This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/SxhhasaUaCl0zzl5IKAQ1RUxdbs.roa File: SxhhasaUaCl0zzl5IKAQ1RUxdbs.roa (raw, json) Hash identifier: pJKXlQ88v8/SpEf9OxWAQJI8LbNnI8MUhTxH48lAKxU= Subject key identifier: 4B:18:61:6A:C6:94:68:29:74:CF:39:79:20:A0:10:D5:15:31:75:BB Certificate issuer: /CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3 Certificate serial: 019A716D4420981FE931A4F8CABDBE5295A8 Authority key identifier: FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/SxhhasaUaCl0zzl5IKAQ1RUxdbs.roa Signing time: Tue 11 Nov 2025 05:39:37 +0000 ROA not before: Tue 11 Nov 2025 05:39:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 34146 IP address blocks: 78.40.72.0/24 maxlen: 24 78.40.73.0/24 maxlen: 24 78.40.74.0/24 maxlen: 24 78.40.75.0/24 maxlen: 24 78.40.76.0/24 maxlen: 24 78.40.79.0/24 maxlen: 24 185.200.220.0/24 maxlen: 24 185.200.221.0/24 maxlen: 24 185.200.222.0/24 maxlen: 24 185.200.223.0/24 maxlen: 24 2a02:449::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:71:6d:44:20:98:1f:e9:31:a4:f8:ca:bd:be:52:95:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3 Validity Not Before: Nov 11 05:39:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=4b18616ac694682974cf397920a010d5153175bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:fe:ef:90:06:f8:24:fa:76:de:4a:8a:3d:31: ac:60:d3:f3:a9:aa:94:e8:76:ce:18:19:23:62:fc: a4:f7:d3:d4:ec:d8:4b:41:52:62:09:94:e7:f0:ec: 60:a0:db:42:cd:c6:66:46:6b:85:96:ee:0b:b5:6d: ae:88:fe:80:86:81:f2:c9:f6:bf:c8:07:87:56:b0: 43:ee:06:86:3f:f1:89:e9:50:05:41:0f:44:a5:a9: 66:7f:83:dd:26:2d:5b:c8:ec:1c:cc:f0:f0:73:68: 3f:3f:32:bc:27:0c:d4:f4:8a:45:e9:cc:64:6b:96: 02:0b:38:10:8e:15:ad:9d:15:a0:4b:99:29:52:79: 5e:0d:90:ac:1b:5f:d4:33:3c:d7:9b:fc:c7:46:b1: 37:b2:7b:95:94:63:cc:cf:ce:da:99:0c:29:fa:93: c3:15:65:ea:88:74:bd:05:1c:35:d2:65:73:b1:94: 46:1c:7a:bb:67:9f:81:54:e3:21:6d:7f:6e:c3:15: 63:8e:20:c7:ce:04:ee:96:ca:f7:bd:6a:57:53:b3: 1a:43:ac:ce:86:d2:91:cb:07:7d:1b:a6:3f:0b:07: de:f1:68:fd:4f:83:7e:1a:ab:bd:1c:8d:c1:a7:e5: 2a:28:1a:e7:75:05:16:de:f3:5b:71:5a:09:16:b2: f8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:18:61:6A:C6:94:68:29:74:CF:39:79:20:A0:10:D5:15:31:75:BB X509v3 Authority Key Identifier: keyid:FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/SxhhasaUaCl0zzl5IKAQ1RUxdbs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.72.0-78.40.76.255 78.40.79.0/24 185.200.220.0/22 IPv6: 2a02:449::/32 Signature Algorithm: sha256WithRSAEncryption 90:26:6f:d0:9c:37:60:b0:94:b2:9b:73:86:34:50:8d:f4:c5: 