This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/Fa0kRYifVQx1ih9ljAG--S0xhdo.roa File: Fa0kRYifVQx1ih9ljAG--S0xhdo.roa (raw, json) Hash identifier: xDClJitXglcWv+daXM9auWd8dPPX+1tonc7rSHwTaTE= Subject key identifier: 15:AD:24:45:88:9F:55:0C:75:8A:1F:65:8C:01:BE:F9:2D:31:85:DA Certificate issuer: /CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8 Certificate serial: 019B7B35D8E5E001A0D2E96E6BD9E7559F57 Authority key identifier: E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/Fa0kRYifVQx1ih9ljAG--S0xhdo.roa Signing time: Thu 01 Jan 2026 20:18:05 +0000 ROA not before: Thu 01 Jan 2026 20:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30902 IP address blocks: 78.111.0.0/22 maxlen: 22 78.111.0.0/23 maxlen: 23 78.111.0.0/24 maxlen: 24 78.111.2.0/23 maxlen: 23 78.111.2.0/24 maxlen: 24 78.111.3.0/24 maxlen: 24 87.247.176.0/23 maxlen: 23 87.247.176.0/24 maxlen: 24 87.247.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.mft rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:d8:e5:e0:01:a0:d2:e9:6e:6b:d9:e7:55:9f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8 Validity Not Before: Jan 1 20:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15ad2445889f550c758a1f658c01bef92d3185da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:0f:d1:95:ca:2a:04:85:33:ba:af:d3:f2:6a: 7a:31:cf:6a:29:f7:a9:c3:4a:d4:da:e7:43:49:f1: c0:e2:88:68:cf:f0:d9:57:20:61:d0:95:bc:0f:a7: 5a:9b:77:0d:65:3e:e5:0a:2f:fb:9d:91:63:df:8f: bb:1f:c0:ab:af:44:c4:0c:6e:80:ba:a8:19:3a:d3: 85:17:3d:e7:84:8e:be:e2:6e:7e:4a:41:c5:1b:2c: 7c:32:99:ae:a7:86:88:de:ed:6b:e5:69:1f:82:af: c9:03:a4:22:5a:81:a8:d9:e3:15:76:a6:cb:a1:09: 6a:3e:9c:0e:ea:d3:46:54:61:80:32:68:61:43:df: 17:4c:af:70:16:25:b1:d6:3b:df:37:77:a7:31:65: 69:7f:67:3f:1a:1b:4b:f9:25:92:62:6d:89:01:b9: 4c:5e:12:f6:ec:ae:16:07:37:c1:6b:a0:68:d8:7b: 70:1e:03:fb:b2:f7:ea:e9:15:74:c4:b5:98:f4:02: ad:cf:4b:a5:90:bb:b0:65:18:cd:5b:de:d0:a5:fb: 11:f8:4e:b6:02:48:7e:71:dd:f2:6f:b4:d5:d2:26: 10:20:d6:bf:8c:04:6f:8a:86:c7:81:19:3d:4a:1a: 2e:7b:02:d7:4a:18:c9:3c:fe:21:0f:f5:f9:7c:2c: 44:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:AD:24:45:88:9F:55:0C:75:8A:1F:65:8C:01:BE:F9:2D:31:85:DA X509v3 Authority Key Identifier: keyid:E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/Fa0kRYifVQx1ih9ljAG--S0xhdo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.111.0.0/22 87.247.176.0/23 Signature Algorithm: sha256WithRSAEncryption 98:fd:8b:69:84:0a:6f:de:cb:43:c4:0f:f6:be:09:d1:92:86: 