This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/K67tfvE4FRSPvLt2l542G0220Hc.roa File: K67tfvE4FRSPvLt2l542G0220Hc.roa (raw, json) Hash identifier: b1V/he+PINE8CRmplDLJWQIH+333uWnJMPhoYbftnuE= Subject key identifier: 2B:AE:ED:7E:F1:38:15:14:8F:BC:BB:76:97:9E:36:1B:4D:B6:D0:77 Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Certificate serial: 019B7BA53A97C4DBC9CFCEEB0CFBF55D19BA Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/K67tfvE4FRSPvLt2l542G0220Hc.roa Signing time: Thu 01 Jan 2026 22:19:44 +0000 ROA not before: Thu 01 Jan 2026 22:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212558 IP address blocks: 78.108.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:3a:97:c4:db:c9:cf:ce:eb:0c:fb:f5:5d:19:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Validity Not Before: Jan 1 22:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2baeed7ef13815148fbcbb76979e361b4db6d077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ad:19:c8:0f:41:bb:34:18:75:c0:78:d2:17: dd:48:d4:aa:ad:46:af:f4:a0:dd:58:35:a5:e0:63: 1e:1a:d7:6a:d4:fe:bd:d6:45:20:18:a0:22:dc:e4: 22:a8:3e:ab:98:5a:b2:aa:97:0f:70:e9:d7:94:1e: c6:ad:b0:e5:26:3c:5d:ab:f6:ff:04:40:66:56:e4: 38:52:35:63:15:0a:d5:60:0c:a1:08:4c:8c:c1:f7: df:63:57:05:b7:a1:40:99:b0:3a:42:af:07:4b:db: aa:68:d4:3f:56:85:17:6b:32:38:b1:b5:65:1c:b2: 31:09:3a:9d:65:16:ad:4b:03:f7:4f:38:5a:61:31: 36:a1:45:d7:db:9e:c7:f8:7f:fd:ed:eb:5e:aa:4f: 2e:73:ba:74:78:40:4e:46:cc:2d:f6:3c:90:bf:4a: 19:c4:95:6f:be:6e:8b:48:5c:35:83:87:77:b7:8d: e6:59:98:92:13:7f:9c:7e:b7:a3:f0:af:70:80:ae: 0a:20:9f:6a:48:fb:32:23:7b:08:d4:3c:23:b1:1f: 93:d2:59:f1:00:b7:e9:03:71:5d:e5:03:69:78:d2: 87:5b:7f:44:b2:82:5f:62:e7:a2:fa:f9:d1:ed:2d: e8:f7:e8:6e:9d:e9:f8:87:5d:3a:eb:43:59:b5:8e: 95:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:AE:ED:7E:F1:38:15:14:8F:BC:BB:76:97:9E:36:1B:4D:B6:D0:77 X509v3 Authority Key Identifier: keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/K67tfvE4FRSPvLt2l542G0220Hc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.108.57.0/24 Signature Algorithm: sha256WithRSAEncryption a1:af:1d:39:f5:8f:6e:5a:9b:c8:f5:87:bb:5a:b0:08:6c:d7: 03:b2:8f:de:ce:54:b2:d7:2d:04:17:c0:c2:fb:65:c2:dd:ef: e7:f0:9d:33:e1:ea:5a:ad:06:86:18:a1:21:5e:75:db:4a:b8: ee:47:71:15:51:e0:e2:84:00:c8:0c:0b:98:8a:bb:f4:00:54: e2:b8:45:3a:66:15:75:e0:6a:5b:b5:15:7b:a1:01:bf:a2:37: 33:dc:b4:d3:88:ee:70:b9:b4:70:9f:d3:0a:53:80:43:1e:c1: 5b:f7:e7:9a:85:74:cb:05:2a:9c:e1:58:be:66:cd:07:19:f9: 52:45:e0:f3:b7:27:26:13:a9:d1:b3:f8:5c:64:f6:1b:4c:3e: f6:ed:b1:83:ab:02:ef:c9:59:01:a9:7f:5d:0d:78:bb:56:1c: 47:ed:4e:66:f1:31:e7:4f:22:a8:47:6b:98:0c:da:3c:84:bc: 88:03:d9:94:27:c9:27:85:0c:65:57:1b:d2:23:82:dc:b5:3e: a9:3a:c9:ea:89:3f:ee:2a:12:20:b6:5a:f6:f9:5c:b3:36:ba: c4:b9:cf:d3:51:3f:ce:36:04:87:b0:71:11:b3:6b:57:a6:17: db:8f:0c:25:54:68:a8:a5:39:7d:0b:a4:70:98:4b:4b:de:87: e6:fb:96:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTqXxNvJz87rDPv1XRm6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz NTNkY2UwHhcNMjYwMTAxMjIxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyYmFlZWQ3ZWYxMzgxNTE0OGZiY2JiNzY5NzllMzYxYjRkYjZkMDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4K0ZyA9BuzQYdcB40hfdSNSqrUav 9KDdWDWl4GMeGtdq1P691kUgGKAi3OQiqD6rmFqyqpcPcOnXlB7GrbDlJjxdq/b/ BEBmVuQ4UjVjFQrVYAyhCEyMwfffY1cFt6FAmbA6Qq8HS9uqaNQ/VoUXazI4sbVl HLIxCTqdZRatSwP3TzhaYTE2oUXX257H+H/97eteqk8uc7p0eEBORswt9jyQv0oZ xJVvvm6LSFw1g4d3t43mWZiSE3+cfrej8K9wgK4KIJ9qSPsyI3sI1DwjsR+T0lnx ALfpA3Fd5QNpeNKHW39EsoJfYuei+vnR7S3o9+hunen4h10660NZtY6VuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCuu7X7xOBUUj7y7dpeeNhtNttB3MB8GA1UdIwQY MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt ODI3NmM4YWFjNTBlLzEvSzY3dGZ2RTRGUlNQdkx0Mmw1NDJHMDIyMEhjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATmw5MA0G CSqGSIb3DQEBCwUAA4IBAQChrx059Y9uWpvI9Ye7WrAIbNcDso/ezlSy1y0EF8DC +2XC3e/n8J0z4eparQaGGKEhXnXbSrjuR3EVUeDihADIDAuYirv0AFTiuEU6ZhV1 4GpbtRV7oQG/ojcz3LTTiO5wubRwn9MKU4BDHsFb9+eahXTLBSqc4Vi+Zs0HGflS ReDztycmE6nRs/hcZPYbTD727bGDqwLvyVkBqX9dDXi7VhxH7U5m8THnTyKoR2uY DNo8hLyIA9mUJ8knhQxlVxvSI4LctT6pOsnqiT/uKhIgtlr2+VyzNrrEuc/TUT/O NgSHsHERs2tXphfbjwwlVGiopTl9C6RwmEtL3ofm+5bL -----END CERTIFICATE-----Generated at Sun Jan 25 08:50:37 2026 by rpki-client