This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/D9vysDJ6akM7Z66wywlmqWF3jxM.roa File: D9vysDJ6akM7Z66wywlmqWF3jxM.roa (raw, json) Hash identifier: +6sSHR1vJhbnSV1+bNKy86Yi96WvoRkEvwudcBXDAQg= Subject key identifier: 0F:DB:F2:B0:32:7A:6A:43:3B:67:AE:B0:CB:09:66:A9:61:77:8F:13 Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Certificate serial: 019B7B3697B7B3BC5173F663BC6A96B3B405 Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/D9vysDJ6akM7Z66wywlmqWF3jxM.roa Signing time: Thu 01 Jan 2026 20:18:53 +0000 ROA not before: Thu 01 Jan 2026 20:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62047 IP address blocks: 178.216.40.0/21 maxlen: 21 2001:67c:778::/48 maxlen: 48 2001:7f8:5b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:97:b7:b3:bc:51:73:f6:63:bc:6a:96:b3:b4:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Validity Not Before: Jan 1 20:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0fdbf2b0327a6a433b67aeb0cb0966a961778f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:94:b6:dd:fc:69:14:28:e5:e8:40:cf:f7:8d: f7:b6:4d:99:60:e3:cb:e7:12:e2:6e:36:34:b0:9f: 84:99:01:f5:b5:ae:74:fa:6b:35:3a:06:a8:f1:91: 41:b6:dd:12:30:45:78:5c:81:30:d3:9c:97:c6:50: d2:81:5c:33:18:69:4a:80:ab:38:c8:a8:52:25:ac: da:8c:b7:5a:77:9a:d6:43:fb:cd:0e:d3:30:7b:29: 83:ce:fa:f9:4f:4c:c6:2c:30:25:af:af:c0:1a:d5: a6:47:e9:2c:a3:d5:09:c7:59:7d:60:95:de:ce:ed: f1:87:77:77:b5:01:e0:01:27:e8:b4:4d:9f:42:95: f3:6b:61:1c:91:6c:78:1d:3f:3f:1c:b5:97:8a:5c: bd:fd:53:06:88:ff:f3:34:c4:d5:d6:a2:5d:91:69: 2f:21:98:c9:a3:4a:67:38:1f:05:ee:4f:34:25:20: b4:9c:55:e6:45:9d:c5:93:80:50:1b:e3:6c:9e:eb: 6a:5c:e5:a0:03:31:89:21:2c:bc:66:57:c2:ba:14: 6c:9b:4f:d2:f8:a4:ab:6c:c7:44:d4:88:98:a6:17: 71:cb:fe:0c:ac:f9:3d:96:44:ab:f2:0b:df:ad:6b: 67:55:c1:b9:07:cb:17:f6:45:00:b3:cc:ff:ca:e2: 5a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DB:F2:B0:32:7A:6A:43:3B:67:AE:B0:CB:09:66:A9:61:77:8F:13 X509v3 Authority Key Identifier: keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/D9vysDJ6akM7Z66wywlmqWF3jxM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.216.40.0/21 IPv6: 2001:67c:778::/48 2001:7f8:5b::/48 Signature Algorithm: sha256WithRSAEncryption 78:5d:fa:88:14:26:b2:cd:ba:df:51:5c:e8:5c:ce:dc:7f:4d: 72:77:b2:d2:96:36:69:f2:84:a0:0f:6c:3b:1c:04:49:d9:b1: 9a:65:5b:ab:b3:09:4d:48:c7:78:cc:e3:3b:09:e9:66:76:49: 0c:59:2a:89:7b:38:8d:4e:6d:8f:dc:72:8c:93:d7:3b:dc:53: 90:db:04:c1:05:bf:04:13:98:d7:9a:ed:d6:28:02:05:e3:76: e7:44:9d:01:23:c3:fb:d1:f5:72:f3:8c:31:34:b5:2f:34:8e: b2:d9:b0:0f:68:ef:fc:30:8f:62:37:e7:48:1d:a0:e0:70:85: d8:dd:63:35:32:fd:df:f5:dc:6d:2e:86:c8:a3:8d:d5:68:23: 87:5b:ce:bf:67:b7:71:da:1d:a4:ab:cb:91:48:b1:79:68:76: 72:af:a0:58:e5:03:a5:a1:0e:2e:dc:4e:75:48:af:c2:3c:e8: 11:9a:a7:df:d7:95:cf:c8:13:1c:3f:12:aa:a0:97:e7:9b:91: ea:37:c7:2f:d6:41:82:6d:5c:43:68:70:f2:ec:a5:91:fc:dc: eb:0e:bb:74:18:fe:d0:7f:33:2b:5f:62:c7:de:0f:14:a5:f6: 35:61:80:27:36:e8:44:55:6c:f3:84:58:61:4d:8b:21:7b:3b: f4:db:1a:86 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt7Npe3s7xRc/ZjvGqWs7QFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx NmMzMmEwHhcNMjYwMTAxMjAxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZmRiZjJiMDMyN2E2YTQzM2I2N2FlYjBjYjA5NjZhOTYxNzc4ZjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JS23fxpFCjl6EDP9433tk2ZYOPL 5xLibjY0sJ+EmQH1ta50+ms1Ogao8ZFBtt0SMEV4XIEw05yXxlDSgVwzGGlKgKs4 yKhSJazajLdad5rWQ/vNDtMweymDzvr5T0zGLDAlr6/AGtWmR+kso9UJx1l9YJXe zu3xh3d3tQHgASfotE2fQpXza2EckWx4HT8/HLWXily9/VMGiP/zNMTV1qJdkWkv IZjJo0pnOB8F7k80JSC0nFXmRZ3Fk4BQG+NsnutqXOWgAzGJISy8ZlfCuhRsm0/S +KSrbMdE1IiYphdxy/4MrPk9lkSr8gvfrWtnVcG5B8sX9kUAs8z/yuJaLwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFA/b8rAyempDO2eusMsJZqlhd48TMB8GA1UdIwQY MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEvRDl2eXNESjZha003WjY2d3l3bG1xV0YzanhNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQDstgoMBgE AgACMBIDBwAgAQZ8B3gDBwAgAQf4AFswDQYJKoZIhvcNAQELBQADggEBAHhd+ogU JrLNut9RXOhcztx/TXJ3stKWNmnyhKAPbDscBEnZsZplW6uzCU1Ix3jM4zsJ6WZ2 SQxZKol7OI1ObY/ccoyT1zvcU5DbBMEFvwQTmNea7dYoAgXjdudEnQEjw/vR9XLz jDE0tS80jrLZsA9o7/wwj2I350gdoOBwhdjdYzUy/d/13G0uhsijjdVoI4dbzr9n t3HaHaSry5FIsXlodnKvoFjlA6WhDi7cTnVIr8I86BGap9/Xlc/IExw/Eqqgl+eb keo3xy/WQYJtXENocPLspZH83OsOu3QY/tB/MytfYsfeDxSl9jVhgCc26ERVbPOE WGFNiyF7O/TbGoY= -----END CERTIFICATE-----Generated at Mon Jan 26 04:51:32 2026 by rpki-client