This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/78BD0i-62RJYSHwdfCKFqFE2jwY.roa File: 78BD0i-62RJYSHwdfCKFqFE2jwY.roa (raw, json) Hash identifier: Hf/Zuc1uaGGVryAHgX1Ey19NCmSAJTuJG4yRCRmI7NY= Subject key identifier: EF:C0:43:D2:2F:BA:D9:12:58:48:7C:1D:7C:22:85:A8:51:36:8F:06 Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Certificate serial: 019B7F84CE6F834F7E3826A8112EA8C306F0 Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/78BD0i-62RJYSHwdfCKFqFE2jwY.roa Signing time: Fri 02 Jan 2026 16:22:48 +0000 ROA not before: Fri 02 Jan 2026 16:22:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59525 IP address blocks: 146.120.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:ce:6f:83:4f:7e:38:26:a8:11:2e:a8:c3:06:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42 Validity Not Before: Jan 2 16:22:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efc043d22fbad91258487c1d7c2285a851368f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:51:02:0e:f4:23:ff:63:07:36:fb:86:84:b2: 69:2f:2b:a5:e7:96:fb:20:3b:24:43:48:d0:32:86: ec:2a:fd:07:81:1b:31:d7:74:0e:f8:56:4e:60:03: 06:dd:51:16:ee:10:4c:46:98:d5:78:27:da:f0:16: bc:a8:f5:77:34:12:de:a9:87:90:39:c6:84:ea:8f: 0b:f1:6c:c9:d7:20:42:96:e2:f2:5d:98:e3:67:f3: 03:91:2e:03:b9:de:21:53:12:30:84:4d:49:35:4d: fc:29:08:38:b7:f2:35:13:ba:a4:54:4a:ff:82:10: c1:5c:65:62:4d:3a:86:26:af:b8:9e:c1:11:9e:61: e4:b6:60:28:0b:a7:7e:bf:0b:6b:8d:35:a6:9c:d9: 69:fd:49:82:ea:42:97:a2:ac:d7:c8:d1:df:bf:4c: ba:84:aa:0b:91:e3:f3:ff:d7:2d:68:7e:d0:fa:79: bc:f6:f6:94:5d:16:1b:c7:e4:9d:3b:35:c9:61:d2: ed:f7:fb:fd:23:1a:04:ee:4c:4d:88:74:96:d7:92: f1:86:af:ba:2a:f9:25:b4:39:36:29:a2:46:cc:8e: e6:3b:6a:a0:d6:10:5d:74:d6:45:06:68:42:79:b3: f2:39:28:af:87:b2:84:80:fa:ea:ab:aa:86:47:d8: 45:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C0:43:D2:2F:BA:D9:12:58:48:7C:1D:7C:22:85:A8:51:36:8F:06 X509v3 Authority Key Identifier: keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/78BD0i-62RJYSHwdfCKFqFE2jwY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.120.109.0/24 Signature Algorithm: sha256WithRSAEncryption 2b:7c:82:c5:59:6b:d2:06:29:14:37:6d:fa:b3:dd:de:13:8b: 3a:3e:7d:89:c2:45:01:4f:49:ba:a4:9f:24:e7:14:9e:ab:85: 3e:d1:6e:7b:9d:9c:ae:3e:2c:ab:2b:91:0f:1b:63:5f:6c:4a: 2e:14:3c:27:91:27:1f:b1:d7:07:50:5e:ba:34:dc:fd:f0:73: 74:90:19:3a:4f:84:9c:64:96:12:9b:fe:67:60:01:23:82:0c: 01:f6:a0:a4:4d:15:e5:c7:5b:52:5c:78:c7:6c:bd:cd:74:41: 48:3f:c9:87:44:2f:44:73:f7:01:e1:86:17:f4:b9:12:f3:95: 3e:4a:8c:d1:92:9a:d9:ea:79:3a:c3:ff:92:06:f4:16:47:67: a1:dd:4f:3c:71:2e:ae:66:dd:15:34:6e:c8:f1:cd:7d:83:eb: 61:6a:22:93:41:3c:45:66:16:10:3c:ad:25:c1:ad:93:11:cd: 9f:9e:c9:66:f7:a6:be:07:b3:99:9f:87:92:45:ee:7c:95:45: 71:cd:fb:d6:60:85:30:26:e1:c6:f3:9f:79:20:11:c9:23:4d: 86:2c:54:65:ad:f0:eb:5b:2e:99:ea:ec:6e:5d:18:8c:5c:4a: 57:28:8a:19:ae:bd:93:30:8c:45:74:b5:47:b9:10:c3:50:77: 2b:df:3a:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hM5vg09+OCaoES6owwbwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh YWVmNDIwHhcNMjYwMTAyMTYyMjQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmMwNDNkMjJmYmFkOTEyNTg0ODdjMWQ3YzIyODVhODUxMzY4ZjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVECDvQj/2MHNvuGhLJpLyul55b7 IDskQ0jQMobsKv0HgRsx13QO+FZOYAMG3VEW7hBMRpjVeCfa8Ba8qPV3NBLeqYeQ OcaE6o8L8WzJ1yBCluLyXZjjZ/MDkS4Dud4hUxIwhE1JNU38KQg4t/I1E7qkVEr/ ghDBXGViTTqGJq+4nsERnmHktmAoC6d+vwtrjTWmnNlp/UmC6kKXoqzXyNHfv0y6 hKoLkePz/9ctaH7Q+nm89vaUXRYbx+SdOzXJYdLt9/v9IxoE7kxNiHSW15Lxhq+6 KvkltDk2KaJGzI7mO2qg1hBddNZFBmhCebPyOSivh7KEgPrqq6qGR9hFJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO/AQ9IvutkSWEh8HXwihahRNo8GMB8GA1UdIwQY MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt MDYyYzY5MzNhYmVkLzEvNzhCRDBpLTYyUkpZU0h3ZGZDS0ZxRkUyandZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAknhtMA0G CSqGSIb3DQEBCwUAA4IBAQArfILFWWvSBikUN236s93eE4s6Pn2JwkUBT0m6pJ8k 5xSeq4U+0W57nZyuPiyrK5EPG2NfbEouFDwnkScfsdcHUF66NNz98HN0kBk6T4Sc ZJYSm/5nYAEjggwB9qCkTRXlx1tSXHjHbL3NdEFIP8mHRC9Ec/cB4YYX9LkS85U+ SozRkprZ6nk6w/+SBvQWR2eh3U88cS6uZt0VNG7I8c19g+thaiKTQTxFZhYQPK0l wa2TEc2fnslm96a+B7OZn4eSRe58lUVxzfvWYIUwJuHG8595IBHJI02GLFRlrfDr Wy6Z6uxuXRiMXEpXKIoZrr2TMIxFdLVHuRDDUHcr3zp5 -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:49 2026 by rpki-client