This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/200hGiiiZsPIFyhRS3fgiw7TDL0.roa File: 200hGiiiZsPIFyhRS3fgiw7TDL0.roa (raw, json) Hash identifier: RXdmnfglVdphnX74nph9B1kezoQQBk9ZlsO2RYNXwvo= Subject key identifier: DB:4D:21:1A:28:A2:66:C3:C8:17:28:51:4B:77:E0:8B:0E:D3:0C:BD Certificate issuer: /CN=eeed878b81a9023940d4ec8c172d04d4c25586ca Certificate serial: 019B7C1276B60EF7ADF96976389F8490ADBF Authority key identifier: EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/200hGiiiZsPIFyhRS3fgiw7TDL0.roa Signing time: Fri 02 Jan 2026 00:19:03 +0000 ROA not before: Fri 02 Jan 2026 00:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203201 IP address blocks: 78.142.240.0/24 maxlen: 24 80.80.239.0/24 maxlen: 24 185.142.152.0/22 maxlen: 22 185.142.152.0/24 maxlen: 24 185.145.192.0/22 maxlen: 22 2a07:2e80::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.mft rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:76:b6:0e:f7:ad:f9:69:76:38:9f:84:90:ad:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeed878b81a9023940d4ec8c172d04d4c25586ca Validity Not Before: Jan 2 00:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db4d211a28a266c3c81728514b77e08b0ed30cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:7e:e6:13:61:6f:31:bd:c2:3d:b7:eb:75:00: 72:5d:02:b9:97:01:e0:78:fa:c7:47:2e:ec:86:a4: 99:57:2d:1c:ab:47:84:b0:b5:32:4c:9d:9b:3e:bf: 88:dc:d2:84:fe:1e:74:ce:45:16:05:d1:6b:8a:ad: 83:0c:8c:59:e0:fe:c0:fb:4f:16:45:df:18:b3:a0: 8e:e7:1c:35:d9:6f:c0:92:96:c4:1a:eb:06:24:71: 50:3a:90:7b:96:6a:1a:25:64:e2:ac:a0:cd:17:bc: dd:0b:9f:6b:f9:44:e7:89:71:7a:e1:a0:ec:8b:49: 86:c3:23:19:6f:cd:2a:14:65:98:33:78:96:df:ad: 80:e5:95:1a:79:0f:b7:01:25:9d:bc:69:e4:53:f3: df:fb:5d:04:ea:c9:a0:67:f5:7c:a3:47:97:a9:dd: 44:e7:a5:0a:48:1c:8a:5e:c6:61:f1:db:7f:ea:dd: 24:2d:1f:ab:fd:4b:3b:d5:cd:bf:71:5a:b9:e9:e0: 50:09:66:81:f9:c5:2c:46:2c:2d:73:4a:5b:58:7e: 76:ef:7a:fb:4f:3f:d6:4e:38:8d:73:f1:b7:69:a7: 85:db:f6:0c:63:56:92:53:3d:c6:e9:9b:81:ac:68: 26:ce:c3:a5:db:d3:16:64:f3:67:a4:31:31:a6:e0: 33:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4D:21:1A:28:A2:66:C3:C8:17:28:51:4B:77:E0:8B:0E:D3:0C:BD X509v3 Authority Key Identifier: keyid:EE:ED:87:8B:81:A9:02:39:40:D4:EC:8C:17:2D:04:D4:C2:55:86:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7u2Hi4GpAjlA1OyMFy0E1MJVhso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/200hGiiiZsPIFyhRS3fgiw7TDL0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/65ea96-e958-4bdb-b947-56c3624b8b1b/1/7u2Hi4GpAjlA1OyMFy0E1MJVhso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.142.240.0/24 80.80.239.0/24 185.142.152.0/22 