This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/R78yf6W3MAoEPSmhrbdV7ah9sjM.roa File: R78yf6W3MAoEPSmhrbdV7ah9sjM.roa (raw, json) Hash identifier: +ax6XzBctZwdXPlYQNL0vxr1BOvFMv5LM8aEVpGxDtI= Subject key identifier: 47:BF:32:7F:A5:B7:30:0A:04:3D:29:A1:AD:B7:55:ED:A8:7D:B2:33 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C698CEB40FCD420C90EF99CC085FB3 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/R78yf6W3MAoEPSmhrbdV7ah9sjM.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207614 IP address blocks: 5.154.7.0/24 maxlen: 24 78.136.79.0/24 maxlen: 24 84.232.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:98:ce:b4:0f:cd:42:0c:90:ef:99:cc:08:5f:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47bf327fa5b7300a043d29a1adb755eda87db233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a2:fd:d1:d8:13:bb:38:bc:ca:34:1f:da:a7: 18:e8:51:cb:32:44:51:8c:5c:b4:12:ac:c2:c7:be: 3f:7e:ea:a6:aa:fa:46:42:96:3e:49:b9:2b:46:e1: 9f:42:26:e9:51:4f:39:75:d8:1a:0a:9a:d8:15:1e: b2:1c:b1:97:0b:94:8e:96:64:62:7b:cc:4c:a1:01: 0d:a2:65:a4:72:95:2a:c6:e4:90:87:01:5b:66:7f: 14:3a:01:6d:87:b3:a8:d1:16:19:b4:1b:e9:aa:a4: 1a:0c:1c:8a:d6:3c:0e:4f:1f:85:0d:34:bc:29:c9: d1:ba:30:60:0e:18:02:77:55:1b:7d:39:6a:94:78: de:c7:e2:ba:b9:06:45:09:bb:8f:25:92:32:e9:ef: e9:e2:a0:ee:58:5f:70:85:e6:0b:99:c8:39:bc:0f: f4:7f:3f:4e:b0:10:52:9a:e6:72:34:0e:08:48:fa: 0b:46:9c:79:16:f7:85:3e:4c:a2:f2:13:32:bc:6c: 0f:b7:4a:9b:f1:b7:24:4f:e2:04:e5:e3:2b:dc:74: f3:a2:28:d6:c6:ad:6c:6e:09:19:50:e7:08:c2:d9: 13:f5:12:50:fd:45:a3:88:60:d9:1c:93:60:31:6c: 8a:73:29:59:5c:b1:b1:db:21:1b:2a:b4:17:df:6e: 96:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:BF:32:7F:A5:B7:30:0A:04:3D:29:A1:AD:B7:55:ED:A8:7D:B2:33 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/R78yf6W3MAoEPSmhrbdV7ah9sjM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.154.7.0/24 78.136.79.0/24 84.232.38.0/24 Signature Algorithm: sha256WithRSAEncryption a8:65:23:d9:78:06:22:92:e5:f7:72:a5:fb:30:42:be:d4:0f: a1:ef:6d:fe:f0:d6:55:fa:c4:fe:31:ed:ce:77:8a:4d:d0:9d: 26:f9:81:d9:43:f7:bb:61:df:45:f5:12:71:2e:06:a4:bc:87: 80:92:e7:f2:6b:bc:8c:ce:97:3d:d9:c5:a3:d6:f3:6b:be:22: b0:40:54:32:1c:7c:9d:01:51:0d:74:7a:7d:be:44:1b:03:1a: d1:ad:0e:93:71:cb:5b:8d:44:80:80:1e:59:fc:88:15:58:3d: 6d:e6:8f:1f:8d:89:af:13:8a:84:ce:24:1b:4a:14:ee:7d:89: bd:32:f9:a9:fc:0e:42:cb:fc:0f:40:bc:25:b6:f3:35:90:c7: 79:39:ce:07:e6:dc:c1:74:d5:3f:9f:a9:f4:f8:8f:3c:bf:9c: 51:07:f6:b3:74:a7:f8:bc:ed:de:a9:70:2e:4c:4c:6c:d9:7c: 0a:01:85:d5:24:df:05:6e:d8:32:51:d4:74:fa:7e:e9:ad:00: 41:54:cc:57:15:ab:3d:33:6e:f6:31:10:7f:a8:71:4c:06:e3: 34:7d:ff:83:62:f0:19:ee:0c:6e:db:6f:37:26:1a:81:17:1b: 8c:1e:0c:1d:4c:f7:76:ba:f1:4e:b9:9a:06:f1:92:18:80:96: b0:cd:bb:16 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xpjOtA/NQgyQ75nMCF+zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2JmMzI3ZmE1YjczMDBhMDQzZDI5YTFhZGI3NTVlZGE4N2RiMjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6L90dgTuzi8yjQf2qcY6FHLMkRR jFy0EqzCx74/fuqmqvpGQpY+SbkrRuGfQibpUU85ddgaCprYFR6yHLGXC5SOlmRi e8xMoQENomWkcpUqxuSQhwFbZn8UOgFth7Oo0RYZtBvpqqQaDByK1jwOTx+FDTS8 KcnRujBgDhgCd1UbfTlqlHjex+K6uQZFCbuPJZIy6e/p4qDuWF9wheYLmcg5vA/0 fz9OsBBSmuZyNA4ISPoLRpx5FveFPkyi8hMyvGwPt0qb8bckT+IE5eMr3HTzoijW xq1sbgkZUOcIwtkT9RJQ/UWjiGDZHJNgMWyKcylZXLGx2yEbKrQX326WDQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFEe/Mn+ltzAKBD0poa23Ve2ofbIzMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvUjc4eWY2VzNNQW9FUFNtaHJiZFY3YWg5c2pNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABZoHAwQA TohPAwQAVOgmMA0GCSqGSIb3DQEBCwUAA4IBAQCoZSPZeAYikuX3cqX7MEK+1A+h 723+8NZV+sT+Me3Od4pN0J0m+YHZQ/e7Yd9F9RJxLgakvIeAkufya7yMzpc92cWj 1vNrviKwQFQyHHydAVENdHp9vkQbAxrRrQ6TcctbjUSAgB5Z/IgVWD1t5o8fjYmv E4qEziQbShTufYm9Mvmp/A5Cy/wPQLwltvM1kMd5Oc4H5tzBdNU/n6n0+I88v5xR B/azdKf4vO3eqXAuTExs2XwKAYXVJN8FbtgyUdR0+n7prQBBVMxXFas9M272MRB/ qHFMBuM0ff+DYvAZ7gxu2283JhqBFxuMHgwdTPd2uvFOuZoG8ZIYgJawzbsW -----END CERTIFICATE-----Generated at Sun Jan 25 14:38:29 2026 by rpki-client