This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/_e5AZzGVltklRadfv-MK2ei60tQ.roa File: _e5AZzGVltklRadfv-MK2ei60tQ.roa (raw, json) Hash identifier: eZnnL/QqgvT71AWN7mEZ0+pU5MPgz24zK984iwP+gE8= Subject key identifier: FD:EE:40:67:31:95:96:D9:25:45:A7:5F:BF:E3:0A:D9:E8:BA:D2:D4 Certificate issuer: /CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09 Certificate serial: 019B7C7F7BE30361EE2DA997391C76C6A2FF Authority key identifier: A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/_e5AZzGVltklRadfv-MK2ei60tQ.roa Signing time: Fri 02 Jan 2026 02:18:08 +0000 ROA not before: Fri 02 Jan 2026 02:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25236 IP address blocks: 147.78.117.0/24 maxlen: 24 176.111.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 02:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:7b:e3:03:61:ee:2d:a9:97:39:1c:76:c6:a2:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09 Validity Not Before: Jan 2 02:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fdee4067319596d92545a75fbfe30ad9e8bad2d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1a:1a:ce:8a:e8:f9:8c:19:a6:f5:04:df:08: 13:7e:24:73:a9:69:4e:fd:91:c7:04:16:86:a1:a0: fd:6d:3c:e8:5f:cc:12:3e:af:a4:3a:06:b3:c7:d2: 78:7e:2e:3a:af:65:b2:5a:3c:4a:21:df:e5:69:07: a0:2e:ad:2f:8b:3a:bf:80:e0:8e:03:fd:aa:1a:ee: be:81:b1:72:e9:24:10:81:6e:66:51:f5:98:54:32: c2:b8:63:41:6a:11:91:2e:de:4d:8a:f2:64:cf:da: 09:5f:25:50:88:9e:ab:74:40:de:91:c9:ce:42:36: d4:56:8f:0e:29:a4:97:7e:bd:bb:b6:07:2a:6b:25: 2f:ea:78:e5:cf:58:d3:f2:f9:28:de:99:ee:09:f1: ae:24:54:0b:2b:21:13:8a:ff:84:b1:92:68:08:53: 1e:a1:cf:f8:c8:15:9a:bc:9c:18:82:69:fb:89:4c: 27:36:95:5f:b3:09:16:09:a9:36:f0:09:dd:67:5f: 16:93:ca:d5:e7:3e:e7:ba:be:a7:03:30:45:04:f4: 2e:2c:5c:6b:5d:88:50:86:74:96:0c:63:27:c7:e7: 7a:8f:e1:f1:6e:bd:fe:3a:66:36:15:16:c0:77:7e: 0c:d0:5d:2f:c6:8c:08:22:d1:6d:86:15:9d:f2:58: 10:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:EE:40:67:31:95:96:D9:25:45:A7:5F:BF:E3:0A:D9:E8:BA:D2:D4 X509v3 Authority Key Identifier: keyid:A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/_e5AZzGVltklRadfv-MK2ei60tQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.117.0/24 176.111.50.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:7e:02:09:d4:5b:06:18:5e:cb:f1:70:94:d6:3d:ba:14:3e: 8c:f9:9c:71:74:ed:a1:24:d2:61:cd:f1:b6:27:44:fd:74:18: 12:40:dd:34:59:26:c6:27:49:46:65:e5:5d:13:76:ab:e8:f6: 3e:b6:6c:21:0d:94:52:c2:70:d7:57:b7:6c:d9:60:b1:f8:d0: b6:83:6b:b4:c7:b0:5a:3e:0b:99:ae:5d:63:d6:64:b8:1c:b4: fe:8a:ea:6d:f9:bd:2c:fa:84:06:94:c4:2a:68:fd:87:6b:56: 87:46:f5:62:74:d1:0b:fc:0c:23:b4:23:95:0b:df:fe:9b:84: a8:21:c5:44:cd:38:b3:7b:79:65:27:da:dd:b6:9b:0a:56:0c: 72:0c:f4:a9:c1:69:36:af:52:c1:b2:00:9c:8a:d3:4f:5d:c3: 9b:4f:a5:65:be:b8:f1:00:a0:50:92:a3:37:2f:16:3b:09:ec: 69:2b:ec:7c:68:32:1d:d5:62:95:26:16:db:42:c1:1c:e0:0f: ea:d6:9b:5c:42:ce:50:4e:fe:a5:b9:f7:55:af:4b:10:5e:00: 98:a1:f0:c8:64:77:48:79:5a:2d:d9:dd:02:91:bf:85:31:01: 12:97:49:e9:cf:a8:86:ec:59:5b:56:f2:4f:96:66:ec:49:a7: 2c:00:ce:11 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8f3vjA2HuLamXORx2xqL/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Yjc4OWIzMmUxNmU5ZGQyZjcwNTEzMTE5ZGM3N2VhNjFm ZjFlMDkwHhcNMjYwMTAyMDIxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGVlNDA2NzMxOTU5NmQ5MjU0NWE3NWZiZmUzMGFkOWU4YmFkMmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBoazoro+YwZpvUE3wgTfiRzqWlO /ZHHBBaGoaD9bTzoX8wSPq+kOgazx9J4fi46r2WyWjxKId/laQegLq0vizq/gOCO A/2qGu6+gbFy6SQQgW5mUfWYVDLCuGNBahGRLt5NivJkz9oJXyVQiJ6rdEDekcnO QjbUVo8OKaSXfr27tgcqayUv6njlz1jT8vko3pnuCfGuJFQLKyETiv+EsZJoCFMe oc/4yBWavJwYgmn7iUwnNpVfswkWCak28AndZ18Wk8rV5z7nur6nAzBFBPQuLFxr XYhQhnSWDGMnx+d6j+Hxbr3+OmY2FRbAd34M0F0vxowIItFthhWd8lgQRwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP3uQGcxlZbZJUWnX7/jCtnoutLUMB8GA1UdIwQY MBaAFKa3ibMuFundL3BRMRncd+ph/x4JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lNzY4YmQtZjUxMi00YjhhLTkzNmEt MDZjOTI5NmYwOGEyLzEvX2U1QVp6R1ZsdGtsUmFkZnYtTUsyZWk2MHRRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9lNzY4YmQtZjUxMi00YjhhLTkzNmEtMDZjOTI5NmYwOGEy LzEvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAk051AwQA sG8yMA0GCSqGSIb3DQEBCwUAA4IBAQALfgIJ1FsGGF7L8XCU1j26FD6M+ZxxdO2h JNJhzfG2J0T9dBgSQN00WSbGJ0lGZeVdE3ar6PY+tmwhDZRSwnDXV7ds2WCx+NC2 g2u0x7BaPguZrl1j1mS4HLT+iupt+b0s+oQGlMQqaP2Ha1aHRvVidNEL/AwjtCOV C9/+m4SoIcVEzTize3llJ9rdtpsKVgxyDPSpwWk2r1LBsgCcitNPXcObT6Vlvrjx AKBQkqM3LxY7CexpK+x8aDId1WKVJhbbQsEc4A/q1ptcQs5QTv6lufdVr0sQXgCY ofDIZHdIeVot2d0Ckb+FMQESl0npz6iG7FlbVvJPlmbsSacsAM4R -----END CERTIFICATE-----Generated at Mon Jan 26 11:43:55 2026 by rpki-client