This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/9QlF0IX_u34_i50MZFQglOV4b78.roa File: 9QlF0IX_u34_i50MZFQglOV4b78.roa (raw, json) Hash identifier: FaOLBQU7OKAasfBGnRJ98t12gmWw6oMThOw0VH/q8mI= Subject key identifier: F5:09:45:D0:85:FF:BB:7E:3F:8B:9D:0C:64:54:20:94:E5:78:6F:BF Certificate issuer: /CN=d351a8c5703dd1408959aa35592558ff51a243e9 Certificate serial: 019B797EFD68252E3970A5B9E8EEEDBB8DD8 Authority key identifier: D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/9QlF0IX_u34_i50MZFQglOV4b78.roa Signing time: Thu 01 Jan 2026 12:18:44 +0000 ROA not before: Thu 01 Jan 2026 12:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49666 IP address blocks: 78.41.61.0/24 maxlen: 27 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.mft rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:fd:68:25:2e:39:70:a5:b9:e8:ee:ed:bb:8d:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d351a8c5703dd1408959aa35592558ff51a243e9 Validity Not Before: Jan 1 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f50945d085ffbb7e3f8b9d0c64542094e5786fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:34:6f:33:6e:e0:d6:4c:5e:d5:33:bb:f5:57: dc:bc:2d:fa:32:0e:3d:e4:28:6c:51:ec:84:6f:e4: f7:56:71:bb:43:ae:7c:aa:5b:59:fa:a5:ca:4b:73: e6:5b:f4:2f:0e:88:38:ca:c3:6c:e4:71:06:17:d0: 17:af:5e:ee:22:be:fc:a3:73:f9:03:8b:a5:18:4c: 4a:bb:ce:96:b6:ae:8e:2e:eb:e0:32:77:7c:e2:bc: 35:5f:5e:55:af:49:bc:01:a4:9b:e0:62:78:71:66: 94:f9:b8:98:27:d2:fe:f3:53:d4:04:d3:29:9c:69: 47:98:75:87:7d:2a:34:a8:e3:6f:fc:10:6d:9d:ce: e8:8a:d4:c5:23:ff:db:d2:73:e8:8e:6c:e0:7e:02: 89:7f:ea:06:c0:aa:d7:70:89:62:5a:a4:2b:83:9b: b8:8f:7e:7d:a0:67:25:84:f9:49:95:4b:72:f5:26: 20:b3:9c:b2:fc:69:d3:92:e4:68:d9:b5:53:c1:3e: 78:d6:d1:6b:bc:67:51:cc:8a:1b:76:9c:da:06:07: 4a:3c:2d:4a:83:62:c3:ea:58:e3:e7:12:f2:cd:f0: b2:27:06:a4:ee:18:98:e9:b3:69:a6:82:54:39:2e: 84:45:3e:88:4c:01:24:b4:72:dd:69:d1:b7:68:88: 49:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:09:45:D0:85:FF:BB:7E:3F:8B:9D:0C:64:54:20:94:E5:78:6F:BF X509v3 Authority Key Identifier: keyid:D3:51:A8:C5:70:3D:D1:40:89:59:AA:35:59:25:58:FF:51:A2:43:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01GoxXA90UCJWao1WSVY_1GiQ-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/9QlF0IX_u34_i50MZFQglOV4b78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/7176f6-371d-45b9-b276-877cf21c8f7b/1/01GoxXA90UCJWao1WSVY_1GiQ-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.41.61.0/24 