This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/34lSajmzV7ghbV2u1KSVPerBr80.roa File: 34lSajmzV7ghbV2u1KSVPerBr80.roa (raw, json) Hash identifier: NamtEVy8eAOlAQdliJbJze4twHs6pp1lCvXKU+23zoI= Subject key identifier: DF:89:52:6A:39:B3:57:B8:21:6D:5D:AE:D4:A4:95:3D:EA:C1:AF:CD Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Certificate serial: 019B7F14492FEACDD97454904A766A0B8E56 Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/34lSajmzV7ghbV2u1KSVPerBr80.roa Signing time: Fri 02 Jan 2026 14:19:54 +0000 ROA not before: Fri 02 Jan 2026 14:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207217 IP address blocks: 78.159.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:49:2f:ea:cd:d9:74:54:90:4a:76:6a:0b:8e:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Validity Not Before: Jan 2 14:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df89526a39b357b8216d5daed4a4953deac1afcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:77:e5:a8:b9:28:38:1a:21:c6:0d:14:8d:b1: 77:4c:1a:f2:23:ea:24:ec:ad:fb:81:20:14:fc:66: d6:5e:6c:68:13:a3:70:99:18:b3:5b:76:74:92:16: 6d:8c:bc:74:3d:06:0b:0f:f8:c5:a3:41:37:71:08: 26:fa:11:68:07:db:e7:a4:aa:00:01:21:e3:99:60: 41:ed:62:a7:cd:71:a6:0f:c2:12:d5:e9:70:ac:dd: bc:ac:26:94:e1:f0:64:d5:54:5b:70:06:e0:ec:04: 33:0a:8f:b2:ea:1a:e4:27:1e:df:d6:a6:d1:88:c2: 0a:2b:0a:80:51:20:4c:4a:77:98:1b:de:52:09:3c: 15:05:ea:f5:f1:85:da:cb:5c:96:4d:c8:7d:ab:44: 1d:ac:6a:88:7f:fe:8a:ca:2a:f5:53:c5:64:aa:d1: 06:d9:21:46:10:81:ed:92:e0:3a:1e:05:da:97:59: 35:0c:c1:db:af:c3:b1:62:df:d5:6b:e1:2a:5b:37: 11:76:0b:a1:28:35:56:ef:b1:48:98:eb:6d:30:3e: 3e:1f:17:a1:cc:f4:02:fd:fd:13:fc:c4:78:51:c4: 5e:e5:c6:60:ac:b2:f1:2e:8d:37:4a:07:07:21:e9: 91:b0:97:fc:33:b3:b1:52:7b:da:7c:c8:6f:01:0d: 93:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:89:52:6A:39:B3:57:B8:21:6D:5D:AE:D4:A4:95:3D:EA:C1:AF:CD X509v3 Authority Key Identifier: keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/34lSajmzV7ghbV2u1KSVPerBr80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.159.93.0/24 Signature Algorithm: sha256WithRSAEncryption 16:45:77:d0:1a:96:6a:d9:f8:6c:d6:42:67:35:d4:75:d8:b8: 35:88:d9:e1:d6:20:2c:98:7f:f6:f0:05:7a:ff:d4:07:92:40: bc:21:1b:ca:40:a1:fe:4d:98:3e:c8:c6:b3:f7:1f:0d:05:3b: ba:76:97:2e:c1:0e:ab:12:79:64:4a:ae:df:7b:6e:5d:7d:e2: 85:45:69:59:95:79:15:c2:7e:41:dc:2b:bc:7e:e8:34:52:e2: cf:ec:33:c5:e3:f9:e5:be:88:46:89:88:62:f5:ca:25:64:5f: 70:da:db:e5:a4:44:ca:d0:59:3a:08:db:51:1b:3b:d0:cc:9c: 7e:db:22:69:e8:ff:90:75:d8:9b:85:e2:3c:09:0f:25:f6:4e: 4a:fb:4a:d2:f8:dc:00:ab:e0:9e:97:75:2d:98:f9:10:db:46: 08:1e:5d:76:79:0c:a2:15:60:76:70:0d:5f:f9:90:f3:d4:af: 91:2e:14:12:c2:46:89:34:07:54:e8:79:ea:3a:de:87:f2:8d: 74:e8:69:8e:61:d3:f0:f7:b7:6b:b0:9c:97:b8:6b:d6:9d:e1: bb:30:c9:d3:39:ea:99:19:b4:c1:21:c7:39:47:40:0e:d3:fd: 91:0e:f9:ce:74:5a:23:c2:60:c7:81:b3:4e:7f:96:cd:4e:b4: 84:26:b4:85 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FEkv6s3ZdFSQSnZqC45WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx YjUwMjEwHhcNMjYwMTAyMTQxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjg5NTI2YTM5YjM1N2I4MjE2ZDVkYWVkNGE0OTUzZGVhYzFhZmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3flqLkoOBohxg0UjbF3TBryI+ok 7K37gSAU/GbWXmxoE6NwmRizW3Z0khZtjLx0PQYLD/jFo0E3cQgm+hFoB9vnpKoA ASHjmWBB7WKnzXGmD8IS1elwrN28rCaU4fBk1VRbcAbg7AQzCo+y6hrkJx7f1qbR iMIKKwqAUSBMSneYG95SCTwVBer18YXay1yWTch9q0QdrGqIf/6Kyir1U8VkqtEG 2SFGEIHtkuA6HgXal1k1DMHbr8OxYt/Va+EqWzcRdguhKDVW77FImOttMD4+Hxeh zPQC/f0T/MR4UcRe5cZgrLLxLo03SgcHIemRsJf8M7OxUnvafMhvAQ2TdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN+JUmo5s1e4IW1drtSklT3qwa/NMB8GA1UdIwQY MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt MTc2OTNlN2VhNjdhLzEvMzRsU2FqbXpWN2doYlYydTFLU1ZQZXJCcjgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATp9dMA0G CSqGSIb3DQEBCwUAA4IBAQAWRXfQGpZq2fhs1kJnNdR12Lg1iNnh1iAsmH/28AV6 /9QHkkC8IRvKQKH+TZg+yMaz9x8NBTu6dpcuwQ6rEnlkSq7fe25dfeKFRWlZlXkV wn5B3Cu8fug0UuLP7DPF4/nlvohGiYhi9colZF9w2tvlpETK0Fk6CNtRGzvQzJx+ 2yJp6P+QddibheI8CQ8l9k5K+0rS+NwAq+Cel3UtmPkQ20YIHl12eQyiFWB2cA1f +ZDz1K+RLhQSwkaJNAdU6HnqOt6H8o106GmOYdPw97drsJyXuGvWneG7MMnTOeqZ GbTBIcc5R0AO0/2RDvnOdFojwmDHgbNOf5bNTrSEJrSF -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:21 2026 by rpki-client