This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/nLeDd88R5RXfUUe4lhD7gyqNgbk.roa File: nLeDd88R5RXfUUe4lhD7gyqNgbk.roa (raw, json) Hash identifier: 3P2rqfuF38q3791OkagtdAH7FCKlHeplVZ7f/8AWbI8= Subject key identifier: 9C:B7:83:77:CF:11:E5:15:DF:51:47:B8:96:10:FB:83:2A:8D:81:B9 Certificate issuer: /CN=78dedb8988bc8bb1a5f9e55f41726b65446c25ec Certificate serial: 019B7F811DF76BBCC2B7EEED44932CA6C828 Authority key identifier: 78:DE:DB:89:88:BC:8B:B1:A5:F9:E5:5F:41:72:6B:65:44:6C:25:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eN7biYi8i7Gl-eVfQXJrZURsJew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/nLeDd88R5RXfUUe4lhD7gyqNgbk.roa Signing time: Fri 02 Jan 2026 16:18:46 +0000 ROA not before: Fri 02 Jan 2026 16:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208161 IP address blocks: 193.242.208.0/24 maxlen: 24 193.242.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.crl rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.mft rsync://rpki.ripe.net/repository/DEFAULT/eN7biYi8i7Gl-eVfQXJrZURsJew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:81:1d:f7:6b:bc:c2:b7:ee:ed:44:93:2c:a6:c8:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78dedb8988bc8bb1a5f9e55f41726b65446c25ec Validity Not Before: Jan 2 16:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cb78377cf11e515df5147b89610fb832a8d81b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:20:5a:af:88:e3:63:cd:a4:4d:d6:a5:70:28: 73:e5:39:82:80:cc:77:37:26:d1:66:e7:85:aa:68: 79:93:ff:f7:f6:13:81:e4:e9:df:32:dd:56:c5:9c: 9b:40:05:91:63:6a:f1:f7:36:7b:14:01:a5:3e:0a: 32:d7:7a:26:93:a8:c5:38:3d:15:10:4c:4a:ae:6f: 80:51:ef:b4:d8:0e:03:8a:d2:3c:09:bf:36:58:38: 19:5d:c1:82:28:97:3e:bd:16:69:f1:d2:a5:64:8b: 8d:ff:e0:57:1d:05:1c:cb:3e:68:1b:6f:6b:88:42: 17:c5:ba:b3:c6:91:0b:f3:a9:89:09:85:1c:dd:d1: e4:7d:10:44:36:fe:80:d4:4d:12:d4:80:fa:29:98: 13:ee:24:ce:7b:50:d7:a7:a1:d9:c6:7e:8b:c9:9c: 52:e5:ed:14:8a:f9:c8:c9:bb:a6:f2:fd:9f:cf:99: ff:e4:23:73:f0:6a:8f:ba:44:e2:48:75:6e:1f:2b: 40:65:d6:af:51:04:57:5a:c3:46:33:fa:32:7f:52: a8:97:51:a2:5a:d8:4a:00:7c:2f:4a:87:bd:3f:2e: 72:b1:b7:0d:7a:d2:7b:41:ff:5e:e8:e8:58:d5:38: 35:ac:8c:25:01:a6:14:c3:58:ad:36:31:cf:30:41: 32:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B7:83:77:CF:11:E5:15:DF:51:47:B8:96:10:FB:83:2A:8D:81:B9 X509v3 Authority Key Identifier: keyid:78:DE:DB:89:88:BC:8B:B1:A5:F9:E5:5F:41:72:6B:65:44:6C:25:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eN7biYi8i7Gl-eVfQXJrZURsJew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/nLeDd88R5RXfUUe4lhD7gyqNgbk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.242.208.0/23 