Signature Algorithm: sha256WithRSAEncryption 45:52:16:bc:6f:93:b3:97:84:18:db:d3:ce:a8:f2:41:e4:5a: aa:a3:1f:57:74:08:50:8d:25:34:38:33:bc:5e:c3:d6:97:18: 80:e5:e9:a5:45:5d:8e:c9:5c:1a:71:de:9a:19:6e:c2:2a:a6: 8e:68:ce:fb:30:ce:99:db:9c:d8:c9:18:5d:90:4a:de:61:8d: 51:b8:08:c9:03:02:7c:cd:83:ff:8c:79:d0:c1:e6:f2:f5:13: 0b:bf:28:71:52:c0:08:ed:f3:0b:75:73:47:95:98:a4:b2:4e: 85:9c:2d:14:fb:e2:d2:ee:6e:c3:1a:1e:76:8f:db:ee:6d:f6: 56:8a:ae:c5:d2:7a:21:48:4e:23:33:04:f9:3b:72:59:f2:b4: 8b:ad:f1:5f:32:ca:73:c0:dd:c9:14:dc:61:17:d3:f6:3d:3c: d5:e4:d4:bc:e9:39:6a:b7:a8:cd:94:ae:28:e9:72:34:fe:1d: a6:2a:19:ce:a8:9e:a0:c6:c4:92:eb:41:99:81:58:59:db:89: b2:29:92:54:db:86:78:94:88:e0:88:cd:68:81:2f:56:0f:e3: eb:ec:3c:4d:91:70:7f:7a:74:fb:67:f4:f6:9f:4b:e6:51:ea: 4d:b9:fe:9b:b9:2e:42:5d:24:da:1b:19:ad:85:d3:a3:af:49: 5b:73:0f:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fv1oJS45cKW56O7tu43YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNTFhOGM1NzAzZGQxNDA4OTU5YWEzNTU5MjU1OGZmNTFh MjQzZTkwHhcNMjYwMTAxMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNTA5NDVkMDg1ZmZiYjdlM2Y4YjlkMGM2NDU0MjA5NGU1Nzg2ZmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zRvM27g1kxe1TO79VfcvC36Mg49 5ChsUeyEb+T3VnG7Q658qltZ+qXKS3PmW/QvDog4ysNs5HEGF9AXr17uIr78o3P5 A4ulGExKu86Wtq6OLuvgMnd84rw1X15Vr0m8AaSb4GJ4cWaU+biYJ9L+81PUBNMp nGlHmHWHfSo0qONv/BBtnc7oitTFI//b0nPojmzgfgKJf+oGwKrXcIliWqQrg5u4 j359oGclhPlJlUty9SYgs5yy/GnTkuRo2bVTwT541tFrvGdRzIobdpzaBgdKPC1K g2LD6ljj5xLyzfCyJwak7hiY6bNppoJUOS6ERT6ITAEktHLdadG3aIhJawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPUJRdCF/7t+P4udDGRUIJTleG+/MB8GA1UdIwQY MBaAFNNRqMVwPdFAiVmqNVklWP9RokPpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS83MTc2ZjYtMzcxZC00NWI5LWIyNzYt ODc3Y2YyMWM4ZjdiLzEvOVFsRjBJWF91MzRfaTUwTVpGUWdsT1Y0Yjc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS83MTc2ZjYtMzcxZC00NWI5LWIyNzYtODc3Y2YyMWM4Zjdi LzEvMDFHb3hYQTkwVUNKV2FvMVdTVllfMUdpUS1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATik9MA0G CSqGSIb3DQEBCwUAA4IBAQBFUha8b5Ozl4QY29POqPJB5Fqqox9XdAhQjSU0ODO8 XsPWlxiA5emlRV2OyVwacd6aGW7CKqaOaM77MM6Z25zYyRhdkEreYY1RuAjJAwJ8 zYP/jHnQweby9RMLvyhxUsAI7fMLdXNHlZiksk6FnC0U++LS7m7DGh52j9vubfZW iq7F0nohSE4jMwT5O3JZ8rSLrfFfMspzwN3JFNxhF9P2PTzV5NS86Tlqt6jNlK4o 6XI0/h2mKhnOqJ6gxsSS60GZgVhZ24myKZJU24Z4lIjgiM1ogS9WD+Pr7DxNkXB/ enT7Z/T2n0vmUepNuf6buS5CXSTaGxmthdOjr0lbcw/v -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:32 2026 by rpki-client