This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/w1QhLoFqs3Mmi3zuM_RXVRtcvZM.roa File: w1QhLoFqs3Mmi3zuM_RXVRtcvZM.roa (raw, json) Hash identifier: MuKFURj3/sFhRlOAJQu+suEECQwm9AMDRkJVc7uhin8= Subject key identifier: C3:54:21:2E:81:6A:B3:73:26:8B:7C:EE:33:F4:57:55:1B:5C:BD:93 Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466 Certificate serial: 019B7FF2498DE1BB6083D7B35DC8354C86A3 Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/w1QhLoFqs3Mmi3zuM_RXVRtcvZM.roa Signing time: Fri 02 Jan 2026 18:22:23 +0000 ROA not before: Fri 02 Jan 2026 18:22:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205906 IP address blocks: 78.109.225.0/24 maxlen: 24 78.109.226.0/24 maxlen: 24 78.109.227.0/24 maxlen: 24 78.109.228.0/24 maxlen: 24 78.109.229.0/24 maxlen: 24 78.109.230.0/24 maxlen: 24 78.109.231.0/24 maxlen: 24 78.109.232.0/24 maxlen: 24 78.109.239.0/24 maxlen: 24 185.52.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:49:8d:e1:bb:60:83:d7:b3:5d:c8:35:4c:86:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466 Validity Not Before: Jan 2 18:22:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c354212e816ab373268b7cee33f457551b5cbd93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e7:57:b4:f1:43:29:f7:8a:56:dc:1a:1a:f9: 09:7e:a5:93:30:43:a5:ec:64:b4:e3:6a:c4:b1:db: 9a:9e:60:99:ed:1c:3b:23:d6:39:81:8f:5b:d3:f2: 55:d9:74:10:1e:4c:e0:d6:fc:61:6f:d5:7b:24:70: 74:fd:5e:bc:cc:18:45:29:13:a5:a7:6a:82:b6:4f: 3d:ed:13:19:5b:26:8c:b8:ad:65:00:6e:79:45:cf: 5f:0d:4f:7d:b6:cf:93:ad:25:65:7a:da:80:0c:cd: 49:84:17:b8:d4:bb:06:33:a1:7c:94:80:60:ed:b9: 92:6a:61:ca:79:22:b9:bc:91:10:bb:ae:72:51:8c: d7:52:f4:bd:26:c8:a1:31:58:8e:fa:9c:17:5e:0d: e7:d7:1e:0d:91:d7:97:95:fd:fe:d6:cc:52:61:3a: 16:d3:b9:0b:3f:02:29:ea:5a:3f:4e:b2:f5:0f:8c: 2a:d9:cf:84:d9:ce:cb:06:df:dc:42:83:d4:86:49: 20:7f:67:c8:a5:e4:25:a7:46:ff:35:31:24:7d:f6: 57:0a:a1:69:ad:88:cc:71:d5:7e:bf:fc:51:13:95: 6e:a2:12:b6:f8:da:96:6a:b0:fa:d6:4b:5a:29:45: 9e:35:25:21:52:74:f1:92:38:51:e1:a5:5f:6b:7e: b7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:54:21:2E:81:6A:B3:73:26:8B:7C:EE:33:F4:57:55:1B:5C:BD:93 X509v3 Authority Key Identifier: keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/w1QhLoFqs3Mmi3zuM_RXVRtcvZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.109.225.0-78.109.232.255 78.109.239.0/24 185.52.103.0/24 Signature Algorithm: sha256WithRSAEncryption 59:f1:28:1f:53:48:06:46:18:87:15:36:c4:85:c7:2c:30:b2: 47:bc:62:16:ca:bd:3a:e8:ed:8b:aa:9d:77:25:1c:a8:71:5e: 