This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/d4Hj1DsNpueDXzWonTVbT5vxL54.roa File: d4Hj1DsNpueDXzWonTVbT5vxL54.roa (raw, json) Hash identifier: 0frkgkur8EwMs6QUFXjR+OU5si62Utd5U0iQpfqU47s= Subject key identifier: 77:81:E3:D4:3B:0D:A6:E7:83:5F:35:A8:9D:35:5B:4F:9B:F1:2F:9E Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA786B9A42D06DD5F0F9DE0782FCD68 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/d4Hj1DsNpueDXzWonTVbT5vxL54.roa Signing time: Fri 02 Jan 2026 12:21:06 +0000 ROA not before: Fri 02 Jan 2026 12:21:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204496 IP address blocks: 178.34.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:86:b9:a4:2d:06:dd:5f:0f:9d:e0:78:2f:cd:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7781e3d43b0da6e7835f35a89d355b4f9bf12f9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0f:ae:b6:36:98:4a:a0:11:0e:b4:46:4a:f0: 18:db:12:5c:d7:4a:50:c3:f6:a1:56:d1:5b:f4:3f: 98:d8:55:71:e6:f5:2f:e5:20:77:4c:55:70:1c:aa: 17:5e:ba:a8:ad:02:19:0f:84:7e:2c:c8:8d:9b:ee: a5:ba:2e:b3:ec:b9:9f:05:59:93:b1:74:12:8c:e4: 5f:dd:99:b8:ed:9b:0c:24:54:19:96:07:c6:b0:d8: 31:60:6c:01:26:0f:58:76:a1:2d:f5:6a:29:fe:51: 38:5a:c9:68:4d:d9:89:03:23:cb:24:d5:41:ba:58: c8:a4:b6:a8:4e:c3:15:ed:2d:0b:f4:df:2d:28:68: a8:02:7e:ce:eb:83:6a:db:b7:b5:21:e7:40:f9:f4: 33:7b:32:60:78:47:7b:e7:0b:b1:67:f1:a0:04:0f: b1:e2:16:4f:b6:79:d3:8b:71:71:d4:e7:cd:80:d9: 94:ed:ff:ad:4f:36:85:24:e3:ac:db:5d:cd:94:5b: a4:44:4c:b2:34:9e:82:e0:98:e9:d6:c1:bb:98:77: 7e:e4:29:7b:b9:31:c8:7f:73:56:aa:6e:44:99:97: 94:00:05:24:24:3c:3c:af:93:02:17:27:52:4c:5e: 73:e0:ae:b5:fe:c7:3d:71:a4:09:b4:ba:5c:28:fb: 7a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:81:E3:D4:3B:0D:A6:E7:83:5F:35:A8:9D:35:5B:4F:9B:F1:2F:9E X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/d4Hj1DsNpueDXzWonTVbT5vxL54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.34.95.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:3b:90:64:4d:e7:fd:89:49:a6:50:8f:02:03:25:f3:8b:0f: a2:07:17:bd:96:04:24:a7:06:c6:28:2b:68:98:fb:ed:41:53: 3e:26:94:27:79:6d:67:6d:da:cd:ea:1e:5f:f9:4e:c6:10:83: fa:fb:40:0b:f2:db:58:1d:cc:5d:cd:a8:5a:dd:63:8e:53:45: 3d:be:b9:b8:7d:3b:65:59:01:dd:ff:ec:bb:61:90:b2:d9:e9: 6e:41:4a:56:64:ab:62:1d:fd:eb:bd:e6:1e:01:b6:a4:04:0f: f4:49:d3:a5:b4:85:52:23:a8:eb:8e:12:8f:5a:b0:c1:fe:d7: 19:3a:89:0c:30:f1:05:a3:b7:cf:a6:32:6d:10:09:69:d8:66: 39:92:06:06:01:28:ac:04:c0:a9:db:94:d0:09:bf:07:e4:91: ae:ee:46:21:79:75:8c:82:1f:f1:c8:c1:ef:52:0e:7b:12:4e: 87:f3:97:be:b4:3b:b5:87:d4:99:0e:e5:16:60:28:37:6c:7b: 4c:15:ee:38:16:d2:d4:b9:14:98:ac:00:8f:59:b1:2e:cc:17: 71:81:41:e3:2e:6b:ba:8c:ff:80:9d:45:7c:ac:4e:39:8b:cb: c6:e9:3f:2d:89:ba:c4:0d:24:cf:fc:f2:21:d1:8c:3a:9b:d9: 6e:68:6a:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p4a5pC0G3V8PneB4L81oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzgxZTNkNDNiMGRhNmU3ODM1ZjM1YTg5ZDM1NWI0ZjliZjEyZjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA+utjaYSqARDrRGSvAY2xJc10pQ w/ahVtFb9D+Y2FVx5vUv5SB3TFVwHKoXXrqorQIZD4R+LMiNm+6lui6z7LmfBVmT sXQSjORf3Zm47ZsMJFQZlgfGsNgxYGwBJg9YdqEt9Wop/lE4WsloTdmJAyPLJNVB uljIpLaoTsMV7S0L9N8tKGioAn7O64Nq27e1IedA+fQzezJgeEd75wuxZ/GgBA+x 4hZPtnnTi3Fx1OfNgNmU7f+tTzaFJOOs213NlFukREyyNJ6C4Jjp1sG7mHd+5Cl7 uTHIf3NWqm5EmZeUAAUkJDw8r5MCFydSTF5z4K61/sc9caQJtLpcKPt6gQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHeB49Q7Dabng181qJ01W0+b8S+eMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvZDRIajFEc05wdWVEWHpXb25UVmJUNXZ4TDU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsiJfMA0G CSqGSIb3DQEBCwUAA4IBAQBcO5BkTef9iUmmUI8CAyXziw+iBxe9lgQkpwbGKCto mPvtQVM+JpQneW1nbdrN6h5f+U7GEIP6+0AL8ttYHcxdzaha3WOOU0U9vrm4fTtl WQHd/+y7YZCy2eluQUpWZKtiHf3rveYeAbakBA/0SdOltIVSI6jrjhKPWrDB/tcZ OokMMPEFo7fPpjJtEAlp2GY5kgYGASisBMCp25TQCb8H5JGu7kYheXWMgh/xyMHv Ug57Ek6H85e+tDu1h9SZDuUWYCg3bHtMFe44FtLUuRSYrACPWbEuzBdxgUHjLmu6 jP+AnUV8rE45i8vG6T8tibrEDSTP/PIh0Yw6m9luaGow -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:02 2026 by rpki-client