This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/X9LaIZvZk7QVXAM3DorY70TGSkU.roa File: X9LaIZvZk7QVXAM3DorY70TGSkU.roa (raw, json) Hash identifier: 2sAg8BfA/gWKBYUqChRkOgn36XBOS6sN70Jy4EDCQX4= Subject key identifier: 5F:D2:DA:21:9B:D9:93:B4:15:5C:03:37:0E:8A:D8:EF:44:C6:4A:45 Certificate issuer: /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6 Certificate serial: 019B7DCAA7261DE9F14D16735F907F58B7A3 Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/X9LaIZvZk7QVXAM3DorY70TGSkU.roa Signing time: Fri 02 Jan 2026 08:19:51 +0000 ROA not before: Fri 02 Jan 2026 08:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42956 IP address blocks: 147.78.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:a7:26:1d:e9:f1:4d:16:73:5f:90:7f:58:b7:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6 Validity Not Before: Jan 2 08:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5fd2da219bd993b4155c03370e8ad8ef44c64a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:e0:e8:1d:34:c9:97:e4:9a:be:15:b9:8f:95: 6a:f9:45:e6:ad:6b:b2:28:e0:d1:42:24:2f:be:6f: a7:d0:68:1b:1b:96:e1:7f:ef:2e:61:ce:8d:3f:2d: 1c:c5:b0:9f:f1:dd:4f:78:98:14:e1:11:51:75:ee: 88:07:ac:1e:f2:3e:50:d2:09:e3:22:f1:6a:d6:6a: 6d:ba:4e:2d:30:c6:89:b0:76:e9:c8:11:ef:de:e9: ae:30:6d:83:ce:d6:3d:db:5d:50:09:df:9b:e9:15: d4:ea:59:93:85:24:4b:b5:1a:e7:77:6f:fd:cc:b8: d7:2e:b6:fc:5f:1e:67:fc:e0:c8:d4:5e:7d:ac:2d: 56:32:40:d2:9c:a8:52:97:b7:79:1f:5b:34:ca:c0: 4b:b9:a1:f2:a3:64:ca:d7:0a:af:45:26:13:53:e7: 6d:ea:db:82:64:8e:e6:75:7f:49:99:e8:70:28:2d: b8:e3:d4:04:12:99:f2:13:a1:59:cb:0c:0c:04:0b: 7c:35:2d:17:a3:e9:53:ef:b5:6c:66:58:d3:c8:79: 14:e0:c5:53:78:4e:26:91:d5:d2:7e:4e:ca:4a:59: ab:40:ec:8e:91:b9:38:07:e4:7d:19:0c:07:84:63: 1a:c8:29:bd:99:82:ce:d5:3b:3b:3e:50:f3:e9:c5: 77:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D2:DA:21:9B:D9:93:B4:15:5C:03:37:0E:8A:D8:EF:44:C6:4A:45 X509v3 Authority Key Identifier: keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/X9LaIZvZk7QVXAM3DorY70TGSkU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.143.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:80:70:c2:fc:61:e9:8e:cb:ea:ca:b5:8a:07:f2:5f:e7:af: e2:9e:63:2f:9c:a9:4d:f0:55:47:d7:9b:f2:f9:61:4a:f2:c5: 90:d3:a4:15:3b:25:b3:5a:71:a2:40:37:3c:2d:77:25:d8:db: 37:e0:43:b1:cf:9b:c9:ff:b1:ee:ab:1a:a2:67:74:4e:b5:13: 2f:3e:10:bb:75:80:d1:73:08:ac:a1:e3:f9:ab:74:8b:5b:69: 84:7a:e5:5d:16:d7:41:19:ee:83:e0:23:bb:8b:40:83:05:2e: cf:bc:66:cf:ef:03:ef:16:61:8d:04:17:d0:20:45:87:fd:b2: 5e:bf:75:5b:9e:4c:33:d6:b3:4c:7f:7a:22:ea:bf:b1:74:5f: 00:cc:35:c0:d6:07:8f:0a:a8:7b:ea:78:91:16:b5:d5:18:c3: aa:97:df:34:77:24:d0:d4:46:50:c2:fa:69:f9:80:69:43:94: 8a:2f:d5:39:21:4b:2f:a6:3c:32:70:ca:87:d5:4f:bb:0d:3d: 39:6e:b2:48:16:18:97:af:23:da:e5:50:95:a1:ac:d4:b1:f4: b7:10:cf:e4:5b:d3:2f:9d:9c:8f:68:98:6e:46:ff:08:ae:67: d0:5a:a9:c3:fa:4e:e9:86:05:ed:0d:08:15:85:45:16:ba:08: 6e:03:14:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yqcmHenxTRZzX5B/WLejMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDY5ZDlmNzQ5NjMwZjAyNTZjZjBjZWFiNTg4MzZiNDkx YTU4ZjYwHhcNMjYwMTAyMDgxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZmQyZGEyMTliZDk5M2I0MTU1YzAzMzcwZThhZDhlZjQ0YzY0YTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieDoHTTJl+SavhW5j5Vq+UXmrWuy KODRQiQvvm+n0GgbG5bhf+8uYc6NPy0cxbCf8d1PeJgU4RFRde6IB6we8j5Q0gnj IvFq1mptuk4tMMaJsHbpyBHv3umuMG2DztY9211QCd+b6RXU6lmThSRLtRrnd2/9 zLjXLrb8Xx5n/ODI1F59rC1WMkDSnKhSl7d5H1s0ysBLuaHyo2TK1wqvRSYTU+dt 6tuCZI7mdX9JmehwKC2449QEEpnyE6FZywwMBAt8NS0Xo+lT77VsZljTyHkU4MVT eE4mkdXSfk7KSlmrQOyOkbk4B+R9GQwHhGMayCm9mYLO1Ts7PlDz6cV3NwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF/S2iGb2ZO0FVwDNw6K2O9ExkpFMB8GA1UdIwQY MBaAFF3WnZ90ljDwJWzwzqtYg2tJGlj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRhZG4zU1dNUEFsYlBET3ExaURhMGthV1BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MTY5MjQtOTNiMi00ZGNiLWFlZWIt ZjNmZDY0MzMxNzA5LzEvWDlMYUladlprN1FWWEFNM0Rvclk3MFRHU2tVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC82MTY5MjQtOTNiMi00ZGNiLWFlZWItZjNmZDY0MzMxNzA5 LzEvWGRhZG4zU1dNUEFsYlBET3ExaURhMGthV1BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk06PMA0G CSqGSIb3DQEBCwUAA4IBAQAPgHDC/GHpjsvqyrWKB/Jf56/inmMvnKlN8FVH15vy +WFK8sWQ06QVOyWzWnGiQDc8LXcl2Ns34EOxz5vJ/7HuqxqiZ3ROtRMvPhC7dYDR cwisoeP5q3SLW2mEeuVdFtdBGe6D4CO7i0CDBS7PvGbP7wPvFmGNBBfQIEWH/bJe v3Vbnkwz1rNMf3oi6r+xdF8AzDXA1gePCqh76niRFrXVGMOql980dyTQ1EZQwvpp +YBpQ5SKL9U5IUsvpjwycMqH1U+7DT05brJIFhiXryPa5VCVoazUsfS3EM/kW9Mv nZyPaJhuRv8IrmfQWqnD+k7phgXtDQgVhUUWughuAxS5 -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:35 2026 by rpki-client