This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FyEIz7Rx6M8MDmcmNRtAEFPVd5Y.roa File: FyEIz7Rx6M8MDmcmNRtAEFPVd5Y.roa (raw, json) Hash identifier: Fnjl/FAgQW9OarRN3NIcUZIJrqf05Zp9X48uDF3IDuI= Subject key identifier: 17:21:08:CF:B4:71:E8:CF:0C:0E:67:26:35:1B:40:10:53:D5:77:96 Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Certificate serial: 019B78344EB4F099D446E72F4C3638023C16 Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FyEIz7Rx6M8MDmcmNRtAEFPVd5Y.roa Signing time: Thu 01 Jan 2026 06:17:32 +0000 ROA not before: Thu 01 Jan 2026 06:17:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29217 IP address blocks: 194.68.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:4e:b4:f0:99:d4:46:e7:2f:4c:36:38:02:3c:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b Validity Not Before: Jan 1 06:17:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=172108cfb471e8cf0c0e6726351b401053d57796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b8:c8:8b:9d:10:be:6c:fe:e5:e0:ca:ac:b7: ad:a8:45:2b:ca:c4:32:69:d3:f2:46:ae:5a:70:fc: 98:37:0b:a4:40:59:ea:c4:8f:37:8a:d2:a7:1e:39: 84:6f:7e:12:99:ab:ec:ce:bb:ba:a4:c2:24:5d:35: 08:df:56:7d:dd:8d:f3:0e:86:fd:ec:3f:5a:26:6e: a6:12:08:70:67:f1:83:3f:32:6c:6e:61:fa:cb:8c: 93:bd:a3:c2:7e:56:ba:8c:7c:d2:10:4e:14:84:f1: 9b:e2:bd:d7:e1:17:fb:bb:8e:39:38:37:58:9c:76: 33:58:6f:40:f5:a1:eb:4d:d2:c9:1a:2e:a7:ca:41: e1:b3:c9:11:7e:0f:40:1d:d0:94:2f:ca:0f:bb:c2: c7:87:38:9b:90:38:ba:b0:34:e5:4a:2a:4e:c5:cf: 75:ca:85:90:08:4c:a4:ff:e6:3f:81:42:3f:11:3b: 02:25:99:f6:42:e8:89:78:d2:8f:7e:34:07:4e:c3: ca:bc:21:b9:4a:75:a2:50:f1:42:ae:74:b3:0b:07: 46:30:0e:65:ac:cd:17:f0:2d:a0:5f:5f:75:d9:17: 64:31:fe:39:10:bd:10:d4:8d:e9:70:27:95:74:10: 15:63:3b:b7:a9:f5:03:fd:d9:2a:6a:ab:59:66:04: 78:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:21:08:CF:B4:71:E8:CF:0C:0E:67:26:35:1B:40:10:53:D5:77:96 X509v3 Authority Key Identifier: keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/FyEIz7Rx6M8MDmcmNRtAEFPVd5Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.68.78.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:75:f5:e4:53:f6:a7:fa:84:b9:9e:49:8c:7d:b2:c5:72:af: 79:c1:fc:06:94:c1:9f:af:ea:c6:28:b7:18:a0:56:d4:34:84: 5f:54:9f:13:37:b2:46:01:21:2b:20:49:09:37:d7:4f:09:d3: 6b:97:df:db:f8:d9:2f:c9:e1:e1:71:a0:1c:bf:23:73:53:9f: f2:24:1e:53:7b:bd:b1:c2:78:08:00:a1:34:31:ad:3f:d8:2d: 5a:b3:39:61:74:69:59:aa:e9:9f:a4:69:88:54:aa:65:20:25: 0c:70:fe:6a:98:9d:20:9a:88:02:d7:20:88:75:06:6a:f3:fa: b2:06:5b:9d:6c:85:3c:16:a1:4c:96:b2:d9:9f:35:86:bd:56: 6d:d9:0c:16:b1:e2:da:0f:15:38:b4:79:c6:be:e6:85:aa:06: 4a:c8:e9:e2:73:b9:15:4e:ef:70:4c:75:97:50:72:9d:fe:9d: d7:05:98:f0:16:29:36:c3:7a:e2:dc:ee:b8:39:1b:c8:01:2a: 24:78:a5:71:e1:86:4f:0a:8c:84:60:4b:3b:41:61:c0:72:e0: 50:3b:5e:fb:7e:f9:ca:be:83:61:d1:9f:78:8e:4e:71:6e:7f: c6:1d:49:f7:df:e8:8f:6e:d6:47:9a:b5:d5:d9:50:d8:14:61: 47:96:37:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NE608JnURucvTDY4AjwWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh ZGFmMWIwHhcNMjYwMTAxMDYxNzMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzIxMDhjZmI0NzFlOGNmMGMwZTY3MjYzNTFiNDAxMDUzZDU3Nzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrjIi50Qvmz+5eDKrLetqEUrysQy adPyRq5acPyYNwukQFnqxI83itKnHjmEb34Smavszru6pMIkXTUI31Z93Y3zDob9 7D9aJm6mEghwZ/GDPzJsbmH6y4yTvaPCfla6jHzSEE4UhPGb4r3X4Rf7u445ODdY nHYzWG9A9aHrTdLJGi6nykHhs8kRfg9AHdCUL8oPu8LHhzibkDi6sDTlSipOxc91 yoWQCEyk/+Y/gUI/ETsCJZn2QuiJeNKPfjQHTsPKvCG5SnWiUPFCrnSzCwdGMA5l rM0X8C2gX1912RdkMf45EL0Q1I3pcCeVdBAVYzu3qfUD/dkqaqtZZgR4+QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBchCM+0cejPDA5nJjUbQBBT1XeWMB8GA1UdIwQY MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt OTQzZDAzMzIxMzI2LzEvRnlFSXo3Ung2TThNRG1jbU5SdEFFRlBWZDVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2 LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkROMA0G CSqGSIb3DQEBCwUAA4IBAQAddfXkU/an+oS5nkmMfbLFcq95wfwGlMGfr+rGKLcY oFbUNIRfVJ8TN7JGASErIEkJN9dPCdNrl9/b+NkvyeHhcaAcvyNzU5/yJB5Te72x wngIAKE0Ma0/2C1aszlhdGlZqumfpGmIVKplICUMcP5qmJ0gmogC1yCIdQZq8/qy BludbIU8FqFMlrLZnzWGvVZt2QwWseLaDxU4tHnGvuaFqgZKyOnic7kVTu9wTHWX UHKd/p3XBZjwFik2w3ri3O64ORvIASokeKVx4YZPCoyEYEs7QWHAcuBQO177fvnK voNh0Z94jk5xbn/GHUn33+iPbtZHmrXV2VDYFGFHljev -----END CERTIFICATE-----Generated at Sun Jan 25 12:06:06 2026 by rpki-client