This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/JWW2o_oLbWGpxjMQwNSAqwhhqJQ.roa File: JWW2o_oLbWGpxjMQwNSAqwhhqJQ.roa (raw, json) Hash identifier: 5nCR6cc/bGUZmfvhdh345jAakzPx6XaPK0dVdsIkYOg= Subject key identifier: 25:65:B6:A3:FA:0B:6D:61:A9:C6:33:10:C0:D4:80:AB:08:61:A8:94 Certificate issuer: /CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8 Certificate serial: 019B79EC37B7FAE998B0A64EF6F59BD19FCE Authority key identifier: 56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/JWW2o_oLbWGpxjMQwNSAqwhhqJQ.roa Signing time: Thu 01 Jan 2026 14:18:02 +0000 ROA not before: Thu 01 Jan 2026 14:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42910 IP address blocks: 78.135.123.0/24 maxlen: 24 212.68.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:37:b7:fa:e9:98:b0:a6:4e:f6:f5:9b:d1:9f:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8 Validity Not Before: Jan 1 14:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2565b6a3fa0b6d61a9c63310c0d480ab0861a894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e2:4a:76:44:83:59:33:b2:44:8f:f5:cf:5a: de:b2:77:8d:79:92:06:a0:82:45:c9:2b:2d:db:08: 4e:30:dd:f2:50:d4:d5:d7:b1:d8:87:91:e8:16:2a: d2:b0:eb:7b:3f:1d:7d:84:b3:78:d6:c6:21:fc:0f: a2:ba:a1:8f:3a:9c:fe:6a:fc:ee:29:a2:00:30:fd: 1a:0b:14:44:ed:ae:29:5f:d6:72:a1:91:4c:ad:07: b1:1d:ae:54:74:bb:a9:19:ca:5a:b1:8a:2f:24:c2: 76:ad:b1:93:25:dc:63:78:56:9e:1e:ba:ea:62:e1: 2d:5a:9f:5f:fe:78:a6:c7:ad:b6:a9:3f:d1:1e:4c: 10:b8:70:00:40:6e:da:e8:e9:4e:90:5e:25:91:92: fb:43:8e:ce:f2:58:78:6b:27:1f:76:10:7d:fe:a9: 52:86:26:9c:9a:6d:ef:69:54:81:6c:29:0c:21:30: 94:73:ba:8a:38:5f:42:b1:11:da:a7:de:6b:3b:a1: 23:a7:01:4d:27:2c:fa:20:e9:12:f2:00:6d:66:d6: 40:42:24:a6:61:d0:72:7f:4b:04:0f:02:e2:bb:f2: 49:6a:e1:40:f6:89:14:1b:37:1f:8e:09:38:2e:ac: f7:2e:2a:06:f4:13:d4:dc:73:e7:ab:bc:33:10:15: c7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:65:B6:A3:FA:0B:6D:61:A9:C6:33:10:C0:D4:80:AB:08:61:A8:94 X509v3 Authority Key Identifier: keyid:56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/JWW2o_oLbWGpxjMQwNSAqwhhqJQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.135.123.0/24 212.68.47.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:6b:c1:67:7e:8c:6d:b3:56:5e:62:36:54:4a:3e:ec:fa:55: bd:e9:3b:0d:02:43:4f:e1:84:7f:cb:a2:92:b3:40:5b:ba:e9: 2f:9c:f7:63:47:10:2a:c4:1c:71:9a:04:64:96:e6:53:a8:19: 54:67:b6:82:21:12:00:53:02:a0:e3:76:27:a5:d8:85:68:67: ac:e8:30:9a:69:52:19:c0:2c:92:5d:6a:34:96:82:61:ed:40: 29:a8:73:78:85:42:7b:86:f5:0e:e2:23:e8:18:49:f6:08:d1: 0c:4d:2e:1f:94:89:90:f8:bd:b0:c6:61:5b:ed:2a:1a:5c:7c: 52:27:73:11:df:f4:ba:e1:59:de:26:55:c6:7c:2f:e7:53:3d: 7f:ec:8a:d4:4e:c5:3b:03:6b:a4:2e:eb:00:5e:69:6d:0b:53: 0b:22:d9:e0:68:bd:66:75:88:76:8f:f6:b3:72:ef:3a:02:10: f0:cd:3a:8a:fd:fd:cd:82:51:38:d3:b0:45:ee:78:40:1c:d3: 07:3d:4e:74:f1:7e:c8:b8:de:ce:ce:6e:9b:c8:fd:e2:86:b4: 96:50:58:ef:02:28:4b:42:63:9b:3e:bd:5b:f0:4a:74:98:22: 9a:b7:84:29:6f:62:b9:7b:92:02:cc:e1:cc:21:be:30:0d:6a: 5d:fb:23:af -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57De3+umYsKZO9vWb0Z/OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NzNmYTY4NDI5NzNlZGY2MmQ1NzliNGVmZWMyZmE2NGZk YmY4YzgwHhcNMjYwMTAxMTQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNTY1YjZhM2ZhMGI2ZDYxYTljNjMzMTBjMGQ0ODBhYjA4NjFhODk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseJKdkSDWTOyRI/1z1resneNeZIG oIJFySst2whOMN3yUNTV17HYh5HoFirSsOt7Px19hLN41sYh/A+iuqGPOpz+avzu KaIAMP0aCxRE7a4pX9ZyoZFMrQexHa5UdLupGcpasYovJMJ2rbGTJdxjeFaeHrrq YuEtWp9f/nimx622qT/RHkwQuHAAQG7a6OlOkF4lkZL7Q47O8lh4aycfdhB9/qlS hiacmm3vaVSBbCkMITCUc7qKOF9CsRHap95rO6EjpwFNJyz6IOkS8gBtZtZAQiSm YdByf0sEDwLiu/JJauFA9okUGzcfjgk4Lqz3LioG9BPU3HPnq7wzEBXHNQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCVltqP6C21hqcYzEMDUgKsIYaiUMB8GA1UdIwQY MBaAFFZz+mhClz7fYtV5tO/sL6ZP2/jIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm5QNmFFS1hQdDlpMVhtMDctd3Zwa19iLU1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83OGU1ZWItYzJhZi00NDYyLWI4NTkt ODk4OTk2Yzg2MWRmLzEvSldXMm9fb0xiV0dweGpNUXdOU0Fxd2hocUpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83OGU1ZWItYzJhZi00NDYyLWI4NTktODk4OTk2Yzg2MWRm LzEvVm5QNmFFS1hQdDlpMVhtMDctd3Zwa19iLU1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATod7AwQA 1EQvMA0GCSqGSIb3DQEBCwUAA4IBAQBua8Fnfoxts1ZeYjZUSj7s+lW96TsNAkNP 4YR/y6KSs0BbuukvnPdjRxAqxBxxmgRkluZTqBlUZ7aCIRIAUwKg43YnpdiFaGes 6DCaaVIZwCySXWo0loJh7UApqHN4hUJ7hvUO4iPoGEn2CNEMTS4flImQ+L2wxmFb 7SoaXHxSJ3MR3/S64VneJlXGfC/nUz1/7IrUTsU7A2ukLusAXmltC1MLItngaL1m dYh2j/azcu86AhDwzTqK/f3NglE407BF7nhAHNMHPU508X7IuN7Ozm6byP3ihrSW UFjvAihLQmObPr1b8Ep0mCKat4Qpb2K5e5ICzOHMIb4wDWpd+yOv -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:43 2026 by rpki-client