This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/rLfLLuFo0czoxp3_dmyj2pHNYAo.roa File: rLfLLuFo0czoxp3_dmyj2pHNYAo.roa (raw, json) Hash identifier: T9ry4z7SjzPJNhI/8F6B46j1hzrzbfaLxbXhpnNjda8= Subject key identifier: AC:B7:CB:2E:E1:68:D1:CC:E8:C6:9D:FF:76:6C:A3:DA:91:CD:60:0A Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C69F03877E8325B3310FFE41AAB03C Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/rLfLLuFo0czoxp3_dmyj2pHNYAo.roa Signing time: Thu 01 Jan 2026 04:17:44 +0000 ROA not before: Thu 01 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214440 IP address blocks: 78.136.71.0/24 maxlen: 24 95.178.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9f:03:87:7e:83:25:b3:31:0f:fe:41:aa:b0:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acb7cb2ee168d1cce8c69dff766ca3da91cd600a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:69:22:25:85:b5:52:03:9d:36:bc:4d:76:df: 05:79:f0:4b:cc:b5:56:d0:88:fd:f8:5a:d0:df:1f: 73:28:db:85:03:ba:9f:00:ca:cb:c8:17:f1:8e:3a: 79:02:1f:64:c2:5c:d7:ee:45:b3:ec:81:eb:b7:da: 95:a5:32:4b:c3:b1:e2:90:64:fb:de:18:a9:36:f6: 39:34:94:f9:5f:4b:f6:7a:9d:83:9a:82:4f:77:67: c3:a6:7e:08:a6:ea:75:44:97:59:c1:b6:12:79:11: 99:c6:fe:d7:b4:ae:72:35:21:58:33:f6:3c:59:6d: 30:1f:22:28:88:0e:39:58:7f:1f:71:0a:9c:e5:31: c0:a0:64:9e:ff:eb:21:77:da:e4:cc:6a:9f:ed:fb: c9:4d:ad:0c:cf:4e:ef:92:04:7a:a7:10:3e:2d:66: b7:cb:6a:d0:ec:2f:85:67:cb:a5:d6:d8:22:79:67: 14:79:b7:bd:45:0d:21:9c:6a:cd:60:07:b6:2a:d3: 78:ca:09:b1:f7:f1:d6:21:2f:98:ac:94:c9:aa:89: f0:d9:5c:fa:b6:c4:0d:c7:95:80:dd:b0:d1:89:4a: 9d:02:82:20:2e:63:17:3b:b5:bd:46:04:1a:65:d0: c7:98:05:f4:90:3b:4a:41:dc:cd:58:77:41:8d:0f: 1a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B7:CB:2E:E1:68:D1:CC:E8:C6:9D:FF:76:6C:A3:DA:91:CD:60:0A X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/rLfLLuFo0czoxp3_dmyj2pHNYAo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.136.71.0/24 95.178.116.0/22 Signature Algorithm: sha256WithRSAEncryption 13:66:e2:6e:7e:9f:d9:7b:bd:fe:f8:c6:6e:e4:a3:e9:d6:b4: 2d:73:d1:c7:71:1f:e0:29:ad:35:18:56:5b:cd:ea:4f:c4:1c: 66:fe:ef:ae:5f:9c:35:bc:4f:12:f3:3f:89:9c:51:fb:38:59: 33:9a:4d:05:f6:3b:41:0b:e3:cc:29:5d:19:26:2c:27:33:89: b4:a5:d3:eb:6b:4a:fa:1e:ba:9f:1f:48:2d:2a:b8:33:0a:42: 2d:b6:bd:27:85:00:1b:ea:72:b7:54:d2:03:04:7c:0c:6e:37: 73:6d:3c:59:a1:08:21:8f:a2:e3:5c:57:fb:8b:64:28:21:94: 03:67:46:42:4e:c8:10:ae:46:f5:6f:3a:bc:65:0d:aa:fb:37: a1:65:eb:06:07:ab:c4:1f:39:d5:c2:67:4d:a6:02:55:47:f0: a0:0c:cb:ae:e3:b6:79:cb:51:c4:d1:3c:a0:a3:d8:d7:0f:e3: aa:af:da:b0:85:c5:dd:50:97:1c:47:a1:10:aa:f8:02:5c:fd: 6b:a7:5b:2d:0b:91:fe:8b:60:52:6f:c7:72:f1:aa:51:2f:be: 87:99:64:c7:3e:d6:68:ef:6f:fc:5f:7d:b7:6d:e0:c1:e3:e6: c2:86:77:95:ec:53:7a:db:fd:42:82:f2:69:a6:04:f5:8c:a0: 20:da:4d:df -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xp8Dh36DJbMxD/5BqrA8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2I3Y2IyZWUxNjhkMWNjZThjNjlkZmY3NjZjYTNkYTkxY2Q2MDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GkiJYW1UgOdNrxNdt8FefBLzLVW 0Ij9+FrQ3x9zKNuFA7qfAMrLyBfxjjp5Ah9kwlzX7kWz7IHrt9qVpTJLw7HikGT7 3hipNvY5NJT5X0v2ep2DmoJPd2fDpn4Ipup1RJdZwbYSeRGZxv7XtK5yNSFYM/Y8 WW0wHyIoiA45WH8fcQqc5THAoGSe/+shd9rkzGqf7fvJTa0Mz07vkgR6pxA+LWa3 y2rQ7C+FZ8ul1tgieWcUebe9RQ0hnGrNYAe2KtN4ygmx9/HWIS+YrJTJqonw2Vz6 tsQNx5WA3bDRiUqdAoIgLmMXO7W9RgQaZdDHmAX0kDtKQdzNWHdBjQ8alwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKy3yy7haNHM6Mad/3Zso9qRzWAKMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvckxmTEx1Rm8wY3pveHAzX2RteWoycEhOWUFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATohHAwQC X7J0MA0GCSqGSIb3DQEBCwUAA4IBAQATZuJufp/Ze73++MZu5KPp1rQtc9HHcR/g Ka01GFZbzepPxBxm/u+uX5w1vE8S8z+JnFH7OFkzmk0F9jtBC+PMKV0ZJiwnM4m0 pdPra0r6HrqfH0gtKrgzCkIttr0nhQAb6nK3VNIDBHwMbjdzbTxZoQghj6LjXFf7 i2QoIZQDZ0ZCTsgQrkb1bzq8ZQ2q+zehZesGB6vEHznVwmdNpgJVR/CgDMuu47Z5 y1HE0Tygo9jXD+Oqr9qwhcXdUJccR6EQqvgCXP1rp1stC5H+i2BSb8dy8apRL76H mWTHPtZo72/8X323beDB4+bChneV7FN62/1CgvJppgT1jKAg2k3f -----END CERTIFICATE-----Generated at Sun Jan 25 08:52:15 2026 by rpki-client