validity Not Before: Jan 2 14:21:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c3c1f228e6c6868fcf0b512f1e959daac14ad24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:eb:a5:bd:e4:8d:7c:65:57:53:03:33:6f:c1: a0:e0:7e:58:0d:45:06:58:08:72:17:ca:c4:ad:c1: 07:38:dd:a1:55:ba:8c:00:b0:13:61:f0:b6:26:eb: ef:8b:a4:67:17:18:2c:e7:23:7f:10:48:5f:e8:69: 9b:e8:54:cf:1b:ed:9b:37:7c:0d:dd:aa:a6:f1:df: 68:77:de:ef:b7:97:89:62:45:4e:0f:27:99:ee:d6: fe:f1:86:c9:d6:9e:bc:dd:07:ee:63:76:95:3a:7d: 47:9d:74:cc:41:9c:af:d0:e9:fe:43:75:96:11:dc: 0a:b6:5b:8e:04:1a:7a:15:2d:6b:f2:da:00:8f:6f: b2:75:fc:95:e3:6a:42:ff:b8:b7:eb:04:91:b4:7a: cb:cb:e7:61:94:58:d3:11:28:6d:1d:86:97:e3:40: a2:35:fd:90:61:e8:e8:07:91:6d:de:56:d5:f1:7b: 7c:60:b3:05:fc:c2:70:e1:3a:d3:3e:a9:96:ed:4d: f5:2e:e2:8e:59:da:83:59:d2:dc:b0:66:34:1a:5e: 84:bb:8a:21:c5:ab:6f:d2:e8:91:b4:59:0e:90:bf: 8f:63:2d:92:49:9c:0c:a6:22:78:4f:af:a2:ef:85: 31:10:57:e1:4e:a1:0f:25:f5:ce:e4:4e:0c:a7:55: a7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3C:1F:22:8E:6C:68:68:FC:F0:B5:12:F1:E9:59:DA:AC:14:AD:24 X509v3 Authority Key Identifier: keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/nDwfIo5saGj88LUS8elZ2qwUrSQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.196.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:f9:1d:9e:ea:e6:e4:d4:53:74:11:b2:e5:4c:91:d4:81:e7: 88:a6:dd:f7:64:7b:50:5a:44:25:b5:c7:c7:62:3c:fa:0a:63: 29:cf:ca:4c:84:d7:c1:c1:e4:56:db:2d:b9:17:bb:ba:ac:41: 8c:6f:cf:f2:e6:77:3d:e7:e5:a6:66:92:3d:9c:21:d4:c3:98: 41:df:76:05:39:d6:78:da:47:99:a7:6e:5f:31:1b:17:a1:32: 92:db:b3:92:dd:62:2d:8e:04:bc:9c:d0:e1:bf:1f:12:a5:e0: 42:e9:da:05:ab:e9:89:a1:ff:e9:ae:b4:da:2d:22:41:81:bc: ac:35:75:82:1c:60:34:97:8f:37:de:32:49:61:76:b6:b8:9a: 9d:0e:62:a7:24:52:71:a4:c1:82:ae:7a:c5:14:06:0f:42:1e: d2:ad:d2:58:a2:1a:9d:ff:28:5f:95:ff:df:11:8e:71:68:ee: e2:59:83:73:0f:ac:7f:17:f0:eb:d9:d2:d0:5c:7d:d4:fc:61: d6:91:80:d2:37:4d:92:02:03:32:d2:03:29:a4:1b:5a:1b:86: da:a7:c0:2b:62:e5:94:ea:e7:19:68:ac:f3:72:89:7b:2d:a8: 86:79:65:2d:35:bf:a0:c6:53:ba:39:99:b4:5d:62:bc:c4:71: ce:dd:60:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FcSUmkIFdyApPyGXcjoVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw MjNlYmUwHhcNMjYwMTAyMTQyMTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzNjMWYyMjhlNmM2ODY4ZmNmMGI1MTJmMWU5NTlkYWFjMTRhZDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOulveSNfGVXUwMzb8Gg4H5YDUUG WAhyF8rErcEHON2hVbqMALATYfC2Juvvi6RnFxgs5yN/EEhf6Gmb6FTPG+2bN3wN 3aqm8d9od97vt5eJYkVODyeZ7tb+8YbJ1p683QfuY3aVOn1HnXTMQZyv0On+Q3WW EdwKtluOBBp6FS1r8toAj2+ydfyV42pC/7i36wSRtHrLy+dhlFjTEShtHYaX40Ci Nf2QYejoB5Ft3lbV8Xt8YLMF/MJw4TrTPqmW7U31LuKOWdqDWdLcsGY0Gl6Eu4oh xatv0uiRtFkOkL+PYy2SSZwMpiJ4T6+i74UxEFfhTqEPJfXO5E4Mp1WnRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJw8HyKObGho/PC1EvHpWdqsFK0kMB8GA1UdIwQY MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt OTlhY2I5OWNlNzU0LzEvbkR3ZklvNXNhR2o4OExVUzhlbFoycXdVclNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0 LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk07EMA0G CSqGSIb3DQEBCwUAA4IBAQBK+R2e6ubk1FN0EbLlTJHUgeeIpt33ZHtQWkQltcfH Yjz6CmMpz8pMhNfBweRW2y25F7u6rEGMb8/y5nc95+WmZpI9nCHUw5hB33YFOdZ4 2keZp25fMRsXoTKS27OS3WItjgS8nNDhvx8SpeBC6doFq+mJof/prrTaLSJBgbys NXWCHGA0l4833jJJYXa2uJqdDmKnJFJxpMGCrnrFFAYPQh7SrdJYohqd/yhflf/f EY5xaO7iWYNzD6x/F/Dr2dLQXH3U/GHWkYDSN02SAgMy0gMppBtaG4bap8ArYuWU 6ucZaKzzcol7LaiGeWUtNb+gxlO6OZm0XWK8xHHO3WCW -----END CERTIFICATE-----Generated at Mon Jan 19 23:59:58 2026 by rpki-client