This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/DhXIhTNHBAE7NvkalrnD2mWPOgc.roa File: DhXIhTNHBAE7NvkalrnD2mWPOgc.roa (raw, json) Hash identifier: XkSLod7NkjdHpR6f/sX0hfuPnykt4HOPZbPdtRM87jE= Subject key identifier: 0E:15:C8:85:33:47:04:01:3B:36:F9:1A:96:B9:C3:DA:65:8F:3A:07 Certificate issuer: /CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e Certificate serial: 019B7FF1D67A344DCCA1507C6B6B3BA72031 Authority key identifier: AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/DhXIhTNHBAE7NvkalrnD2mWPOgc.roa Signing time: Fri 02 Jan 2026 18:21:54 +0000 ROA not before: Fri 02 Jan 2026 18:21:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49556 IP address blocks: 80.244.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:d6:7a:34:4d:cc:a1:50:7c:6b:6b:3b:a7:20:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf44975a5dbdbf823b4a0a6b7eeb99b1484367e Validity Not Before: Jan 2 18:21:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e15c885334704013b36f91a96b9c3da658f3a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d9:71:c9:e0:c1:3b:76:a1:2c:92:2c:28:d3: 98:08:e5:1e:1d:89:e1:4d:f6:d4:0e:65:5d:5b:0a: 16:1a:7b:6d:aa:fe:d7:d1:1c:ce:c6:fd:47:54:20: 57:48:12:dd:df:96:08:52:b3:ce:83:50:35:38:80: b4:29:48:e2:fc:22:a7:b9:f8:39:a2:29:ca:42:94: 41:46:e7:1c:35:65:ed:b5:c1:c8:4d:3d:81:ea:95: 6b:8a:ed:c7:2f:22:5a:a8:70:5e:82:29:35:37:5f: d9:9c:3d:5b:83:c6:2b:04:70:d9:7a:8a:df:26:55: c1:b5:14:61:73:3b:23:13:08:c0:77:ba:4f:b7:b5: a8:19:44:80:8d:82:d1:eb:8b:23:61:7d:b9:f3:15: ab:82:94:ad:18:34:24:2b:a7:c6:d5:75:31:25:28: 30:ed:56:06:6e:99:23:3b:2b:b7:f3:04:56:64:95: 66:5a:82:18:f7:ca:5f:2c:08:96:85:da:41:a2:bd: af:a8:1c:ba:fb:3d:a9:fe:f8:83:5c:d7:21:2c:1f: 94:65:6a:73:2d:ca:62:d0:d4:fc:45:62:97:41:d3: bf:c9:46:de:8f:f5:0b:43:84:36:30:34:fd:bb:5e: 9e:76:c8:8d:8d:e7:1c:e1:d7:2c:a1:3b:10:f6:d2: 22:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:15:C8:85:33:47:04:01:3B:36:F9:1A:96:B9:C3:DA:65:8F:3A:07 X509v3 Authority Key Identifier: keyid:AD:F4:49:75:A5:DB:DB:F8:23:B4:A0:A6:B7:EE:B9:9B:14:84:36:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfRJdaXb2_gjtKCmt-65mxSENn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/DhXIhTNHBAE7NvkalrnD2mWPOgc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/cee173-6c12-43cb-8b09-bbb0c8028e2b/1/rfRJdaXb2_gjtKCmt-65mxSENn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 80.244.7.0/24 Signature Algorithm: sha256WithRSAEncryption