This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/ZXlNAqhAdXoAODdj2Pl5VkWkVMA.roa File: ZXlNAqhAdXoAODdj2Pl5VkWkVMA.roa (raw, json) Hash identifier: Jb/RiN3sZU7ByrB3NqqPfx86LK/qi2BVbBlBTIG/hmI= Subject key identifier: 65:79:4D:02:A8:40:75:7A:00:38:37:63:D8:F9:79:56:45:A4:54:C0 Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Certificate serial: 019B7BA53971FAE3F13ED2C1533E981269D5 Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/ZXlNAqhAdXoAODdj2Pl5VkWkVMA.roa Signing time: Thu 01 Jan 2026 22:19:44 +0000 ROA not before: Thu 01 Jan 2026 22:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199524 IP address blocks: 78.108.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:39:71:fa:e3:f1:3e:d2:c1:53:3e:98:12:69:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Validity Not Before: Jan 1 22:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=65794d02a840757a00383763d8f9795645a454c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:84:48:3d:12:20:0b:0a:23:95:98:41:6e:90: db:75:7e:8c:29:e9:b8:ec:4c:41:86:2b:b8:56:85: 20:23:6d:fe:56:48:da:d1:7a:68:e2:88:bd:32:0b: a6:a7:ed:c3:a6:cb:d7:44:d6:25:27:dd:b7:39:db: ad:a4:af:72:40:ee:3a:ad:59:98:73:10:50:87:ab: cf:f2:0a:d9:ca:59:b7:1d:60:a7:37:a0:27:1a:88: 3b:9f:5c:36:8b:3a:41:93:fd:23:78:c1:0f:7d:de: 91:dc:d3:4d:40:7b:94:86:9f:d6:0b:bb:10:4b:e9: cf:45:d5:6e:e8:db:1a:da:02:41:ed:f2:24:0c:2d: 5b:c0:f7:73:29:06:ac:d2:76:49:09:d5:1b:64:87: 56:3e:2a:a1:c8:d2:f9:40:16:be:d3:2c:45:d6:38: a8:2e:82:1c:cc:8e:57:93:0d:a2:50:ba:aa:bf:50: 41:a6:3e:41:6d:bb:d5:e4:f6:0e:97:cc:83:25:28: 8f:89:7a:88:2c:94:27:e1:37:3b:9c:fc:9d:a4:1c: 4f:5f:d2:2c:c3:97:a1:9a:4c:d2:04:a6:ee:85:e8: 70:42:bd:b9:ca:60:9a:ec:5e:5e:c6:6a:91:64:e5: 77:5a:f5:ed:f4:8a:97:39:ca:65:1f:5b:c5:f8:e3: ee:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:79:4D:02:A8:40:75:7A:00:38:37:63:D8:F9:79:56:45:A4:54:C0 X509v3 Authority Key Identifier: keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/ZXlNAqhAdXoAODdj2Pl5VkWkVMA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.108.56.0/24 Signature Algorithm: sha256WithRSAEncryption a7:e2:2d:6a:c1:a8:62:e3:79:30:36:40:25:c5:cd:00:ec:6d: bc:9f:86:53:cd:f3:f7:66:e4:bf:d9:6b:59:29:42:0a:65:02: 65:24:17:12:24:09:17:27:02:9f:a5:cb:ce:9d:c8:ab:11:47: 21:a7:c8:3b:29:8f:49:b8:8e:a6:2e:5e:35:17:f1:46:8f:b5: d2:e8:5e:00:a2:5d:57:1d:52:90:0a:42:89:7c:bb:d5:f6:54: 09:e3:fd:fc:c1:de:90:25:62:02:af:d1:a3:d5:3b:91:36:77: 32:28:bc:c8:53:50:3a:c8:11:f1:fb:3c:8d:8a:1f:a6:76:e5: 64:c9:bf:b6:2c:22:8a:5b:b4:9f:90:75:82:e3:42:d2:6b:3f: 6a:4d:6e:83:dd:f9:ec:3d:37:7e:31:86:a9:8f:c2:15:64:29: d8:c9:61:bd:de:3d:d3:44:c6:ef:68:05:27:e5:40:e8:61:6f: 7c:7f:90:e8:10:b2:49:04:b6:ad:e1:25:14:df:d8:fc:c2:f1: b4:70:3b:9e:b5:56:a4:32:e6:3a:e6:5b:c6:31:79:ce:d6:84: f2:39:f6:94:d5:8b:a5:18:b1:67:41:05:a1:47:8b:96:79:bd: 38:09:04:7a:12:23:bc:b2:c4:4c:83:d8:4e:e4:ac:80:ce:73: 8d:22:70:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTlx+uPxPtLBUz6YEmnVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz NTNkY2UwHhcNMjYwMTAxMjIxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NTc5NGQwMmE4NDA3NTdhMDAzODM3NjNkOGY5Nzk1NjQ1YTQ1NGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+YRIPRIgCwojlZhBbpDbdX6MKem4 7ExBhiu4VoUgI23+Vkja0Xpo4oi9Mgump+3DpsvXRNYlJ923OdutpK9yQO46rVmY cxBQh6vP8grZylm3HWCnN6AnGog7n1w2izpBk/0jeMEPfd6R3NNNQHuUhp/WC7sQ S+nPRdVu6Nsa2gJB7fIkDC1bwPdzKQas0nZJCdUbZIdWPiqhyNL5QBa+0yxF1jio LoIczI5Xkw2iULqqv1BBpj5BbbvV5PYOl8yDJSiPiXqILJQn4Tc7nPydpBxPX9Is w5ehmkzSBKbuhehwQr25ymCa7F5exmqRZOV3WvXt9IqXOcplH1vF+OPuUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGV5TQKoQHV6ADg3Y9j5eVZFpFTAMB8GA1UdIwQY MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt ODI3NmM4YWFjNTBlLzEvWlhsTkFxaEFkWG9BT0RkajJQbDVWa1drVk1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATmw4MA0G CSqGSIb3DQEBCwUAA4IBAQCn4i1qwahi43kwNkAlxc0A7G28n4ZTzfP3ZuS/2WtZ KUIKZQJlJBcSJAkXJwKfpcvOncirEUchp8g7KY9JuI6mLl41F/FGj7XS6F4Aol1X HVKQCkKJfLvV9lQJ4/38wd6QJWICr9Gj1TuRNncyKLzIU1A6yBHx+zyNih+mduVk yb+2LCKKW7SfkHWC40LSaz9qTW6D3fnsPTd+MYapj8IVZCnYyWG93j3TRMbvaAUn 5UDoYW98f5DoELJJBLat4SUU39j8wvG0cDuetVakMuY65lvGMXnO1oTyOfaU1Yul GLFnQQWhR4uWeb04CQR6EiO8ssRMg9hO5KyAznONInCH -----END CERTIFICATE-----Generated at Sun Jan 25 10:13:36 2026 by rpki-client