This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/uea9rgFUf1JA0CrNAzpNKJzb_aw.roa File: uea9rgFUf1JA0CrNAzpNKJzb_aw.roa (raw, json) Hash identifier: k8IR4W1p+ygIWocTeYwLCg/tltltxbnE44agYQdWhgs= Subject key identifier: B9:E6:BD:AE:01:54:7F:52:40:D0:2A:CD:03:3A:4D:28:9C:DB:FD:AC Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Certificate serial: 019B7F1445773B845C799AAA72BE233FDAFE Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/uea9rgFUf1JA0CrNAzpNKJzb_aw.roa Signing time: Fri 02 Jan 2026 14:19:53 +0000 ROA not before: Fri 02 Jan 2026 14:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203408 IP address blocks: 78.159.82.0/24 maxlen: 24 78.159.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:45:77:3b:84:5c:79:9a:aa:72:be:23:3f:da:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Validity Not Before: Jan 2 14:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9e6bdae01547f5240d02acd033a4d289cdbfdac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ee:08:96:c8:59:5c:6e:b2:c0:d3:ae:54:ed: 9e:af:1e:20:fb:d0:ec:4f:81:d4:13:f1:73:0d:9b: f3:19:8e:07:2c:93:6a:36:1d:ca:76:d8:38:8e:41: 14:17:89:ad:06:d7:c1:d9:d9:c5:94:63:5c:63:88: 4a:c1:31:e5:8a:57:f4:0b:ca:cb:fa:b0:c0:46:7c: f6:f1:a8:72:be:1b:69:18:e9:b1:f0:8e:16:fb:07: e6:e8:02:c6:3c:60:6c:25:3e:29:8e:8f:40:d6:97: f9:e6:03:10:c3:16:32:ff:76:80:83:49:f2:6c:d5: 07:b1:bd:d0:1e:c9:7b:a3:36:23:77:1b:17:a8:b2: f9:3b:fc:66:70:8a:ae:87:4b:5a:f5:73:86:2b:80: 0d:d1:57:aa:63:af:b0:57:40:ec:80:8a:65:b2:c0: 92:fa:3f:23:00:db:d8:22:36:a5:5d:2a:3f:c9:73: 35:4a:2c:bd:4f:34:a4:10:71:27:ba:99:08:a7:8d: 6a:c3:08:2f:49:1a:a2:a2:55:3f:b8:a3:4c:aa:e2: 5e:c2:bc:c9:be:b5:5f:25:91:6c:da:b3:ff:98:8c: 2e:87:a9:1b:bf:4b:70:6c:2e:99:cc:42:4f:1f:25: c2:ba:a8:c7:51:6a:73:80:a9:c9:c4:79:1b:dd:58: 5e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E6:BD:AE:01:54:7F:52:40:D0:2A:CD:03:3A:4D:28:9C:DB:FD:AC X509v3 Authority Key Identifier: keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/uea9rgFUf1JA0CrNAzpNKJzb_aw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.159.82.0/24 78.159.87.0/24 Signature Algorithm: sha256WithRSAEncryption 15:a9:2e:a1:1e:aa:b2:e9:d7:69:78:72:19:18:f2:fe:29:10: 4c:23:f7:cd:89:41:0c:3c:d1:e9:20:c0:a6:a7:2a:33:1e:f7: f6:c7:7f:ad:0e:f9:45:9a:2e:c0:1a:26:f5:d6:b5:4a:37:58: 68:98:44:14:45:bb:71:41:72:13:8f:68:49:c0:83:27:a1:e6: c1:ef:43:89:35:ce:de:1e:02:91:e8:8d:80:02:2c:e9:cc:a9: a3:73:a2:44:60:e4:bb:f2:ef:0e:32:f0:94:12:ef:70:1e:69: 9e:25:cd:99:08:3e:13:c8:9a:8a:36:d1:a7:50:80:f6:51:df: 30:a5:e5:d7:0d:8d:88:c2:03:3a:53:9e:f1:59:81:97:84:85: 5f:3e:28:c8:08:c8:ee:89:56:f3:29:87:48:06:bb:64:9f:54: 34:9a:79:06:dc:72:75:45:51:d7:a9:09:a2:6b:6e:70:a3:95: e9:c7:02:6b:47:e1:90:02:85:72:70:f5:09:6c:a7:bd:2a:ff: 33:68:07:f4:6c:b4:48:23:af:a5:d4:a8:a8:46:ad:62:f9:b5: 49:cd:d0:bf:3e:0a:b1:7d:0e:92:08:bd:1c:01:3a:e8:ce:77: 55:de:be:91:5f:c2:b6:a7:3b:80:4b:eb:51:23:59:02:7d:46: ed:5d:d8:ac -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FEV3O4RceZqqcr4jP9r+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx YjUwMjEwHhcNMjYwMTAyMTQxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWU2YmRhZTAxNTQ3ZjUyNDBkMDJhY2QwMzNhNGQyODljZGJmZGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4u4IlshZXG6ywNOuVO2erx4g+9Ds T4HUE/FzDZvzGY4HLJNqNh3Kdtg4jkEUF4mtBtfB2dnFlGNcY4hKwTHlilf0C8rL +rDARnz28ahyvhtpGOmx8I4W+wfm6ALGPGBsJT4pjo9A1pf55gMQwxYy/3aAg0ny bNUHsb3QHsl7ozYjdxsXqLL5O/xmcIquh0ta9XOGK4AN0VeqY6+wV0DsgIplssCS +j8jANvYIjalXSo/yXM1Siy9TzSkEHEnupkIp41qwwgvSRqiolU/uKNMquJewrzJ vrVfJZFs2rP/mIwuh6kbv0twbC6ZzEJPHyXCuqjHUWpzgKnJxHkb3VhelQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLnmva4BVH9SQNAqzQM6TSic2/2sMB8GA1UdIwQY MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt MTc2OTNlN2VhNjdhLzEvdWVhOXJnRlVmMUpBMENyTkF6cE5LSnpiX2F3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATp9SAwQA Tp9XMA0GCSqGSIb3DQEBCwUAA4IBAQAVqS6hHqqy6ddpeHIZGPL+KRBMI/fNiUEM PNHpIMCmpyozHvf2x3+tDvlFmi7AGib11rVKN1homEQURbtxQXITj2hJwIMnoebB 70OJNc7eHgKR6I2AAizpzKmjc6JEYOS78u8OMvCUEu9wHmmeJc2ZCD4TyJqKNtGn UID2Ud8wpeXXDY2IwgM6U57xWYGXhIVfPijICMjuiVbzKYdIBrtkn1Q0mnkG3HJ1 RVHXqQmia25wo5XpxwJrR+GQAoVycPUJbKe9Kv8zaAf0bLRII6+l1KioRq1i+bVJ zdC/PgqxfQ6SCL0cATrozndV3r6RX8K2pzuAS+tRI1kCfUbtXdis -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:46 2026 by rpki-client