This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/n-gPrL8W0rexTPlzL1gsOHxjPFQ.roa File: n-gPrL8W0rexTPlzL1gsOHxjPFQ.roa (raw, json) Hash identifier: Mdos03oYdbkiZzG/wC3jhapVhZc0L3yy3J3lEF+MNPQ= Subject key identifier: 9F:E8:0F:AC:BF:16:D2:B7:B1:4C:F9:73:2F:58:2C:38:7C:63:3C:54 Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Certificate serial: 019B7F144A935440892315D83CCC29781921 Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/n-gPrL8W0rexTPlzL1gsOHxjPFQ.roa Signing time: Fri 02 Jan 2026 14:19:54 +0000 ROA not before: Fri 02 Jan 2026 14:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212908 IP address blocks: 78.159.64.0/21 maxlen: 21 78.159.86.0/24 maxlen: 24 2a02:7f0:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:4a:93:54:40:89:23:15:d8:3c:cc:29:78:19:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Validity Not Before: Jan 2 14:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fe80facbf16d2b7b14cf9732f582c387c633c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:59:fa:a4:ca:1d:15:65:cc:e3:03:2a:27:c4: 38:3f:ad:de:4f:af:43:80:b2:28:b5:f1:eb:8b:55: 52:ca:2c:b4:95:d4:ca:a5:14:31:10:c6:1a:7b:24: 41:11:12:11:e4:7d:56:07:89:e4:1c:7a:37:6f:13: 02:9b:b6:e8:43:2e:fe:3f:58:73:0a:6d:28:d7:c6: 19:d7:ee:11:97:46:c2:bc:68:cf:c5:65:5c:53:8a: 95:fb:71:ed:91:db:00:c7:7f:87:20:ef:1e:89:7b: af:ee:71:b1:da:61:bb:f6:17:d2:ce:01:a1:a3:d1: cb:44:00:c1:09:69:23:7a:5a:99:8c:ed:e3:25:55: d6:40:26:e4:51:d8:fb:d5:c4:4b:48:3e:10:69:1a: 3d:42:96:11:59:32:cb:b1:62:b7:40:3b:50:90:cf: a2:81:c5:b0:fe:ce:92:1d:d8:54:8a:7e:4b:5f:d6: 3d:eb:92:73:fa:f4:b0:60:fb:24:d0:86:de:22:f5: 6d:e6:ef:f1:58:0f:1b:99:53:18:62:40:f3:9b:c2: dc:81:ec:d9:65:03:df:27:a8:9f:73:c5:91:0d:8f: 9a:ae:eb:b0:fd:82:b6:29:f1:e2:e7:59:9e:ac:bd: dd:e2:b9:8c:91:33:25:e8:88:d0:b0:ec:fb:b0:18: ac:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E8:0F:AC:BF:16:D2:B7:B1:4C:F9:73:2F:58:2C:38:7C:63:3C:54 X509v3 Authority Key Identifier: keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/n-gPrL8W0rexTPlzL1gsOHxjPFQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.159.64.0/21 78.159.86.0/24 IPv6: 2a02:7f0:200::/40 Signature Algorithm: sha256WithRSAEncryption 72:81:63:27:bc:06:d6:4c:78:c9:50:5c:ed:a9:c4:e1:d0:88: 75:a0:c7:46:72:bd:fc:f3:8f:cb:d1:fe:14:f6:47:ca:bc:11: 94:7d:f3:25:60:67:62:74:b5:0e:9d:f1:48:78:b6:0a:e8:c7: 7f:81:4f:ef:49:85:cd:d6:bd:c2:d6:e3:22:bb:39:e2:4f:41: 87:ce:51:c2:9f:b8:25:3a:87:0f:f4:e7:43:e6:1d:29:fe:16: 04:b5:ff:98:c6:8f:23:2a:84:5d:21:70:55:13:0d:1e:ad:70: 3c:27:d6:a4:10:84:7d:89:28:d7:bf:6c:58:eb:79:67:5e:5f: 2d:12:4b:8d:f1:33:93:2b:22:b4:d1:1f:06:f3:98:46:3d:34: c9:af:57:87:4a:9d:16:9a:d1:5c:cc:95:4e:9c:5c:9d:c9:e0: 41:f5:58:e9:e6:ef:ff:07:4a:a6:e3:d6:8b:5b:64:6f:c0:74: 6f:0f:6f:6a:9b:0a:b9:20:53:f9:02:69:9b:c9:f7:1d:ea:41: 77:23:71:41:c1:31:10:26:be:c1:28:8a:3c:84:56:35:c0:d5: 8d:c5:37:5d:5c:a5:9d:bb:cb:89:d1:55:3c:8f:ed:1b:a8:59: 1b:35:fc:0d:65:d0:ca:1b:01:2d:39:bb:8a:d2:26:b6:69:28: b9:fd:7e:23 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt/FEqTVECJIxXYPMwpeBkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx YjUwMjEwHhcNMjYwMTAyMTQxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmU4MGZhY2JmMTZkMmI3YjE0Y2Y5NzMyZjU4MmMzODdjNjMzYzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1n6pModFWXM4wMqJ8Q4P63eT69D gLIotfHri1VSyiy0ldTKpRQxEMYaeyRBERIR5H1WB4nkHHo3bxMCm7boQy7+P1hz Cm0o18YZ1+4Rl0bCvGjPxWVcU4qV+3HtkdsAx3+HIO8eiXuv7nGx2mG79hfSzgGh o9HLRADBCWkjelqZjO3jJVXWQCbkUdj71cRLSD4QaRo9QpYRWTLLsWK3QDtQkM+i gcWw/s6SHdhUin5LX9Y965Jz+vSwYPsk0IbeIvVt5u/xWA8bmVMYYkDzm8LcgezZ ZQPfJ6ifc8WRDY+aruuw/YK2KfHi51merL3d4rmMkTMl6IjQsOz7sBisAwIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFJ/oD6y/FtK3sUz5cy9YLDh8YzxUMB8GA1UdIwQY MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt MTc2OTNlN2VhNjdhLzEvbi1nUHJMOFcwcmV4VFBsekwxZ3NPSHhqUEZRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQDTp9AAwQA Tp9WMA4EAgACMAgDBgAqAgfwAjANBgkqhkiG9w0BAQsFAAOCAQEAcoFjJ7wG1kx4 yVBc7anE4dCIdaDHRnK9/POPy9H+FPZHyrwRlH3zJWBnYnS1Dp3xSHi2CujHf4FP 70mFzda9wtbjIrs54k9Bh85Rwp+4JTqHD/TnQ+YdKf4WBLX/mMaPIyqEXSFwVRMN Hq1wPCfWpBCEfYko179sWOt5Z15fLRJLjfEzkysitNEfBvOYRj00ya9Xh0qdFprR XMyVTpxcncngQfVY6ebv/wdKpuPWi1tkb8B0bw9vapsKuSBT+QJpm8n3HepBdyNx QcExECa+wSiKPIRWNcDVjcU3XVylnbvLidFVPI/tG6hZGzX8DWXQyhsBLTm7itIm tmkouf1+Iw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:57:50 2026 by rpki-client