This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/EnffW5NfQSgiDRkSfUsoU_yOVkE.roa File: EnffW5NfQSgiDRkSfUsoU_yOVkE.roa (raw, json) Hash identifier: yhQ8sX881xDSVqoqytR76TyoqFxKzDRpj59j0PjgoR8= Subject key identifier: 12:77:DF:5B:93:5F:41:28:22:0D:19:12:7D:4B:28:53:FC:8E:56:41 Certificate issuer: /CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Certificate serial: 019B77596787B2315F184D8F40F4B25D8EF9 Authority key identifier: F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/EnffW5NfQSgiDRkSfUsoU_yOVkE.roa Signing time: Thu 01 Jan 2026 02:18:26 +0000 ROA not before: Thu 01 Jan 2026 02:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62034 IP address blocks: 128.0.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.mft rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:67:87:b2:31:5f:18:4d:8f:40:f4:b2:5d:8e:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e62634e1bd5133a9de4512ae98cad1b2219b59 Validity Not Before: Jan 1 02:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=1277df5b935f4128220d19127d4b2853fc8e5641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:99:91:10:1b:81:61:d4:6b:c5:90:d3:b2:61: ad:80:c0:7a:bb:e7:e3:0b:08:82:36:2a:c7:02:98: ea:d4:19:8b:e3:83:98:d1:a2:57:7a:1c:df:06:17: 03:e8:74:7c:bd:05:eb:0e:fa:e4:6f:cc:9c:41:59: 92:db:54:e5:4b:11:14:4d:4f:dc:eb:33:6f:4b:ed: 75:2a:40:1c:f9:1c:14:27:2b:a2:f9:54:64:0e:e2: 05:03:fa:6a:e8:de:7a:f5:1f:c3:bd:6d:03:a4:d0: b4:44:f5:ac:5b:b9:9a:91:42:7c:51:f8:00:16:42: c6:25:7e:e9:6a:de:c3:4c:9c:9a:fc:30:45:f2:e5: 1b:60:d4:0d:fd:06:ad:1e:ec:53:fd:91:80:25:11: 37:6d:94:c4:44:01:58:89:1c:09:d8:ff:ad:33:c6: 21:f3:fe:14:18:7f:83:a3:e7:2b:20:d9:63:05:60: c4:c5:5f:dc:af:64:9a:63:cf:8a:c0:58:8d:c6:ef: 88:30:77:1d:03:0c:20:0d:82:7e:bc:0f:3b:17:ff: 25:57:9a:e1:e1:d7:7b:f6:d8:b7:fd:34:2a:2e:e9: dd:d4:95:3d:bc:0b:72:0d:18:6b:06:84:dc:d2:36: 1f:3c:3d:d1:b9:e8:6e:27:c1:be:2c:2a:17:61:23: 8d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:77:DF:5B:93:5F:41:28:22:0D:19:12:7D:4B:28:53:FC:8E:56:41 X509v3 Authority Key Identifier: keyid:F8:E6:26:34:E1:BD:51:33:A9:DE:45:12:AE:98:CA:D1:B2:21:9B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/EnffW5NfQSgiDRkSfUsoU_yOVkE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da3398-6698-45f2-baae-92e25fe16331/1/1-OYmNOG9UTOp3kUSrpjK0bIhm1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.0.3.0/24 Signature Algorithm: sha256WithRSAEncryption