185.145.192.0/22 IPv6: 2a07:2e80::/29 Signature Algorithm: sha256WithRSAEncryption 6f:e5:a0:0a:f4:8c:e4:02:97:c9:27:cc:fa:1e:b3:15:2b:99: 12:f5:5e:58:91:b1:9e:e5:1e:b5:77:77:14:59:b4:4d:7b:34: 63:07:2c:0c:f8:11:fb:00:91:3f:13:8c:65:96:13:f7:3a:dc: f2:c7:12:48:66:be:bc:c4:bf:26:e7:26:0a:c9:5e:2b:79:fd: 4c:52:84:63:b1:92:a9:ee:bd:bf:ed:0c:8f:21:aa:8c:27:f4: 14:82:de:ab:f3:e3:5d:c7:be:31:13:96:95:d8:a7:78:67:a4: 78:87:d6:e1:fb:86:e8:24:27:f4:1c:3a:c8:f7:8a:02:63:66: 1c:80:6f:85:1d:db:26:1c:d7:f9:5c:1c:ed:2d:32:d1:70:a9: 1b:db:9b:9f:e9:9d:0d:fa:d7:8c:51:50:22:a2:d6:34:fd:6c: ec:f4:b8:bb:6b:69:12:88:ec:fb:84:e1:98:28:14:8c:3d:03: 25:46:3b:89:4f:9d:ed:49:bd:61:c9:02:c8:25:62:b9:d4:37: 1e:77:e8:7b:79:1e:34:ed:4a:a4:40:18:ee:07:ab:98:f4:c2: b3:24:6b:2d:30:7d:97:ea:db:d2:d6:a4:7d:eb:49:8d:35:16: 42:95:27:30:eb:6f:db:cb:eb:65:85:33:54:09:56:06:23:21: 8b:83:a5:0b -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt8Ena2Dvet+Wl2OJ+EkK2/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZWQ4NzhiODFhOTAyMzk0MGQ0ZWM4YzE3MmQwNGQ0YzI1 NTg2Y2EwHhcNMjYwMTAyMDAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjRkMjExYTI4YTI2NmMzYzgxNzI4NTE0Yjc3ZTA4YjBlZDMwY2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9X7mE2FvMb3CPbfrdQByXQK5lwHg ePrHRy7shqSZVy0cq0eEsLUyTJ2bPr+I3NKE/h50zkUWBdFriq2DDIxZ4P7A+08W Rd8Ys6CO5xw12W/AkpbEGusGJHFQOpB7lmoaJWTirKDNF7zdC59r+UTniXF64aDs i0mGwyMZb80qFGWYM3iW362A5ZUaeQ+3ASWdvGnkU/Pf+10E6smgZ/V8o0eXqd1E 56UKSByKXsZh8dt/6t0kLR+r/Us71c2/cVq56eBQCWaB+cUsRiwtc0pbWH5273r7 Tz/WTjiNc/G3aaeF2/YMY1aSUz3G6ZuBrGgmzsOl29MWZPNnpDExpuAz8wIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFNtNIRooombDyBcoUUt34IsO0wy9MB8GA1UdIwQY MBaAFO7th4uBqQI5QNTsjBctBNTCVYbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3UySGk0R3BBamxBMU95TUZ5MEUxTUpWaHNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82NWVhOTYtZTk1OC00YmRiLWI5NDct NTZjMzYyNGI4YjFiLzEvMjAwaEdpaWlac1BJRnloUlMzZmdpdzdUREwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82NWVhOTYtZTk1OC00YmRiLWI5NDctNTZjMzYyNGI4YjFi LzEvN3UySGk0R3BBamxBMU95TUZ5MEUxTUpWaHNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQATo7wAwQA UFDvAwQCuY6YAwQCuZHAMA0EAgACMAcDBQMqBy6AMA0GCSqGSIb3DQEBCwUAA4IB AQBv5aAK9IzkApfJJ8z6HrMVK5kS9V5YkbGe5R61d3cUWbRNezRjBywM+BH7AJE/ E4xllhP3OtzyxxJIZr68xL8m5yYKyV4ref1MUoRjsZKp7r2/7QyPIaqMJ/QUgt6r 8+Ndx74xE5aV2Kd4Z6R4h9bh+4boJCf0HDrI94oCY2YcgG+FHdsmHNf5XBztLTLR cKkb25uf6Z0N+teMUVAiotY0/Wzs9Li7a2kSiOz7hOGYKBSMPQMlRjuJT53tSb1h yQLIJWK51Dced+h7eR407UqkQBjuB6uY9MKzJGstMH2X6tvS1qR960mNNRZClScw 62/by+tlhTNUCVYGIyGLg6UL -----END CERTIFICATE-----Generated at Mon Jan 26 14:52:22 2026 by rpki-client