This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/mcFCwYwGHvV8_Dgby0Fqss-cGB4.roa File: mcFCwYwGHvV8_Dgby0Fqss-cGB4.roa (raw, json) Hash identifier: GIeC9Y9trbiu+ClPgrrFlywdl17ZKoTgx1G0hLexXxc= Subject key identifier: 99:C1:42:C1:8C:06:1E:F5:7C:FC:38:1B:CB:41:6A:B2:CF:9C:18:1E Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Certificate serial: 019B7BA533B61C3631935EE175579E50E80A Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/mcFCwYwGHvV8_Dgby0Fqss-cGB4.roa Signing time: Thu 01 Jan 2026 22:19:42 +0000 ROA not before: Thu 01 Jan 2026 22:19:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 78.108.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:33:b6:1c:36:31:93:5e:e1:75:57:9e:50:e8:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce Validity Not Before: Jan 1 22:19:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99c142c18c061ef57cfc381bcb416ab2cf9c181e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:22:d8:b1:0d:e0:3f:1f:6c:3f:8f:82:c0:9b: 71:ea:41:ca:e0:76:38:61:da:ea:fa:42:b4:e9:2c: e3:3a:dd:e5:ed:66:99:4b:bf:94:9b:d4:5d:6b:d6: eb:ae:57:23:4e:b7:7b:01:ee:86:2b:fd:74:9e:11: f1:35:7f:c5:e7:86:aa:49:78:2c:7c:1f:d3:67:06: f9:c8:a0:8e:9d:ee:91:67:ee:ba:e6:fc:fc:bb:d5: 70:a9:17:28:b3:18:87:9a:58:d0:07:ae:5a:b1:50: 6d:a3:74:e8:de:b2:27:dd:8b:e2:d0:13:84:73:3b: 23:ef:02:b8:db:d7:ea:e1:86:93:89:05:44:b8:e8: e8:46:93:46:cd:bf:f3:95:84:c0:a8:2a:f3:5e:d4: fe:42:51:e8:24:aa:73:f4:a0:c7:21:4e:17:4b:73: 96:36:29:56:2e:be:7f:44:4a:19:f0:71:ba:fe:29: 25:23:47:e8:e2:b0:40:35:e2:58:71:49:1a:bd:b8: f0:00:2d:a3:7f:ac:c6:76:21:b6:74:b7:bf:8b:ed: fc:f6:85:b4:ec:a6:55:8f:d7:6e:06:7d:90:1b:59: f2:b1:ec:b4:af:03:cd:ef:6c:9d:25:3c:66:1f:1e: a1:3b:b6:2a:40:86:f9:4a:3a:c8:95:17:9f:a3:fb: 50:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C1:42:C1:8C:06:1E:F5:7C:FC:38:1B:CB:41:6A:B2:CF:9C:18:1E X509v3 Authority Key Identifier: keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/mcFCwYwGHvV8_Dgby0Fqss-cGB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.108.58.0/24 Signature Algorithm: sha256WithRSAEncryption 99:4d:8e:2e:f4:c0:a8:2e:7d:2c:69:44:83:53:c9:8a:c6:cb: 8c:fc:36:ed:06:b8:00:08:14:68:ab:44:c2:53:35:f6:bb:83: 4b:d9:c2:e8:20:b3:50:eb:69:e9:9e:1d:4b:ec:de:b1:a2:87: fc:83:51:af:e5:2c:7a:e5:9e:31:a8:f4:53:6f:12:d2:01:94: cc:94:4a:b6:b7:d8:10:9e:da:7a:66:93:23:50:46:fa:e1:15: cc:5b:9f:08:ab:fa:fa:7e:ad:fd:19:96:94:55:db:87:36:e0: 5a:e4:b9:1e:0a:83:e9:12:a2:55:be:3e:98:03:f1:19:59:e1: e2:16:69:3e:c6:ec:cb:71:56:75:d4:88:7c:88:87:18:4f:d3: 20:00:7f:7e:37:90:ff:a9:dc:63:5b:f3:4e:3e:fc:14:7e:a8: ac:fd:86:ee:1b:31:90:f5:f9:78:69:38:ea:fa:ed:bc:f9:62: 12:18:2d:60:01:d4:9f:ac:d1:3e:77:2d:9f:c6:7c:f5:73:f9: 6f:af:74:83:41:06:57:dc:0f:37:c0:da:f3:b5:b1:99:e1:6d: b2:5c:41:a8:bb:10:dd:9b:49:75:7a:17:c1:f8:93:76:a3:ec: 9c:21:e4:dd:a6:e3:59:1b:4b:6b:1b:e8:f3:fc:1f:bc:bd:9b: d2:b6:dd:d5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTO2HDYxk17hdVeeUOgKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YWEzZmJjNzhlMzEyMjkxNTdjNzhiNmQyM2E2NWViMmUz NTNkY2UwHhcNMjYwMTAxMjIxOTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWMxNDJjMThjMDYxZWY1N2NmYzM4MWJjYjQxNmFiMmNmOWMxODFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySLYsQ3gPx9sP4+CwJtx6kHK4HY4 Ydrq+kK06SzjOt3l7WaZS7+Um9Rda9brrlcjTrd7Ae6GK/10nhHxNX/F54aqSXgs fB/TZwb5yKCOne6RZ+665vz8u9VwqRcosxiHmljQB65asVBto3To3rIn3Yvi0BOE czsj7wK429fq4YaTiQVEuOjoRpNGzb/zlYTAqCrzXtT+QlHoJKpz9KDHIU4XS3OW NilWLr5/REoZ8HG6/iklI0fo4rBANeJYcUkavbjwAC2jf6zGdiG2dLe/i+389oW0 7KZVj9duBn2QG1nysey0rwPN72ydJTxmHx6hO7YqQIb5SjrIlRefo/tQmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJnBQsGMBh71fPw4G8tBarLPnBgeMB8GA1UdIwQY MBaAFNaqP7x44xIpFXx4ttI6ZesuNT3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2Mt ODI3NmM4YWFjNTBlLzEvbWNGQ3dZd0dIdlY4X0RnYnkwRnFzcy1jR0I0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC82Y2Y4YmUtMjUzZC00NmQ1LWFiN2MtODI3NmM4YWFjNTBl LzEvMXFvX3ZIampFaWtWZkhpMjBqcGw2eTQxUGM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATmw6MA0G CSqGSIb3DQEBCwUAA4IBAQCZTY4u9MCoLn0saUSDU8mKxsuM/DbtBrgACBRoq0TC UzX2u4NL2cLoILNQ62npnh1L7N6xoof8g1Gv5Sx65Z4xqPRTbxLSAZTMlEq2t9gQ ntp6ZpMjUEb64RXMW58Iq/r6fq39GZaUVduHNuBa5LkeCoPpEqJVvj6YA/EZWeHi Fmk+xuzLcVZ11Ih8iIcYT9MgAH9+N5D/qdxjW/NOPvwUfqis/YbuGzGQ9fl4aTjq +u28+WISGC1gAdSfrNE+dy2fxnz1c/lvr3SDQQZX3A83wNrztbGZ4W2yXEGouxDd m0l1ehfB+JN2o+ycIeTdpuNZG0trG+jz/B+8vZvStt3V -----END CERTIFICATE-----Generated at Sun Jan 25 10:21:02 2026 by rpki-client