b1:a8:99:9d:a1:a1:56:c2:ff:52:c6:92:5e:dd:9c:1c:25:ba: ab:aa:e0:88:51:ee:f7:61:ed:7e:13:8f:5a:2e:2b:b7:b6:cb: 28:58:04:94:cb:ac:bd:ea:87:c4:3b:17:a3:e8:22:c4:92:1d: 75:04:aa:96:ca:71:1a:fe:1c:89:e4:e8:ab:35:5c:39:85:20: a1:23:b7:a1:93:5c:17:03:1c:7a:79:2e:56:de:25:ad:31:ce: 3e:10:64:e4:70:d1:48:5f:38:cd:4a:09:56:8b:44:10:a3:15: f8:ce:0a:4f:8e:cc:a9:c1:89:4f:52:50:28:89:1a:0c:b8:14: f4:ec:14:a7:78:7f:70:45:aa:d8:25:2b:05:89:3e:36:ea:02: 40:4d:45:e7:7e:e9:21:dc:09:d8:79:53:16:74:00:6b:ea:41: da:c4:81:98:22:ee:31:76:f2:a7:79:8f:09:e2:d2:37:f1:ca: 8d:1c:80:02:5f:da:1b:03:4f:17:4e:6a:c0:c8:1e:2e:c6:91: a9:9b:4b:bf:0f:89:da:bd:16:0c:25:75:4c:c8:ec:93:25:62: 8f:42:34:33:39:ae:77:5e:7e:a4:a5:98:02:28:48:d1:43:cb: 6d:05:c8:d6:26:f9:43:a3:8b:c5:55:09:8e:22:3a:b9:07:cc: 77:5f:0d:4b -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgISAZt3WWeHsjFfGE2PQPSyXY75MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ZTYyNjM0ZTFiZDUxMzNhOWRlNDUxMmFlOThjYWQxYjIy MTliNTkwHhcNMjYwMTAxMDIxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMjc3ZGY1YjkzNWY0MTI4MjIwZDE5MTI3ZDRiMjg1M2ZjOGU1NjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpmREBuBYdRrxZDTsmGtgMB6u+fj CwiCNirHApjq1BmL44OY0aJXehzfBhcD6HR8vQXrDvrkb8ycQVmS21TlSxEUTU/c 6zNvS+11KkAc+RwUJyui+VRkDuIFA/pq6N569R/DvW0DpNC0RPWsW7makUJ8UfgA FkLGJX7pat7DTJya/DBF8uUbYNQN/QatHuxT/ZGAJRE3bZTERAFYiRwJ2P+tM8Yh 8/4UGH+Do+crINljBWDExV/cr2SaY8+KwFiNxu+IMHcdAwwgDYJ+vA87F/8lV5rh 4dd79ti3/TQqLund1JU9vAtyDRhrBoTc0jYfPD3RuehuJ8G+LCoXYSONWQIDAQAB o4ICCzCCAgcwHQYDVR0OBBYEFBJ331uTX0EoIg0ZEn1LKFP8jlZBMB8GA1UdIwQY MBaAFPjmJjThvVEzqd5FEq6YytGyIZtZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1PWW1OT0c5VVRPcDNrVVNycGpLMGJJaG0xay5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFl LTkyZTI1ZmUxNjMzMS8xL0VuZmZXNU5mUVNnaURSa1NmVXNvVV95T1ZrRS5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNzgvZGEzMzk4LTY2OTgtNDVmMi1iYWFlLTkyZTI1ZmUxNjMz MS8xLzEtT1ltTk9HOVVUT3Aza1VTcnBqSzBiSWhtMWsuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACAAAMw DQYJKoZIhvcNAQELBQADggEBALGomZ2hoVbC/1LGkl7dnBwluquq4IhR7vdh7X4T j1ouK7e2yyhYBJTLrL3qh8Q7F6PoIsSSHXUEqpbKcRr+HInk6Ks1XDmFIKEjt6GT XBcDHHp5LlbeJa0xzj4QZORw0UhfOM1KCVaLRBCjFfjOCk+OzKnBiU9SUCiJGgy4 FPTsFKd4f3BFqtglKwWJPjbqAkBNRed+6SHcCdh5UxZ0AGvqQdrEgZgi7jF28qd5 jwni0jfxyo0cgAJf2hsDTxdOasDIHi7GkambS78Pidq9FgwldUzI7JMlYo9CNDM5 rndefqSlmAIoSNFDy20FyNYm+UOji8VVCY4iOrkHzHdfDUs= -----END CERTIFICATE-----Generated at Sun Jan 25 17:32:58 2026 by rpki-client