This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/r3qIFL64zBjpZJnS493yx0oryZk.roa File: r3qIFL64zBjpZJnS493yx0oryZk.roa (raw, json) Hash identifier: 8MocfFSSFr7GFC7FeOm+9FTF4c9hg7BslJ3kzykAfTs= Subject key identifier: AF:7A:88:14:BE:B8:CC:18:E9:64:99:D2:E3:DD:F2:C7:4A:2B:C9:99 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019B7C7EF7DD4702CA7329A1E8844143485F Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/r3qIFL64zBjpZJnS493yx0oryZk.roa Signing time: Fri 02 Jan 2026 02:17:34 +0000 ROA not before: Fri 02 Jan 2026 02:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56322 IP address blocks: 78.142.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:f7:dd:47:02:ca:73:29:a1:e8:84:41:43:48:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Jan 2 02:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=af7a8814beb8cc18e96499d2e3ddf2c74a2bc999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:62:2e:43:83:b3:bb:d1:dc:e6:d8:e5:88:70: a9:a7:b7:eb:8d:83:11:06:dd:50:03:90:19:d6:24: 55:13:c1:00:7e:a2:2c:d0:e4:fd:84:1d:b3:18:e7: 55:45:8a:74:dd:77:d3:77:2f:95:1a:2b:f3:4c:81: 41:da:f3:90:80:fe:40:0a:b5:b4:fa:f8:50:c0:e2: bc:bc:09:1b:69:09:76:7f:7d:ad:93:e3:c3:02:03: 3c:83:f4:a3:50:d3:4b:32:c4:6c:c7:87:c1:09:39: 3f:9a:2a:0c:6c:f1:f4:ce:7b:28:04:1e:83:e2:ec: 6c:e0:90:41:04:26:3e:2c:32:b1:25:23:45:ff:5f: 97:a3:7a:75:d7:e3:de:c7:5c:58:ba:be:9d:ee:b7: 74:a4:17:68:c7:cc:69:3c:f7:b0:a9:6c:d3:ec:91: 92:73:f1:20:1e:df:58:60:1f:4c:c4:07:45:4d:cd: 2f:eb:0e:56:e9:f2:46:d9:45:fb:fd:fd:41:83:08: 7d:79:78:c7:09:0e:f3:c7:69:8b:63:b8:3f:9c:78: 65:fc:bf:29:90:aa:49:4e:17:cf:05:fa:ac:fd:6f: da:77:ef:34:6b:65:d8:0e:76:a4:79:32:bc:75:df: a9:a5:d5:83:35:05:58:00:a9:4d:32:35:ce:f7:74: 61:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:7A:88:14:BE:B8:CC:18:E9:64:99:D2:E3:DD:F2:C7:4A:2B:C9:99 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/r3qIFL64zBjpZJnS493yx0oryZk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.142.217.0/24 Signature Algorithm: sha256WithRSAEncryption 60:99:b3:a0:5e:69:83:68:35:e8:0b:33:e2:bb:50:59:b8:4f: ca:61:0c:77:25:89:a5:87:b0:e7:54:dd:3a:55:74:8a:ce:f5: 6b:1c:cb:b1:43:95:d7:20:02:7b:e5:0d:32:21:16:3c:31:58: d6:10:9d:58:76:ea:da:6f:33:52:0a:74:b8:15:13:f7:21:0a: 56:39:30:6e:07:29:f4:38:56:00:e6:38:f8:bc:f1:6d:b7:28: e3:af:80:e0:1a:3d:37:ca:76:ca:86:52:26:f1:f1:58:a0:9c: 25:2f:b9:f1:e5:75:6c:fa:ba:20:37:fb:0d:d3:9a:bf:f4:04: 75:6f:82:61:21:c7:db:a9:c9:3d:92:56:dc:e3:e6:3d:e6:46: 1c:ba:db:86:da:02:9d:11:31:e7:ad:e9:b8:4a:00:55:8b:cd: 47:62:34:62:5a:1d:a7:2d:36:e6:ff:9b:52:97:ed:78:d9:f7: fe:d9:07:26:de:77:8f:de:b2:5a:36:f7:c7:da:1b:5e:87:77: 7b:ac:34:32:42:cd:80:b5:d7:c9:47:e7:55:63:8d:55:0e:2d: ad:af:77:fd:85:2a:89:24:96:26:b8:48:b1:43:ab:62:83:8e: bb:9c:6d:4e:20:ca:bc:fc:55:1f:e7:9e:2e:00:22:66:7c:39: 8c:95:1f:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fvfdRwLKcymh6IRBQ0hfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjYwMTAyMDIxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZjdhODgxNGJlYjhjYzE4ZTk2NDk5ZDJlM2RkZjJjNzRhMmJjOTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4WIuQ4Ozu9Hc5tjliHCpp7frjYMR Bt1QA5AZ1iRVE8EAfqIs0OT9hB2zGOdVRYp03XfTdy+VGivzTIFB2vOQgP5ACrW0 +vhQwOK8vAkbaQl2f32tk+PDAgM8g/SjUNNLMsRsx4fBCTk/mioMbPH0znsoBB6D 4uxs4JBBBCY+LDKxJSNF/1+Xo3p11+Pex1xYur6d7rd0pBdox8xpPPewqWzT7JGS c/EgHt9YYB9MxAdFTc0v6w5W6fJG2UX7/f1Bgwh9eXjHCQ7zx2mLY7g/nHhl/L8p kKpJThfPBfqs/W/ad+80a2XYDnakeTK8dd+ppdWDNQVYAKlNMjXO93RhhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK96iBS+uMwY6WSZ0uPd8sdKK8mZMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvcjNxSUZMNjR6QmpwWkpuUzQ5M3l4MG9yeVprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATo7ZMA0G CSqGSIb3DQEBCwUAA4IBAQBgmbOgXmmDaDXoCzPiu1BZuE/KYQx3JYmlh7DnVN06 VXSKzvVrHMuxQ5XXIAJ75Q0yIRY8MVjWEJ1YdurabzNSCnS4FRP3IQpWOTBuByn0 OFYA5jj4vPFttyjjr4DgGj03ynbKhlIm8fFYoJwlL7nx5XVs+rogN/sN05q/9AR1 b4JhIcfbqck9klbc4+Y95kYcutuG2gKdETHnrem4SgBVi81HYjRiWh2nLTbm/5tS l+142ff+2Qcm3neP3rJaNvfH2hteh3d7rDQyQs2AtdfJR+dVY41VDi2tr3f9hSqJ JJYmuEixQ6tig467nG1OIMq8/FUf554uACJmfDmMlR99 -----END CERTIFICATE-----Generated at Sun Jan 25 17:34:32 2026 by rpki-client