This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/zQ8k9JvVM79Ocnr5Zgs_9oTFafw.roa File: zQ8k9JvVM79Ocnr5Zgs_9oTFafw.roa (raw, json) Hash identifier: lxAEeKrNfAfxgxxFAXxZshYHhY/SzJkLgikv9CegzW0= Subject key identifier: CD:0F:24:F4:9B:D5:33:BF:4E:72:7A:F9:66:0B:3F:F6:84:C5:69:FC Certificate issuer: /CN=c8f6a72c343e764776244a2ff11271feb22edff9 Certificate serial: 019B7E3753FEE594F09BA909B43CB3FD8B1D Authority key identifier: C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/zQ8k9JvVM79Ocnr5Zgs_9oTFafw.roa Signing time: Fri 02 Jan 2026 10:18:33 +0000 ROA not before: Fri 02 Jan 2026 10:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43655 IP address blocks: 78.24.136.0/21 maxlen: 21 78.24.136.0/23 maxlen: 23 78.24.136.0/24 maxlen: 24 78.24.137.0/24 maxlen: 24 78.24.138.0/23 maxlen: 23 78.24.138.0/24 maxlen: 24 78.24.139.0/24 maxlen: 24 193.148.2.0/23 maxlen: 23 2a00:e70::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.mft rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:53:fe:e5:94:f0:9b:a9:09:b4:3c:b3:fd:8b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8f6a72c343e764776244a2ff11271feb22edff9 Validity Not Before: Jan 2 10:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd0f24f49bd533bf4e727af9660b3ff684c569fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8a:b3:62:77:89:2d:13:9a:ad:99:87:d5:27: 7d:ab:4a:88:ef:a9:f2:3f:05:7b:cd:92:d6:7b:7d: 16:b6:bd:57:df:a6:8b:3a:0e:f5:f4:8e:15:38:5b: 3a:11:a2:05:68:d9:41:ec:00:0e:ee:5c:ad:f4:0a: f3:82:3d:a3:72:9b:a5:c8:e2:7b:10:9c:46:75:b5: c4:28:a3:21:9a:e2:b2:68:3d:f2:08:35:7d:15:63: d3:8f:71:b6:d9:0f:7d:c2:e4:b1:5c:ff:c4:a6:5a: 05:d7:5f:4e:f5:19:26:a4:57:40:b8:8a:15:0f:ab: 15:06:64:5d:d2:f6:97:99:81:57:53:7f:5c:8c:5f: e4:f3:9d:37:6c:92:2a:24:5d:4a:43:4a:7c:48:2e: 95:eb:98:8f:84:e1:2d:c6:db:d8:00:87:11:7c:46: 50:63:99:b9:01:5c:8c:8b:30:25:8f:ce:db:05:9e: 07:b0:e7:bf:ce:11:41:df:31:5c:00:e6:2a:39:54: 1e:32:d8:74:3f:69:31:3d:df:22:3d:5b:67:5e:e5: 48:93:8d:98:1e:86:81:f2:e1:b6:fe:a1:a4:b2:b3: d5:7a:cd:67:ba:46:9b:5e:fc:49:c9:32:50:7d:04: 4a:a8:04:86:45:83:ff:4e:c4:a3:8d:06:8e:f5:b7: 52:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:0F:24:F4:9B:D5:33:BF:4E:72:7A:F9:66:0B:3F:F6:84:C5:69:FC X509v3 Authority Key Identifier: keyid:C8:F6:A7:2C:34:3E:76:47:76:24:4A:2F:F1:12:71:FE:B2:2E:DF:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yPanLDQ-dkd2JEov8RJx_rIu3_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/zQ8k9JvVM79Ocnr5Zgs_9oTFafw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/f30b54-24f7-4019-91cb-ada6e64307c9/1/yPanLDQ-dkd2JEov8RJx_rIu3_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.24.136.0/21 