78:48:a7:eb:7e:3e:fe:99:ad:d9:ae:3d:6d:40:cb:90:e5:aa: 4d:fd:74:e2:05:5e:ca:49:27:a3:cc:64:e5:32:e6:d1:bc:47: 05:e2:70:91:f8:14:c3:1b:85:15:f6:e8:0a:e2:6c:ce:bf:c1: 68:02:1e:e1:61:fe:7d:d9:60:ca:b5:ac:48:a7:6d:83:00:f3: 62:07:15:6a:f8:66:f4:cf:50:49:99:12:35:62:e9:24:c4:c6: 30:d4:d9:bd:34:dc:bb:96:30:93:83:45:6f:e7:de:b5:70:34: c2:ee:cf:4c:b7:8c:eb:fe:15:b0:f6:27:b3:73:a0:11:67:79: 0c:ab:cb:38:35:52:01:e1:be:e0:36:2a:99:f1:8d:30:30:22: 66:88:b5:ab:70:1e:2f:6b:09:60:ec:39:cb:99:8a:25:4f:6a: 48:57:00:9c:35:33:80:be:27:c4:65:1c:4b:6b:d5:17:4c:a4: ad:35:7b:c1:4f:75:ef:99:2c:96:49:04:7b:1d:55:ea:a9:b4: 82:bf:fd:03:36:13:20:82:12:6f:b1:15:f1:8d:70:bc:06:9c: f1:fc:25:c8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt/8kmN4btgg9ezXcg1TIajMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiMDYxYTM5ZjBhMDM3OTIzMTEzZDZiOGJiOWI1YmRhYjVi MmY0NjYwHhcNMjYwMTAyMTgyMjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzU0MjEyZTgxNmFiMzczMjY4YjdjZWUzM2Y0NTc1NTFiNWNiZDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOdXtPFDKfeKVtwaGvkJfqWTMEOl 7GS042rEsduanmCZ7Rw7I9Y5gY9b0/JV2XQQHkzg1vxhb9V7JHB0/V68zBhFKROl p2qCtk897RMZWyaMuK1lAG55Rc9fDU99ts+TrSVletqADM1JhBe41LsGM6F8lIBg 7bmSamHKeSK5vJEQu65yUYzXUvS9JsihMViO+pwXXg3n1x4NkdeXlf3+1sxSYToW 07kLPwIp6lo/TrL1D4wq2c+E2c7LBt/cQoPUhkkgf2fIpeQlp0b/NTEkffZXCqFp rYjMcdV+v/xRE5VuohK2+NqWarD61ktaKUWeNSUhUnTxkjhR4aVfa363UwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFMNUIS6BarNzJot87jP0V1UbXL2TMB8GA1UdIwQY MBaAFPsGGjnwoDeSMRPWuLubW9q1svRmMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS13WWFPZkNnTjVJeEU5YTR1NXRiMnJXeTlHWS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjMvYTMyOTRiLWQ0NzgtNGRiZC1hYWU1 LWZkMTY3YWQ5MmE5ZC8xL3cxUWhMb0ZxczNNbWkzenVNX1JYVlJ0Y3ZaTS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZjMvYTMyOTRiLWQ0NzgtNGRiZC1hYWU1LWZkMTY3YWQ5MmE5 ZC8xLzEtd1lhT2ZDZ041SXhFOWE0dTV0YjJyV3k5R1kuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwMwYIKwYBBQUHAQcBAf8EJDAiMCAEAgABMBowDAMEAE5t 4QMEAE5t6AMEAE5t7wMEALk0ZzANBgkqhkiG9w0BAQsFAAOCAQEAWfEoH1NIBkYY hxU2xIXHLDCyR7xiFsq9Oujti6qddyUcqHFeeEin634+/pmt2a49bUDLkOWqTf10 4gVeykkno8xk5TLm0bxHBeJwkfgUwxuFFfboCuJszr/BaAIe4WH+fdlgyrWsSKdt gwDzYgcVavhm9M9QSZkSNWLpJMTGMNTZvTTcu5Ywk4NFb+fetXA0wu7PTLeM6/4V sPYns3OgEWd5DKvLODVSAeG+4DYqmfGNMDAiZoi1q3AeL2sJYOw5y5mKJU9qSFcA nDUzgL4nxGUcS2vVF0ykrTV7wU9175kslkkEex1V6qm0gr/9AzYTIIISb7EV8Y1w vAac8fwlyA== -----END CERTIFICATE-----Generated at Tue Jan 20 04:45:25 2026 by rpki-client