This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/xeyEvOh_T5SXDa3wzGCDSEKXeJo.roa File: xeyEvOh_T5SXDa3wzGCDSEKXeJo.roa (raw, json) Hash identifier: xT5SlCyi7OJT7hItkCDdSCgLR6moh28cNvwOG2rN9V0= Subject key identifier: C5:EC:84:BC:E8:7F:4F:94:97:0D:AD:F0:CC:60:83:48:42:97:78:9A Certificate issuer: /CN=4c101ff51b67eefe0d67800e76d3606df4c94721 Certificate serial: 019B7E38E1CD546EC51CDCA4DA0D932C31AA Authority key identifier: 4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/xeyEvOh_T5SXDa3wzGCDSEKXeJo.roa Signing time: Fri 02 Jan 2026 10:20:15 +0000 ROA not before: Fri 02 Jan 2026 10:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215447 IP address blocks: 78.110.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e1:cd:54:6e:c5:1c:dc:a4:da:0d:93:2c:31:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c101ff51b67eefe0d67800e76d3606df4c94721 Validity Not Before: Jan 2 10:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c5ec84bce87f4f94970dadf0cc6083484297789a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9e:f1:89:94:21:c1:69:c7:e7:9b:e6:9a:73: 1f:97:c1:bf:bc:5f:24:17:16:03:6c:6a:eb:93:f9: 00:58:8a:08:f9:24:e6:43:66:34:c4:74:08:ae:3c: 58:41:9d:66:4b:aa:af:69:a1:44:1e:35:34:91:bd: 8e:8d:fe:2e:f9:f3:13:f0:34:2c:bf:b5:1a:d2:30: 39:dd:cc:28:35:19:ab:e2:36:fb:6d:0a:d0:71:d8: a1:1e:5a:43:c9:71:66:2a:36:a3:09:f1:eb:66:42: 71:ed:08:68:03:ca:c0:ba:bd:30:f3:ae:52:41:9a: a7:2d:87:b9:1b:61:83:4b:d6:a1:15:35:64:f3:c9: 56:4c:48:03:91:ad:c2:e3:f6:ac:8e:0e:81:88:c5: 17:ba:15:33:dd:45:e9:bc:82:e2:56:de:91:9c:6c: 2f:10:7f:7f:bd:bb:6a:f0:af:fb:2e:d3:3a:b3:f3: d3:d4:5d:a5:09:61:36:e6:b2:54:d5:6e:89:27:16: 3d:69:28:1e:b4:3a:02:ec:32:00:20:6d:60:fb:2f: db:ab:07:e5:89:b9:f5:5d:db:cb:5c:e6:5b:77:2d: c8:b6:7e:75:60:fb:fa:71:0e:08:11:b1:5f:27:71: d9:3c:65:24:2a:f7:89:a7:35:5d:a0:1a:62:66:a6: 34:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EC:84:BC:E8:7F:4F:94:97:0D:AD:F0:CC:60:83:48:42:97:78:9A X509v3 Authority Key Identifier: keyid:4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/xeyEvOh_T5SXDa3wzGCDSEKXeJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.110.35.0/24 Signature Algorithm: sha256WithRSAEncryption 45:78:70:6a:cf:ff:f7:85:79:7e:b2:36:b0:f5:fc:f3:c2:e3: 15:fd:61:54:db:75:9e:82:b9:e1:0a:27:25:4b:06:f3:95:89: 8b:20:32:4e:14:69:6e:9a:db:ea:d4:d6:5f:2c:f2:4b:29:b6: 62:09:c9:96:20:aa:92:dc:41:fb:64:31:49:cd:47:2f:33:ad: 75:59:2c:d2:ac:41:4f:a3:4b:97:c5:a8:c4:6e:c0:91:52:3d: 37:5b:15:78:ef:f3:57:26:69:93:c1:8b:2d:67:29:ed:7f:db: 60:8d:11:61:d7:1a:bc:ba:b5:86:37:73:56:52:7e:d3:d7:f6: 90:eb:44:1f:6b:2d:43:59:bb:4e:e7:00:5d:e6:ec:ae:7e:06: 07:af:dc:6f:a2:78:28:b8:e9:33:96:af:91:34:f7:c8:82:df: b2:1e:49:57:b4:51:aa:b8:b6:71:f6:7b:2e:87:cc:81:6f:d7: 12:f9:74:f4:45:03:e0:bd:ca:f8:04:57:97:65:b9:90:ac:62: 0f:af:05:9a:0f:44:e6:c9:e0:ec:4d:3e:5a:21:e8:7a:fb:25: 91:4f:ad:e1:ef:ac:9f:da:d9:30:1e:a4:17:a7:a1:c1:36:ac: 26:b6:08:89:1d:7d:31:0e:02:43:0d:23:77:e2:5c:80:a6:1c: 92:05:73:17 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OOHNVG7FHNyk2g2TLDGqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMTAxZmY1MWI2N2VlZmUwZDY3ODAwZTc2ZDM2MDZkZjRj OTQ3MjEwHhcNMjYwMTAyMTAyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNWVjODRiY2U4N2Y0Zjk0OTcwZGFkZjBjYzYwODM0ODQyOTc3ODlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJ7xiZQhwWnH55vmmnMfl8G/vF8k FxYDbGrrk/kAWIoI+STmQ2Y0xHQIrjxYQZ1mS6qvaaFEHjU0kb2Ojf4u+fMT8DQs v7Ua0jA53cwoNRmr4jb7bQrQcdihHlpDyXFmKjajCfHrZkJx7QhoA8rAur0w865S QZqnLYe5G2GDS9ahFTVk88lWTEgDka3C4/asjg6BiMUXuhUz3UXpvILiVt6RnGwv EH9/vbtq8K/7LtM6s/PT1F2lCWE25rJU1W6JJxY9aSgetDoC7DIAIG1g+y/bqwfl ibn1XdvLXOZbdy3Itn51YPv6cQ4IEbFfJ3HZPGUkKveJpzVdoBpiZqY0cQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMXshLzof0+Ulw2t8Mxgg0hCl3iaMB8GA1UdIwQY MBaAFEwQH/UbZ+7+DWeADnbTYG30yUchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEJBZjlSdG43djROWjRBT2R0TmdiZlRKUnlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC81OWRjYmQtNzhiZi00OGVkLTk1NGQt Y2NhYTZlYjNjNTEzLzEveGV5RXZPaF9UNVNYRGEzd3pHQ0RTRUtYZUpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC81OWRjYmQtNzhiZi00OGVkLTk1NGQtY2NhYTZlYjNjNTEz LzEvVEJBZjlSdG43djROWjRBT2R0TmdiZlRKUnlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATm4jMA0G CSqGSIb3DQEBCwUAA4IBAQBFeHBqz//3hXl+sjaw9fzzwuMV/WFU23WegrnhCicl SwbzlYmLIDJOFGlumtvq1NZfLPJLKbZiCcmWIKqS3EH7ZDFJzUcvM611WSzSrEFP o0uXxajEbsCRUj03WxV47/NXJmmTwYstZyntf9tgjRFh1xq8urWGN3NWUn7T1/aQ 60Qfay1DWbtO5wBd5uyufgYHr9xvongouOkzlq+RNPfIgt+yHklXtFGquLZx9nsu h8yBb9cS+XT0RQPgvcr4BFeXZbmQrGIPrwWaD0TmyeDsTT5aIeh6+yWRT63h76yf 2tkwHqQXp6HBNqwmtgiJHX0xDgJDDSN34lyAphySBXMX -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:30 2026 by rpki-client