This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/wd9lb8HLNBiAb4lEJcpFLLaEKgY.roa File: wd9lb8HLNBiAb4lEJcpFLLaEKgY.roa (raw, json) Hash identifier: MdyvyFdOrajBYom9nKyd+kcqlCl3PhMOlRwGakFPGDQ= Subject key identifier: C1:DF:65:6F:C1:CB:34:18:80:6F:89:44:25:CA:45:2C:B6:84:2A:06 Certificate issuer: /CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5 Certificate serial: 019B7DCADE81D1061923897684CFB36CCDC7 Authority key identifier: D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/wd9lb8HLNBiAb4lEJcpFLLaEKgY.roa Signing time: Fri 02 Jan 2026 08:20:05 +0000 ROA not before: Fri 02 Jan 2026 08:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 78.153.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.mft rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Feb 2026 10:48:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:de:81:d1:06:19:23:89:76:84:cf:b3:6c:cd:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d271ea06b1a756cbf46ae046484bbd3e4fce4ca5 Validity Not Before: Jan 2 08:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1df656fc1cb3418806f894425ca452cb6842a06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:58:20:ca:73:4b:0f:3a:20:63:12:4a:15:12: fe:b0:ec:69:4c:a5:06:32:40:46:25:25:39:d3:9f: 17:e3:7d:19:1c:1e:ba:03:56:7d:09:1e:a0:9e:49: a4:2b:7a:60:7a:98:39:1d:db:99:b9:f1:29:9b:00: ac:54:48:32:c9:85:81:01:dc:80:75:16:50:e9:81: 80:4d:18:d6:0b:fa:72:dd:75:56:1d:85:a9:25:b1: 9e:60:f4:01:01:e8:ea:de:ac:dd:a9:98:a4:04:ae: 1d:24:a7:e2:f8:4f:e7:82:7d:4a:e6:46:49:cf:61: 8c:05:78:61:b6:b2:bd:b2:00:7d:23:c6:3f:bf:96: 30:e0:22:a4:37:5c:90:35:c4:2f:9a:da:08:79:8e: 1a:20:2b:f8:5e:00:44:2b:be:26:33:e2:9a:b2:9a: 37:ae:e1:bc:19:39:a3:9a:55:e7:f8:ed:11:02:1d: 25:8d:d1:10:3f:65:2b:ae:bc:ee:60:42:65:79:38: 29:fe:16:ff:32:ca:70:c4:18:34:bc:63:7e:ed:36: 20:26:7f:ad:59:8f:5d:9f:a0:25:73:1f:1d:4c:fb: 39:2d:3c:93:91:72:2e:99:80:dc:71:28:d7:09:91: b0:ba:fd:08:2c:f8:22:b9:1b:24:d7:09:2f:57:52: 69:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:DF:65:6F:C1:CB:34:18:80:6F:89:44:25:CA:45:2C:B6:84:2A:06 X509v3 Authority Key Identifier: keyid:D2:71:EA:06:B1:A7:56:CB:F4:6A:E0:46:48:4B:BD:3E:4F:CE:4C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nHqBrGnVsv0auBGSEu9Pk_OTKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/wd9lb8HLNBiAb4lEJcpFLLaEKgY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/acec3d-775e-4d0e-8433-fc3d5c2230b2/1/0nHqBrGnVsv0auBGSEu9Pk_OTKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.153.112.0/20 Signature