This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/cc8BNFaMVlbaSTGI8x6HmWHwtwY.roa File: cc8BNFaMVlbaSTGI8x6HmWHwtwY.roa (raw, json) Hash identifier: WhsxgLT9TP0uFAV72UNKZ0OIf3Wuow/e/T5+vO3eQUw= Subject key identifier: 71:CF:01:34:56:8C:56:56:DA:49:31:88:F3:1E:87:99:61:F0:B7:06 Certificate issuer: /CN=54b48731e29f27d687576d6863adbda080709bfe Certificate serial: 019B76EAAA4358365393FAA53957D1D66F73 Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/cc8BNFaMVlbaSTGI8x6HmWHwtwY.roa Signing time: Thu 01 Jan 2026 00:17:29 +0000 ROA not before: Thu 01 Jan 2026 00:17:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209505 IP address blocks: 78.41.136.0/24 maxlen: 24 2a13:3840:1000::/39 maxlen: 39 2a13:3840:2000::/48 maxlen: 48 2a13:3840:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:aa:43:58:36:53:93:fa:a5:39:57:d1:d6:6f:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe Validity Not Before: Jan 1 00:17:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71cf0134568c5656da493188f31e879961f0b706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bc:6e:c7:66:e1:96:40:d0:4c:d6:b6:ca:eb: 82:21:de:b4:67:85:8a:52:65:ba:f0:01:29:ca:57: a2:c8:30:b9:6a:3e:28:cb:ef:b7:ee:eb:8d:65:7d: 93:27:14:bb:4a:b9:74:54:75:db:b7:88:3d:a2:3d: fc:21:e0:24:7e:fd:37:fe:bf:74:22:b4:60:56:01: 7e:e9:ab:bd:74:95:99:cd:ae:d0:2c:64:ee:83:1b: b0:02:bd:a8:8a:c8:8f:89:01:58:44:a7:cf:49:ca: b7:bc:d1:27:51:fe:04:46:0a:f9:d2:86:81:31:48: f3:e6:aa:99:75:83:56:39:35:bd:58:c0:2a:49:26: 1c:91:06:70:3e:e7:40:2b:ca:00:19:32:6b:ae:98: 6e:6d:07:be:bc:cb:4e:0b:e6:7b:9f:23:d1:8b:06: 53:7f:e6:50:e5:90:15:ff:53:52:4d:b6:2f:a5:c1: 27:4e:df:2a:c6:ae:56:5c:bc:3d:19:f5:31:57:d9: b2:64:47:41:28:14:07:bf:e7:1f:d7:2c:f4:7d:0c: b8:af:7a:c4:57:3d:59:22:df:26:d8:f7:7b:36:42: e3:13:e7:3b:ca:da:67:88:a3:ed:a5:38:9d:7b:00: 07:88:e2:a4:db:e4:06:b0:94:dc:cc:13:74:41:52: 3c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CF:01:34:56:8C:56:56:DA:49:31:88:F3:1E:87:99:61:F0:B7:06 X509v3 Authority Key Identifier: keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/cc8BNFaMVlbaSTGI8x6HmWHwtwY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.41.136.0/24 IPv6: 2a13:3840:1000::/39 2a13:3840:2000::/48 2a13:3840:4000::/34 Signature Algorithm: sha256WithRSAEncryption 00:86:12:36:6d:68:fc:7e:f7:20:3b:1f:98:3e:79:2f:73:40: 44:20:a2:6f:2a:ed:c5:30:b9:39:f4:8b:15:fd:88:cf:8d:e1: ab:a2:10:1c:38:a3:ed:6e:56:b7:ac:67:a8:71:7c:0d:13:79: 