This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/j-e1wLWwkYNEH_mHGzjTrPGwPbs.roa File: j-e1wLWwkYNEH_mHGzjTrPGwPbs.roa (raw, json) Hash identifier: RGRwab+JQui11JwlnGhKy39GsDfs0SBfmKm8SN7Maig= Subject key identifier: 8F:E7:B5:C0:B5:B0:91:83:44:1F:F9:87:1B:38:D3:AC:F1:B0:3D:BB Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019A6DE49BB7EC0C4806B046DB6789AC604F Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/j-e1wLWwkYNEH_mHGzjTrPGwPbs.roa Signing time: Mon 10 Nov 2025 13:11:29 +0000 ROA not before: Mon 10 Nov 2025 13:11:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 20911 IP address blocks: 78.128.36.0/22 maxlen: 24 78.128.40.0/24 maxlen: 24 79.124.9.0/24 maxlen: 24 80.72.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:6d:e4:9b:b7:ec:0c:48:06:b0:46:db:67:89:ac:60:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Nov 10 13:11:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8fe7b5c0b5b09183441ff9871b38d3acf1b03dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:37:84:37:15:86:4a:7a:ea:b4:37:8b:9b:33: 5e:b4:2d:ab:aa:f5:dc:eb:8a:92:6e:13:89:e6:ad: 67:91:dd:e5:43:0a:91:23:f4:22:d6:ba:10:17:d1: 28:f6:08:31:68:cd:fa:8e:82:de:db:0d:8a:9f:ea: 0d:f5:6e:2a:e6:5c:a7:c7:0d:44:8e:1a:5c:41:fd: 3d:dc:ad:d0:2f:1d:8c:67:4c:59:09:16:1f:9c:3d: de:ed:59:a7:44:3e:9b:8f:bf:bf:27:aa:35:a6:b6: ee:f6:a7:21:0a:8e:4a:6e:a9:e9:98:0c:23:6b:ec: 49:f0:ad:d2:7b:bb:38:a3:a6:47:5d:c9:3c:b1:98: 81:e5:cd:df:3b:fd:b1:b9:b1:ba:18:76:f4:03:c9: 9c:ad:20:4a:2c:ae:e9:5e:46:3d:5c:8d:f5:69:59: 25:5b:2e:42:a8:b2:5b:55:4f:3f:bb:4e:2c:6e:ac: 79:e9:73:5c:0a:89:6d:91:30:2c:36:4a:d6:b5:c3: 1c:b2:6c:20:8a:f3:52:1c:4d:85:4a:79:f6:26:16: e4:69:a8:15:c5:47:de:13:10:73:4f:48:cf:29:4f: fa:d1:bd:47:18:ae:ef:68:b5:3b:fe:68:fb:ad:2e: 6b:48:e7:48:eb:82:a0:d3:a3:01:d1:34:d0:2e:32: e9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E7:B5:C0:B5:B0:91:83:44:1F:F9:87:1B:38:D3:AC:F1:B0:3D:BB X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/j-e1wLWwkYNEH_mHGzjTrPGwPbs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.128.36.0-78.128.40.255 79.124.9.0/24 80.72.88.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:85:07:e5:3f:87:76:40:39:31:67:ad:21:f6:8d:2c:00:f8: 8a:3c:bc:08:13:85:b1:2a:fc:b0:d3:ba:52:1d:2c:c8:8d:8d: cb:98:48:93:28:2c:c8:fc:bd:32:89:cb:7b:6c:05:28:f5:2d: 5a:99:4e:80:8c:28:c7:4f:ba:2e:38:27:fa:c7:26:09:d3:dc: f8:3e:23:6d:75:53:c3:28:0f:50:31:4e:58:5f:df:47:6c:35: 42:f9:98:12:ec:e5:35:28:7c:69:c2:ee:5d:49:c8:e0:6f:a3: 53:be:ff:2c:ec:4d:30:f4:bf:20:4f:d0:eb:b0:ec:04:ae:f6: f6:07:5e:b9:b9:05:b7:0b:fd:32:40:f7:b5:fb:73:a4:db:c4: d5:92:a5:7d:8e:ba:dc:1d:94:6a:ab:60:58:61:61:a1:f2:2c: 8c:f4:b7:73:3c:52:c4:7e:18:1c:f7:e5:e3:f6:5e:f8:51:f0: 1d:96:16:01:12:f2:f6:be:30:9a:51:9c:03:b4:2d:c7:83:e5: 96:6e:64:8c:de:5c:f0:13:ac:86:e5:77:7f:57:c1:0b:e6:e5: 24:29:ca:d5:01:85:65:ef:62:c8:96:98:d7:54:18:e3:05:9f: de:a0:68:ed:d6:57:2a:df:c2:7b:8c:68:e5:26:36:10:63:d7: ac:56:4c:14 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZpt5Ju37AxIBrBG22eJrGBPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjUxMTEwMTMxMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmU3YjVjMGI1YjA5MTgzNDQxZmY5ODcxYjM4ZDNhY2YxYjAzZGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzeENxWGSnrqtDeLmzNetC2rqvXc 64qSbhOJ5q1nkd3lQwqRI/Qi1roQF9Eo9ggxaM36joLe2w2Kn+oN9W4q5lynxw1E jhpcQf093K3QLx2MZ0xZCRYfnD3e7VmnRD6bj7+/J6o1prbu9qchCo5KbqnpmAwj a+xJ8K3Se7s4o6ZHXck8sZiB5c3fO/2xubG6GHb0A8mcrSBKLK7pXkY9XI31aVkl Wy5CqLJbVU8/u04sbqx56XNcColtkTAsNkrWtcMcsmwgivNSHE2FSnn2JhbkaagV xUfeExBzT0jPKU/60b1HGK7vaLU7/mj7rS5rSOdI64Kg06MB0TTQLjLpgwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFI/ntcC1sJGDRB/5hxs406zxsD27MB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvai1lMXdMV3drWU5FSF9tSEd6alRyUEd3UGJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAJOgCQD BABOgCgDBABPfAkDBAJQSFgwDQYJKoZIhvcNAQELBQADggEBAJuFB+U/h3ZAOTFn rSH2jSwA+Io8vAgThbEq/LDTulIdLMiNjcuYSJMoLMj8vTKJy3tsBSj1LVqZToCM KMdPui44J/rHJgnT3Pg+I211U8MoD1AxTlhf30dsNUL5mBLs5TUofGnC7l1JyOBv o1O+/yzsTTD0vyBP0Ouw7ASu9vYHXrm5BbcL/TJA97X7c6TbxNWSpX2OutwdlGqr YFhhYaHyLIz0t3M8UsR+GBz35eP2XvhR8B2WFgES8va+MJpRnAO0LceD5ZZuZIze XPATrIbld39XwQvm5SQpytUBhWXvYsiWmNdUGOMFn96gaO3WVyrfwnuMaOUmNhBj 16xWTBQ= -----END CERTIFICATE-----Generated at Sat Dec 6 14:16:30 2025 by rpki-client