This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/E33BupXnwP12_IF4jZwLlg0xD4w.roa File: E33BupXnwP12_IF4jZwLlg0xD4w.roa (raw, json) Hash identifier: 0NACigb3EWqFP6STcn//yzpEwV+siLe8SJdsoWQ96Y8= Subject key identifier: 13:7D:C1:BA:95:E7:C0:FD:76:FC:81:78:8D:9C:0B:96:0D:31:0F:8C Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019B7C7EFDA9C1098ADD4689B2BF1B41E30A Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/E33BupXnwP12_IF4jZwLlg0xD4w.roa Signing time: Fri 02 Jan 2026 02:17:35 +0000 ROA not before: Fri 02 Jan 2026 02:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397423 IP address blocks: 78.142.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:fd:a9:c1:09:8a:dd:46:89:b2:bf:1b:41:e3:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Jan 2 02:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=137dc1ba95e7c0fd76fc81788d9c0b960d310f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:77:9f:51:fe:d4:75:5d:5d:ef:9c:a1:d8:67: ea:2f:10:cb:1c:d1:51:9f:5c:f3:e3:c5:23:b8:a3: aa:62:aa:e3:aa:2c:bf:3c:0a:62:fd:39:97:3f:92: d6:99:d3:ef:9f:bf:92:22:8c:65:69:fa:e4:22:c5: bb:4c:4c:e5:5a:e7:a6:14:8f:23:ea:11:e2:d7:24: fa:0e:ef:3b:73:f9:05:65:6c:9a:18:92:66:9a:12: 28:9f:ea:55:d5:68:df:af:03:14:d7:e6:2a:42:2e: 40:48:70:c2:cf:6c:d9:9c:f3:ad:28:bb:bc:f6:7f: fb:3d:f2:53:92:15:51:0b:fa:72:14:80:6c:58:3e: 89:11:73:bf:66:5b:7c:91:30:6c:ab:01:e1:e6:7e: ce:30:ed:34:3e:7d:9b:23:c9:93:e3:8c:e1:91:a8: 8f:ce:65:e5:67:59:32:51:81:d3:a6:77:80:20:c1: 1a:62:50:18:0c:4e:ab:1d:d5:51:38:6f:2d:b8:5f: ce:0e:e1:14:48:b4:ab:a3:bd:c6:1b:09:f9:59:26: 78:8a:9c:79:d5:c0:27:6d:43:fb:f5:c2:90:2e:82: 47:1b:c2:ad:ca:c0:13:d4:72:08:5b:5b:6c:b3:06: ac:43:fe:ba:72:22:a1:ed:63:9d:4a:8c:18:e4:d3: f1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7D:C1:BA:95:E7:C0:FD:76:FC:81:78:8D:9C:0B:96:0D:31:0F:8C X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/E33BupXnwP12_IF4jZwLlg0xD4w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.142.218.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:69:5b:48:c9:09:f1:42:87:5c:19:2e:54:c1:69:a7:67:a5: 10:9e:48:73:18:91:d8:d5:5c:6d:e9:4a:02:bd:64:41:3c:f3: 25:fc:6e:b7:18:2e:99:7a:a4:5c:c6:ba:41:78:57:15:c9:1d: c8:3a:ad:31:9f:e9:8b:67:31:b0:0a:ce:fd:2e:a4:d6:c8:e8: 33:86:e2:7f:b6:db:4b:54:f4:02:d8:f8:99:7c:c5:30:34:bd: e7:a0:50:36:b5:8f:4d:e3:0d:14:f0:13:b9:79:3f:9c:70:85: 0e:df:06:5e:ce:f4:db:46:c7:fb:20:c2:47:4f:2f:cf:47:d6: a2:2d:2e:ec:58:aa:40:d2:32:fc:94:bd:4e:f1:37:a2:95:93: db:03:40:b4:f6:24:3b:be:89:57:76:d1:af:2e:f9:2f:29:7b: 80:11:3b:21:6f:a2:d9:c9:23:5b:b8:9b:d1:fb:a2:2b:be:58: 04:eb:4c:03:c2:f5:68:e5:72:1b:cd:0a:d5:21:e2:96:20:9d: 59:01:e2:de:1a:34:91:bd:ea:1b:c8:c8:7a:05:ea:e2:0c:65: 04:f2:81:24:af:10:db:43:7a:50:3e:90:fb:63:0d:21:95:54: a2:52:24:e2:9a:ad:25:80:ce:eb:f5:5e:76:16:a5:04:3e:57: ec:5c:bb:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fv2pwQmK3UaJsr8bQeMKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjYwMTAyMDIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzdkYzFiYTk1ZTdjMGZkNzZmYzgxNzg4ZDljMGI5NjBkMzEwZjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HefUf7UdV1d75yh2GfqLxDLHNFR n1zz48UjuKOqYqrjqiy/PApi/TmXP5LWmdPvn7+SIoxlafrkIsW7TEzlWuemFI8j 6hHi1yT6Du87c/kFZWyaGJJmmhIon+pV1WjfrwMU1+YqQi5ASHDCz2zZnPOtKLu8 9n/7PfJTkhVRC/pyFIBsWD6JEXO/Zlt8kTBsqwHh5n7OMO00Pn2bI8mT44zhkaiP zmXlZ1kyUYHTpneAIMEaYlAYDE6rHdVROG8tuF/ODuEUSLSro73GGwn5WSZ4ipx5 1cAnbUP79cKQLoJHG8KtysAT1HIIW1tsswasQ/66ciKh7WOdSowY5NPx5QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBN9wbqV58D9dvyBeI2cC5YNMQ+MMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvRTMzQnVwWG53UDEyX0lGNGpad0xsZzB4RDR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATo7aMA0G CSqGSIb3DQEBCwUAA4IBAQAaaVtIyQnxQodcGS5UwWmnZ6UQnkhzGJHY1Vxt6UoC vWRBPPMl/G63GC6ZeqRcxrpBeFcVyR3IOq0xn+mLZzGwCs79LqTWyOgzhuJ/tttL VPQC2PiZfMUwNL3noFA2tY9N4w0U8BO5eT+ccIUO3wZezvTbRsf7IMJHTy/PR9ai LS7sWKpA0jL8lL1O8TeilZPbA0C09iQ7volXdtGvLvkvKXuAETshb6LZySNbuJvR +6IrvlgE60wDwvVo5XIbzQrVIeKWIJ1ZAeLeGjSRveobyMh6BeriDGUE8oEkrxDb Q3pQPpD7Yw0hlVSiUiTimq0lgM7r9V52FqUEPlfsXLvB -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:29 2026 by rpki-client