This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/hj9vrZtu_ptlT9holTDhc3lmO9I.roa File: hj9vrZtu_ptlT9holTDhc3lmO9I.roa (raw, json) Hash identifier: HyRkrnYbKZroL4ZELZRBl7Cqf0iZoQ21yLkLhmG2ZnI= Subject key identifier: 86:3F:6F:AD:9B:6E:FE:9B:65:4F:D8:68:95:30:E1:73:79:66:3B:D2 Certificate issuer: /CN=54b48731e29f27d687576d6863adbda080709bfe Certificate serial: 019B76EAA9AB463DDE2488E18DF6A323134C Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/hj9vrZtu_ptlT9holTDhc3lmO9I.roa Signing time: Thu 01 Jan 2026 00:17:28 +0000 ROA not before: Thu 01 Jan 2026 00:17:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42330 IP address blocks: 78.41.136.0/24 maxlen: 24 2a13:3840:1000::/39 maxlen: 39 2a13:3840:2000::/48 maxlen: 48 2a13:3840:4000::/34 maxlen: 34 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:a9:ab:46:3d:de:24:88:e1:8d:f6:a3:23:13:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe Validity Not Before: Jan 1 00:17:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=863f6fad9b6efe9b654fd8689530e17379663bd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d6:d4:d8:ac:02:c3:94:ec:99:e6:b2:29:a5: 1b:7e:34:06:35:31:93:bc:1f:56:17:54:ff:e2:8d: 38:56:51:84:44:89:1d:87:90:63:56:25:ab:d1:a5: b8:14:97:e2:70:0e:91:dd:74:7a:91:f6:04:9a:3b: 79:69:3d:57:56:c9:2a:cd:5e:8c:40:70:f4:40:39: a7:03:22:aa:17:61:2b:d7:c0:bb:74:23:e4:7e:f7: 05:19:32:67:9e:28:bf:cd:ae:86:dd:d3:59:42:59: c0:58:af:37:a3:9f:9e:66:f3:54:f3:b5:c8:3d:e6: 78:72:b4:eb:4d:71:a3:4a:5e:73:05:a3:ac:00:32: a1:a5:ff:f0:e8:b0:25:a0:e9:45:c9:62:06:ff:c4: a4:43:e0:b3:f0:aa:f5:c6:2c:ec:d4:6b:64:e5:7e: 92:ef:c7:c8:d3:29:13:b0:85:fa:94:03:5d:c2:5a: 1f:23:18:8d:9f:49:1f:ea:f8:cc:16:7f:4b:0e:5f: 5c:a4:23:60:5f:f4:10:0e:a1:0a:16:dd:31:b2:8a: f0:aa:f0:7b:aa:2f:94:f2:09:b7:3e:dd:36:19:09: 8c:46:b4:9e:a5:b5:22:b6:95:78:c8:db:4a:c4:c7: dc:e1:8b:23:41:b0:cc:36:c0:39:e6:1c:8c:f8:df: 3c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:3F:6F:AD:9B:6E:FE:9B:65:4F:D8:68:95:30:E1:73:79:66:3B:D2 X509v3 Authority Key Identifier: keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/hj9vrZtu_ptlT9holTDhc3lmO9I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.41.136.0/24 IPv6: 2a13:3840:1000::/39 2a13:3840:2000::/48 2a13:3840:4000::/34 Signature Algorithm: sha256WithRSAEncryption 45:2a:fb:71:d8:92:a8:aa:35:af:ee:f4:13:38:b8:6a:bd:d2: 32:43:d4:e0:95:f1:53:d2:4e:9e:f8:66:40:c5:a5:c6:14:34: