This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/9JptdLDcntQOv_LPrBMUCpvGPBk.roa File: 9JptdLDcntQOv_LPrBMUCpvGPBk.roa (raw, json) Hash identifier: 73iAqO8mI3K+RtQqfMbur8DNuJybJKZQrci5eZb7C2c= Subject key identifier: F4:9A:6D:74:B0:DC:9E:D4:0E:BF:F2:CF:AC:13:14:0A:9B:C6:3C:19 Certificate issuer: /CN=2e827c87cbbfc261a274e9cb1b095026a80c6136 Certificate serial: 019B7D5C5492716D742D6CF7EDC263F511BE Authority key identifier: 2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/9JptdLDcntQOv_LPrBMUCpvGPBk.roa Signing time: Fri 02 Jan 2026 06:19:21 +0000 ROA not before: Fri 02 Jan 2026 06:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39232 IP address blocks: 78.111.48.0/20 maxlen: 20 78.111.48.0/21 maxlen: 21 78.111.56.0/21 maxlen: 21 185.81.80.0/22 maxlen: 22 185.81.80.0/23 maxlen: 23 185.81.82.0/23 maxlen: 23 2a03:7740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.mft rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:54:92:71:6d:74:2d:6c:f7:ed:c2:63:f5:11:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e827c87cbbfc261a274e9cb1b095026a80c6136 Validity Not Before: Jan 2 06:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f49a6d74b0dc9ed40ebff2cfac13140a9bc63c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:2a:0f:f9:16:86:7f:53:15:24:eb:27:f8:f4: d7:08:ee:f5:0c:b3:cd:45:96:35:82:0e:19:42:a3: 7a:4e:8b:40:2e:ae:39:9f:8c:dd:78:d5:58:c4:c3: ca:1b:d2:2c:90:67:c6:bc:b0:06:11:06:5e:b2:d8: 76:da:73:f8:ad:c9:d4:7f:4a:5f:c5:ea:7a:48:6e: 73:86:a8:9a:9e:74:6c:f5:28:58:cd:65:30:42:78: a3:39:7f:0c:7b:4b:29:72:f0:e8:47:c2:cd:86:c6: ac:29:f0:2a:07:b7:a9:c5:bd:17:5c:9b:1b:99:1d: db:8b:0a:b0:12:a1:db:05:c0:4a:b2:ba:11:ca:28: 1e:e0:db:73:57:a4:5d:07:13:01:e3:aa:1e:81:f2: 3b:ec:51:29:ad:55:ad:5f:ff:5e:68:38:eb:cd:06: 97:a0:98:e0:cd:61:27:51:59:a6:ec:3a:27:36:4d: 22:91:f3:ae:94:d6:44:57:aa:d4:42:a5:3d:41:6d: 7d:a9:62:12:4d:09:be:69:d2:0a:c2:6e:40:f3:1f: 04:2f:47:15:39:33:c4:98:0d:ea:11:93:0a:0a:f2: bb:13:ac:58:f2:b5:37:ea:db:ed:f0:98:19:97:4e: 2f:df:05:7f:12:c4:71:98:49:d5:67:d2:f4:2c:82: 1f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9A:6D:74:B0:DC:9E:D4:0E:BF:F2:CF:AC:13:14:0A:9B:C6:3C:19 X509v3 Authority Key Identifier: keyid:2E:82:7C:87:CB:BF:C2:61:A2:74:E9:CB:1B:09:50:26:A8:0C:61:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoJ8h8u_wmGidOnLGwlQJqgMYTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/9JptdLDcntQOv_LPrBMUCpvGPBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/7b20bd-fc4e-4cbf-ad1b-24fa10965e85/1/LoJ8h8u_wmGidOnLGwlQJqgMYTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.111.48.0/20 