This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/eJVssC0DvhrNsetFk5GFgWO2ky4.roa File: eJVssC0DvhrNsetFk5GFgWO2ky4.roa (raw, json) Hash identifier: VMsArrM9TNs3d/cIZWSHtA+Rp0/uFzRn7Tdd8sCFb+M= Subject key identifier: 78:95:6C:B0:2D:03:BE:1A:CD:B1:EB:45:93:91:85:81:63:B6:93:2E Certificate issuer: /CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0 Certificate serial: 019B76EACE501DAAD77B813D5FB87C3C17E6 Authority key identifier: A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/eJVssC0DvhrNsetFk5GFgWO2ky4.roa Signing time: Thu 01 Jan 2026 00:17:38 +0000 ROA not before: Thu 01 Jan 2026 00:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 192.108.23.0/24 maxlen: 24 192.108.24.0/23 maxlen: 23 192.108.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.mft rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ce:50:1d:aa:d7:7b:81:3d:5f:b8:7c:3c:17:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a08cb5b26ea65d81fdf63a1d9b200570910003b0 Validity Not Before: Jan 1 00:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=78956cb02d03be1acdb1eb459391858163b6932e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3a:29:11:2d:cd:f5:bc:ee:33:55:a7:b9:fc: 4f:3d:ef:bb:fd:b6:7d:e8:ef:63:2b:37:d8:0b:8f: 23:6e:f8:ce:42:2b:fb:2c:1c:ff:66:4e:cd:e1:0b: be:8a:d7:83:c1:a7:57:d3:b3:c4:ca:df:ed:9b:99: b9:ba:f6:1c:a0:8d:aa:72:20:36:0d:f8:cf:7b:a0: 4d:47:4b:02:fa:8e:0a:39:f4:3a:49:ca:74:45:cc: 95:01:d7:22:a2:0a:a6:08:eb:4e:db:4d:3a:8b:0d: 2c:b4:72:92:ea:ce:36:bf:78:ea:22:22:07:0a:34: b2:5f:57:b5:01:e9:4a:1f:eb:94:62:92:fa:69:25: bf:97:41:96:23:c6:94:bc:19:00:72:1c:62:b1:98: 9e:9e:45:66:c9:f2:16:52:28:ee:49:0c:8f:a1:8d: 8c:be:22:4e:75:f7:f2:5f:44:be:9a:c4:6f:55:32: e6:a3:49:10:f0:d4:e9:c4:1e:ab:f5:77:ee:82:ce: 54:df:f3:b3:b7:ac:d1:9e:b0:3a:88:f1:aa:aa:ae: 3c:b9:aa:9e:e1:48:3b:5a:26:1c:13:22:7d:a4:50: 7a:74:fd:e0:1d:ad:38:a6:00:28:29:74:df:16:ee: 89:df:00:37:11:0c:00:a1:a2:6a:04:fe:41:5c:9f: 30:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:95:6C:B0:2D:03:BE:1A:CD:B1:EB:45:93:91:85:81:63:B6:93:2E X509v3 Authority Key Identifier: keyid:A0:8C:B5:B2:6E:A6:5D:81:FD:F6:3A:1D:9B:20:05:70:91:00:03:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oIy1sm6mXYH99jodmyAFcJEAA7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/eJVssC0DvhrNsetFk5GFgWO2ky4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/1bb649-e983-4dfc-98a8-cee93c25e639/1/oIy1sm6mXYH99jodmyAFcJEAA7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.108.23.0-192.108.26.255 Signature Algorithm: