This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/99ql3Nj_XXqdJBUKyH1zSjprsmk.roa File: 99ql3Nj_XXqdJBUKyH1zSjprsmk.roa (raw, json) Hash identifier: 8Q5g46XQnTAlgbAY9G1RdWl4ij89rLN6KeETKWp4UX4= Subject key identifier: F7:DA:A5:DC:D8:FF:5D:7A:9D:24:15:0A:C8:7D:73:4A:3A:6B:B2:69 Certificate issuer: /CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d Certificate serial: 019B77591D30CE60B3F85AD19B9CB2704D9C Authority key identifier: 67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/99ql3Nj_XXqdJBUKyH1zSjprsmk.roa Signing time: Thu 01 Jan 2026 02:18:07 +0000 ROA not before: Thu 01 Jan 2026 02:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5384 IP address blocks: 185.78.244.0/24 maxlen: 24 185.78.245.0/24 maxlen: 24 185.78.246.0/24 maxlen: 24 185.78.247.0/24 maxlen: 24 213.42.48.0/24 maxlen: 24 213.42.49.0/24 maxlen: 24 213.42.50.0/24 maxlen: 24 213.42.51.0/24 maxlen: 24 213.42.52.0/24 maxlen: 24 213.42.53.0/24 maxlen: 24 213.42.54.0/24 maxlen: 24 213.42.55.0/24 maxlen: 24 213.42.56.0/24 maxlen: 24 213.42.84.0/24 maxlen: 24 213.42.85.0/24 maxlen: 24 213.42.86.0/24 maxlen: 24 213.42.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.mft rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:1d:30:ce:60:b3:f8:5a:d1:9b:9c:b2:70:4d:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=670e60779f3cd4d03d5e507840f5fa2a31a6ab8d Validity Not Before: Jan 1 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7daa5dcd8ff5d7a9d24150ac87d734a3a6bb269 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e4:37:66:54:83:aa:2e:3c:98:20:c5:0f:30: 0b:66:9c:d4:7a:c3:a1:1b:b9:2d:86:2f:b6:2e:ae: 12:04:55:bb:e9:db:fe:ad:80:09:ed:e9:66:2c:ac: b0:2b:0f:4d:2e:fc:df:66:2a:d1:e8:14:b5:93:94: 94:98:7d:74:06:78:fc:8d:0b:be:6f:e0:8c:3b:08: 6d:7c:db:7a:61:c8:9e:86:73:a6:f3:82:60:da:cd: 75:ef:cf:cd:89:0e:7e:90:36:ef:45:d9:ec:fc:47: b8:2a:4e:8c:49:61:be:c0:c1:a0:42:79:51:88:1e: e1:73:ce:3d:b3:aa:c5:4e:a2:79:e2:89:98:83:6d: f6:cd:89:cd:8c:19:9f:42:79:f5:c0:76:37:c5:eb: 84:2f:d2:76:3f:09:e6:06:e8:ec:ef:78:c6:89:90: b9:2d:b5:38:70:84:f9:61:a4:52:db:b6:fe:5d:9e: db:e4:63:6d:3f:b5:9d:e7:ba:46:05:7d:a0:95:0a: 59:52:ef:b1:69:3c:e4:e6:c0:41:8f:c2:91:fc:a8: e2:39:32:6f:b8:d3:85:b0:e1:31:5b:21:62:1a:9b: 13:0a:18:39:cf:e9:3d:3c:69:7d:10:73:e6:19:58: 90:b1:3a:d7:8a:ac:93:16:31:13:43:88:37:9b:ef: 63:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DA:A5:DC:D8:FF:5D:7A:9D:24:15:0A:C8:7D:73:4A:3A:6B:B2:69 X509v3 Authority Key Identifier: keyid:67:0E:60:77:9F:3C:D4:D0:3D:5E:50:78:40:F5:FA:2A:31:A6:AB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw5gd5881NA9XlB4QPX6KjGmq40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/99ql3Nj_XXqdJBUKyH1zSjprsmk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f5951a-b0ff-4a3c-88ae-35004a671eb3/1/Zw5gd5881NA9XlB4QPX6KjGmq40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.78.244.0/22 