e2:0d:22:c5:2d:f1:64:49:63:91:71:e9:76:db:b5:de:17:00: 0f:b3:90:20:21:11:40:0a:ae:25:46:5a:95:f5:8e:33:2f:bb: 11:da:4e:bb:0d:d7:b6:ac:46:e9:0f:ed:29:46:31:b1:3d:e8: 71:28:05:55:a6:e6:f3:11:66:04:6c:41:a5:d5:4a:2e:01:15: c9:d0:2c:16:07:7f:71:cf:d1:8f:90:d6:83:79:ed:c3:5a:a8: a7:82:ae:3e:c1:b8:d8:5a:59:5c:ac:18:7d:d2:b5:da:76:eb: 37:b1:ec:d3:61:06:f0:ed:88:77:bd:02:71:ff:ba:0a:95:73: 09:3a:01:a7:b0:ef:64:51:2b:88:f9:3e:8f:47:7e:f7:3b:83: 07:22:9a:be:ab:7d:26:2e:ba:08:ef:27:78:61:d6:c8:97:f3: 8b:4c:23:dc:3d:6a:1a:8e:d5:31:ad:8f:a2:3a:20:3c:b3:ae: 22:aa:b4:8c:8c:1a:27:43:1e:65:b3:99:b6:3d:0b:12:5e:7a: c6:13:23:d5:39:97:59:50:59:fa:c5:05:c1:a7:bd:14:95:bb: d7:7c:5c:c2 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt26qmrRj3eJIjhjfajIxNMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YjQ4NzMxZTI5ZjI3ZDY4NzU3NmQ2ODYzYWRiZGEwODA3 MDliZmUwHhcNMjYwMTAxMDAxNzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NjNmNmZhZDliNmVmZTliNjU0ZmQ4Njg5NTMwZTE3Mzc5NjYzYmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNbU2KwCw5TsmeayKaUbfjQGNTGT vB9WF1T/4o04VlGERIkdh5BjViWr0aW4FJficA6R3XR6kfYEmjt5aT1XVskqzV6M QHD0QDmnAyKqF2Er18C7dCPkfvcFGTJnnii/za6G3dNZQlnAWK83o5+eZvNU87XI PeZ4crTrTXGjSl5zBaOsADKhpf/w6LAloOlFyWIG/8SkQ+Cz8Kr1xizs1Gtk5X6S 78fI0ykTsIX6lANdwlofIxiNn0kf6vjMFn9LDl9cpCNgX/QQDqEKFt0xsorwqvB7 qi+U8gm3Pt02GQmMRrSepbUitpV4yNtKxMfc4YsjQbDMNsA55hyM+N88VwIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFIY/b62bbv6bZU/YaJUw4XN5ZjvSMB8GA1UdIwQY MBaAFFS0hzHinyfWh1dtaGOtvaCAcJv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkxTSE1lS2ZKOWFIVjIxb1k2MjlvSUJ3bV80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wZTdiMjktNjI5Ny00MmNhLThmMzMt NWRmY2NkNjFhOWIxLzEvaGo5dnJadHVfcHRsVDlob2xURGhjM2xtTzlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8wZTdiMjktNjI5Ny00MmNhLThmMzMtNWRmY2NkNjFhOWIx LzEvVkxTSE1lS2ZKOWFIVjIxb1k2MjlvSUJ3bV80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAMBAIAATAGAwQATimIMB8E AgACMBkDBgEqEzhAEAMHACoTOEAgAAMGBioTOEBAMA0GCSqGSIb3DQEBCwUAA4IB AQBFKvtx2JKoqjWv7vQTOLhqvdIyQ9TglfFT0k6e+GZAxaXGFDTiDSLFLfFkSWOR cel227XeFwAPs5AgIRFACq4lRlqV9Y4zL7sR2k67Dde2rEbpD+0pRjGxPehxKAVV pubzEWYEbEGl1UouARXJ0CwWB39xz9GPkNaDee3DWqingq4+wbjYWllcrBh90rXa dus3sezTYQbw7Yh3vQJx/7oKlXMJOgGnsO9kUSuI+T6PR373O4MHIpq+q30mLroI 7yd4YdbIl/OLTCPcPWoajtUxrY+iOiA8s64iqrSMjBonQx5ls5m2PQsSXnrGEyPV OZdZUFn6xQXBp70UlbvXfFzC -----END CERTIFICATE-----Generated at Sun Jan 25 22:42:18 2026 by rpki-client