This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/S00d78TItkDHq888CPL8snBiq8U.roa File: S00d78TItkDHq888CPL8snBiq8U.roa (raw, json) Hash identifier: xbbWOfkY4EBmGgNTfua9nJ1QvCvgAkZPsqc/WKzPEio= Subject key identifier: 4B:4D:1D:EF:C4:C8:B6:40:C7:AB:CF:3C:08:F2:FC:B2:70:62:AB:C5 Certificate issuer: /CN=7036e04e53b9d3967cf9d418e78b60bbad075831 Certificate serial: 019B7F158DCBBA83AA565BC88736967668A4 Authority key identifier: 70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/S00d78TItkDHq888CPL8snBiq8U.roa Signing time: Fri 02 Jan 2026 14:21:17 +0000 ROA not before: Fri 02 Jan 2026 14:21:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51821 IP address blocks: 91.216.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:8d:cb:ba:83:aa:56:5b:c8:87:36:96:76:68:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7036e04e53b9d3967cf9d418e78b60bbad075831 Validity Not Before: Jan 2 14:21:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b4d1defc4c8b640c7abcf3c08f2fcb27062abc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f1:c3:d0:ed:4a:c4:83:5e:e5:2f:3c:d7:2d: 7b:c5:ec:74:78:82:3b:1a:1e:be:15:49:33:de:80: 3e:da:23:f6:01:9a:cc:76:57:76:8c:90:79:9d:86: 31:99:cf:94:c5:19:c9:05:67:e5:62:ea:fc:8a:74: e8:37:c5:48:9a:84:89:df:07:02:42:2a:89:09:25: 7c:31:77:08:9e:87:5d:00:4d:33:2f:92:7e:f4:45: 20:31:62:dc:d1:7f:db:e8:9b:6e:21:a9:2e:88:2a: 4b:bf:de:a5:80:e9:94:26:9e:a5:da:16:ca:48:7d: ef:b4:ed:fc:7e:16:be:36:30:8d:b6:92:1c:85:95: 86:7c:97:3e:40:f0:5a:65:5f:74:e4:cb:3b:e6:3b: 27:be:19:c1:10:63:c4:69:d2:3a:4f:ef:ab:9e:07: 3f:8b:39:3c:17:a0:72:4d:80:d6:b6:8b:73:bf:ac: 99:62:9f:2c:e2:4a:b9:d4:58:31:5e:97:5e:e4:e6: a6:36:b2:9f:2b:e6:25:87:cf:1c:fd:45:0a:0c:63: fc:58:ba:f6:e9:ca:3a:34:18:12:e9:a4:45:6b:54: cd:e5:b1:67:c7:62:df:7b:d6:3b:d6:79:6a:02:a1: dc:31:02:ba:81:62:ca:b6:f4:24:b7:e7:f2:2f:f4: db:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4D:1D:EF:C4:C8:B6:40:C7:AB:CF:3C:08:F2:FC:B2:70:62:AB:C5 X509v3 Authority Key Identifier: keyid:70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/S00d78TItkDHq888CPL8snBiq8U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.216.62.0/24 Signature Algorithm: sha256WithRSAEncryption 33:63:35:bb:1d:f7:cc:30:d5:48:c3:8d:7e:28:02:c2:3a:00: 9e:4c:df:82:60:1e:cf:b6:50:a2:02:27:6c:02:bd:df:c6:ad: dc:ed:e9:61:71:5d:ca:9f:5d:a2:d5:20:44:76:e0:d9:0f:14: b8:a2:a8:81:4a:a0:6a:08:c1:b6:d1:4b:3e:e1:2a:5b:ce:e5: d0:06:56:9c:8c:28:e8:8d:37:93:90:64:4a:17:a0:78:80:1c: f6:9a:c5:45:15:e1:c2:0b:99:8c:db:55:53:4d:d5:08:f8:7a: 61:05:a3:1d:c7:9f:bd:3d:65:58:5c:5c:5c:d6:ce:f5:22:4b: a5:f6:d5:f4:41:6c:33:3e:8f:10:d8:75:4d:1c:84:ff:c3:8d: b6:38:3a:d0:0b:b8:96:a3:e6:90:8e:48:01:b6:81:db:35:af: ef:bd:1b:2b:66:47:4c:59:8e:8d:cc:39:b2:7e:e7:ca:92:61: ee:54:9a:ef:b3:54:90:11:f9:78:08:53:26:d4:ae:4d:69:4d: 79:87:c5:90:0f:f8:6b:e2:6e:50:ec:b0:18:59:9e:7f:a3:3c: 6c:5f:9d:0b:34:64:17:56:9d:7e:3f:5d:fa:88:bb:85:f0:26: 87:b1:06:2a:8a:b1:26:de:c7:1d:6e:08:0d:e5:9f:f2:17:2b: 18:6c:d4:4d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FY3LuoOqVlvIhzaWdmikMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMzZlMDRlNTNiOWQzOTY3Y2Y5ZDQxOGU3OGI2MGJiYWQw NzU4MzEwHhcNMjYwMTAyMTQyMTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjRkMWRlZmM0YzhiNjQwYzdhYmNmM2MwOGYyZmNiMjcwNjJhYmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/HD0O1KxINe5S881y17xex0eII7 Gh6+FUkz3oA+2iP2AZrMdld2jJB5nYYxmc+UxRnJBWflYur8inToN8VImoSJ3wcC QiqJCSV8MXcInoddAE0zL5J+9EUgMWLc0X/b6JtuIakuiCpLv96lgOmUJp6l2hbK SH3vtO38fha+NjCNtpIchZWGfJc+QPBaZV905Ms75jsnvhnBEGPEadI6T++rngc/ izk8F6ByTYDWtotzv6yZYp8s4kq51FgxXpde5OamNrKfK+Ylh88c/UUKDGP8WLr2 6co6NBgS6aRFa1TN5bFnx2Lfe9Y71nlqAqHcMQK6gWLKtvQkt+fyL/TbmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEtNHe/EyLZAx6vPPAjy/LJwYqvFMB8GA1UdIwQY MBaAFHA24E5TudOWfPnUGOeLYLutB1gxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0RiZ1RsTzUwNVo4LWRRWTU0dGd1NjBIV0RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84MzMyY2ItZmQ0Yi00OWQ5LWIwYTEt ODlkZWYwMDgyZTJhLzEvUzAwZDc4VEl0a0RIcTg4OENQTDhzbkJpcThVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC84MzMyY2ItZmQ0Yi00OWQ5LWIwYTEtODlkZWYwMDgyZTJh LzEvY0RiZ1RsTzUwNVo4LWRRWTU0dGd1NjBIV0RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9g+MA0G CSqGSIb3DQEBCwUAA4IBAQAzYzW7HffMMNVIw41+KALCOgCeTN+CYB7PtlCiAids Ar3fxq3c7elhcV3Kn12i1SBEduDZDxS4oqiBSqBqCMG20Us+4SpbzuXQBlacjCjo jTeTkGRKF6B4gBz2msVFFeHCC5mM21VTTdUI+HphBaMdx5+9PWVYXFxc1s71Ikul 9tX0QWwzPo8Q2HVNHIT/w422ODrQC7iWo+aQjkgBtoHbNa/vvRsrZkdMWY6NzDmy fufKkmHuVJrvs1SQEfl4CFMm1K5NaU15h8WQD/hr4m5Q7LAYWZ5/ozxsX50LNGQX Vp1+P136iLuF8CaHsQYqirEm3scdbggN5Z/yFysYbNRN -----END CERTIFICATE-----Generated at Sun Jan 25 15:11:26 2026 by rpki-client