71:95:7a:ab:f5:18:f4:7c:c4:67:0e:e0:8c:f3:3e:19:fc:2e: e8:fb:e8:72:0c:b4:d2:4f:7a:a1:60:85:68:7c:24:e4:17:ec: 3f:44:02:11:c4:1e:6c:4e:22:f1:b3:ed:85:6b:1b:6a:89:83: 3f:89:70:0e:f5:53:b3:b2:69:0b:2d:34:86:df:5b:bc:1e:50: f9:96:d9:1e:61:f5:f0:2b:c3:3b:51:b6:de:c2:c9:97:b6:da: ff:20:a4:60:d7:98:4f:25:54:b7:1e:46:95:ec:9b:be:e8:03: f8:26:17:90:ef:1e:2b:41:32:20:f9:1b:a6:98:7f:64:fc:89: 03:c3:9b:84:f1:4b:68:97:91:a8:0f:a8:2d:8f:56:72:f7:7b: b1:bd:d3:05:40:94:98:6e:4e:30:37:1b:1b:bf:d1:4b:e6:c4: 34:5a:40:f3:dd:8c:df:fe:34:a6:81:8f:ea:23:d8:29:26:74: b2:7a:4e:f6:54:5e:1f:35:5b:91:ee:f4:a3:3a:1c:9d:ff:bf: 03:43:93:8c:99:55:ab:4a:ea:34:52:d9:d7:ab:c2:2b:c7:49: 82:ee:fa:e8:c3:3e:fd:68:ea:a0:1b:c8:40:95:c8:47:c7:8f: 06:33:69:7c -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZpxbUQgmB/pMaT4yr2+UpWoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmM2YyNmI1NDFmMGJiYThhNWNlNzFlYTUzODExYjQ2YzE2 NTdhYjMwHhcNMjUxMTExMDUzOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjE4NjE2YWM2OTQ2ODI5NzRjZjM5NzkyMGEwMTBkNTE1MzE3NWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/7vkAb4JPp23kqKPTGsYNPzqaqU 6HbOGBkjYvyk99PU7NhLQVJiCZTn8OxgoNtCzcZmRmuFlu4LtW2uiP6AhoHyyfa/ yAeHVrBD7gaGP/GJ6VAFQQ9Epalmf4PdJi1byOwczPDwc2g/PzK8JwzU9IpF6cxk a5YCCzgQjhWtnRWgS5kpUnleDZCsG1/UMzzXm/zHRrE3snuVlGPMz87amQwp+pPD FWXqiHS9BRw10mVzsZRGHHq7Z5+BVOMhbX9uwxVjjiDHzgTulsr3vWpXU7MaQ6zO htKRywd9G6Y/Cwfe8Wj9T4N+Gqu9HI3Bp+UqKBrndQUW3vNbcVoJFrL4wwIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFEsYYWrGlGgpdM85eSCgENUVMXW7MB8GA1UdIwQY MBaAFP8/JrVB8Luopc5x6lOBG0bBZXqzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3o4bXRVSHd1Nmlsem5IcVU0RWJSc0ZsZXJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9hNDhhYjItZDUyMy00MGYzLTk2YmYt MWMyNjBiMWUyOGQxLzEvU3hoaGFzYVVhQ2wwenpsNUlLQVExUlV4ZGJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9hNDhhYjItZDUyMy00MGYzLTk2YmYtMWMyNjBiMWUyOGQx LzEvX3o4bXRVSHd1Nmlsem5IcVU0RWJSc0ZsZXJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaMAwDBANOKEgD BABOKEwDBABOKE8DBAK5yNwwDQQCAAIwBwMFACoCBEkwDQYJKoZIhvcNAQELBQAD ggEBAJAmb9CcN2CwlLKbc4Y0UI30xXGVeqv1GPR8xGcO4IzzPhn8Luj76HIMtNJP eqFghWh8JOQX7D9EAhHEHmxOIvGz7YVrG2qJgz+JcA71U7OyaQstNIbfW7weUPmW 2R5h9fArwztRtt7CyZe22v8gpGDXmE8lVLceRpXsm77oA/gmF5DvHitBMiD5G6aY f2T8iQPDm4TxS2iXkagPqC2PVnL3e7G90wVAlJhuTjA3Gxu/0UvmxDRaQPPdjN/+ NKaBj+oj2CkmdLJ6TvZUXh81W5Hu9KM6HJ3/vwNDk4yZVatK6jRS2derwivHSYLu +ujDPv1o6qAbyECVyEfHjwYzaXw= -----END CERTIFICATE-----Generated at Sat Dec 6 08:55:01 2025 by rpki-client