d4:32:fd:4c:bf:b7:0a:31:ad:5d:3d:c2:6a:1e:e6:2a:bd:65: e7:93:17:3b:92:09:58:d2:6b:36:96:b9:43:77:86:49:c3:ba: 03:0f:bb:a6:d6:18:68:c0:02:56:3e:c6:62:44:5c:0c:0a:d0: f4:8a:f3:40:11:4d:37:92:a3:dc:a0:29:c5:50:ca:91:2f:bc: 47:58:e6:ff:e9:d2:e0:30:08:5e:64:85:8d:2d:51:b6:15:5b: 8a:a1:56:4d:6f:5d:c9:91:8e:40:6d:e5:d8:6d:e9:dd:9f:be: 59:3a:f0:dc:ad:a4:d2:4d:98:76:4c:c1:ac:a1:b6:49:58:ff: 09:f4:a3:e3:e1:5f:60:65:5b:bb:51:c4:f8:84:05:21:7e:48: bf:93:e0:ee:3a:41:3f:2b:17:b7:ff:aa:17:15:57:3b:39:63: cf:38:bc:f1:24:04:83:7a:14:4d:97:6f:63:d7:12:1e:db:37: bf:e3:98:79:1b:a4:1c:8e:04:b8:d9:a8:09:56:28:7d:24:04: 2f:38:3a:65:9b:95:88:5e:e0:99:d8:da:04:69:39:67:b2:d7: f2:56:64:c5:e0:ca:6f:6b:96:cc:1b:7a:1c:88:f5:d2:06:8c: 52:4a:90:5e:fb:31:c3:45:68:0f:95:a8:90:3e:02:42:ac:3f: 6d:dd:31:8d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8dZ6NE3MoVB8a2s7pyAxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ0OTc1YTVkYmRiZjgyM2I0YTBhNmI3ZWViOTliMTQ4 NDM2N2UwHhcNMjYwMTAyMTgyMTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTE1Yzg4NTMzNDcwNDAxM2IzNmY5MWE5NmI5YzNkYTY1OGYzYTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNlxyeDBO3ahLJIsKNOYCOUeHYnh TfbUDmVdWwoWGnttqv7X0RzOxv1HVCBXSBLd35YIUrPOg1A1OIC0KUji/CKnufg5 oinKQpRBRuccNWXttcHITT2B6pVriu3HLyJaqHBegik1N1/ZnD1bg8YrBHDZeorf JlXBtRRhczsjEwjAd7pPt7WoGUSAjYLR64sjYX258xWrgpStGDQkK6fG1XUxJSgw 7VYGbpkjOyu38wRWZJVmWoIY98pfLAiWhdpBor2vqBy6+z2p/viDXNchLB+UZWpz Lcpi0NT8RWKXQdO/yUbej/ULQ4Q2MDT9u16edsiNjecc4dcsoTsQ9tIiWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA4VyIUzRwQBOzb5Gpa5w9pljzoHMB8GA1UdIwQY MBaAFK30SXWl29v4I7SgprfuuZsUhDZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZSSmRhWGIyX2dqdEtDbXQtNjVteFNFTm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9jZWUxNzMtNmMxMi00M2NiLThiMDkt YmJiMGM4MDI4ZTJiLzEvRGhYSWhUTkhCQUU3TnZrYWxybkQybVdQT2djLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9jZWUxNzMtNmMxMi00M2NiLThiMDktYmJiMGM4MDI4ZTJi LzEvcmZSSmRhWGIyX2dqdEtDbXQtNjVteFNFTm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPQHMA0G CSqGSIb3DQEBCwUAA4IBAQDUMv1Mv7cKMa1dPcJqHuYqvWXnkxc7kglY0ms2lrlD d4ZJw7oDD7um1hhowAJWPsZiRFwMCtD0ivNAEU03kqPcoCnFUMqRL7xHWOb/6dLg MAheZIWNLVG2FVuKoVZNb13JkY5AbeXYbendn75ZOvDcraTSTZh2TMGsobZJWP8J 9KPj4V9gZVu7UcT4hAUhfki/k+DuOkE/Kxe3/6oXFVc7OWPPOLzxJASDehRNl29j 1xIe2ze/45h5G6QcjgS42agJVih9JAQvODplm5WIXuCZ2NoEaTlnstfyVmTF4Mpv a5bMG3ociPXSBoxSSpBe+zHDRWgPlaiQPgJCrD9t3TGN -----END CERTIFICATE-----Generated at Mon Jan 26 02:22:34 2026 by rpki-client