This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Zc0iCQfKaVu4J0-PZar-shcDYKg.roa File: Zc0iCQfKaVu4J0-PZar-shcDYKg.roa (raw, json) Hash identifier: RUqZAtjTn2ZN9lpwrPN/3MPP8/G2LqrTGRDcah1ecAw= Subject key identifier: 65:CD:22:09:07:CA:69:5B:B8:27:4F:8F:65:AA:FE:B2:17:03:60:A8 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B1466605C06D10AA999523FBB5E4B Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Zc0iCQfKaVu4J0-PZar-shcDYKg.roa Signing time: Fri 02 Jan 2026 06:17:59 +0000 ROA not before: Fri 02 Jan 2026 06:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60168 IP address blocks: 78.128.93.0/24 maxlen: 24 78.128.95.0/24 maxlen: 24 79.124.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:14:66:60:5c:06:d1:0a:a9:99:52:3f:bb:5e:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65cd220907ca695bb8274f8f65aafeb2170360a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d0:21:10:e4:94:1a:55:7d:d2:18:75:09:ce: 62:56:57:08:b3:5b:79:34:ee:ff:f9:7f:0b:f7:5b: 37:5a:a5:ba:08:29:0e:3b:fa:69:09:f9:8d:8b:33: d6:26:6e:89:eb:e0:ff:59:30:4d:3f:04:1e:8d:40: 5e:3a:fe:73:14:bd:bd:3a:8f:af:cf:ef:bb:a5:46: b1:d1:db:ff:21:a8:1e:51:33:27:7d:a2:77:b5:84: 12:0f:5b:43:73:fb:c9:41:e1:4c:fa:5d:0d:34:58: c2:db:27:c1:54:09:19:4c:2f:57:49:42:fa:17:21: 47:54:43:7b:6a:86:8e:54:b2:db:b9:db:22:39:75: 93:fe:56:47:9f:7d:fe:4c:3d:21:3f:c7:d2:9e:87: 5f:6b:ab:5e:8c:c2:ca:4e:48:7f:6a:83:56:d4:98: 7d:1c:80:b6:1e:01:aa:9c:d4:13:52:c5:95:5a:69: aa:2a:32:f7:bf:1e:f9:bb:bb:ee:b8:58:30:eb:dc: 46:89:cd:07:41:51:e3:bf:c6:d6:d0:96:64:ed:ad: b0:36:c2:d5:ee:34:1b:61:4c:85:1b:6c:d9:36:f9: 2c:a6:08:4f:ac:8e:3d:67:39:6d:a3:fd:de:ef:5e: 95:49:e7:91:61:e7:5e:cb:96:39:a9:41:af:3a:58: e7:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CD:22:09:07:CA:69:5B:B8:27:4F:8F:65:AA:FE:B2:17:03:60:A8 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/Zc0iCQfKaVu4J0-PZar-shcDYKg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.128.93.0/24 78.128.95.0/24 79.124.68.0/22 Signature Algorithm: sha256WithRSAEncryption 62:0a:fe:8f:1e:b1:84:81:de:82:79:24:08:c7:b2:78:37:4f: 2b:67:b9:eb:11:19:91:34:40:76:93:98:56:cd:b2:84:5c:ba: 23:a0:56:87:4a:91:29:99:0b:9a:6d:be:05:ae:95:db:27:a0: 7f:2f:c8:89:44:8c:4b:de:67:02:a4:1b:f4:11:68:10:bb:c4: 9f:01:57:1e:b3:35:b7:2e:75:7e:6b:cf:a1:63:f5:f4:48:c4: 45:47:0f:22:d7:0d:69:b4:68:47:e9:2e:65:3f:6a:db:5d:3f: c0:73:2a:29:bf:f3:02:ae:ce:c9:f3:06:09:97:61:f4:a8:59: 24:ec:2a:2b:de:b5:8b:fa:44:e5:ae:4e:79:89:42:22:88:99: 91:5b:64:be:52:16:75:a3:61:b5:8b:41:54:0b:7c:32:16:5c: 25:31:b1:4d:15:b9:db:87:3e:35:b8:a9:c6:86:25:bd:21:de: c0:36:2d:8b:d6:a3:67:55:48:7f:53:b0:14:a1:6e:42:6b:1b: 4c:58:20:ee:83:7d:76:e7:61:f4:83:9f:58:2c:53:d5:1d:8e: cd:77:45:ff:94:98:2d:c1:d7:e0:a2:dd:14:63:f8:25:b7:ff: 9f:70:3a:6a:05:b8:8d:30:33:68:87:26:fd:ed:bf:c2:16:90: 2a:3e:43:b4 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9WxRmYFwG0QqpmVI/u15LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NWNkMjIwOTA3Y2E2OTViYjgyNzRmOGY2NWFhZmViMjE3MDM2MGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9AhEOSUGlV90hh1Cc5iVlcIs1t5 NO7/+X8L91s3WqW6CCkOO/ppCfmNizPWJm6J6+D/WTBNPwQejUBeOv5zFL29Oo+v z++7pUax0dv/IageUTMnfaJ3tYQSD1tDc/vJQeFM+l0NNFjC2yfBVAkZTC9XSUL6 FyFHVEN7aoaOVLLbudsiOXWT/lZHn33+TD0hP8fSnodfa6tejMLKTkh/aoNW1Jh9 HIC2HgGqnNQTUsWVWmmqKjL3vx75u7vuuFgw69xGic0HQVHjv8bW0JZk7a2wNsLV 7jQbYUyFG2zZNvkspghPrI49Zzlto/3e716VSeeRYedey5Y5qUGvOljniQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFGXNIgkHymlbuCdPj2Wq/rIXA2CoMB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvWmMwaUNRZkthVnU0SjAtUFphci1zaGNEWUtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAToBdAwQA ToBfAwQCT3xEMA0GCSqGSIb3DQEBCwUAA4IBAQBiCv6PHrGEgd6CeSQIx7J4N08r Z7nrERmRNEB2k5hWzbKEXLojoFaHSpEpmQuabb4FrpXbJ6B/L8iJRIxL3mcCpBv0 EWgQu8SfAVceszW3LnV+a8+hY/X0SMRFRw8i1w1ptGhH6S5lP2rbXT/Acyopv/MC rs7J8wYJl2H0qFkk7Cor3rWL+kTlrk55iUIiiJmRW2S+UhZ1o2G1i0FUC3wyFlwl MbFNFbnbhz41uKnGhiW9Id7ANi2L1qNnVUh/U7AUoW5CaxtMWCDug31252H0g59Y LFPVHY7Nd0X/lJgtwdfgot0UY/glt/+fcDpqBbiNMDNohyb97b/CFpAqPkO0 -----END CERTIFICATE-----Generated at Mon Jan 19 17:48:10 2026 by rpki-client