This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/4QcJq7ej04BNda2HH9wArEkGIPs.roa File: 4QcJq7ej04BNda2HH9wArEkGIPs.roa (raw, json) Hash identifier: UEQyy5CHXIQ8APmLlgy4w9Fknovd069hve+UPdT6u6U= Subject key identifier: E1:07:09:AB:B7:A3:D3:80:4D:75:AD:87:1F:DC:00:AC:49:06:20:FB Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Certificate serial: 019B7BA534CEA47F8C6EE167F6D7542BD21E Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/4QcJq7ej04BNda2HH9wArEkGIPs.roa Signing time: Thu 01 Jan 2026 22:19:43 +0000 ROA not before: Thu 01 Jan 2026 22:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48529 IP address blocks: 78.108.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:34:ce:a4:7f:8c:6e:e1:67:f6:d7:54:2b:d2:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Validity Not Before: Jan 1 22:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e10709abb7a3d3804d75ad871fdc00ac490620fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:51:46:71:16:eb:c6:a3:d5:d5:29:72:43:a7: ff:c8:35:da:4a:1e:c9:b6:34:bf:60:8c:d8:99:fc: de:b1:20:2d:d3:e9:91:97:e5:7f:28:87:ae:d0:fc: 05:9c:32:96:72:2e:13:ba:be:8b:67:59:69:52:d5: cf:ee:55:0e:6d:5e:4e:0d:79:db:12:56:1f:4b:76: a7:d8:04:42:44:76:61:bd:45:4f:6a:c1:52:16:d6: 19:b2:ca:80:38:21:9f:1e:06:61:9e:dc:8e:0c:da: 29:75:fc:8a:5c:d7:81:99:e8:ee:e1:9d:1c:1d:a9: eb:8c:55:95:f1:d9:a7:10:da:8a:fc:ae:11:40:7b: 49:4f:2e:c4:6d:5f:f7:13:c1:7b:95:8c:88:95:fe: dd:75:e9:2a:ab:84:a1:96:bb:48:f5:eb:34:81:26: e8:2b:59:9b:52:26:e2:b6:3d:4f:17:f5:d3:2f:3b: f7:95:44:a5:99:9c:83:63:05:bf:7a:2d:2b:e4:0b: 4b:23:4c:7c:06:26:a2:2a:30:52:35:ae:81:e2:1f: 98:27:6f:d7:b5:8e:68:ba:de:5f:00:0e:85:1d:bc: 3c:6e:16:93:60:35:c5:fc:59:27:2d:37:25:cd:a5: f8:d3:75:a9:75:ed:2f:59:82:5a:16:86:0e:51:49: e1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:07:09:AB:B7:A3:D3:80:4D:75:AD:87:1F:DC:00:AC:49:06:20:FB X509v3 Authority Key Identifier: keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/4QcJq7ej04BNda2HH9wArEkGIPs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.108.63.0/24 Signature Algorithm: sha256WithRSAEncryption 82:18:52:79:34:98:b4:92:4d:41:e4:b4:92:d1:fe:c0:98:ac: 98:b2:f6:e1:de:38:24:aa:c9:4a:7d:5a:fd:ec:b2:fd:bb:3f: 12:29:9a:c7:84:7e:d2:8b:4c:f8:85:f0:73:47:0b:87:16:b7: 86:97:15:f0:e2:31:7d:17:eb:d8:36:31:5e:be:b5:fc:3d:ca: 62:28:02:77:f6:76:f4:d3:1c:d1:8f:09:57:eb:6b:be:4d:4a: bc:5e:89:ba:ba:59:07:8a:63:2a:73:0a:14:13:6e:b3:1b:19: 70:6a:00:ec:67:43:5a:24:c6:ad:2a:18:43:45:a1:a1:ec:41: 3b:f9:de:2d:ad:d1:b0:9b:a3:f0:3e:17:9c:15:0c:c9:b4:1c: 77:72:a8:6b:8c:e2:21:62:04:d1:88:06:e4:79:41:62:e4:0e: 14:47:da:85:e8:fb:4c:0c:7d:83:74:18:24:10:c4:34:ac:47: 1b:53:66:70:13:3b:c0:25:25:39:56:14:f8:96:bd:67:9b:11: a5:e5:32:5e:b9:f4:10:48:8d:dd:6e:a7:58:a4:87:d9:ce:60: 7e:f4:9c:57:b9:17:3d:22:57:f1:c8:1c:e5:c1:89:45:4d:e5: 00:0d:82:65:64:2b:6c:7b:08:e5:a5:42:9f:05:ac:f1:bc:d1: 38:ec:59:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTTOpH+MbuFn9tdUK9IeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz NTNkY2UwHhcNMjYwMTAxMjIxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTA3MDlhYmI3YTNkMzgwNGQ3NWFkODcxZmRjMDBhYzQ5MDYyMGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1FGcRbrxqPV1SlyQ6f/yDXaSh7J tjS/YIzYmfzesSAt0+mRl+V/KIeu0PwFnDKWci4Tur6LZ1lpUtXP7lUObV5ODXnb ElYfS3an2ARCRHZhvUVPasFSFtYZssqAOCGfHgZhntyODNopdfyKXNeBmeju4Z0c HanrjFWV8dmnENqK/K4RQHtJTy7EbV/3E8F7lYyIlf7ddekqq4ShlrtI9es0gSbo K1mbUibitj1PF/XTLzv3lUSlmZyDYwW/ei0r5AtLI0x8BiaiKjBSNa6B4h+YJ2/X tY5out5fAA6FHbw8bhaTYDXF/FknLTclzaX403Wpde0vWYJaFoYOUUnhjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOEHCau3o9OATXWthx/cAKxJBiD7MB8GA1UdIwQY MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt ODI3NmM4YWFjNTBlLzEvNFFjSnE3ZWowNEJOZGEySEg5d0FyRWtHSVBzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATmw/MA0G CSqGSIb3DQEBCwUAA4IBAQCCGFJ5NJi0kk1B5LSS0f7AmKyYsvbh3jgkqslKfVr9 7LL9uz8SKZrHhH7Si0z4hfBzRwuHFreGlxXw4jF9F+vYNjFevrX8PcpiKAJ39nb0 0xzRjwlX62u+TUq8Xom6ulkHimMqcwoUE26zGxlwagDsZ0NaJMatKhhDRaGh7EE7 +d4trdGwm6PwPhecFQzJtBx3cqhrjOIhYgTRiAbkeUFi5A4UR9qF6PtMDH2DdBgk EMQ0rEcbU2ZwEzvAJSU5VhT4lr1nmxGl5TJeufQQSI3dbqdYpIfZzmB+9JxXuRc9 IlfxyBzlwYlFTeUADYJlZCtsewjlpUKfBazxvNE47Fmh -----END CERTIFICATE-----Generated at Sun Jan 25 08:50:34 2026 by rpki-client