Algorithm: sha256WithRSAEncryption 2f:0f:11:58:52:63:f5:05:6d:88:c3:81:76:fe:5b:01:5d:a2: b2:f3:2f:d6:33:95:85:69:a0:aa:0f:c2:24:0c:53:a2:5f:1a: d5:bf:12:9c:d2:c6:08:6a:1a:79:a8:ce:ee:ec:8a:eb:d1:42: f4:4c:ec:fd:5e:50:75:ff:91:1c:4f:57:c7:b3:96:78:20:e8: bb:11:47:4e:b6:43:4f:86:5a:13:59:56:a3:2d:e3:3a:b0:2e: cd:23:9d:db:6e:f2:48:c7:d8:1f:3b:b8:d3:5c:58:52:a5:12: 28:31:36:0c:c2:01:9e:d6:9f:de:d7:92:c0:ab:0c:8b:e7:57: a2:01:31:7c:8b:4e:db:51:ac:07:10:c2:c1:65:9c:4f:ba:21: ab:fa:a0:d1:b9:46:35:26:ee:62:a1:f4:fc:22:64:f9:e0:c0: 12:8e:06:fd:33:8a:28:86:50:d1:1f:82:0d:68:5a:d7:57:44: 05:84:cf:e6:4a:cd:53:92:25:df:eb:ac:0c:ff:56:34:26:b4: bd:ab:5d:07:69:49:fc:96:10:b2:0e:ed:98:ac:c8:97:89:af: 6f:f8:ba:65:b1:26:d2:18:8c:ac:cc:5c:48:f6:64:49:b4:6f: 1c:fa:e7:be:3c:b7:ab:5b:09:c3:7d:51:6b:55:a6:ce:d5:09: 31:aa:29:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yt6B0QYZI4l2hM+zbM3HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyNzFlYTA2YjFhNzU2Y2JmNDZhZTA0NjQ4NGJiZDNlNGZj ZTRjYTUwHhcNMjYwMTAyMDgyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWRmNjU2ZmMxY2IzNDE4ODA2Zjg5NDQyNWNhNDUyY2I2ODQyYTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1ggynNLDzogYxJKFRL+sOxpTKUG MkBGJSU5058X430ZHB66A1Z9CR6gnkmkK3pgepg5HduZufEpmwCsVEgyyYWBAdyA dRZQ6YGATRjWC/py3XVWHYWpJbGeYPQBAejq3qzdqZikBK4dJKfi+E/ngn1K5kZJ z2GMBXhhtrK9sgB9I8Y/v5Yw4CKkN1yQNcQvmtoIeY4aICv4XgBEK74mM+Kaspo3 ruG8GTmjmlXn+O0RAh0ljdEQP2UrrrzuYEJleTgp/hb/MspwxBg0vGN+7TYgJn+t WY9dn6Alcx8dTPs5LTyTkXIumYDccSjXCZGwuv0ILPgiuRsk1wkvV1JpGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMHfZW/ByzQYgG+JRCXKRSy2hCoGMB8GA1UdIwQY MBaAFNJx6gaxp1bL9GrgRkhLvT5PzkylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMG5IcUJyR25Wc3YwYXVCR1NFdTlQa19PVEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9hY2VjM2QtNzc1ZS00ZDBlLTg0MzMt ZmMzZDVjMjIzMGIyLzEvd2Q5bGI4SExOQmlBYjRsRUpjcEZMTGFFS2dZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9hY2VjM2QtNzc1ZS00ZDBlLTg0MzMtZmMzZDVjMjIzMGIy LzEvMG5IcUJyR25Wc3YwYXVCR1NFdTlQa19PVEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQETplwMA0G CSqGSIb3DQEBCwUAA4IBAQAvDxFYUmP1BW2Iw4F2/lsBXaKy8y/WM5WFaaCqD8Ik DFOiXxrVvxKc0sYIahp5qM7u7Irr0UL0TOz9XlB1/5EcT1fHs5Z4IOi7EUdOtkNP hloTWVajLeM6sC7NI53bbvJIx9gfO7jTXFhSpRIoMTYMwgGe1p/e15LAqwyL51ei ATF8i07bUawHEMLBZZxPuiGr+qDRuUY1Ju5iofT8ImT54MASjgb9M4oohlDRH4IN aFrXV0QFhM/mSs1TkiXf66wM/1Y0JrS9q10HaUn8lhCyDu2YrMiXia9v+LplsSbS GIyszFxI9mRJtG8c+ue+PLerWwnDfVFrVabO1Qkxqikj -----END CERTIFICATE-----Generated at Sat Feb 14 17:23:49 2026 by rpki-client