This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/UcFizDt0XfpJD-0DkZ-SfGMl74Y.roa File: UcFizDt0XfpJD-0DkZ-SfGMl74Y.roa (raw, json) Hash identifier: fA4BMKDNXuOmbAZT14Ueiqsw1qt+c+l2CZNe7yD5QbI= Subject key identifier: 51:C1:62:CC:3B:74:5D:FA:49:0F:ED:03:91:9F:92:7C:63:25:EF:86 Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C777E359BFAF3D5D5D9E238C341B7A Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/UcFizDt0XfpJD-0DkZ-SfGMl74Y.roa Signing time: Thu 01 Jan 2026 04:18:39 +0000 ROA not before: Thu 01 Jan 2026 04:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202804 IP address blocks: 185.20.78.0/24 maxlen: 24 185.20.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:77:e3:59:bf:af:3d:5d:5d:9e:23:8c:34:1b:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=51c162cc3b745dfa490fed03919f927c6325ef86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d4:d8:ab:c9:78:97:62:45:72:cd:2f:5c:a3: b4:c8:c2:69:38:13:6b:a3:7f:b2:dd:21:6b:a6:fd: 78:64:b9:45:20:de:0a:8b:88:82:f1:02:ce:66:07: 61:30:7f:6f:21:a9:79:ed:99:61:32:27:30:b4:b1: 27:ca:af:76:78:5d:df:2c:5c:3e:9f:2e:82:c5:4a: 76:bc:45:9f:dc:a3:dc:c7:07:18:43:43:6c:2b:05: 99:fa:ae:5f:74:f1:dd:6c:f3:33:ff:b6:2a:e4:25: ae:58:31:4f:0d:f4:7b:1b:01:35:6f:ea:ed:09:9a: 5f:59:c6:31:5b:2a:9a:c2:62:1a:0d:1d:2e:28:da: b7:71:2d:09:91:44:78:21:6d:3f:f4:6d:ef:78:32: 98:08:e1:36:a3:69:31:76:b8:c4:27:73:c4:99:51: 25:0d:f2:23:6a:73:79:9a:4b:e8:bf:44:da:c7:e8: 7b:66:32:6e:14:1d:6c:64:3e:1a:28:11:39:2e:8a: 38:c6:5d:09:cd:1c:32:d8:ea:3a:d9:40:2a:23:85: ef:93:87:0c:54:6b:47:f0:a8:b0:fd:a3:e2:13:e6: 4e:fa:dc:91:9e:e9:4e:86:98:c8:d4:cd:19:02:79: 7c:4f:88:16:db:a4:20:25:4a:1a:96:63:f3:01:56: 1e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C1:62:CC:3B:74:5D:FA:49:0F:ED:03:91:9F:92:7C:63:25:EF:86 X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/UcFizDt0XfpJD-0DkZ-SfGMl74Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.20.78.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:68:93:7c:b3:55:62:44:ba:bd:3c:c7:07:55:37:5b:5c:7c: 6d:8c:05:92:e6:98:30:ad:cd:38:6c:05:1f:97:4d:48:be:d3: 6b:f6:98:08:b2:81:29:52:be:32:dc:74:f4:8c:64:8c:19:c1: 7b:7a:e6:e1:45:46:3d:a3:52:73:29:9e:0d:df:4f:af:5c:1e: 6b:d9:04:e6:2e:0d:1d:4c:2f:ec:27:08:2e:1a:62:da:14:4c: b4:4d:3e:30:3a:11:69:e8:df:40:39:01:8c:d0:0c:6c:bd:29: 86:4d:63:0c:be:86:86:6d:11:9f:e5:0d:fa:a3:00:a2:c6:77: d4:4e:3b:d1:a0:68:4a:48:df:ad:13:55:57:cd:97:73:3a:37: 49:44:db:32:2b:b5:c9:ed:ee:09:0f:51:12:72:4c:86:32:49: b4:f8:55:4c:bd:1b:3a:f9:b5:cd:2e:20:c4:af:87:7f:5a:86: 2e:30:b6:3a:fa:03:4e:ab:e5:e0:a0:c3:1a:c2:4c:95:45:38: 6d:2b:e9:4e:bb:5f:5d:87:01:e0:07:5c:9e:5c:78:0b:9e:65: 7b:ac:a3:61:41:ac:9c:85:84:ad:de:2c:51:f2:7d:31:e0:9e: c6:cb:e0:e5:4b:f2:63:24:41:5e:13:c8:00:33:ba:fa:dc:ef: e6:c0:30:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x3fjWb+vPV1dniOMNBt6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWMxNjJjYzNiNzQ1ZGZhNDkwZmVkMDM5MTlmOTI3YzYzMjVlZjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNTYq8l4l2JFcs0vXKO0yMJpOBNr o3+y3SFrpv14ZLlFIN4Ki4iC8QLOZgdhMH9vIal57ZlhMicwtLEnyq92eF3fLFw+ ny6CxUp2vEWf3KPcxwcYQ0NsKwWZ+q5fdPHdbPMz/7Yq5CWuWDFPDfR7GwE1b+rt CZpfWcYxWyqawmIaDR0uKNq3cS0JkUR4IW0/9G3veDKYCOE2o2kxdrjEJ3PEmVEl DfIjanN5mkvov0Tax+h7ZjJuFB1sZD4aKBE5Loo4xl0JzRwy2Oo62UAqI4Xvk4cM VGtH8Kiw/aPiE+ZO+tyRnulOhpjI1M0ZAnl8T4gW26QgJUoalmPzAVYe1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFHBYsw7dF36SQ/tA5GfknxjJe+GMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvVWNGaXpEdDBYZnBKRC0wRGtaLVNmR01sNzRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuRROMA0G CSqGSIb3DQEBCwUAA4IBAQBLaJN8s1ViRLq9PMcHVTdbXHxtjAWS5pgwrc04bAUf l01IvtNr9pgIsoEpUr4y3HT0jGSMGcF7eubhRUY9o1JzKZ4N30+vXB5r2QTmLg0d TC/sJwguGmLaFEy0TT4wOhFp6N9AOQGM0AxsvSmGTWMMvoaGbRGf5Q36owCixnfU TjvRoGhKSN+tE1VXzZdzOjdJRNsyK7XJ7e4JD1ESckyGMkm0+FVMvRs6+bXNLiDE r4d/WoYuMLY6+gNOq+XgoMMawkyVRThtK+lOu19dhwHgB1yeXHgLnmV7rKNhQayc hYSt3ixR8n0x4J7Gy+DlS/JjJEFeE8gAM7r63O/mwDAH -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:50 2026 by rpki-client