This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/maG3D3ffdpe3ua7tlY4ZMgQzRUQ.roa File: maG3D3ffdpe3ua7tlY4ZMgQzRUQ.roa (raw, json) Hash identifier: 478DNMfB77eHaYz1ZimM1V42yk6HTGxeU7U0HyazLS8= Subject key identifier: 99:A1:B7:0F:77:DF:76:97:B7:B9:AE:ED:95:8E:19:32:04:33:45:44 Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Certificate serial: 019B77C7631079118825F61BDDB7516656B5 Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/maG3D3ffdpe3ua7tlY4ZMgQzRUQ.roa Signing time: Thu 01 Jan 2026 04:18:34 +0000 ROA not before: Thu 01 Jan 2026 04:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31088 IP address blocks: 195.78.116.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.mft rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:63:10:79:11:88:25:f6:1b:dd:b7:51:66:56:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0 Validity Not Before: Jan 1 04:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=99a1b70f77df7697b7b9aeed958e193204334544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7c:70:b3:8f:d9:e8:96:dc:48:b4:b4:4a:38: df:f5:fc:6e:b9:36:16:b4:18:5b:d2:6a:a1:87:9e: 45:75:50:e7:5e:57:8a:ec:05:9a:e4:05:da:1d:30: 38:ce:e6:82:bf:d0:ef:e7:4b:9e:50:50:43:fb:65: 7c:b1:b0:da:7c:05:62:8f:35:9c:32:87:0d:3b:eb: 2e:b0:c6:19:a8:8f:70:2a:b1:44:73:f3:46:fe:38: 80:4a:ab:b7:17:98:bf:d4:b1:75:82:76:f1:65:79: 37:85:b0:3b:2d:f5:c9:27:4a:04:f1:94:47:ca:fb: 41:a9:00:db:20:f3:05:95:8f:b9:7b:84:4f:e1:8f: 6e:42:9f:f8:ad:68:1d:67:54:39:61:90:9b:73:5e: 15:d8:bb:f5:fc:d6:42:13:78:22:f5:81:62:3a:77: 2d:00:10:a6:ec:d4:e7:0e:a6:7e:97:61:ee:58:90: ed:c5:7d:4b:53:88:2e:1a:f1:f2:b4:c1:b4:32:c2: fc:30:52:22:91:a4:da:4e:81:bb:9b:28:77:4d:56: de:da:5d:e6:8c:e6:ef:31:7d:53:ea:cd:0e:36:cf: 8d:ca:0f:d0:07:34:3e:17:38:64:47:22:48:85:b8: c6:ee:51:7d:9d:51:0c:08:c8:9e:53:33:f2:2f:1b: a9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A1:B7:0F:77:DF:76:97:B7:B9:AE:ED:95:8E:19:32:04:33:45:44 X509v3 Authority Key Identifier: keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/maG3D3ffdpe3ua7tlY4ZMgQzRUQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.78.116.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:48:d3:fb:2b:b5:4e:43:c3:de:1d:de:a5:bc:8e:f9:f1:46: a7:74:e8:cd:81:ca:90:64:fa:c0:62:7d:e5:a7:6d:e5:e9:f7: 51:d0:2d:9b:7f:5a:2b:7b:70:89:78:db:53:dc:cf:7a:27:58: 65:03:09:e4:19:75:1c:78:79:fd:b3:38:d3:9b:34:3d:bd:d4: 3a:52:37:e3:e7:01:f4:f1:15:ce:4f:6f:0d:41:9c:7f:64:02: 07:34:f1:83:cd:6c:02:51:0b:7f:54:f8:81:8e:5d:57:4f:19: fc:b6:22:ab:f2:0f:d2:1a:13:69:10:d3:33:18:39:6e:9d:c8: c4:5c:ff:46:7e:9f:a7:7a:dd:15:fb:23:34:0d:30:29:5a:87: 9b:77:de:f5:60:79:52:05:71:18:48:ae:cf:0a:7c:81:71:96: 13:4f:76:4b:e4:4d:12:78:28:4f:be:1e:62:da:b2:9a:bf:c7: b2:02:28:2a:87:79:ec:3b:b4:11:6e:c8:f7:c2:74:d9:76:f1: 08:9b:ac:ed:59:ff:17:2b:c2:8c:84:30:b1:bb:0d:f6:4c:74: c5:6e:5c:27:0f:ae:9a:b8:72:2c:3a:70:08:f1:9e:fc:22:c9: 1b:18:26:67:00:1e:35:7e:70:d7:0a:c5:b5:64:6b:84:6c:b6: c2:51:51:e8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x2MQeRGIJfYb3bdRZla1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyZDdjMmExMDcyZDczNTA3YWRiZjY1MDdkZTY4YWFhYzAx Nzg1YzAwHhcNMjYwMTAxMDQxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5OWExYjcwZjc3ZGY3Njk3YjdiOWFlZWQ5NThlMTkzMjA0MzM0NTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3xws4/Z6JbcSLS0Sjjf9fxuuTYW tBhb0mqhh55FdVDnXleK7AWa5AXaHTA4zuaCv9Dv50ueUFBD+2V8sbDafAVijzWc MocNO+susMYZqI9wKrFEc/NG/jiASqu3F5i/1LF1gnbxZXk3hbA7LfXJJ0oE8ZRH yvtBqQDbIPMFlY+5e4RP4Y9uQp/4rWgdZ1Q5YZCbc14V2Lv1/NZCE3gi9YFiOnct ABCm7NTnDqZ+l2HuWJDtxX1LU4guGvHytMG0MsL8MFIikaTaToG7myh3TVbe2l3m jObvMX1T6s0ONs+Nyg/QBzQ+FzhkRyJIhbjG7lF9nVEMCMieUzPyLxupmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJmhtw9333aXt7mu7ZWOGTIEM0VEMB8GA1UdIwQY MBaAFJLXwqEHLXNQetv2UH3miqrAF4XAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTct ODllNTZjODBkMWQwLzEvbWFHM0QzZmZkcGUzdWE3dGxZNFpNZ1F6UlVRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85Y2ZmN2MtZjA1YS00ZTAyLWJlYTctODllNTZjODBkMWQw LzEva3RmQ29RY3RjMUI2Ml9aUWZlYUtxc0FYaGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw050MA0G CSqGSIb3DQEBCwUAA4IBAQCMSNP7K7VOQ8PeHd6lvI758UandOjNgcqQZPrAYn3l p23l6fdR0C2bf1ore3CJeNtT3M96J1hlAwnkGXUceHn9szjTmzQ9vdQ6Ujfj5wH0 8RXOT28NQZx/ZAIHNPGDzWwCUQt/VPiBjl1XTxn8tiKr8g/SGhNpENMzGDluncjE XP9Gfp+net0V+yM0DTApWoebd971YHlSBXEYSK7PCnyBcZYTT3ZL5E0SeChPvh5i 2rKav8eyAigqh3nsO7QRbsj3wnTZdvEIm6ztWf8XK8KMhDCxuw32THTFblwnD66a uHIsOnAI8Z78IskbGCZnAB41fnDXCsW1ZGuEbLbCUVHo -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:47 2026 by rpki-client