This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/FHznUXLD8rFTI78uN7oxhc4DhSU.roa File: FHznUXLD8rFTI78uN7oxhc4DhSU.roa (raw, json) Hash identifier: b+nymXPjgks3IFJ/o1An5mcttD+ZdDuxy6fPoMhsETE= Subject key identifier: 14:7C:E7:51:72:C3:F2:B1:53:23:BF:2E:37:BA:31:85:CE:03:85:25 Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Certificate serial: 019B7F14486624D9956E679EDCA46CB9E170 Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/FHznUXLD8rFTI78uN7oxhc4DhSU.roa Signing time: Fri 02 Jan 2026 14:19:54 +0000 ROA not before: Fri 02 Jan 2026 14:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207033 IP address blocks: 78.159.84.0/24 maxlen: 24 92.55.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:48:66:24:d9:95:6e:67:9e:dc:a4:6c:b9:e1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Validity Not Before: Jan 2 14:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=147ce75172c3f2b15323bf2e37ba3185ce038525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:80:8d:c0:2b:68:38:bf:5b:35:bc:94:b8:fe: 39:7a:2b:70:59:e2:f0:6c:b5:90:05:a7:c1:5a:26: ea:b3:20:6f:05:01:da:f1:d1:b9:86:cd:9d:f5:e5: c8:53:b7:52:a5:b7:62:3a:9a:b3:db:03:73:b9:a9: 17:e2:94:f8:b9:78:55:e8:cf:2f:32:22:02:c0:e8: bb:05:f9:c2:38:8b:12:09:ae:03:f9:fc:fa:5b:5a: 6a:bf:6a:6b:f3:8c:d1:9e:5e:79:ed:57:1a:06:8c: b6:51:fc:6e:c2:ea:15:60:4c:f4:27:0e:f0:a2:c1: 7c:25:b5:f8:c9:da:e1:cf:9d:df:a5:ed:e2:1f:d9: f7:c9:0e:9a:1c:26:5c:ad:81:3a:17:80:53:fb:1a: 08:05:6d:82:b6:a9:6e:ee:4d:9f:5a:96:7e:b7:5c: 40:4f:d8:f7:e2:f3:d0:de:14:f7:42:9c:bf:a5:f2: 51:04:4f:d4:62:9f:66:de:fc:9e:89:53:3f:95:b1: d6:30:96:64:8b:7f:cd:9d:0a:82:d8:03:57:b4:c7: 3c:78:0d:37:fa:9d:df:67:f6:c5:f8:0e:ec:a2:0e: 33:65:2e:82:3c:0b:b5:14:72:a7:a3:4d:26:19:74: c5:a0:1c:a8:b3:59:a9:cd:82:ad:b1:6a:31:88:af: 2c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7C:E7:51:72:C3:F2:B1:53:23:BF:2E:37:BA:31:85:CE:03:85:25 X509v3 Authority Key Identifier: keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/FHznUXLD8rFTI78uN7oxhc4DhSU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.159.84.0/24 92.55.224.0/24 Signature Algorithm: sha256WithRSAEncryption a6:03:ba:dc:2c:04:f9:2f:65:7c:d5:b2:a6:9f:f5:2f:82:fe: cd:f1:92:1e:b7:5d:73:a9:24:c1:0d:29:bb:b2:f8:24:41:93: c6:50:81:c1:60:50:50:ad:c8:29:87:04:03:b6:29:32:97:05: 0e:22:87:06:0b:80:e7:02:d4:c6:b4:63:31:ca:11:fa:e6:7a: 31:65:b0:ea:62:56:20:75:14:86:70:c6:28:8b:23:34:12:6a: 53:1d:04:7f:a1:a4:b1:2f:05:49:ad:2b:13:b9:5a:79:0f:41: 12:ec:10:42:de:48:74:9a:c7:88:9e:4a:4f:ef:a8:b5:65:e3: 2f:f1:f8:62:f1:c0:3e:a8:a0:88:09:21:48:93:e4:01:9d:c7: cd:de:1a:e9:8b:ef:9f:e3:02:61:3c:fc:92:48:ae:fb:20:2f: ee:ab:04:d7:28:52:3d:77:3d:a9:db:3c:c0:16:62:3d:a5:ef: 24:50:93:39:83:8d:11:6a:16:07:7d:7c:56:84:39:4d:8e:44: 4b:c7:36:d4:21:2a:d0:87:eb:8d:ef:24:8a:b9:95:bb:54:f9: b5:91:0c:ad:4c:85:18:bf:00:ad:de:a2:a2:8d:67:c9:73:c7: bd:7d:d2:93:d6:51:a9:3e:7f:99:c5:47:50:ab:99:4c:55:26: 29:9c:1a:da -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FEhmJNmVbmee3KRsueFwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx YjUwMjEwHhcNMjYwMTAyMTQxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNDdjZTc1MTcyYzNmMmIxNTMyM2JmMmUzN2JhMzE4NWNlMDM4NTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvICNwCtoOL9bNbyUuP45eitwWeLw bLWQBafBWibqsyBvBQHa8dG5hs2d9eXIU7dSpbdiOpqz2wNzuakX4pT4uXhV6M8v MiICwOi7BfnCOIsSCa4D+fz6W1pqv2pr84zRnl557VcaBoy2UfxuwuoVYEz0Jw7w osF8JbX4ydrhz53fpe3iH9n3yQ6aHCZcrYE6F4BT+xoIBW2Ctqlu7k2fWpZ+t1xA T9j34vPQ3hT3Qpy/pfJRBE/UYp9m3vyeiVM/lbHWMJZki3/NnQqC2ANXtMc8eA03 +p3fZ/bF+A7sog4zZS6CPAu1FHKno00mGXTFoByos1mpzYKtsWoxiK8sywIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBR851Fyw/KxUyO/Lje6MYXOA4UlMB8GA1UdIwQY MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt MTc2OTNlN2VhNjdhLzEvRkh6blVYTEQ4ckZUSTc4dU43b3hoYzREaFNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATp9UAwQA XDfgMA0GCSqGSIb3DQEBCwUAA4IBAQCmA7rcLAT5L2V81bKmn/Uvgv7N8ZIet11z qSTBDSm7svgkQZPGUIHBYFBQrcgphwQDtikylwUOIocGC4DnAtTGtGMxyhH65nox ZbDqYlYgdRSGcMYoiyM0EmpTHQR/oaSxLwVJrSsTuVp5D0ES7BBC3kh0mseInkpP 76i1ZeMv8fhi8cA+qKCICSFIk+QBncfN3hrpi++f4wJhPPySSK77IC/uqwTXKFI9 dz2p2zzAFmI9pe8kUJM5g40RahYHfXxWhDlNjkRLxzbUISrQh+uN7ySKuZW7VPm1 kQytTIUYvwCt3qKijWfJc8e9fdKT1lGpPn+ZxUdQq5lMVSYpnBra -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:37 2026 by rpki-client