This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/_N2nrplLVj988L3B9p-Xsk-Uc88.roa File: _N2nrplLVj988L3B9p-Xsk-Uc88.roa (raw, json) Hash identifier: 7ocXDIY20rX1cn+l5zbELRN0K10bZK6Thqwp+te1Rkg= Subject key identifier: FC:DD:A7:AE:99:4B:56:3F:7C:F0:BD:C1:F6:9F:97:B2:4F:94:73:CF Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Certificate serial: 019B7BA53A4930E8F3C5A318B8AEAC34C05D Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/_N2nrplLVj988L3B9p-Xsk-Uc88.roa Signing time: Thu 01 Jan 2026 22:19:44 +0000 ROA not before: Thu 01 Jan 2026 22:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207787 IP address blocks: 78.108.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:3a:49:30:e8:f3:c5:a3:18:b8:ae:ac:34:c0:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Validity Not Before: Jan 1 22:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcdda7ae994b563f7cf0bdc1f69f97b24f9473cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:fd:54:5e:3c:27:cb:f8:18:0d:8a:25:02:0e: 01:80:4d:a6:fe:7e:0c:d1:5c:40:cb:5b:ea:6c:e8: 78:f0:31:80:56:ec:7d:ef:c9:f4:66:0c:8a:8c:52: 01:ef:72:f4:55:aa:ba:9a:99:fa:04:b7:49:60:26: 8c:36:91:2d:b0:3b:e7:8c:ed:49:7e:d3:d4:e7:2e: 22:9e:82:87:48:60:b9:ac:42:5a:7d:27:ed:c9:21: 1b:2c:09:5b:a5:86:47:ee:ac:9e:8f:ab:ad:09:1d: b6:71:fe:5e:6a:d5:df:b7:80:2d:1e:a0:f4:9b:50: 9e:11:c8:c7:f0:a6:7a:b0:61:f7:b2:33:21:56:b1: 3c:14:21:17:a7:06:e1:b0:0c:06:dd:14:79:8e:b2: 2d:d9:db:92:5c:ef:1d:14:cf:e6:dd:cc:be:6a:3d: c8:92:27:f8:9b:15:97:9a:b0:63:1e:2d:a1:97:93: 71:2a:e3:6a:3a:73:f6:51:a2:4e:41:c9:83:72:4f: 3c:4a:eb:dd:1f:72:7f:af:29:23:bb:41:65:42:6c: ac:29:02:3a:b6:40:db:70:8d:25:ee:da:76:ea:63: 31:44:ec:d0:d4:ff:7c:5b:01:f2:7b:46:65:86:3d: af:84:0f:cd:f0:a3:9e:29:8d:9b:8c:aa:8c:f6:62: 76:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DD:A7:AE:99:4B:56:3F:7C:F0:BD:C1:F6:9F:97:B2:4F:94:73:CF X509v3 Authority Key Identifier: keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/_N2nrplLVj988L3B9p-Xsk-Uc88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.108.60.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:a6:75:69:65:48:fa:ab:c2:d7:4a:ef:41:f5:db:4b:66:77: d3:4a:a9:7c:65:1c:dd:15:f2:56:76:c7:63:0c:d5:e0:7c:96: 8d:e9:78:10:e3:19:4b:a9:d9:a2:7f:83:c7:f3:26:99:9c:32: 77:f3:68:01:69:97:de:49:8f:4d:d2:17:b7:e9:b1:3d:54:bf: 0d:92:cd:1e:95:73:9d:ae:da:d5:a5:c7:fe:ab:a1:ed:6e:5f: c3:58:eb:1d:54:da:ea:d6:52:42:a1:5c:c5:05:c3:21:82:e8: 01:19:20:a0:d5:89:bf:da:27:e9:16:38:15:61:b3:37:f9:c3: 0e:6d:74:0f:6e:38:dc:15:97:32:60:8d:78:de:b9:30:90:01: 52:98:a5:56:04:26:ac:ff:90:ed:17:bc:04:24:25:76:86:32: d9:ce:e6:04:4d:cd:8a:ea:db:df:17:ff:14:71:f4:21:c4:8e: 1e:0d:0d:79:ef:b9:4a:c6:d0:55:2f:4c:53:15:2e:89:d1:52: e5:dd:c4:71:af:7e:7c:c6:53:17:6d:dd:68:00:86:c0:63:12: 1c:ac:6d:89:24:ca:a2:86:24:32:25:dd:08:34:83:81:2a:18: c1:97:ed:e9:ce:06:e6:3a:21:ce:df:d0:ef:28:69:27:c3:47: 8c:05:9d:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTpJMOjzxaMYuK6sNMBdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz NTNkY2UwHhcNMjYwMTAxMjIxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2RkYTdhZTk5NGI1NjNmN2NmMGJkYzFmNjlmOTdiMjRmOTQ3M2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/1UXjwny/gYDYolAg4BgE2m/n4M 0VxAy1vqbOh48DGAVux978n0ZgyKjFIB73L0Vaq6mpn6BLdJYCaMNpEtsDvnjO1J ftPU5y4inoKHSGC5rEJafSftySEbLAlbpYZH7qyej6utCR22cf5eatXft4AtHqD0 m1CeEcjH8KZ6sGH3sjMhVrE8FCEXpwbhsAwG3RR5jrIt2duSXO8dFM/m3cy+aj3I kif4mxWXmrBjHi2hl5NxKuNqOnP2UaJOQcmDck88SuvdH3J/rykju0FlQmysKQI6 tkDbcI0l7tp26mMxROzQ1P98WwHye0Zlhj2vhA/N8KOeKY2bjKqM9mJ21wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPzdp66ZS1Y/fPC9wfafl7JPlHPPMB8GA1UdIwQY MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt ODI3NmM4YWFjNTBlLzEvX04ybnJwbExWajk4OEwzQjlwLVhzay1VYzg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATmw8MA0G CSqGSIb3DQEBCwUAA4IBAQB7pnVpZUj6q8LXSu9B9dtLZnfTSql8ZRzdFfJWdsdj DNXgfJaN6XgQ4xlLqdmif4PH8yaZnDJ382gBaZfeSY9N0he36bE9VL8Nks0elXOd rtrVpcf+q6Htbl/DWOsdVNrq1lJCoVzFBcMhgugBGSCg1Ym/2ifpFjgVYbM3+cMO bXQPbjjcFZcyYI143rkwkAFSmKVWBCas/5DtF7wEJCV2hjLZzuYETc2K6tvfF/8U cfQhxI4eDQ1577lKxtBVL0xTFS6J0VLl3cRxr358xlMXbd1oAIbAYxIcrG2JJMqi hiQyJd0INIOBKhjBl+3pzgbmOiHO39DvKGknw0eMBZ22 -----END CERTIFICATE-----Generated at Sun Jan 25 10:13:58 2026 by rpki-client