213.42.48.0-213.42.56.255 213.42.84.0/22 Signature Algorithm: sha256WithRSAEncryption 80:c9:ab:18:4c:48:cc:36:46:cf:10:6f:ee:be:4f:fb:fc:51: 06:c8:fc:85:a4:11:06:4e:65:92:83:17:ab:09:df:b9:5c:b6: bf:a5:39:67:ab:6e:dc:5f:67:ca:14:c6:a6:e0:6a:9c:3d:91: a9:b9:2d:ea:3f:a5:6f:16:18:c7:82:f1:a1:fb:84:83:1d:81: 78:32:b7:86:b8:0b:5e:2e:94:5a:e6:7e:b3:a8:89:92:57:ac: 06:f5:31:c2:a2:72:b8:33:9b:44:13:d5:8c:59:48:41:8a:10: f9:37:d4:73:64:6e:7c:39:a2:a3:cf:0c:1d:7c:00:0e:a6:25: 4f:de:28:26:16:af:70:0f:16:9d:83:09:87:94:cc:45:48:1f: f2:f9:ce:33:46:b2:04:6a:cc:f6:a4:42:4c:d8:72:c1:fc:6c: 37:d9:8d:9a:13:39:72:1c:d1:16:19:50:4e:ad:03:f2:c4:02: 3c:78:df:71:e0:d6:68:61:1b:ef:90:a7:e3:2b:e9:b6:ff:20: f6:b6:54:1f:7a:21:b0:06:69:3b:11:54:53:9a:0e:1f:a1:ca: 62:f3:ae:f6:22:37:06:06:49:0d:68:2a:81:12:de:a3:fa:02: 93:18:42:05:f2:20:e9:53:27:e0:7a:b0:de:a3:10:53:08:b4: fb:fb:90:c1 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt3WR0wzmCz+FrRm5yycE2cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MGU2MDc3OWYzY2Q0ZDAzZDVlNTA3ODQwZjVmYTJhMzFh NmFiOGQwHhcNMjYwMTAxMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2RhYTVkY2Q4ZmY1ZDdhOWQyNDE1MGFjODdkNzM0YTNhNmJiMjY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuQ3ZlSDqi48mCDFDzALZpzUesOh G7kthi+2Lq4SBFW76dv+rYAJ7elmLKywKw9NLvzfZirR6BS1k5SUmH10Bnj8jQu+ b+CMOwhtfNt6YciehnOm84Jg2s1178/NiQ5+kDbvRdns/Ee4Kk6MSWG+wMGgQnlR iB7hc849s6rFTqJ54omYg232zYnNjBmfQnn1wHY3xeuEL9J2PwnmBujs73jGiZC5 LbU4cIT5YaRS27b+XZ7b5GNtP7Wd57pGBX2glQpZUu+xaTzk5sBBj8KR/KjiOTJv uNOFsOExWyFiGpsTChg5z+k9PGl9EHPmGViQsTrXiqyTFjETQ4g3m+9j0wIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFPfapdzY/116nSQVCsh9c0o6a7JpMB8GA1UdIwQY MBaAFGcOYHefPNTQPV5QeED1+ioxpquNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9mNTk1MWEtYjBmZi00YTNjLTg4YWUt MzUwMDRhNjcxZWIzLzEvOTlxbDNOal9YWHFkSkJVS3lIMXpTanByc21rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9mNTk1MWEtYjBmZi00YTNjLTg4YWUtMzUwMDRhNjcxZWIz LzEvWnc1Z2Q1ODgxTkE5WGxCNFFQWDZLakdtcTQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCuU70MAwD BATVKjADBADVKjgDBALVKlQwDQYJKoZIhvcNAQELBQADggEBAIDJqxhMSMw2Rs8Q b+6+T/v8UQbI/IWkEQZOZZKDF6sJ37lctr+lOWerbtxfZ8oUxqbgapw9kam5Leo/ pW8WGMeC8aH7hIMdgXgyt4a4C14ulFrmfrOoiZJXrAb1McKicrgzm0QT1YxZSEGK EPk31HNkbnw5oqPPDB18AA6mJU/eKCYWr3APFp2DCYeUzEVIH/L5zjNGsgRqzPak QkzYcsH8bDfZjZoTOXIc0RYZUE6tA/LEAjx433Hg1mhhG++Qp+Mr6bb/IPa2VB96 IbAGaTsRVFOaDh+hymLzrvYiNwYGSQ1oKoES3qP6ApMYQgXyIOlTJ+B6sN6jEFMI tPv7kME= -----END CERTIFICATE-----Generated at Sun Jan 25 11:02:00 2026 by rpki-client