This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/7LUz6zkdSebwRph-6evZof_oRoA.roa File: 7LUz6zkdSebwRph-6evZof_oRoA.roa (raw, json) Hash identifier: iCUDFOgqzkFuEGeNQzUPVcFw8zQIH7ZlzHg77Aa6T1k= Subject key identifier: EC:B5:33:EB:39:1D:49:E6:F0:46:98:7E:E9:EB:D9:A1:FF:E8:46:80 Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466 Certificate serial: 019B7FF249E8876863D4515EB802AC501538 Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/7LUz6zkdSebwRph-6evZof_oRoA.roa Signing time: Fri 02 Jan 2026 18:22:23 +0000 ROA not before: Fri 02 Jan 2026 18:22:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208293 IP address blocks: 78.109.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:49:e8:87:68:63:d4:51:5e:b8:02:ac:50:15:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466 Validity Not Before: Jan 2 18:22:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ecb533eb391d49e6f046987ee9ebd9a1ffe84680 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a6:b9:94:95:5e:31:54:d8:73:04:a3:37:ef: d5:e7:9e:7a:21:93:a3:6e:2d:58:1e:34:b3:8c:f7: ef:ad:68:f1:28:09:7c:f5:11:4c:bf:41:57:f0:21: ed:71:be:9e:a0:e6:37:31:de:14:a4:20:74:e2:c4: a0:5c:64:78:f7:10:c5:99:8f:52:e1:da:1a:a7:22: f5:ed:d5:b1:a0:d5:d4:86:87:9a:6b:d9:dc:71:33: 6c:25:78:07:d4:e8:31:a3:8f:78:9b:7c:05:a6:b2: 30:12:8d:1d:ca:2e:af:a8:27:2c:83:25:3f:32:dd: 95:e2:74:2b:20:3c:85:92:7e:25:a7:3c:c5:8e:b3: 03:4b:71:8b:84:a1:f6:46:01:b4:62:20:c7:0d:39: fb:27:4f:1a:fd:19:84:e7:61:7a:27:d2:d8:c8:a0: da:e4:ef:8a:22:c6:51:2b:10:67:47:71:e2:c4:2a: 36:01:f5:c5:64:6b:6e:d9:ab:89:2e:37:c0:33:c4: 81:47:94:56:b1:ff:68:31:21:cb:bd:a4:02:ab:39: e0:7f:cb:1a:6f:dd:eb:7f:36:bd:fb:d7:23:aa:43: c1:96:b7:54:51:d4:c6:f5:e7:76:75:66:dc:7d:11: 67:ec:21:e3:f2:37:41:c3:c3:ea:82:aa:e4:f2:19: 47:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:B5:33:EB:39:1D:49:E6:F0:46:98:7E:E9:EB:D9:A1:FF:E8:46:80 X509v3 Authority Key Identifier: keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/7LUz6zkdSebwRph-6evZof_oRoA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.109.225.0/24 Signature Algorithm: sha256WithRSAEncryption 15:64:ee:b0:b2:07:13:8c:0e:69:bd:6c:3c:9d:bf:b8:6c:ce: 11:59:c5:17:2e:eb:a8:4c:e9:05:27:06:5b:ba:b0:9d:35:40: 50:73:46:b0:bd:e0:55:85:e7:2e:55:46:21:d1:46:bb:74:3a: fd:2f:58:f9:b3:3e:68:6a:9d:7f:d3:60:fb:4d:e0:3d:82:d4: 1d:2b:65:bb:9b:9f:c8:a4:df:3e:51:ad:ea:ec:e3:8b:31:0c: 65:85:b0:a9:88:42:25:97:91:33:c6:63:5a:9b:16:af:90:94: f1:42:f8:cb:a1:b3:e7:43:14:d8:3a:83:e1:09:cd:91:e2:92: d2:2b:fa:7b:79:29:f7:97:d9:ee:43:42:90:5e:8c:a1:05:db: a2:4d:fe:4f:ea:5c:fc:1c:3d:f3:0a:f4:83:71:02:a7:08:5a: 8c:2f:46:22:29:2e:71:bd:b3:0e:a0:39:12:a5:a9:2f:79:c3: 34:54:be:f8:f1:0b:d6:f7:cd:c8:3e:08:9e:41:73:8e:6b:33: ee:e5:e9:10:28:72:ac:07:bd:49:20:ba:0c:41:f2:1a:62:76: 51:6c:75:c2:f8:c7:d7:1d:cc:13:b3:d3:40:b3:78:37:4c:ff: 5b:03:00:9d:7a:99:25:1f:78:49:4c:4b:f3:77:47:c0:a7:b0: c9:79:26:99 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt/8knoh2hj1FFeuAKsUBU4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMDYxYTM5ZjBhMDM3OTIzMTEzZDZiOGJiOWI1YmRhYjVi MmY0NjYwHhcNMjYwMTAyMTgyMjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2I1MzNlYjM5MWQ0OWU2ZjA0Njk4N2VlOWViZDlhMWZmZTg0NjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6a5lJVeMVTYcwSjN+/V5556IZOj bi1YHjSzjPfvrWjxKAl89RFMv0FX8CHtcb6eoOY3Md4UpCB04sSgXGR49xDFmY9S 4doapyL17dWxoNXUhoeaa9nccTNsJXgH1Ogxo494m3wFprIwEo0dyi6vqCcsgyU/ Mt2V4nQrIDyFkn4lpzzFjrMDS3GLhKH2RgG0YiDHDTn7J08a/RmE52F6J9LYyKDa 5O+KIsZRKxBnR3HixCo2AfXFZGtu2auJLjfAM8SBR5RWsf9oMSHLvaQCqzngf8sa b93rfza9+9cjqkPBlrdUUdTG9ed2dWbcfRFn7CHj8jdBw8Pqgqrk8hlHrwIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFOy1M+s5HUnm8EaYfunr2aH/6EaAMB8GA1UdIwQY MBaAFPsGGjnwoDeSMRPWuLubW9q1svRmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS13WWFPZkNnTjVJeEU5YTR1NXRiMnJXeTlHWS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvYTMyOTRiLWQ0NzgtNGRiZC1hYWU1 LWZkMTY3YWQ5MmE5ZC8xLzdMVXo2emtkU2Vid1JwaC02ZXZab2Zfb1JvQS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjMvYTMyOTRiLWQ0NzgtNGRiZC1hYWU1LWZkMTY3YWQ5MmE5 ZC8xLzEtd1lhT2ZDZ041SXhFOWE0dTV0YjJyV3k5R1kuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABObeEw DQYJKoZIhvcNAQELBQADggEBABVk7rCyBxOMDmm9bDydv7hszhFZxRcu66hM6QUn Blu6sJ01QFBzRrC94FWF5y5VRiHRRrt0Ov0vWPmzPmhqnX/TYPtN4D2C1B0rZbub n8ik3z5Rrers44sxDGWFsKmIQiWXkTPGY1qbFq+QlPFC+Muhs+dDFNg6g+EJzZHi ktIr+nt5KfeX2e5DQpBejKEF26JN/k/qXPwcPfMK9INxAqcIWowvRiIpLnG9sw6g ORKlqS95wzRUvvjxC9b3zcg+CJ5Bc45rM+7l6RAocqwHvUkgugxB8hpidlFsdcL4 x9cdzBOz00CzeDdM/1sDAJ16mSUfeElMS/N3R8CnsMl5Jpk= -----END CERTIFICATE-----Generated at Tue Jan 20 04:45:27 2026 by rpki-client