This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/1Gik3uokQgHgJGrEqX2lFkzr0cY.roa File: 1Gik3uokQgHgJGrEqX2lFkzr0cY.roa (raw, json) Hash identifier: Kk98fLYxI9U7uOT4mbQ7y0T5RVTRCELUDm+h4tCANjs= Subject key identifier: D4:68:A4:DE:EA:24:42:01:E0:24:6A:C4:A9:7D:A5:16:4C:EB:D1:C6 Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Certificate serial: 019B7F144404F8A45057CCA7AB461263F8F7 Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/1Gik3uokQgHgJGrEqX2lFkzr0cY.roa Signing time: Fri 02 Jan 2026 14:19:53 +0000 ROA not before: Fri 02 Jan 2026 14:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199234 IP address blocks: 78.159.94.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:44:04:f8:a4:50:57:cc:a7:ab:46:12:63:f8:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Validity Not Before: Jan 2 14:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d468a4deea244201e0246ac4a97da5164cebd1c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:57:15:5f:84:3e:59:55:1f:84:3d:65:ea:70: 76:50:01:30:50:bb:93:66:2e:e8:fa:43:25:4c:a3: 24:b8:ae:34:90:f9:3c:77:ab:ec:3c:b1:ec:c9:53: 8c:ea:ca:53:be:ec:07:77:4e:64:4d:b2:a5:f8:46: 8c:4c:59:7d:4e:db:8e:c0:78:cf:ef:55:a9:5e:3d: 84:6a:2b:a3:81:0c:43:d7:34:1b:26:8a:d7:2b:0c: 63:80:3c:3d:50:0b:ab:66:ff:41:67:85:13:5b:61: 91:42:9d:e2:51:d5:e6:54:55:f6:e5:13:58:e5:46: 8c:52:17:c3:ae:6f:0f:0f:b1:a2:f8:69:e6:36:11: b0:33:be:5b:5a:8a:75:12:82:b2:f6:6c:66:63:d9: e8:a0:b0:6c:2f:d8:09:36:d6:34:23:34:ab:cd:51: 2c:b7:42:58:9c:38:55:1a:b4:ba:b5:9b:52:28:4b: a7:41:62:37:ca:cf:10:f5:52:ea:aa:64:61:24:4c: 67:d4:b0:25:4d:80:26:65:48:3d:9b:4a:3e:ca:0e: 95:70:be:2d:ea:08:7b:60:26:25:80:eb:3d:d8:b7: e5:74:1f:43:7c:28:15:2c:fe:39:ba:79:6a:ed:de: 7c:f3:49:84:1c:b4:e2:5f:82:67:ac:92:39:c9:e2: c7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:68:A4:DE:EA:24:42:01:E0:24:6A:C4:A9:7D:A5:16:4C:EB:D1:C6 X509v3 Authority Key Identifier: keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/1Gik3uokQgHgJGrEqX2lFkzr0cY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.159.94.0/23 Signature Algorithm: sha256WithRSAEncryption 97:c0:ed:2e:86:d3:94:90:ae:aa:73:a4:26:0d:4e:ad:14:14: a0:db:b9:44:a1:9a:15:ca:37:8e:ea:08:3c:fd:69:6f:56:01: 58:6b:d6:df:33:aa:4e:ac:e7:e9:78:05:ef:07:b3:87:4e:59: e4:5b:6f:18:ec:04:dd:ea:f5:ac:91:68:65:73:1b:3c:13:b7: d0:96:b2:e9:33:c7:4a:f3:33:62:ce:aa:9b:bf:ea:40:f4:33: f8:d2:91:9d:3f:74:d2:39:3e:ad:58:4d:f0:af:02:01:19:a0: b3:a1:a0:c9:0d:e8:e8:b0:1e:bc:ab:b4:13:d9:1f:fc:6f:43: f1:56:93:53:91:4f:f3:33:74:5a:8d:1a:f5:11:9e:2f:fb:28: c9:ff:c1:9e:f3:34:47:8d:e4:a5:52:95:b3:66:0c:fb:51:3e: 18:4e:c6:9d:0c:b0:ef:f3:5f:17:b8:5c:ae:b1:28:e6:30:d1: 81:0e:2c:36:b0:e9:b0:aa:a6:5f:34:c2:75:6c:e7:af:02:f8: 75:05:99:6f:b9:ed:00:c8:51:48:19:37:28:f1:a4:40:9c:bf: 2f:ca:d2:1a:cf:b2:81:e9:bd:98:d5:13:d9:a5:3f:02:5d:95: f7:d3:90:05:3a:a1:0a:d3:75:7b:9f:c5:75:62:01:cc:e9:f2: e0:64:02:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FEQE+KRQV8ynq0YSY/j3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx YjUwMjEwHhcNMjYwMTAyMTQxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDY4YTRkZWVhMjQ0MjAxZTAyNDZhYzRhOTdkYTUxNjRjZWJkMWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlcVX4Q+WVUfhD1l6nB2UAEwULuT Zi7o+kMlTKMkuK40kPk8d6vsPLHsyVOM6spTvuwHd05kTbKl+EaMTFl9TtuOwHjP 71WpXj2EaiujgQxD1zQbJorXKwxjgDw9UAurZv9BZ4UTW2GRQp3iUdXmVFX25RNY 5UaMUhfDrm8PD7Gi+GnmNhGwM75bWop1EoKy9mxmY9nooLBsL9gJNtY0IzSrzVEs t0JYnDhVGrS6tZtSKEunQWI3ys8Q9VLqqmRhJExn1LAlTYAmZUg9m0o+yg6VcL4t 6gh7YCYlgOs92LfldB9DfCgVLP45unlq7d5880mEHLTiX4JnrJI5yeLHlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNRopN7qJEIB4CRqxKl9pRZM69HGMB8GA1UdIwQY MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt MTc2OTNlN2VhNjdhLzEvMUdpazN1b2tRZ0hnSkdyRXFYMmxGa3pyMGNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTp9eMA0G CSqGSIb3DQEBCwUAA4IBAQCXwO0uhtOUkK6qc6QmDU6tFBSg27lEoZoVyjeO6gg8 /WlvVgFYa9bfM6pOrOfpeAXvB7OHTlnkW28Y7ATd6vWskWhlcxs8E7fQlrLpM8dK 8zNizqqbv+pA9DP40pGdP3TSOT6tWE3wrwIBGaCzoaDJDejosB68q7QT2R/8b0Px VpNTkU/zM3RajRr1EZ4v+yjJ/8Ge8zRHjeSlUpWzZgz7UT4YTsadDLDv818XuFyu sSjmMNGBDiw2sOmwqqZfNMJ1bOevAvh1BZlvue0AyFFIGTco8aRAnL8vytIaz7KB 6b2Y1RPZpT8CXZX305AFOqEK03V7n8V1YgHM6fLgZALU -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:30 2026 by rpki-client