185.81.80.0/22 IPv6: 2a03:7740::/32 Signature Algorithm: sha256WithRSAEncryption a9:de:9a:41:75:0b:f2:fd:f8:a2:3d:71:d3:97:40:2f:8f:13: 51:88:06:72:da:eb:d9:96:60:7d:21:8d:ad:40:41:23:3c:2a: 41:30:61:57:1c:60:c8:97:b2:94:99:a1:6a:2e:d1:72:0d:64: 10:de:9e:d5:cc:44:39:2d:a4:26:f3:db:d5:7b:74:92:d3:93: c6:9a:d6:85:36:4a:9e:19:90:c8:c6:dc:31:c4:27:24:ff:e6: 0d:35:13:d9:1e:1c:e5:6a:a4:ba:69:a8:1d:76:3b:8f:c5:d1: 08:ab:f3:bb:e9:07:5f:d3:66:d1:e1:da:47:65:43:10:46:52: 6e:4e:89:70:00:93:f0:dd:d9:ca:90:6e:7b:67:d4:b0:44:46: 21:a9:15:9f:c5:b5:b8:9b:7d:b6:36:c4:b9:ab:9d:09:c5:c0: d3:30:2d:ea:d6:55:9b:43:49:1a:c3:ff:ca:f5:e9:c4:76:00: eb:ce:a1:f2:10:7e:a9:d3:57:57:f0:cb:9d:15:62:9e:20:78: b7:7a:b1:6c:cd:54:17:01:dc:f5:4a:ce:79:87:f6:e1:66:72: 5d:ee:88:bc:41:fe:52:9e:bc:eb:b4:08:50:f3:82:09:3b:6a: 33:af:0f:b5:d3:1b:8f:fd:e1:d3:0d:66:4b:61:80:7b:33:fa: 6d:44:75:c7 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt9XFSScW10LWz37cJj9RG+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI3Yzg3Y2JiZmMyNjFhMjc0ZTljYjFiMDk1MDI2YTgw YzYxMzYwHhcNMjYwMTAyMDYxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDlhNmQ3NGIwZGM5ZWQ0MGViZmYyY2ZhYzEzMTQwYTliYzYzYzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9yoP+RaGf1MVJOsn+PTXCO71DLPN RZY1gg4ZQqN6TotALq45n4zdeNVYxMPKG9IskGfGvLAGEQZesth22nP4rcnUf0pf xep6SG5zhqiannRs9ShYzWUwQnijOX8Me0spcvDoR8LNhsasKfAqB7epxb0XXJsb mR3biwqwEqHbBcBKsroRyige4NtzV6RdBxMB46oegfI77FEprVWtX/9eaDjrzQaX oJjgzWEnUVmm7DonNk0ikfOulNZEV6rUQqU9QW19qWISTQm+adIKwm5A8x8EL0cV OTPEmA3qEZMKCvK7E6xY8rU36tvt8JgZl04v3wV/EsRxmEnVZ9L0LIIfUQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFPSabXSw3J7UDr/yz6wTFAqbxjwZMB8GA1UdIwQY MBaAFC6CfIfLv8JhonTpyxsJUCaoDGE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9KOGg4dV93bUdpZE9uTEd3bFFKcWdNWVRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC83YjIwYmQtZmM0ZS00Y2JmLWFkMWIt MjRmYTEwOTY1ZTg1LzEvOUpwdGRMRGNudFFPdl9MUHJCTVVDcHZHUEJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC83YjIwYmQtZmM0ZS00Y2JmLWFkMWItMjRmYTEwOTY1ZTg1 LzEvTG9KOGg4dV93bUdpZE9uTEd3bFFKcWdNWVRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQETm8wAwQC uVFQMA0EAgACMAcDBQAqA3dAMA0GCSqGSIb3DQEBCwUAA4IBAQCp3ppBdQvy/fii PXHTl0AvjxNRiAZy2uvZlmB9IY2tQEEjPCpBMGFXHGDIl7KUmaFqLtFyDWQQ3p7V zEQ5LaQm89vVe3SS05PGmtaFNkqeGZDIxtwxxCck/+YNNRPZHhzlaqS6aagddjuP xdEIq/O76Qdf02bR4dpHZUMQRlJuTolwAJPw3dnKkG57Z9SwREYhqRWfxbW4m322 NsS5q50JxcDTMC3q1lWbQ0kaw//K9enEdgDrzqHyEH6p01dX8MudFWKeIHi3erFs zVQXAdz1Ss55h/bhZnJd7oi8Qf5SnrzrtAhQ84IJO2ozrw+10xuP/eHTDWZLYYB7 M/ptRHXH -----END CERTIFICATE-----Generated at Mon Jan 26 16:22:08 2026 by rpki-client