This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/Q8xfZWaRSUr-qefF7BhmHKjMl3s.roa File: Q8xfZWaRSUr-qefF7BhmHKjMl3s.roa (raw, json) Hash identifier: HJ9iHQ4hdTkZ4JJds6Vw/2RFkXgvBx/DD5d+J3cy7Ts= Subject key identifier: 43:CC:5F:65:66:91:49:4A:FE:A9:E7:C5:EC:18:66:1C:A8:CC:97:7B Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Certificate serial: 019B7F1449C3E41C404F8CCAB8CEF4E56318 Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/Q8xfZWaRSUr-qefF7BhmHKjMl3s.roa Signing time: Fri 02 Jan 2026 14:19:54 +0000 ROA not before: Fri 02 Jan 2026 14:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211254 IP address blocks: 78.159.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:49:c3:e4:1c:40:4f:8c:ca:b8:ce:f4:e5:63:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Validity Not Before: Jan 2 14:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=43cc5f656691494afea9e7c5ec18661ca8cc977b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:03:26:0a:d7:42:b8:d0:88:b1:c1:cb:d6:bd: d1:13:a4:53:7c:d9:80:0d:db:ed:1f:a6:21:7d:23: 29:18:5f:28:91:e0:95:db:da:34:58:6e:e7:84:d9: 03:8e:de:fe:b3:2b:03:5e:50:3f:8d:7f:8d:e6:95: 2e:d8:c4:d0:7d:59:a1:30:2b:e7:39:79:0b:e4:ce: 54:b2:88:44:3b:e5:c4:7e:29:32:af:2e:a4:53:60: ba:82:e8:0f:3c:7a:51:f6:de:6c:a1:a0:72:5e:35: e1:e4:a1:34:dc:6c:81:28:f9:49:d7:a2:e9:86:22: 05:20:f9:36:48:fd:d0:1d:d0:4f:cc:e6:df:a8:bd: ad:ed:6d:a2:9e:a0:9f:51:0d:36:69:34:db:20:a3: 1d:68:03:45:96:02:5b:17:a9:f8:ac:49:56:37:63: 81:af:14:b9:a5:fa:32:41:ba:2a:26:29:60:53:a7: 50:1a:af:c1:31:e8:d9:d5:fe:81:79:3b:5a:89:33: 3d:65:5e:e9:7b:ac:40:51:0b:6a:85:fe:75:36:5c: 25:5c:46:3b:e9:80:9a:9b:a3:5b:74:0f:0e:b7:56: fd:87:97:3f:46:e1:ec:13:9f:f5:aa:27:f7:27:1c: 2d:02:02:88:a7:d2:27:5b:5e:d3:60:bb:47:ff:84: 44:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CC:5F:65:66:91:49:4A:FE:A9:E7:C5:EC:18:66:1C:A8:CC:97:7B X509v3 Authority Key Identifier: keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/Q8xfZWaRSUr-qefF7BhmHKjMl3s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.159.80.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:83:5d:fe:28:44:4d:11:80:3a:7a:6b:20:19:6c:dc:10:76: 5d:1e:17:85:e3:41:b7:ea:9f:ee:a8:dc:7c:ec:f3:cb:23:e5: 46:35:3c:d9:60:59:40:78:f9:db:11:03:3c:80:82:95:b3:a1: 95:3a:bc:f5:7e:7a:52:3c:c3:92:cc:e8:1c:e5:e3:9c:56:44: dd:f2:1b:31:56:a6:92:ef:88:f5:48:1d:c4:a1:c0:43:a3:d9: d0:61:f3:13:78:b1:bd:3f:d0:d1:15:9c:28:47:bd:a4:d9:80: a5:1d:87:c7:11:94:a9:8e:2a:df:c1:84:c6:e5:98:0a:53:65: 70:57:aa:ce:a1:a1:58:14:c9:00:88:dc:75:dc:57:59:a9:c8: ed:8f:d2:bf:d5:42:09:e6:fd:95:2a:f9:66:57:5f:f4:ab:e6: bb:07:a7:82:3c:2b:6e:49:a8:ae:96:58:0e:ed:fb:be:e7:93: 2a:40:f5:43:ba:40:c1:f6:53:5a:c3:1e:f3:bb:4f:1e:15:cd: 47:dc:1d:8a:9b:01:1b:16:dc:6a:33:cd:7f:eb:4c:78:d6:02: 25:01:84:29:95:64:e9:42:2c:da:2f:c2:59:72:43:d5:98:40: 72:64:9d:11:d2:63:55:87:ff:e1:05:03:72:4e:ed:07:70:f3: 26:ba:d7:2a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FEnD5BxAT4zKuM705WMYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx YjUwMjEwHhcNMjYwMTAyMTQxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0M2NjNWY2NTY2OTE0OTRhZmVhOWU3YzVlYzE4NjYxY2E4Y2M5NzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AMmCtdCuNCIscHL1r3RE6RTfNmA DdvtH6YhfSMpGF8okeCV29o0WG7nhNkDjt7+sysDXlA/jX+N5pUu2MTQfVmhMCvn OXkL5M5UsohEO+XEfikyry6kU2C6gugPPHpR9t5soaByXjXh5KE03GyBKPlJ16Lp hiIFIPk2SP3QHdBPzObfqL2t7W2inqCfUQ02aTTbIKMdaANFlgJbF6n4rElWN2OB rxS5pfoyQboqJilgU6dQGq/BMejZ1f6BeTtaiTM9ZV7pe6xAUQtqhf51NlwlXEY7 6YCam6NbdA8Ot1b9h5c/RuHsE5/1qif3JxwtAgKIp9InW17TYLtH/4REuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEPMX2VmkUlK/qnnxewYZhyozJd7MB8GA1UdIwQY MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt MTc2OTNlN2VhNjdhLzEvUTh4ZlpXYVJTVXItcWVmRjdCaG1IS2pNbDNzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATp9QMA0G CSqGSIb3DQEBCwUAA4IBAQArg13+KERNEYA6emsgGWzcEHZdHheF40G36p/uqNx8 7PPLI+VGNTzZYFlAePnbEQM8gIKVs6GVOrz1fnpSPMOSzOgc5eOcVkTd8hsxVqaS 74j1SB3EocBDo9nQYfMTeLG9P9DRFZwoR72k2YClHYfHEZSpjirfwYTG5ZgKU2Vw V6rOoaFYFMkAiNx13FdZqcjtj9K/1UIJ5v2VKvlmV1/0q+a7B6eCPCtuSaiullgO 7fu+55MqQPVDukDB9lNawx7zu08eFc1H3B2KmwEbFtxqM81/60x41gIlAYQplWTp QizaL8JZckPVmEByZJ0R0mNVh//hBQNyTu0HcPMmutcq -----END CERTIFICATE-----Generated at Sun Jan 25 23:03:54 2026 by rpki-client