This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/jLaFsD-7kv57uS82Ky9IjH2qI7s.roa File: jLaFsD-7kv57uS82Ky9IjH2qI7s.roa (raw, json) Hash identifier: GKSCCv4N+IaXAABFBigYWinS7vfCaNGsxXry11fPlQE= Subject key identifier: 8C:B6:85:B0:3F:BB:92:FE:7B:B9:2F:36:2B:2F:48:8C:7D:AA:23:BB Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 019B7F8361160A221B877C92442D0FECCDE3 Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/jLaFsD-7kv57uS82Ky9IjH2qI7s.roa Signing time: Fri 02 Jan 2026 16:21:14 +0000 ROA not before: Fri 02 Jan 2026 16:21:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28738 IP address blocks: 78.153.128.0/24 maxlen: 24 78.153.129.0/24 maxlen: 24 78.153.132.0/23 maxlen: 23 78.153.134.0/24 maxlen: 24 78.153.141.0/24 maxlen: 24 78.153.142.0/24 maxlen: 24 78.153.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:61:16:0a:22:1b:87:7c:92:44:2d:0f:ec:cd:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Jan 2 16:21:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cb685b03fbb92fe7bb92f362b2f488c7daa23bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7a:56:a4:08:72:d2:60:3e:f8:99:96:7c:b5: 2f:90:a8:eb:8d:85:50:a6:38:37:91:2e:1d:06:89: 50:b4:a4:ce:0f:33:1f:3a:52:d9:7d:19:e7:91:86: 44:69:19:07:87:6a:98:d2:fe:c5:2d:88:3b:38:ac: dd:1d:ed:17:22:af:7e:59:f2:76:11:88:56:fa:7d: 07:57:c8:ad:2c:1b:ec:99:99:a5:7b:db:d9:e1:b9: b1:0e:97:91:09:62:d3:e1:8a:ab:70:1b:57:c2:6b: ea:5f:43:f2:7f:43:93:54:3e:fa:13:b8:cc:cf:5d: 3b:13:1f:f3:b1:94:a2:96:67:b8:69:d8:c3:7a:28: 5f:0a:96:b0:6f:88:06:c6:f9:cf:4c:27:78:01:1f: 15:bf:b3:51:15:1c:21:e9:61:4b:7a:08:e0:64:24: b6:ef:b5:3a:70:df:43:93:e5:c8:0e:09:7c:4f:d3: 1c:40:3d:99:3d:68:00:1d:0d:24:ff:c7:c4:ff:db: b0:ef:ba:83:9a:f9:c9:64:05:dd:d8:f5:92:b6:6e: 8b:ce:30:49:64:df:df:3e:11:41:64:e5:21:44:77: 9c:99:6f:d4:89:4d:ed:5f:5e:70:16:be:65:f0:a9: a2:fb:f2:d2:0c:54:98:c1:34:b2:ce:9c:87:46:af: 9f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B6:85:B0:3F:BB:92:FE:7B:B9:2F:36:2B:2F:48:8C:7D:AA:23:BB X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/jLaFsD-7kv57uS82Ky9IjH2qI7s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.153.128.0/23 78.153.132.0-78.153.134.255 78.153.141.0-78.153.142.255 78.153.152.0/23 Signature Algorithm: sha256WithRSAEncryption aa:d9:e9:34:09:62:b0:2e:89:d2:b5:3d:da:e9:b4:4d:6b:50: 9c:15:b2:1c:7a:58:d5:4e:0a:2d:23:65:6d:77:d3:d4:32:c0: 2f:80:6f:15:d8:42:02:a9:91:fb:a2:a0:96:b7:a7:23:58:d7: 86:68:ca:1b:53:e1:63:e7:87:5c:8f:53:b1:1b:45:87:36:a0: b3:85:64:92:fe:c4:29:d0:ae:08:ec:0b:6d:0e:62:c2:fe:b3: 83:b2:35:38:f5:72:94:a1:fc:82:ca:6e:4c:cb:32:0d:9c:22: 98:b3:13:17:b0:4c:41:44:6c:90:50:bb:56:52:95:67:22:ea: 7f:94:9e:5c:81:af:0f:ca:0a:82:b5:9f:3c:4c:6a:be:12:a7: 5a:00:09:75:29:09:27:29:c4:36:17:76:11:90:be:a6:39:a3: 85:f6:fe:01:77:b5:dd:72:05:9b:3f:33:18:17:94:c0:01:b7: 6d:14:98:87:98:44:46:bc:c3:4d:fc:ab:f0:04:d5:74:1e:4b: 14:8e:86:60:c1:28:57:2f:70:b4:f7:30:19:60:5d:59:d6:af: 7f:da:6b:02:3e:de:4e:d9:b0:5d:b0:a4:b9:32:2d:d0:51:68: ff:5d:c4:3b:0b:90:9c:db:47:63:be:15:fc:30:57:f3:13:9c: 9c:85:2d:2b -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt/g2EWCiIbh3ySRC0P7M3jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjYwMTAyMTYyMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2I2ODViMDNmYmI5MmZlN2JiOTJmMzYyYjJmNDg4YzdkYWEyM2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3pWpAhy0mA++JmWfLUvkKjrjYVQ pjg3kS4dBolQtKTODzMfOlLZfRnnkYZEaRkHh2qY0v7FLYg7OKzdHe0XIq9+WfJ2 EYhW+n0HV8itLBvsmZmle9vZ4bmxDpeRCWLT4YqrcBtXwmvqX0Pyf0OTVD76E7jM z107Ex/zsZSilme4adjDeihfCpawb4gGxvnPTCd4AR8Vv7NRFRwh6WFLegjgZCS2 77U6cN9Dk+XIDgl8T9McQD2ZPWgAHQ0k/8fE/9uw77qDmvnJZAXd2PWStm6LzjBJ ZN/fPhFBZOUhRHecmW/UiU3tX15wFr5l8Kmi+/LSDFSYwTSyzpyHRq+f5QIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFIy2hbA/u5L+e7kvNisvSIx9qiO7MB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvakxhRnNELTdrdjU3dVM4Mkt5OUlqSDJxSTdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQBTpmAMAwD BAJOmYQDBABOmYYwDAMEAE6ZjQMEAE6ZjgMEAU6ZmDANBgkqhkiG9w0BAQsFAAOC AQEAqtnpNAlisC6J0rU92um0TWtQnBWyHHpY1U4KLSNlbXfT1DLAL4BvFdhCAqmR +6KglrenI1jXhmjKG1PhY+eHXI9TsRtFhzags4Vkkv7EKdCuCOwLbQ5iwv6zg7I1 OPVylKH8gspuTMsyDZwimLMTF7BMQURskFC7VlKVZyLqf5SeXIGvD8oKgrWfPExq vhKnWgAJdSkJJynENhd2EZC+pjmjhfb+AXe13XIFmz8zGBeUwAG3bRSYh5hERrzD Tfyr8ATVdB5LFI6GYMEoVy9wtPcwGWBdWdavf9prAj7eTtmwXbCkuTIt0FFo/13E OwuQnNtHY74V/DBX8xOcnIUtKw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:43 2026 by rpki-client