sha256WithRSAEncryption 17:e1:30:0d:25:38:6f:09:02:99:d4:a9:fa:30:45:32:02:ed: 0a:85:68:ba:d0:80:33:a2:a0:97:6a:ac:ff:a5:57:31:32:2f: dd:e9:fd:5f:ff:ce:b5:8d:2f:b8:b2:59:e9:ec:86:f5:ce:95: 7d:42:b4:41:12:fb:be:8d:42:f0:b7:a9:3d:50:32:cc:b0:de: 2c:3a:0a:d1:7a:b7:b1:ef:ce:7c:3f:41:95:94:0e:78:80:e6: c6:75:65:7d:90:22:e2:94:10:e9:85:1d:09:64:a8:a1:4c:5e: c8:0b:c1:9f:5c:f8:7f:8c:ac:35:03:2e:24:84:1a:11:0b:83: 15:f0:cb:f1:89:45:a4:99:43:c1:81:79:36:97:53:3c:dd:2f: ad:62:e2:ba:aa:49:c1:86:df:00:34:ce:6d:c7:ef:0c:8d:8a: d2:a8:91:86:da:d4:13:4e:36:7a:66:d0:7e:19:f9:7a:e5:d2: 8e:a8:c7:7e:5e:f9:7f:35:06:ee:ff:fa:be:d4:3a:14:2a:b1: 42:c7:e4:cb:7a:44:c9:34:73:ad:70:14:8d:7e:f1:98:fa:20: 59:d9:86:62:a0:f1:bb:3e:48:ea:9f:f6:1e:ed:8d:4e:39:ad: 38:f4:9a:dd:56:17:87:2c:ee:74:22:bf:c8:56:30:31:eb:7d: 6a:d6:36:57 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt26s5QHarXe4E9X7h8PBfmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwOGNiNWIyNmVhNjVkODFmZGY2M2ExZDliMjAwNTcwOTEw MDAzYjAwHhcNMjYwMTAxMDAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ODk1NmNiMDJkMDNiZTFhY2RiMWViNDU5MzkxODU4MTYzYjY5MzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjopES3N9bzuM1WnufxPPe+7/bZ9 6O9jKzfYC48jbvjOQiv7LBz/Zk7N4Qu+iteDwadX07PEyt/tm5m5uvYcoI2qciA2 DfjPe6BNR0sC+o4KOfQ6Scp0RcyVAdciogqmCOtO2006iw0stHKS6s42v3jqIiIH CjSyX1e1AelKH+uUYpL6aSW/l0GWI8aUvBkAchxisZienkVmyfIWUijuSQyPoY2M viJOdffyX0S+msRvVTLmo0kQ8NTpxB6r9Xfugs5U3/Ozt6zRnrA6iPGqqq48uaqe 4Ug7WiYcEyJ9pFB6dP3gHa04pgAoKXTfFu6J3wA3EQwAoaJqBP5BXJ8wswIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHiVbLAtA74azbHrRZORhYFjtpMuMB8GA1UdIwQY MBaAFKCMtbJupl2B/fY6HZsgBXCRAAOwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0l5MXNtNm1YWUg5OWpvZG15QUZjSkVBQTdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xYmI2NDktZTk4My00ZGZjLTk4YTgt Y2VlOTNjMjVlNjM5LzEvZUpWc3NDMER2aHJOc2V0Rms1R0ZnV08ya3k0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8xYmI2NDktZTk4My00ZGZjLTk4YTgtY2VlOTNjMjVlNjM5 LzEvb0l5MXNtNm1YWUg5OWpvZG15QUZjSkVBQTdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADAbBcD BADAbBowDQYJKoZIhvcNAQELBQADggEBABfhMA0lOG8JApnUqfowRTIC7QqFaLrQ gDOioJdqrP+lVzEyL93p/V//zrWNL7iyWenshvXOlX1CtEES+76NQvC3qT1QMsyw 3iw6CtF6t7Hvznw/QZWUDniA5sZ1ZX2QIuKUEOmFHQlkqKFMXsgLwZ9c+H+MrDUD LiSEGhELgxXwy/GJRaSZQ8GBeTaXUzzdL61i4rqqScGG3wA0zm3H7wyNitKokYba 1BNONnpm0H4Z+Xrl0o6ox35e+X81Bu7/+r7UOhQqsULH5Mt6RMk0c61wFI1+8Zj6 IFnZhmKg8bs+SOqf9h7tjU45rTj0mt1WF4cs7nQiv8hWMDHrfWrWNlc= -----END CERTIFICATE-----Generated at Tue Jan 27 11:25:15 2026 by rpki-client