This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/78KXix6rmYz3_6bjL4D3DTcmOIY.roa
File: 78KXix6rmYz3_6bjL4D3DTcmOIY.roa (raw, json)
Hash identifier: 433c72hgwpEH/NcLGuRwMnl4ZIIE9aHeVVH8ucIJKQE=
Subject key identifier: EF:C2:97:8B:1E:AB:99:8C:F7:FF:A6:E3:2F:80:F7:0D:37:26:38:86
Certificate issuer: /CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Certificate serial: 019B7B35CD7D76AB5E703CD940B1C5587CB3
Authority key identifier: A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/78KXix6rmYz3_6bjL4D3DTcmOIY.roa
Signing time: Thu 01 Jan 2026 20:18:02 +0000
ROA not before: Thu 01 Jan 2026 20:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44124
IP address blocks: 78.31.136.0/21 maxlen: 21
79.124.96.0/19 maxlen: 24
81.161.104.0/22 maxlen: 22
185.34.236.0/22 maxlen: 24
193.189.116.0/23 maxlen: 23
195.20.218.0/23 maxlen: 23
195.225.244.0/22 maxlen: 22
2a03:6600::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:35:cd:7d:76:ab:5e:70:3c:d9:40:b1:c5:58:7c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e6e823f6dda67d283a9f41a72909906ac9a837
Validity
Not Before: Jan 1 20:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=efc2978b1eab998cf7ffa6e32f80f70d37263886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:88:0b:09:f0:0e:86:c4:e5:81:8b:66:db:
3d:fa:d3:15:cb:47:09:d4:67:2f:85:74:86:57:c7:
84:13:a4:3e:27:e7:ca:01:6b:8a:70:df:f8:77:a9:
83:6a:a9:15:56:6c:d5:ce:4f:6f:4c:fb:c1:eb:c6:
20:05:3b:21:6d:55:de:cf:31:3e:fa:24:9f:98:b3:
9a:35:24:db:54:8d:55:5d:7a:60:c4:4b:5f:e1:ef:
5c:a7:f8:23:42:59:74:dc:33:07:02:26:a7:fd:bc:
d5:70:56:3d:98:4e:b5:37:5e:02:c1:31:26:1f:5a:
10:c3:b9:10:57:64:d6:5d:1c:dc:96:18:ef:4c:43:
82:fd:4b:eb:ba:85:df:69:24:e0:92:eb:03:cb:f6:
02:b3:d0:f9:62:02:5b:bb:50:ce:53:d0:48:73:2f:
32:54:51:25:6e:39:91:39:6f:a4:4d:f9:7f:28:a9:
e1:7a:98:08:db:1c:34:ce:a6:c2:47:4f:ac:80:d9:
54:e6:9d:5f:96:a0:7e:67:f2:aa:d8:3c:3b:9b:0d:
39:ab:5d:f0:7c:a0:fe:08:d5:0c:9f:1f:ff:b4:e7:
3f:42:a0:c7:2a:a8:58:7c:8d:bb:d8:72:4a:33:b5:
97:b0:3f:45:b8:8c:3a:94:15:d4:d1:d7:93:e9:f0:
b8:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C2:97:8B:1E:AB:99:8C:F7:FF:A6:E3:2F:80:F7:0D:37:26:38:86
X509v3 Authority Key Identifier:
keyid:A3:E6:E8:23:F6:DD:A6:7D:28:3A:9F:41:A7:29:09:90:6A:C9:A8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-boI_bdpn0oOp9BpykJkGrJqDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/78KXix6rmYz3_6bjL4D3DTcmOIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/18a1bc-967c-4931-85b5-00f00af1c8d7/1/o-boI_bdpn0oOp9BpykJkGrJqDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.31.136.0/21
79.124.96.0/19
81.161.104.0/22
185.34.236.0/22
193.189.116.0/23
195.20.218.0/23
195.225.244.0/22
IPv6:
2a03:6600::/32
Signature Algorithm: sha256WithRSAEncryption
3a:e7:f4:82:65:52:73:12:ba:2f:fc:0f:ad:6f:cb:75:18:a5:
ef:77:59:7f:1f:7a:33:1d:ef:f4:8a:d0:be:0c:5a:92:8f:66:
0b:4f:fe:df:b0:dc:8d:4a:ee:3c:13:6e:08:b0:79:9b:4c:d7:
55:f1:b0:80:07:65:e8:73:d3:37:32:e3:89:d1:e6:89:0a:d8:
1d:7d:7b:fa:4b:7b:7a:26:f4:bd:e2:35:f6:81:1d:f0:84:68:
5a:bd:63:bd:16:aa:3c:d5:4f:be:6e:8e:fc:17:18:e6:f6:ee:
6c:34:99:18:eb:88:65:70:4d:4d:aa:33:d6:01:7e:7a:a8:3c:
3b:2e:97:64:ee:42:96:10:83:5a:d7:ad:f5:6e:05:ab:cb:b5:
db:78:47:e4:80:6b:f3:0b:33:c5:78:6d:9b:b4:e2:01:32:a0:
f7:f6:d7:d4:e7:ec:4d:cb:1b:0b:47:47:43:44:15:f9:c8:88:
79:c2:2c:90:53:d8:db:b7:88:04:01:d5:cc:36:54:f1:8c:29:
5e:fd:9b:02:a6:8c:0b:6a:79:4b:97:b4:50:6f:6e:c5:81:6b:
91:58:9a:9a:74:7e:fb:35:df:6e:36:79:45:e2:7b:8d:a7:37:
54:9f:d0:e1:85:c3:35:cd:0c:ea:43:2e:a7:d1:e8:2d:0c:4c:
41:a6:17:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:36:10 2026 by rpki-client