2e:09:1d:db:24:bf:98:73:37:5a:d3:2c:11:ed:89:0d:62:ff: 9a:c7:d0:74:31:5f:d3:8f:1f:1c:7b:05:44:51:cc:cf:1a:bc: 8d:84:9c:1c:6b:96:8c:27:2d:82:ea:42:25:4c:c0:5c:6c:2b: 55:0f:e7:3b:c0:22:9e:46:65:e4:29:f5:e6:07:79:6a:74:82: 43:b3:72:18:57:c5:13:e0:58:df:1c:ca:8d:c9:72:7a:ab:d5: 34:0b:a6:93:39:71:04:5c:93:fe:bd:69:32:22:e2:d2:e1:a0: 77:ab:9c:69:ce:28:2b:08:9c:94:af:d3:8f:bb:be:3c:45:ca: 51:2c:88:cb:d5:25:98:28:76:3e:99:e9:c4:53:c4:f2:d0:97: 58:eb:b9:39:bf:2f:b3:42:28:31:f3:7c:e7:06:b7:61:23:5c: 17:7d:f3:88:1c:71:5f:5e:53:a2:d5:76:19:b6:4f:40:52:7f: 4f:2c:cd:5e:f6:dc:20:e1:53:4a:7e:18:2f:65:c0:e3:a9:30: d9:1f:f1:1f -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt26qpDWDZTk/qlOVfR1m9zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YjQ4NzMxZTI5ZjI3ZDY4NzU3NmQ2ODYzYWRiZGEwODA3 MDliZmUwHhcNMjYwMTAxMDAxNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MWNmMDEzNDU2OGM1NjU2ZGE0OTMxODhmMzFlODc5OTYxZjBiNzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2bxux2bhlkDQTNa2yuuCId60Z4WK UmW68AEpyleiyDC5aj4oy++37uuNZX2TJxS7Srl0VHXbt4g9oj38IeAkfv03/r90 IrRgVgF+6au9dJWZza7QLGTugxuwAr2oisiPiQFYRKfPScq3vNEnUf4ERgr50oaB MUjz5qqZdYNWOTW9WMAqSSYckQZwPudAK8oAGTJrrphubQe+vMtOC+Z7nyPRiwZT f+ZQ5ZAV/1NSTbYvpcEnTt8qxq5WXLw9GfUxV9myZEdBKBQHv+cf1yz0fQy4r3rE Vz1ZIt8m2Pd7NkLjE+c7ytpniKPtpTidewAHiOKk2+QGsJTczBN0QVI8BQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFHHPATRWjFZW2kkxiPMeh5lh8LcGMB8GA1UdIwQY MBaAFFS0hzHinyfWh1dtaGOtvaCAcJv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkxTSE1lS2ZKOWFIVjIxb1k2MjlvSUJ3bV80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wZTdiMjktNjI5Ny00MmNhLThmMzMt NWRmY2NkNjFhOWIxLzEvY2M4Qk5GYU1WbGJhU1RHSTh4NkhtV0h3dHdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8wZTdiMjktNjI5Ny00MmNhLThmMzMtNWRmY2NkNjFhOWIx LzEvVkxTSE1lS2ZKOWFIVjIxb1k2MjlvSUJ3bV80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAMBAIAATAGAwQATimIMB8E AgACMBkDBgEqEzhAEAMHACoTOEAgAAMGBioTOEBAMA0GCSqGSIb3DQEBCwUAA4IB AQAAhhI2bWj8fvcgOx+YPnkvc0BEIKJvKu3FMLk59IsV/YjPjeGrohAcOKPtbla3 rGeocXwNE3kuCR3bJL+Yczda0ywR7YkNYv+ax9B0MV/Tjx8cewVEUczPGryNhJwc a5aMJy2C6kIlTMBcbCtVD+c7wCKeRmXkKfXmB3lqdIJDs3IYV8UT4FjfHMqNyXJ6 q9U0C6aTOXEEXJP+vWkyIuLS4aB3q5xpzigrCJyUr9OPu748RcpRLIjL1SWYKHY+ menEU8Ty0JdY67k5vy+zQigx83znBrdhI1wXffOIHHFfXlOi1XYZtk9AUn9PLM1e 9twg4VNKfhgvZcDjqTDZH/Ef -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:51 2026 by rpki-client