This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/zih4pEofMsc0PfEmVcpJbSHS8Vw.roa File: zih4pEofMsc0PfEmVcpJbSHS8Vw.roa (raw, json) Hash identifier: LBA2zilX1jjETkANtyysp3KbVjSb0vGJ+k7nTqc9Wjo= Subject key identifier: CE:28:78:A4:4A:1F:32:C7:34:3D:F1:26:55:CA:49:6D:21:D2:F1:5C Certificate issuer: /CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09 Certificate serial: 019B7C7F7A80FD5260F30284EBD2B0236048 Authority key identifier: A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/zih4pEofMsc0PfEmVcpJbSHS8Vw.roa Signing time: Fri 02 Jan 2026 02:18:07 +0000 ROA not before: Fri 02 Jan 2026 02:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20733 IP address blocks: 147.78.116.0/23 maxlen: 23 147.78.116.0/24 maxlen: 24 147.78.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.mft rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 02:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:7a:80:fd:52:60:f3:02:84:eb:d2:b0:23:60:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6b789b32e16e9dd2f70513119dc77ea61ff1e09 Validity Not Before: Jan 2 02:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce2878a44a1f32c7343df12655ca496d21d2f15c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a4:70:14:7c:a1:fc:4b:f1:cf:ba:85:64:71: 24:d1:7a:b9:b3:45:83:da:96:e9:bb:96:5b:11:d6: 0f:e4:99:77:f3:f3:4c:4b:cb:b6:df:5e:da:a7:87: f2:91:f4:fd:74:c1:68:da:1a:33:da:d7:20:19:75: 42:4d:33:0d:d8:e1:f0:33:95:b7:e7:14:12:05:8b: 53:47:74:6a:b3:e6:e8:82:5f:10:bf:de:eb:bd:9f: 00:d8:77:04:83:77:9f:01:b1:dc:0d:81:01:eb:eb: aa:04:29:ef:ac:7c:ae:e3:be:99:c7:9f:5e:18:4e: 4b:25:7b:fd:57:7a:a3:6d:01:cb:db:a3:dc:32:f2: 6f:4f:b3:14:47:07:ee:0f:f5:d5:04:80:a2:46:8d: d3:74:1d:20:12:26:31:8c:45:9d:c1:df:6d:63:e1: 31:d8:f9:70:33:69:e1:9e:9c:de:35:71:38:b3:ec: 9f:ec:e9:33:1a:2f:b1:7f:cd:85:d2:ca:11:3a:1c: d7:8b:12:ae:9f:dc:88:dd:e5:44:66:16:ce:bb:7f: 62:23:95:9e:87:6a:ad:a4:9f:43:1a:f5:65:4a:03: c6:b4:32:45:7d:7b:d2:14:52:6f:5f:de:cb:df:d1: ed:be:f4:6d:ed:ec:12:38:d0:e5:b3:43:3b:e8:90: c6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:28:78:A4:4A:1F:32:C7:34:3D:F1:26:55:CA:49:6D:21:D2:F1:5C X509v3 Authority Key Identifier: keyid:A6:B7:89:B3:2E:16:E9:DD:2F:70:51:31:19:DC:77:EA:61:FF:1E:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/preJsy4W6d0vcFExGdx36mH_Hgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/zih4pEofMsc0PfEmVcpJbSHS8Vw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e768bd-f512-4b8a-936a-06c9296f08a2/1/preJsy4W6d0vcFExGdx36mH_Hgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 