Signature Algorithm: sha256WithRSAEncryption 44:d3:1c:e3:d4:09:6b:3f:8d:0b:45:1a:4d:1a:99:85:84:f8: e5:f2:dc:9f:53:62:94:7e:f1:b5:ff:d1:2e:37:c6:ac:b7:cc: 7b:e5:66:67:da:8f:66:4b:74:5f:99:f0:5f:99:de:2d:9e:a2: aa:36:8c:dc:bf:b0:0f:91:64:7e:eb:7f:f2:0c:79:4c:74:ca: b5:3d:8c:07:21:a4:61:c8:f7:0e:dd:1c:9a:af:15:0e:37:5f: 31:32:ff:0f:43:fb:e6:b0:17:cb:c0:ca:91:59:7b:6b:fd:71: 00:2e:fd:7d:ee:2c:9a:05:f6:c4:74:1f:15:93:c7:33:0d:d5: a9:5c:f5:84:bb:1d:f2:04:e4:4b:95:8d:63:60:6c:2d:aa:8a: 83:d3:ce:d7:f6:7f:50:88:17:e0:c5:0f:93:b1:f1:92:55:4e: 1e:7f:a1:d9:20:7d:7d:8c:be:0f:14:6e:57:95:17:33:eb:56: 45:01:dd:29:5b:ab:86:fb:e4:a5:06:91:46:84:74:54:e6:44: 9d:49:19:d2:e4:55:e0:11:7d:76:4a:b4:e9:dd:33:99:b8:1c: 40:37:13:26:07:57:41:ce:f2:b2:89:86:05:8a:36:ed:c0:4f: 8e:1e:6a:bc:09:96:3e:f9:c5:ac:38:59:6f:fa:d2:30:74:35: f9:24:8b:09 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gR33a7zCt+7tRJMspsgoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZGVkYjg5ODhiYzhiYjFhNWY5ZTU1ZjQxNzI2YjY1NDQ2 YzI1ZWMwHhcNMjYwMTAyMTYxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2I3ODM3N2NmMTFlNTE1ZGY1MTQ3Yjg5NjEwZmI4MzJhOGQ4MWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1yBar4jjY82kTdalcChz5TmCgMx3 NybRZueFqmh5k//39hOB5OnfMt1WxZybQAWRY2rx9zZ7FAGlPgoy13omk6jFOD0V EExKrm+AUe+02A4DitI8Cb82WDgZXcGCKJc+vRZp8dKlZIuN/+BXHQUcyz5oG29r iEIXxbqzxpEL86mJCYUc3dHkfRBENv6A1E0S1ID6KZgT7iTOe1DXp6HZxn6LyZxS 5e0UivnIybum8v2fz5n/5CNz8GqPukTiSHVuHytAZdavUQRXWsNGM/oyf1Kol1Gi WthKAHwvSoe9Py5ysbcNetJ7Qf9e6OhY1Tg1rIwlAaYUw1itNjHPMEEy7wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJy3g3fPEeUV31FHuJYQ+4MqjYG5MB8GA1UdIwQY MBaAFHje24mIvIuxpfnlX0Fya2VEbCXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU43YmlZaThpN0dsLWVWZlFYSnJaVVJzSmV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wODFhNGMtZDYzMS00MzExLTliZDUt YTYyNTRkZjUyNmMxLzEvbkxlRGQ4OFI1UlhmVVVlNGxoRDdneXFOZ2JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8wODFhNGMtZDYzMS00MzExLTliZDUtYTYyNTRkZjUyNmMx LzEvZU43YmlZaThpN0dsLWVWZlFYSnJaVVJzSmV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwfLQMA0G CSqGSIb3DQEBCwUAA4IBAQBE0xzj1AlrP40LRRpNGpmFhPjl8tyfU2KUfvG1/9Eu N8ast8x75WZn2o9mS3RfmfBfmd4tnqKqNozcv7APkWR+63/yDHlMdMq1PYwHIaRh yPcO3RyarxUON18xMv8PQ/vmsBfLwMqRWXtr/XEALv197iyaBfbEdB8Vk8czDdWp XPWEux3yBORLlY1jYGwtqoqD087X9n9QiBfgxQ+TsfGSVU4ef6HZIH19jL4PFG5X lRcz61ZFAd0pW6uG++SlBpFGhHRU5kSdSRnS5FXgEX12SrTp3TOZuBxANxMmB1dB zvKyiYYFijbtwE+OHmq8CZY++cWsOFlv+tIwdDX5JIsJ -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:57 2026 by rpki-client