This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/Dol2l9Rfy0dxVu3AOYUz7eY8PRE.roa File: Dol2l9Rfy0dxVu3AOYUz7eY8PRE.roa (raw, json) Hash identifier: 5IPdnacUry/jeLV3YhfaDu6Wg2YGyXm/oHlA8O6l+z8= Subject key identifier: 0E:89:76:97:D4:5F:CB:47:71:56:ED:C0:39:85:33:ED:E6:3C:3D:11 Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Certificate serial: 019B7F1444E68A71EDAC70D020EB99FCEA02 Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/Dol2l9Rfy0dxVu3AOYUz7eY8PRE.roa Signing time: Fri 02 Jan 2026 14:19:53 +0000 ROA not before: Fri 02 Jan 2026 14:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203287 IP address blocks: 78.159.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:44:e6:8a:71:ed:ac:70:d0:20:eb:99:fc:ea:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Validity Not Before: Jan 2 14:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e897697d45fcb477156edc0398533ede63c3d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fa:6f:73:e9:af:17:af:ce:dd:dd:87:b4:3a: d4:6e:20:95:ca:c8:ce:72:2c:37:19:b4:39:3e:eb: 4a:7b:48:49:e9:9e:86:d3:58:f5:e1:fa:5d:50:80: 66:d7:97:e5:27:c5:1e:0c:41:df:62:b0:e5:5b:89: 78:86:c5:51:93:ab:4f:2e:81:e1:6d:09:d6:0b:7d: d8:17:ec:b1:15:f0:d1:48:7c:7c:4c:32:e8:3d:cf: a2:a2:2a:e7:5e:87:24:d9:89:46:89:3d:3b:5c:7e: 9a:8b:32:32:f9:0b:e7:e5:44:f1:a9:a6:a8:6c:df: 12:39:1d:99:28:70:23:0c:1d:b7:f7:1e:08:da:85: c2:cf:40:c4:26:c6:f0:bb:41:6a:a9:e0:8e:fd:90: 13:07:7a:65:09:91:65:4e:d3:d8:1f:ce:dc:90:90: fd:1d:c9:5b:7e:84:64:77:86:ff:26:3f:e6:05:06: 08:71:6b:1c:49:9c:30:d6:89:fc:5a:89:ab:f6:b0: 36:56:05:a2:0a:e7:8f:05:c0:7c:5e:72:d8:9c:a4: 93:dd:31:49:79:86:f2:be:e6:99:97:64:bb:52:58: 8a:58:5a:21:0d:8a:19:2b:d2:f2:29:b5:42:28:95: f9:1e:54:9c:54:8b:35:5b:21:1c:94:10:df:c6:23: 88:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:89:76:97:D4:5F:CB:47:71:56:ED:C0:39:85:33:ED:E6:3C:3D:11 X509v3 Authority Key Identifier: keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/Dol2l9Rfy0dxVu3AOYUz7eY8PRE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.159.85.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:25:42:44:e1:b5:1c:d0:be:08:94:59:5e:d2:19:53:42:5d: 92:15:89:94:bf:c7:b3:f1:e9:65:41:0a:de:b5:f3:9d:55:88: c2:14:e5:20:16:c8:0a:07:2a:5e:98:92:7b:55:a5:f9:41:ab: 26:b0:9c:9e:81:39:7a:78:9f:43:6d:17:43:d9:de:72:42:0b: a0:e1:7a:b0:64:fd:e7:d8:49:74:8b:9b:c1:12:3d:53:22:9c: f7:be:4e:8d:3c:3d:07:22:48:58:0c:91:19:be:b9:1c:d0:f0: ec:d2:e1:5f:bc:fa:9c:b9:c0:1e:d3:30:b5:d3:8a:8e:1f:9a: ec:7d:1a:fe:a5:b6:5d:d8:25:e3:0a:30:15:57:a0:36:b7:a7: c9:4b:2e:7a:99:09:7d:e7:85:1d:07:c4:5d:81:4a:2a:41:0c: 02:f1:93:47:61:b4:87:74:86:b1:27:90:8c:d0:1d:4f:9d:f2: 90:b6:ea:d2:90:e8:9b:ec:2f:a1:bc:fc:8b:cc:47:46:9b:9e: 1b:44:28:ef:9f:52:89:87:a9:0b:29:c4:32:95:4c:e9:d5:d9: e0:3a:7f:0f:ff:20:e7:22:14:04:be:8a:f0:55:b6:d2:a6:2a: a4:32:eb:57:ed:85:58:d3:59:60:3f:88:89:63:d8:c3:f8:e6: 87:6b:65:3a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FETminHtrHDQIOuZ/OoCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx YjUwMjEwHhcNMjYwMTAyMTQxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTg5NzY5N2Q0NWZjYjQ3NzE1NmVkYzAzOTg1MzNlZGU2M2MzZDExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfpvc+mvF6/O3d2HtDrUbiCVysjO ciw3GbQ5PutKe0hJ6Z6G01j14fpdUIBm15flJ8UeDEHfYrDlW4l4hsVRk6tPLoHh bQnWC33YF+yxFfDRSHx8TDLoPc+ioirnXock2YlGiT07XH6aizIy+Qvn5UTxqaao bN8SOR2ZKHAjDB239x4I2oXCz0DEJsbwu0FqqeCO/ZATB3plCZFlTtPYH87ckJD9 HclbfoRkd4b/Jj/mBQYIcWscSZww1on8Womr9rA2VgWiCuePBcB8XnLYnKST3TFJ eYbyvuaZl2S7UliKWFohDYoZK9LyKbVCKJX5HlScVIs1WyEclBDfxiOITwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFA6JdpfUX8tHcVbtwDmFM+3mPD0RMB8GA1UdIwQY MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt MTc2OTNlN2VhNjdhLzEvRG9sMmw5UmZ5MGR4VnUzQU9ZVXo3ZVk4UFJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATp9VMA0G CSqGSIb3DQEBCwUAA4IBAQA+JUJE4bUc0L4IlFle0hlTQl2SFYmUv8ez8ellQQre tfOdVYjCFOUgFsgKBypemJJ7VaX5QasmsJyegTl6eJ9DbRdD2d5yQgug4XqwZP3n 2El0i5vBEj1TIpz3vk6NPD0HIkhYDJEZvrkc0PDs0uFfvPqcucAe0zC104qOH5rs fRr+pbZd2CXjCjAVV6A2t6fJSy56mQl954UdB8RdgUoqQQwC8ZNHYbSHdIaxJ5CM 0B1PnfKQturSkOib7C+hvPyLzEdGm54bRCjvn1KJh6kLKcQylUzp1dngOn8P/yDn IhQEvorwVbbSpiqkMutX7YVY01lgP4iJY9jD+OaHa2U6 -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:45 2026 by rpki-client