This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/3qtJ5-IAYiPz0ALRM8n3NnbHNzw.roa File: 3qtJ5-IAYiPz0ALRM8n3NnbHNzw.roa (raw, json) Hash identifier: +Vp1sp9zpnfs0QYd9altN13iaJXvmmbhdGnJwAEXrGY= Subject key identifier: DE:AB:49:E7:E2:00:62:23:F3:D0:02:D1:33:C9:F7:36:76:C7:37:3C Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Certificate serial: 019B7BA532755B6491E607A68C106BAB62F0 Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/3qtJ5-IAYiPz0ALRM8n3NnbHNzw.roa Signing time: Thu 01 Jan 2026 22:19:42 +0000 ROA not before: Thu 01 Jan 2026 22:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5056 IP address blocks: 78.108.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:32:75:5b:64:91:e6:07:a6:8c:10:6b:ab:62:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Validity Not Before: Jan 1 22:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=deab49e7e2006223f3d002d133c9f73676c7373c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a9:ef:5e:8a:e7:47:56:e0:29:b5:78:b7:97: 02:f0:45:c3:f5:16:71:10:00:34:b9:07:10:31:14: 9d:6d:74:f1:12:f9:8c:fa:11:b9:e9:8c:bf:fb:aa: d0:e9:57:75:2e:b5:57:ac:a2:8c:53:e3:b0:95:37: 5b:23:44:25:d9:3c:01:8c:aa:77:7c:73:22:63:e5: ae:4a:1b:1b:55:1c:0c:a6:4c:26:6e:a3:65:cb:9c: 50:0e:e8:cc:20:41:ad:c3:af:6e:f2:68:ce:cf:3b: 1c:af:02:0c:0e:e4:e4:1c:03:f8:ed:d3:ee:3d:26: 03:52:c6:53:92:f9:1b:47:c3:90:5a:b2:25:87:4e: 8f:b6:cd:83:20:d5:a9:91:9d:77:00:64:3e:22:7d: 23:91:9b:99:a1:9f:e3:36:6b:17:79:ef:0d:dc:83: a9:70:b3:32:b8:d3:6a:65:b8:61:7d:1f:6a:a8:8b: 33:b7:b4:95:a7:7c:cb:03:e0:af:8d:8d:22:21:b4: 7a:ca:b8:d1:53:a5:b2:06:64:86:21:3e:bd:a2:8b: 58:7f:88:00:c4:9b:b5:82:b2:06:92:5f:fe:a9:bf: 24:4f:21:43:95:de:a5:06:c9:a0:da:34:69:53:c6: 49:38:a5:d4:f6:81:9b:6f:00:6e:8b:22:c1:6b:b9: 1a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AB:49:E7:E2:00:62:23:F3:D0:02:D1:33:C9:F7:36:76:C7:37:3C X509v3 Authority Key Identifier: keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/3qtJ5-IAYiPz0ALRM8n3NnbHNzw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.108.63.0/24 Signature Algorithm: sha256WithRSAEncryption be:d2:9e:88:0f:21:fa:5a:17:f9:a4:f6:72:be:d4:47:b7:3c: dc:ab:3b:b6:b1:85:01:26:f6:ae:2f:aa:de:be:c9:2a:9a:93: b5:7e:92:ff:a6:c0:b3:30:a4:db:36:75:b1:67:44:f7:51:76: 9a:cb:1c:d5:56:eb:0f:5b:f8:3c:ad:99:4c:27:0f:89:0e:2d: 0e:d1:56:51:ca:73:36:aa:30:05:53:29:fe:03:63:c8:2b:50: 39:2f:56:dc:05:df:44:85:f5:17:9e:91:d0:bf:7e:4e:80:e3: 9c:1a:df:b6:aa:ed:39:e1:1b:48:42:7c:32:54:46:07:90:2f: 74:75:cd:b7:28:7a:32:8b:70:a3:89:72:8b:be:88:93:ac:bc: f9:31:3a:41:fc:cb:18:93:67:08:35:c4:09:e0:62:90:f7:fa: e1:9a:0c:de:79:02:53:11:99:91:b5:31:35:59:6e:fa:18:b2: d6:e5:47:d5:a1:6d:a0:a7:ca:f1:04:c2:d4:31:fe:7f:bd:94: 10:58:a8:74:6e:8f:45:10:be:c2:2a:5e:9f:72:61:35:21:53: 4c:fa:df:3d:f7:4d:61:a2:16:5c:87:a7:f0:31:0a:f7:b3:7b: 4e:95:42:95:53:48:eb:0d:77:3f:59:3a:54:60:e9:80:15:11: 1a:8f:0f:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTJ1W2SR5gemjBBrq2LwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz NTNkY2UwHhcNMjYwMTAxMjIxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZWFiNDllN2UyMDA2MjIzZjNkMDAyZDEzM2M5ZjczNjc2YzczNzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqnvXornR1bgKbV4t5cC8EXD9RZx EAA0uQcQMRSdbXTxEvmM+hG56Yy/+6rQ6Vd1LrVXrKKMU+OwlTdbI0Ql2TwBjKp3 fHMiY+WuShsbVRwMpkwmbqNly5xQDujMIEGtw69u8mjOzzscrwIMDuTkHAP47dPu PSYDUsZTkvkbR8OQWrIlh06Pts2DINWpkZ13AGQ+In0jkZuZoZ/jNmsXee8N3IOp cLMyuNNqZbhhfR9qqIszt7SVp3zLA+CvjY0iIbR6yrjRU6WyBmSGIT69ootYf4gA xJu1grIGkl/+qb8kTyFDld6lBsmg2jRpU8ZJOKXU9oGbbwBuiyLBa7kaJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN6rSefiAGIj89AC0TPJ9zZ2xzc8MB8GA1UdIwQY MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt ODI3NmM4YWFjNTBlLzEvM3F0SjUtSUFZaVB6MEFMUk04bjNObmJITnp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATmw/MA0G CSqGSIb3DQEBCwUAA4IBAQC+0p6IDyH6Whf5pPZyvtRHtzzcqzu2sYUBJvauL6re vskqmpO1fpL/psCzMKTbNnWxZ0T3UXaayxzVVusPW/g8rZlMJw+JDi0O0VZRynM2 qjAFUyn+A2PIK1A5L1bcBd9EhfUXnpHQv35OgOOcGt+2qu054RtIQnwyVEYHkC90 dc23KHoyi3CjiXKLvoiTrLz5MTpB/MsYk2cINcQJ4GKQ9/rhmgzeeQJTEZmRtTE1 WW76GLLW5UfVoW2gp8rxBMLUMf5/vZQQWKh0bo9FEL7CKl6fcmE1IVNM+t89901h ohZch6fwMQr3s3tOlUKVU0jrDXc/WTpUYOmAFREajw9i -----END CERTIFICATE-----Generated at Sun Jan 25 13:43:42 2026 by rpki-client