15:de:12:6a:56:24:e8:ed:54:b2:c6:5b:d9:54:2f:9d:e3:02: b5:f7:9d:c0:ab:3c:8f:f2:f6:f5:c7:78:5d:55:62:d3:7e:bc: ae:2d:2b:b6:77:34:b8:b0:5c:7b:41:e9:68:0e:52:9f:0f:6e: d3:08:84:97:5a:7c:14:98:7e:bf:b3:f0:4d:fe:d5:60:4a:fd: d7:07:f8:62:29:96:e9:c2:aa:f3:81:a8:47:f8:72:66:0d:fb: 03:91:98:69:5b:6c:51:71:9b:54:5f:04:c2:a0:cb:60:18:78: eb:d3:bf:dc:ce:4d:be:fd:3c:4b:ba:b0:e0:6e:e1:ea:ca:74: 1f:33:d3:8b:48:8e:0b:7e:14:9b:2a:35:52:69:a9:06:95:cb: 90:71:b9:a8:32:f3:cd:6f:8d:88:a5:8b:a0:c3:79:aa:f6:92: ae:ac:ff:50:a4:12:77:d3:cc:44:8f:0f:37:eb:98:90:7f:fa: d5:c8:a0:ad:46:57:ee:5e:3b:79:e8:a3:d5:8c:e1:66:e2:2b: 5f:d2:42:5c:3e:de:f7:89:2b:2e:a1:9c:69:a5:38:4c:37:41: c4:a4:ff:77:03:c4:aa:ec:b4:db:44:4c:d3:79:1c:e2:c6:bf: c8:87:46:0f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7Ndjl4AGg0ulua9nnVZ9XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NDk3ODc3OWU5MzBlMDFmYmZlN2UwYzVmY2I0MTYxMTEy OWQ0ZTgwHhcNMjYwMTAxMjAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWFkMjQ0NTg4OWY1NTBjNzU4YTFmNjU4YzAxYmVmOTJkMzE4NWRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Q/RlcoqBIUzuq/T8mp6Mc9qKfep w0rU2udDSfHA4ohoz/DZVyBh0JW8D6dam3cNZT7lCi/7nZFj34+7H8Crr0TEDG6A uqgZOtOFFz3nhI6+4m5+SkHFGyx8Mpmup4aI3u1r5Wkfgq/JA6QiWoGo2eMVdqbL oQlqPpwO6tNGVGGAMmhhQ98XTK9wFiWx1jvfN3enMWVpf2c/GhtL+SWSYm2JAblM XhL27K4WBzfBa6Bo2HtwHgP7svfq6RV0xLWY9AKtz0ulkLuwZRjNW97QpfsR+E62 Akh+cd3yb7TV0iYQINa/jARviobHgRk9ShouewLXShjJPP4hD/X5fCxE3QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBWtJEWIn1UMdYofZYwBvvktMYXaMB8GA1UdIwQY MBaAFOlJeHeekw4B+/5+DF/LQWERKdToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlVsNGQ1NlREZ0g3X240TVg4dEJZUkVwMU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83OGRiMjktZTQ2ZC00MWY0LTg3Yzct OTVjNDJlNGE4NGMwLzEvRmEwa1JZaWZWUXgxaWg5bGpBRy0tUzB4aGRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83OGRiMjktZTQ2ZC00MWY0LTg3YzctOTVjNDJlNGE4NGMw LzEvNlVsNGQ1NlREZ0g3X240TVg4dEJZUkVwMU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCTm8AAwQB V/ewMA0GCSqGSIb3DQEBCwUAA4IBAQCY/YtphApv3stDxA/2vgnRkoYV3hJqViTo 7VSyxlvZVC+d4wK1953AqzyP8vb1x3hdVWLTfryuLSu2dzS4sFx7QeloDlKfD27T CISXWnwUmH6/s/BN/tVgSv3XB/hiKZbpwqrzgahH+HJmDfsDkZhpW2xRcZtUXwTC oMtgGHjr07/czk2+/TxLurDgbuHqynQfM9OLSI4LfhSbKjVSaakGlcuQcbmoMvPN b42IpYugw3mq9pKurP9QpBJ308xEjw8365iQf/rVyKCtRlfuXjt56KPVjOFm4itf 0kJcPt73iSsuoZxppThMN0HEpP93A8Sq7LTbREzTeRzixr/Ih0YP -----END CERTIFICATE-----Generated at Mon Jan 26 14:26:59 2026 by rpki-client