147.78.116.0/23 Signature Algorithm: sha256WithRSAEncryption 89:f0:3b:93:38:84:9a:1a:f5:e8:36:7f:b7:c5:49:d9:4a:96: e4:43:00:05:87:b9:c7:26:28:a9:0e:63:e7:cd:04:8b:52:0e: 71:22:91:01:86:7c:5c:2b:35:17:c3:cd:5c:f6:38:7a:bc:87: a7:5a:c5:92:38:5e:7b:27:69:e3:4f:f5:b9:c9:6c:bf:2d:db: 16:8b:d9:38:ff:73:90:d8:f9:8b:dd:c4:e3:a2:ad:d6:2d:db: d3:bc:3c:df:8e:71:5c:03:14:9e:41:ab:8b:8e:8e:d2:3e:ba: 9f:2b:87:fe:d0:ee:16:28:83:b6:7d:0d:9c:aa:67:ff:5a:d4: 3e:fc:d6:7b:de:f3:a4:52:5b:4e:8c:ae:a0:9d:c9:ec:40:32: d7:6d:6d:bc:e0:f2:cd:d7:8b:28:23:97:f4:66:06:f7:24:19: 39:b5:d1:2c:4e:0d:a8:38:93:7e:ac:51:a0:a3:2c:0e:93:21: 31:05:f0:a4:ef:75:cc:5e:c3:5a:58:59:6d:3b:9a:3b:75:58: ad:a4:54:49:2e:da:9a:f3:4d:1f:1d:f0:b0:1d:43:40:49:f4: e5:02:f2:e5:06:1e:09:64:53:10:52:dc:84:49:1a:8d:a6:0b: c0:7c:00:8e:bf:f2:6b:d4:9c:76:1a:6f:e8:a4:7c:18:3e:07: b9:bd:64:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8f3qA/VJg8wKE69KwI2BIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2Yjc4OWIzMmUxNmU5ZGQyZjcwNTEzMTE5ZGM3N2VhNjFm ZjFlMDkwHhcNMjYwMTAyMDIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTI4NzhhNDRhMWYzMmM3MzQzZGYxMjY1NWNhNDk2ZDIxZDJmMTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6RwFHyh/Evxz7qFZHEk0Xq5s0WD 2pbpu5ZbEdYP5Jl38/NMS8u2317ap4fykfT9dMFo2hoz2tcgGXVCTTMN2OHwM5W3 5xQSBYtTR3Rqs+bogl8Qv97rvZ8A2HcEg3efAbHcDYEB6+uqBCnvrHyu476Zx59e GE5LJXv9V3qjbQHL26PcMvJvT7MURwfuD/XVBICiRo3TdB0gEiYxjEWdwd9tY+Ex 2PlwM2nhnpzeNXE4s+yf7OkzGi+xf82F0soROhzXixKun9yI3eVEZhbOu39iI5We h2qtpJ9DGvVlSgPGtDJFfXvSFFJvX97L39HtvvRt7ewSONDls0M76JDGZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM4oeKRKHzLHND3xJlXKSW0h0vFcMB8GA1UdIwQY MBaAFKa3ibMuFundL3BRMRncd+ph/x4JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lNzY4YmQtZjUxMi00YjhhLTkzNmEt MDZjOTI5NmYwOGEyLzEvemloNHBFb2ZNc2MwUGZFbVZjcEpiU0hTOFZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9lNzY4YmQtZjUxMi00YjhhLTkzNmEtMDZjOTI5NmYwOGEy LzEvcHJlSnN5NFc2ZDB2Y0ZFeEdkeDM2bUhfSGdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk050MA0G CSqGSIb3DQEBCwUAA4IBAQCJ8DuTOISaGvXoNn+3xUnZSpbkQwAFh7nHJiipDmPn zQSLUg5xIpEBhnxcKzUXw81c9jh6vIenWsWSOF57J2njT/W5yWy/LdsWi9k4/3OQ 2PmL3cTjoq3WLdvTvDzfjnFcAxSeQauLjo7SPrqfK4f+0O4WKIO2fQ2cqmf/WtQ+ /NZ73vOkUltOjK6gncnsQDLXbW284PLN14soI5f0Zgb3JBk5tdEsTg2oOJN+rFGg oywOkyExBfCk73XMXsNaWFltO5o7dVitpFRJLtqa800fHfCwHUNASfTlAvLlBh4J ZFMQUtyESRqNpgvAfACOv/Jr1Jx2Gm/opHwYPge5vWQQ -----END CERTIFICATE-----Generated at Mon Jan 26 11:44:18 2026 by rpki-client