This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/OI678exd-nLeHUEfOxB3Wwb9ZJI.roa File: OI678exd-nLeHUEfOxB3Wwb9ZJI.roa (raw, json) Hash identifier: WlEEPa3tPqSDyIk1vz7Wm/A/Yv8DcUi3nrYAumkqlDc= Subject key identifier: 38:8E:BB:F1:EC:5D:FA:72:DE:1D:41:1F:3B:10:77:5B:06:FD:64:92 Certificate issuer: /CN=7418c36d041821f86b38d3223d43fe5cdb2011a0 Certificate serial: 019B7D5CFB3D31F53A48DAB62A542E72B9D6 Authority key identifier: 74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/OI678exd-nLeHUEfOxB3Wwb9ZJI.roa Signing time: Fri 02 Jan 2026 06:20:04 +0000 ROA not before: Fri 02 Jan 2026 06:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199136 IP address blocks: 78.31.160.0/23 maxlen: 23 78.31.160.0/24 maxlen: 24 78.31.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.mft rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fb:3d:31:f5:3a:48:da:b6:2a:54:2e:72:b9:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7418c36d041821f86b38d3223d43fe5cdb2011a0 Validity Not Before: Jan 2 06:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=388ebbf1ec5dfa72de1d411f3b10775b06fd6492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6c:5f:1e:40:8a:f2:34:10:ed:a5:e9:e5:f3: d1:c2:ff:44:ce:53:e4:da:0c:6b:96:c6:08:7e:73: 1b:6d:8f:8e:53:a2:14:e0:00:69:05:00:d1:d1:99: 85:4f:f7:37:c2:cb:80:cf:f4:59:0e:f3:9a:b8:39: b7:d7:f4:89:9e:7c:b5:95:4d:c9:46:f0:51:0e:ac: 3a:60:b8:bd:07:0b:c4:d1:8c:47:ef:95:e0:ef:ee: 1f:8b:e3:76:45:e5:35:c5:d7:4a:ca:83:a1:8e:89: ee:c8:d4:ae:13:1a:c2:6e:6b:4c:cf:b6:3b:27:33: 6e:b2:d4:61:c7:e7:2e:ec:e9:ed:83:60:cb:87:30: 68:eb:77:ef:11:55:f3:4f:51:df:4c:ee:28:f4:0f: 02:eb:55:e8:dd:75:cb:8c:62:8e:1e:d7:0d:97:34: 6b:30:f9:69:61:17:f6:99:4f:bc:a3:35:c3:fa:0b: 5f:91:f6:a0:82:a9:1c:dc:ef:3f:80:97:c9:fe:d7: 28:f0:81:54:48:08:f7:ca:7b:a7:e1:6c:18:9f:41: e0:70:aa:60:8c:21:ff:29:93:fc:ab:a5:85:f2:0f: fe:8c:40:19:c1:0a:3b:50:fd:bf:fc:f3:8a:bd:ff: cd:59:a7:70:0f:d1:b4:b3:d7:64:6b:1e:8a:8c:2d: c5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8E:BB:F1:EC:5D:FA:72:DE:1D:41:1F:3B:10:77:5B:06:FD:64:92 X509v3 Authority Key Identifier: keyid:74:18:C3:6D:04:18:21:F8:6B:38:D3:22:3D:43:FE:5C:DB:20:11:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBjDbQQYIfhrONMiPUP-XNsgEaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/OI678exd-nLeHUEfOxB3Wwb9ZJI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/eb3427-3a9e-47af-a8f4-4b81d62c3b53/1/dBjDbQQYIfhrONMiPUP-XNsgEaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.31.160.0/23 Signature