This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/R9KDbq4_KK0GlGPdLMfTos0CBjE.roa File: R9KDbq4_KK0GlGPdLMfTos0CBjE.roa (raw, json) Hash identifier: QHS2bULmvFoSCrqKfTl/c1ypYsSyCSgswpWvIKsISSU= Subject key identifier: 47:D2:83:6E:AE:3F:28:AD:06:94:63:DD:2C:C7:D3:A2:CD:02:06:31 Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Certificate serial: 019B7F1446B1B4ECC4D88F50A013806C1DFD Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/R9KDbq4_KK0GlGPdLMfTos0CBjE.roa Signing time: Fri 02 Jan 2026 14:19:53 +0000 ROA not before: Fri 02 Jan 2026 14:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203828 IP address blocks: 78.159.89.0/24 maxlen: 24 78.159.90.0/24 maxlen: 24 78.159.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:46:b1:b4:ec:c4:d8:8f:50:a0:13:80:6c:1d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Validity Not Before: Jan 2 14:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47d2836eae3f28ad069463dd2cc7d3a2cd020631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d0:41:2a:e1:c9:b9:38:3b:aa:88:f6:39:a7: e0:27:2b:c4:7a:29:9b:f0:45:f2:4c:52:e4:13:88: 07:9c:ae:46:d6:34:74:6a:72:94:fb:f3:9c:d3:93: ab:6c:b7:5d:7d:1d:94:fa:86:4e:61:b8:ad:31:96: 2b:9f:21:99:44:6f:23:69:51:fe:52:d5:ac:6e:f4: 54:68:28:df:22:cb:91:ee:1d:c1:d2:e3:e5:0f:de: cd:09:c2:64:a1:fa:55:06:f3:de:bb:cd:be:00:c2: df:87:2d:a8:5b:af:1c:45:8c:44:f6:99:5d:16:c6: b0:e0:22:f7:80:12:08:a8:e7:32:65:1a:65:04:ed: c6:64:90:6f:1a:74:34:be:03:75:a2:6c:dc:18:25: 8c:bf:2b:ee:8e:cb:a6:de:38:96:02:94:64:43:27: f5:f3:bc:71:06:35:07:f7:75:81:cb:46:7a:3b:64: 10:bc:9b:c7:e0:2e:07:f4:ef:5c:d2:7a:95:b9:f5: 48:41:3a:7a:1f:ce:0d:ab:25:51:26:2c:8c:d4:34: bb:2a:71:06:be:d6:04:eb:8d:ef:99:cc:88:8b:1d: d0:38:18:4d:1a:9f:88:da:04:cd:a7:34:2f:c1:d3: 63:3e:12:c7:2a:d6:e7:55:4b:ba:43:ac:81:dd:0f: 80:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D2:83:6E:AE:3F:28:AD:06:94:63:DD:2C:C7:D3:A2:CD:02:06:31 X509v3 Authority Key Identifier: keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/R9KDbq4_KK0GlGPdLMfTos0CBjE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.159.89.0-78.159.91.255 Signature Algorithm: sha256WithRSAEncryption 36:5a:2a:7b:96:dd:65:fe:7d:d6:71:e1:3b:e3:62:ba:4e:2d: cf:4b:ea:e2:d6:21:dd:c3:91:4b:22:60:90:e2:55:63:46:18: 65:59:f4:b9:ca:42:df:32:61:fe:9e:8f:17:98:b1:a4:ed:08: 70:65:a8:16:5f:e4:8e:05:89:ce:5a:e1:dd:9c:15:d5:91:d1: 3c:d3:bd:b2:54:a0:0c:7a:fb:ca:97:c2:25:aa:ce:13:0b:cc: 2a:4d:4c:d2:6e:cf:96:3f:3d:63:7a:0b:7e:07:30:c8:96:af: c7:25:17:8b:e5:e0:a3:ba:53:10:36:57:1c:30:6c:b3:de:bb: d9:34:9c:fa:73:25:43:86:5e:75:7b:9b:41:04:ad:f7:b0:f8: 9a:44:c8:24:79:d1:b5:cf:6b:a5:f4:07:bc:51:03:17:8e:19: d0:91:d1:a1:7e:20:c7:56:93:5b:84:15:fd:fc:83:c2:bc:96: 11:e4:01:71:38:51:3e:ac:0b:81:f9:81:c2:d8:79:39:ee:07: 34:80:4c:3a:9a:d6:3b:72:3c:eb:80:cc:e3:fc:b3:13:f3:cd: f6:0a:ec:c9:35:3e:2f:7d:96:20:91:e4:13:7b:9f:86:cf:a1: b3:0c:26:0e:66:89:44:9d:42:ad:2e:eb:b0:2f:3d:b6:a6:3b: df:41:68:de -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt/FEaxtOzE2I9QoBOAbB39MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx YjUwMjEwHhcNMjYwMTAyMTQxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2QyODM2ZWFlM2YyOGFkMDY5NDYzZGQyY2M3ZDNhMmNkMDIwNjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2NBBKuHJuTg7qoj2OafgJyvEeimb 8EXyTFLkE4gHnK5G1jR0anKU+/Oc05OrbLddfR2U+oZOYbitMZYrnyGZRG8jaVH+ UtWsbvRUaCjfIsuR7h3B0uPlD97NCcJkofpVBvPeu82+AMLfhy2oW68cRYxE9pld Fsaw4CL3gBIIqOcyZRplBO3GZJBvGnQ0vgN1omzcGCWMvyvujsum3jiWApRkQyf1 87xxBjUH93WBy0Z6O2QQvJvH4C4H9O9c0nqVufVIQTp6H84NqyVRJiyM1DS7KnEG vtYE643vmcyIix3QOBhNGp+I2gTNpzQvwdNjPhLHKtbnVUu6Q6yB3Q+AFQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFEfSg26uPyitBpRj3SzH06LNAgYxMB8GA1UdIwQY MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt MTc2OTNlN2VhNjdhLzEvUjlLRGJxNF9LSzBHbEdQZExNZlRvczBDQmpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABOn1kD BAJOn1gwDQYJKoZIhvcNAQELBQADggEBADZaKnuW3WX+fdZx4TvjYrpOLc9L6uLW Id3DkUsiYJDiVWNGGGVZ9LnKQt8yYf6ejxeYsaTtCHBlqBZf5I4Fic5a4d2cFdWR 0TzTvbJUoAx6+8qXwiWqzhMLzCpNTNJuz5Y/PWN6C34HMMiWr8clF4vl4KO6UxA2 VxwwbLPeu9k0nPpzJUOGXnV7m0EErfew+JpEyCR50bXPa6X0B7xRAxeOGdCR0aF+ IMdWk1uEFf38g8K8lhHkAXE4UT6sC4H5gcLYeTnuBzSATDqa1jtyPOuAzOP8sxPz zfYK7Mk1Pi99liCR5BN7n4bPobMMJg5miUSdQq0u67AvPbamO99BaN4= -----END CERTIFICATE-----Generated at Mon Jan 26 05:03:11 2026 by rpki-client