This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/pDXgmFSEjeXu5kTO9JnxKOTny04.roa File: pDXgmFSEjeXu5kTO9JnxKOTny04.roa (raw, json) Hash identifier: zBFnWy98uBKGBRB8AClKYux+jyTzJfSF7W9SKPlT+0E= Subject key identifier: A4:35:E0:98:54:84:8D:E5:EE:E6:44:CE:F4:99:F1:28:E4:E7:CB:4E Certificate issuer: /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4 Certificate serial: 019B78A315CED52ABA3B334C224A959B1B76 Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/pDXgmFSEjeXu5kTO9JnxKOTny04.roa Signing time: Thu 01 Jan 2026 08:18:32 +0000 ROA not before: Thu 01 Jan 2026 08:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51898 IP address blocks: 77.220.204.0/24 maxlen: 24 193.36.95.0/24 maxlen: 24 2a13:9940::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:15:ce:d5:2a:ba:3b:33:4c:22:4a:95:9b:1b:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4 Validity Not Before: Jan 1 08:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a435e09854848de5eee644cef499f128e4e7cb4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:af:a3:5e:5c:94:11:4f:6b:f7:07:e5:1b:7b: ef:a5:cc:d3:c1:88:62:f5:69:45:26:33:bc:4a:c1: 7b:d6:01:fe:c0:c9:ed:96:8f:57:fa:9a:a8:01:03: 13:72:ef:b4:8b:88:f5:c1:86:76:77:11:9e:2d:f3: fe:a3:34:57:10:b8:ed:c3:ed:2c:65:df:5a:8f:6d: 34:15:ac:54:20:d5:82:ee:b6:01:cb:2e:11:60:31: 62:07:14:ea:a7:4a:44:66:a4:25:55:83:5e:cc:01: 8c:79:2e:24:81:53:63:87:18:9b:af:58:1a:37:a2: c3:8f:ac:31:7f:9d:e4:24:80:db:be:76:bc:a0:d5: 55:81:eb:a4:35:93:8e:1d:67:b6:e4:94:cb:3c:3c: d5:84:06:dc:ce:f0:74:31:26:8b:d3:d3:65:2a:55: 5d:7f:82:13:f4:35:cc:fa:ae:61:ae:45:56:a7:f8: 33:66:a6:98:8c:07:a6:18:a6:59:b8:cd:70:6e:33: 4c:f1:21:2a:18:1d:a9:b3:4e:6c:bf:98:29:b7:fa: 6e:5e:1c:ff:21:a1:b9:3c:b8:56:c9:a6:99:84:07: a7:96:76:15:e4:6c:35:93:ce:70:12:60:93:f8:d8: 43:30:2f:1c:a0:34:5f:bb:e5:db:95:6b:6a:a2:de: 78:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:35:E0:98:54:84:8D:E5:EE:E6:44:CE:F4:99:F1:28:E4:E7:CB:4E X509v3 Authority Key Identifier: keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/pDXgmFSEjeXu5kTO9JnxKOTny04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.220.204.0/24 193.36.95.0/24 IPv6: 2a13:9940::/29 Signature Algorithm: sha256WithRSAEncryption 6d:b4:a5:f1:c6:b2:b2:c7:c5:8e:a9:64:99:01:40:4c:b5:e0: 2c:26:1d:d3:e0:52:b5:44:7a:82:6a:d2:c5:c4:59:ab:53:6c: f9:f8:b5:fa:e9:26:65:d7:92:55:77:32:4d:76:e4:4f:9d:2e: 11:28:64:e8:3a:32:d4:c3:3f:6e:33:f9:9a:02:43:e4:6c:da: 3a:f3:f4:75:c6:77:a2:96:d2:28:50:fe:76:77:70:22:94:4a: 10:56:32:fa:1a:c6:94:18:f1:aa:6e:81:4b:72:eb:8d:80:6f: 9e:6c:e0:30:75:b1:59:5f:90:7a:f1:01:52:34:33:a3:5a:73: 1c:ee:1c:56:f9:cf:43:66:1f:7b:d9:78:eb:f5:3a:07:9a:33: 1a:a6:d1:69:93:f9:8b:46:ce:60:f3:ae:b8:42:46:a5:ab:a7: ba:3c:0e:7d:c7:d4:e4:54:92:d9:5d:e2:20:59:99:f1:fa:98: 82:cc:6f:3b:c7:63:fe:f7:ad:39:63:c8:92:05:de:c0:25:fe: 00:65:8c:7e:bd:11:c3:ad:1f:ca:07:26:a8:bd:c0:66:45:f5: 36:36:f5:06:cc:13:17:ec:9f:fa:1b:69:8e:97:70:ff:dc:11: ea:27:e8:f8:69:bc:1b:1b:e3:c9:71:aa:05:4b:d5:e9:3e:15: c6:1f:ea:36 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt4oxXO1Sq6OzNMIkqVmxt2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3OGM3ZmM2YjIxMWUyNzFmNzQ4M2Y3MjFkNDVmMjM4ZGQ3 ZGU1YzQwHhcNMjYwMTAxMDgxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDM1ZTA5ODU0ODQ4ZGU1ZWVlNjQ0Y2VmNDk5ZjEyOGU0ZTdjYjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq+jXlyUEU9r9wflG3vvpczTwYhi 9WlFJjO8SsF71gH+wMntlo9X+pqoAQMTcu+0i4j1wYZ2dxGeLfP+ozRXELjtw+0s Zd9aj200FaxUINWC7rYByy4RYDFiBxTqp0pEZqQlVYNezAGMeS4kgVNjhxibr1ga N6LDj6wxf53kJIDbvna8oNVVgeukNZOOHWe25JTLPDzVhAbczvB0MSaL09NlKlVd f4IT9DXM+q5hrkVWp/gzZqaYjAemGKZZuM1wbjNM8SEqGB2ps05sv5gpt/puXhz/ IaG5PLhWyaaZhAenlnYV5Gw1k85wEmCT+NhDMC8coDRfu+XblWtqot546QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKQ14JhUhI3l7uZEzvSZ8Sjk58tOMB8GA1UdIwQY MBaAFEeMf8ayEeJx90g/ch1F8jjdfeXEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZTJjYmYtNzA1Ni00NDE5LWI1MWMt NjJiMWRhMjYxMzI5LzEvcERYZ21GU0VqZVh1NWtUTzlKbnhLT1RueTA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS82ZTJjYmYtNzA1Ni00NDE5LWI1MWMtNjJiMWRhMjYxMzI5 LzEvUjR4X3hySVI0bkgzU0Q5eUhVWHlPTjE5NWNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQATdzMAwQA wSRfMA0EAgACMAcDBQMqE5lAMA0GCSqGSIb3DQEBCwUAA4IBAQBttKXxxrKyx8WO qWSZAUBMteAsJh3T4FK1RHqCatLFxFmrU2z5+LX66SZl15JVdzJNduRPnS4RKGTo OjLUwz9uM/maAkPkbNo68/R1xneiltIoUP52d3AilEoQVjL6GsaUGPGqboFLcuuN gG+ebOAwdbFZX5B68QFSNDOjWnMc7hxW+c9DZh972Xjr9ToHmjMaptFpk/mLRs5g 8664Qkalq6e6PA59x9TkVJLZXeIgWZnx+piCzG87x2P+9605Y8iSBd7AJf4AZYx+ vRHDrR/KByaovcBmRfU2NvUGzBMX7J/6G2mOl3D/3BHqJ+j4abwbG+PJcaoFS9Xp PhXGH+o2 -----END CERTIFICATE-----Generated at Sun Jan 25 22:31:08 2026 by rpki-client