193.148.2.0/23 IPv6: 2a00:e70::/32 Signature Algorithm: sha256WithRSAEncryption 78:35:1a:5d:88:7b:a0:90:d0:6f:41:77:d7:b2:73:e5:f6:ef: f3:16:86:e7:ef:27:7f:f0:ee:67:d0:19:af:dc:d1:0d:51:20: b5:f7:27:80:49:99:92:8d:60:7e:94:3c:b5:ed:87:e8:be:46: bc:f6:1f:95:c6:d3:59:f2:94:9c:30:a8:42:7a:52:8a:c9:e3: d1:c8:ea:36:b4:4e:a5:78:26:63:2e:8f:b9:bf:11:ae:9e:6c: 36:f5:2a:2b:db:b2:e3:ec:38:85:4b:d1:9a:1e:ef:9a:d6:b5: b3:a6:e8:7c:4c:04:cc:1d:bd:1c:ca:48:3d:0d:17:8c:14:00: 71:59:21:bf:b9:c3:cb:4d:6f:77:4b:47:c0:0e:09:92:10:6e: 7b:0e:03:f9:6a:01:36:19:11:62:d8:66:11:73:4d:64:e2:49: bb:d1:50:8f:a1:94:da:b0:17:8d:2d:96:1a:79:63:eb:93:49: 8e:d0:20:dd:13:38:78:ec:d5:ce:22:a9:42:c1:b5:1d:5e:75: 52:bf:da:71:3b:b8:55:3b:5f:b2:b5:ef:71:7e:53:c8:b5:ea: 8b:d3:89:44:83:ac:a4:9c:8d:27:e8:00:23:e9:5a:d3:cb:9b: b7:e1:c2:48:fc:e8:33:5b:85:64:54:cc:6a:3a:d9:4f:90:35: 37:e8:39:63 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt+N1P+5ZTwm6kJtDyz/YsdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4ZjZhNzJjMzQzZTc2NDc3NjI0NGEyZmYxMTI3MWZlYjIy ZWRmZjkwHhcNMjYwMTAyMTAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDBmMjRmNDliZDUzM2JmNGU3MjdhZjk2NjBiM2ZmNjg0YzU2OWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIqzYneJLROarZmH1Sd9q0qI76ny PwV7zZLWe30Wtr1X36aLOg719I4VOFs6EaIFaNlB7AAO7lyt9Arzgj2jcpulyOJ7 EJxGdbXEKKMhmuKyaD3yCDV9FWPTj3G22Q99wuSxXP/EploF119O9RkmpFdAuIoV D6sVBmRd0vaXmYFXU39cjF/k8503bJIqJF1KQ0p8SC6V65iPhOEtxtvYAIcRfEZQ Y5m5AVyMizAlj87bBZ4HsOe/zhFB3zFcAOYqOVQeMth0P2kxPd8iPVtnXuVIk42Y HoaB8uG2/qGksrPVes1nukabXvxJyTJQfQRKqASGRYP/TsSjjQaO9bdSewIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFM0PJPSb1TO/TnJ6+WYLP/aExWn8MB8GA1UdIwQY MBaAFMj2pyw0PnZHdiRKL/EScf6yLt/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveVBhbkxEUS1ka2QySkVvdjhSSnhfckl1M19rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9mMzBiNTQtMjRmNy00MDE5LTkxY2It YWRhNmU2NDMwN2M5LzEvelE4azlKdlZNNzlPY25yNVpnc185b1RGYWZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9mMzBiNTQtMjRmNy00MDE5LTkxY2ItYWRhNmU2NDMwN2M5 LzEveVBhbkxEUS1ka2QySkVvdjhSSnhfckl1M19rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDThiIAwQB wZQCMA0EAgACMAcDBQAqAA5wMA0GCSqGSIb3DQEBCwUAA4IBAQB4NRpdiHugkNBv QXfXsnPl9u/zFobn7yd/8O5n0Bmv3NENUSC19yeASZmSjWB+lDy17Yfovka89h+V xtNZ8pScMKhCelKKyePRyOo2tE6leCZjLo+5vxGunmw29Sor27Lj7DiFS9GaHu+a 1rWzpuh8TATMHb0cykg9DReMFABxWSG/ucPLTW93S0fADgmSEG57DgP5agE2GRFi 2GYRc01k4km70VCPoZTasBeNLZYaeWPrk0mO0CDdEzh47NXOIqlCwbUdXnVSv9px O7hVO1+yte9xflPIteqL04lEg6yknI0n6AAj6VrTy5u34cJI/OgzW4VkVMxqOtlP kDU36Dlj -----END CERTIFICATE-----Generated at Mon Feb 9 22:23:44 2026 by rpki-client