Algorithm: sha256WithRSAEncryption 55:13:97:cb:b3:32:34:33:4c:0b:d6:96:3f:50:bc:11:bd:39: bc:ea:3d:45:dc:03:c9:fa:6e:7f:e1:e6:f6:1d:5a:f8:97:3b: 8c:c9:0f:f2:8f:18:9b:e3:cd:5f:4e:0a:41:c3:e4:7c:a1:13: ee:c3:70:28:82:f8:e9:a0:af:05:25:54:68:a5:d1:a2:8e:ca: 33:6e:79:d3:ed:0a:2b:26:05:b9:55:48:aa:a9:03:fe:bc:02: fb:60:b9:77:23:45:28:34:e8:e6:20:00:e7:a2:a7:f0:7a:8c: 36:cc:de:26:a4:cc:c6:aa:0f:d9:8c:1f:ca:c7:52:60:ce:c6: 97:33:89:a8:19:75:40:c3:99:02:77:12:46:c8:dc:6c:0f:e3: 40:2e:2d:e1:33:ef:ce:a0:4a:8c:06:a5:52:cb:78:43:99:6d: f7:e6:67:f4:89:40:12:32:68:9e:53:a1:92:f3:ae:88:c8:fd: 4c:73:0d:75:a7:0e:0a:ec:1e:67:b1:f4:ca:8f:20:be:b1:be: 22:9c:0e:98:89:ab:f7:99:7a:1d:78:61:53:22:97:01:9e:77: 46:f4:d5:50:ec:0c:6f:d3:b3:d4:f3:0e:e2:6c:d4:9b:13:83: 12:ab:83:52:cc:ea:6f:c3:0b:ff:5a:a6:2a:b0:89:7a:d7:4e: e9:57:c3:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XPs9MfU6SNq2KlQucrnWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MThjMzZkMDQxODIxZjg2YjM4ZDMyMjNkNDNmZTVjZGIy MDExYTAwHhcNMjYwMTAyMDYyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzODhlYmJmMWVjNWRmYTcyZGUxZDQxMWYzYjEwNzc1YjA2ZmQ2NDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWxfHkCK8jQQ7aXp5fPRwv9EzlPk 2gxrlsYIfnMbbY+OU6IU4ABpBQDR0ZmFT/c3wsuAz/RZDvOauDm31/SJnny1lU3J RvBRDqw6YLi9BwvE0YxH75Xg7+4fi+N2ReU1xddKyoOhjonuyNSuExrCbmtMz7Y7 JzNustRhx+cu7Ontg2DLhzBo63fvEVXzT1HfTO4o9A8C61Xo3XXLjGKOHtcNlzRr MPlpYRf2mU+8ozXD+gtfkfaggqkc3O8/gJfJ/tco8IFUSAj3ynun4WwYn0HgcKpg jCH/KZP8q6WF8g/+jEAZwQo7UP2//POKvf/NWadwD9G0s9dkax6KjC3F1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDiOu/HsXfpy3h1BHzsQd1sG/WSSMB8GA1UdIwQY MBaAFHQYw20EGCH4azjTIj1D/lzbIBGgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEJqRGJRUVlJZmhyT05NaVBVUC1YTnNnRWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9lYjM0MjctM2E5ZS00N2FmLWE4ZjQt NGI4MWQ2MmMzYjUzLzEvT0k2NzhleGQtbkxlSFVFZk94QjNXd2I5WkpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9lYjM0MjctM2E5ZS00N2FmLWE4ZjQtNGI4MWQ2MmMzYjUz LzEvZEJqRGJRUVlJZmhyT05NaVBVUC1YTnNnRWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTh+gMA0G CSqGSIb3DQEBCwUAA4IBAQBVE5fLszI0M0wL1pY/ULwRvTm86j1F3APJ+m5/4eb2 HVr4lzuMyQ/yjxib481fTgpBw+R8oRPuw3AogvjpoK8FJVRopdGijsozbnnT7Qor JgW5VUiqqQP+vAL7YLl3I0UoNOjmIADnoqfweow2zN4mpMzGqg/ZjB/Kx1JgzsaX M4moGXVAw5kCdxJGyNxsD+NALi3hM+/OoEqMBqVSy3hDmW335mf0iUASMmieU6GS 866IyP1Mcw11pw4K7B5nsfTKjyC+sb4inA6Yiav3mXodeGFTIpcBnndG9NVQ7Axv 07PU8w7ibNSbE4MSq4NSzOpvwwv/WqYqsIl6107pV8MR -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:35 2026 by rpki-client