This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/WjbQcTlDKpaAfqXkZDDiOvmh4dY.roa File: WjbQcTlDKpaAfqXkZDDiOvmh4dY.roa (raw, json) Hash identifier: BUe0stMaaOWFp6WiIn+aiGaAl/vpI8FjtrNGbrBCxE0= Subject key identifier: 5A:36:D0:71:39:43:2A:96:80:7E:A5:E4:64:30:E2:3A:F9:A1:E1:D6 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 019B7F83625F7EE730D4D39F699EF4CB931B Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/WjbQcTlDKpaAfqXkZDDiOvmh4dY.roa Signing time: Fri 02 Jan 2026 16:21:15 +0000 ROA not before: Fri 02 Jan 2026 16:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202306 IP address blocks: 78.153.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:62:5f:7e:e7:30:d4:d3:9f:69:9e:f4:cb:93:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Jan 2 16:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a36d07139432a96807ea5e46430e23af9a1e1d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ca:02:6d:35:d4:c4:85:94:f3:09:fc:44:07: c7:0a:aa:4a:c4:bc:21:d8:15:58:8f:48:a1:85:31: ec:4b:b5:f8:82:cc:bd:d8:26:9b:6c:8d:4e:b3:04: 02:a8:9b:af:64:dc:c5:86:f0:5b:ff:15:fe:9b:6e: 15:79:34:60:5f:cd:6b:2d:1a:a0:e8:4c:c9:2b:8a: 8f:a0:b8:4d:c8:dc:ad:d6:b2:c1:15:52:35:f6:93: 52:56:9a:6a:56:32:c1:58:57:04:05:03:dd:2f:02: c3:ef:1f:a0:c0:7c:2c:ff:ef:de:fe:3a:0c:48:3b: 86:ea:9d:a5:2c:d1:d8:b4:72:61:b5:7e:ab:b4:65: a6:32:c3:34:24:59:a7:75:fe:10:d6:65:7f:22:44: 1e:6c:73:fa:af:d5:b7:61:e9:9c:29:be:d2:03:31: a9:c0:22:05:98:ca:b2:5e:f5:51:af:63:ce:0e:f9: e6:c9:b6:c2:f1:94:98:ff:a7:e2:c6:03:22:7e:fc: 62:26:7d:73:24:25:94:0c:b8:03:90:ef:1d:23:d4: 69:a5:53:b9:78:7f:3c:b5:54:34:aa:f3:3d:4a:af: c2:57:a1:d0:8d:a8:bf:0e:d9:a7:0d:be:f7:5e:2f: ed:a5:99:c0:5f:3b:7c:34:f8:03:c4:59:38:ed:dc: 65:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:36:D0:71:39:43:2A:96:80:7E:A5:E4:64:30:E2:3A:F9:A1:E1:D6 X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/WjbQcTlDKpaAfqXkZDDiOvmh4dY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.153.140.0/24 Signature Algorithm: sha256WithRSAEncryption 49:e0:ca:c1:3c:31:89:58:00:a3:06:22:7e:df:d8:26:23:8a: d4:25:0e:25:72:58:88:d9:6b:33:de:26:60:11:00:d8:5a:4f: 27:bb:7d:75:58:5f:6b:d3:2e:5f:f3:36:04:c0:cb:ae:e2:29: 37:24:3b:3a:8e:85:26:d5:11:76:94:03:0b:0f:86:22:ee:6e: 6d:02:02:21:88:a2:fb:e9:e5:14:0b:00:76:a0:f6:ca:5b:a2: 72:89:90:3b:1e:52:38:0b:96:63:52:35:dc:53:88:35:93:8b: bc:6d:89:07:ac:c3:c4:9b:ea:75:7f:80:c1:29:04:5b:4b:42: 5b:ea:af:6a:31:7c:e4:ac:72:72:16:10:9f:a5:00:cf:81:00: 26:6f:43:b7:54:da:5c:4a:8d:33:2c:42:9f:93:e9:0f:ca:22: 88:90:d4:8b:ca:7c:86:66:55:e7:ab:1e:bf:ea:5c:69:d5:07: de:93:58:64:c4:73:eb:28:01:7c:cf:81:3b:b0:f0:ba:d4:51: 6a:b0:8d:c9:bd:17:25:05:8d:fc:d1:a0:ba:01:6b:b1:c0:a5: ef:a4:78:78:a9:2a:16:fb:78:30:88:25:b5:46:a0:39:cd:09: 45:76:fd:8e:ab:07:0e:69:df:65:b1:77:2b:a1:7b:ad:bd:94: bc:09:6e:29 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g2Jffucw1NOfaZ70y5MbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjYwMTAyMTYyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTM2ZDA3MTM5NDMyYTk2ODA3ZWE1ZTQ2NDMwZTIzYWY5YTFlMWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7soCbTXUxIWU8wn8RAfHCqpKxLwh 2BVYj0ihhTHsS7X4gsy92CabbI1OswQCqJuvZNzFhvBb/xX+m24VeTRgX81rLRqg 6EzJK4qPoLhNyNyt1rLBFVI19pNSVppqVjLBWFcEBQPdLwLD7x+gwHws/+/e/joM SDuG6p2lLNHYtHJhtX6rtGWmMsM0JFmndf4Q1mV/IkQebHP6r9W3YemcKb7SAzGp wCIFmMqyXvVRr2PODvnmybbC8ZSY/6fixgMifvxiJn1zJCWUDLgDkO8dI9RppVO5 eH88tVQ0qvM9Sq/CV6HQjai/DtmnDb73Xi/tpZnAXzt8NPgDxFk47dxljwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFo20HE5QyqWgH6l5GQw4jr5oeHWMB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvV2piUWNUbERLcGFBZnFYa1pERGlPdm1oNGRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATpmMMA0G CSqGSIb3DQEBCwUAA4IBAQBJ4MrBPDGJWACjBiJ+39gmI4rUJQ4lcliI2Wsz3iZg EQDYWk8nu311WF9r0y5f8zYEwMuu4ik3JDs6joUm1RF2lAMLD4Yi7m5tAgIhiKL7 6eUUCwB2oPbKW6JyiZA7HlI4C5ZjUjXcU4g1k4u8bYkHrMPEm+p1f4DBKQRbS0Jb 6q9qMXzkrHJyFhCfpQDPgQAmb0O3VNpcSo0zLEKfk+kPyiKIkNSLynyGZlXnqx6/ 6lxp1Qfek1hkxHPrKAF8z4E7sPC61FFqsI3JvRclBY380aC6AWuxwKXvpHh4qSoW +3gwiCW1RqA5zQlFdv2OqwcOad9lsXcroXutvZS8CW4p -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:08 2026 by rpki-client