This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/78v4VJEfw5PVOd7xHPXoIyfNp48.roa File: 78v4VJEfw5PVOd7xHPXoIyfNp48.roa (raw, json) Hash identifier: 6qQ8BW5L0oi0uF4TdnOMiqJXcCMSoxgt26+h+J3CUsI= Subject key identifier: EF:CB:F8:54:91:1F:C3:93:D5:39:DE:F1:1C:F5:E8:23:27:CD:A7:8F Certificate issuer: /CN=23b1943087ce69623e76b2145b3479ac204ba1c9 Certificate serial: 019B7F13D07856C50C9F52DB85721FA64532 Authority key identifier: 23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/78v4VJEfw5PVOd7xHPXoIyfNp48.roa Signing time: Fri 02 Jan 2026 14:19:23 +0000 ROA not before: Fri 02 Jan 2026 14:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35405 IP address blocks: 87.236.64.0/24 maxlen: 24 87.236.65.0/24 maxlen: 24 87.236.70.0/24 maxlen: 24 87.236.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:d0:78:56:c5:0c:9f:52:db:85:72:1f:a6:45:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23b1943087ce69623e76b2145b3479ac204ba1c9 Validity Not Before: Jan 2 14:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efcbf854911fc393d539def11cf5e82327cda78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:41:15:e2:0a:08:60:3a:d8:68:94:ca:53:4d: a9:fa:ab:11:55:97:c7:9e:5a:78:3b:09:23:16:c3: 7a:bc:87:ce:f6:ef:b7:b7:a3:75:f7:99:7c:cc:96: a6:84:ca:42:c0:0f:a9:42:e1:b4:6d:23:cb:23:96: 00:bb:83:67:8e:a9:6a:45:ac:c0:06:be:e4:e3:31: 5c:de:05:90:fb:d7:b3:e2:8c:d4:a6:7d:f7:df:86: 06:97:37:e0:cf:23:d7:78:3e:24:23:23:53:0d:47: d6:3c:b1:76:94:73:ab:1b:9a:a5:dd:06:10:c3:05: 75:0c:b8:06:8f:77:1e:80:bc:4f:5e:72:09:e8:b2: 81:60:0b:ca:79:1d:17:3a:c6:bb:68:f5:35:fd:f8: 90:fd:1e:00:f8:f1:af:f8:5a:40:ae:0d:b8:41:64: 6d:8d:4c:fd:b2:a3:35:1e:da:88:85:a9:94:15:5d: b7:88:02:54:a8:66:20:fe:41:af:b3:85:e4:e1:1b: 2c:5c:51:63:6b:d2:90:6c:0b:a6:96:c5:2d:6c:f4: 1e:07:ee:f8:ad:bd:cd:d2:bd:8d:17:14:2a:41:45: 37:9d:6f:65:0e:65:cc:3b:0a:62:60:83:19:6a:fd: 2c:8e:98:2a:a4:9f:a9:81:d9:6f:ca:cf:c6:52:da: 14:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CB:F8:54:91:1F:C3:93:D5:39:DE:F1:1C:F5:E8:23:27:CD:A7:8F X509v3 Authority Key Identifier: keyid:23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/78v4VJEfw5PVOd7xHPXoIyfNp48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 87.236.64.0/23 87.236.70.0/23 Signature Algorithm: sha256WithRSAEncryption d9:55:e2:36:a7:3f:d2:6d:29:24:6a:02:b0:82:3e:86:e7:71: b0:19:6e:37:d2:0f:df:3e:8d:a8:c5:50:50:dc:3d:02:49:e6: 55:59:aa:34:ce:21:3f:2b:96:86:d1:32:06:07:fe:5f:6b:f1: 80:2f:1e:f2:46:2a:fa:62:5f:1b:fe:70:c2:fd:b0:7c:12:f9: 19:5c:34:56:8c:65:8d:2a:1d:de:68:14:75:c4:cb:ac:42:f1: 10:03:81:65:ab:5f:d6:de:71:07:fa:5e:7a:c6:74:bb:55:8f: 45:04:77:08:ca:85:41:fa:cd:71:ea:ac:9e:cc:1b:eb:54:74: c9:ee:59:66:5d:39:c7:47:ac:e4:35:e0:ec:75:2a:99:b5:16: 2f:7c:52:27:a2:c9:27:21:81:63:a4:84:bd:77:4b:f8:3c:75: dd:85:07:9f:fa:7a:75:5e:b9:ba:5b:f4:80:ad:d9:9b:22:0f: 1a:6a:08:00:e7:67:01:30:35:f1:21:e5:dd:4e:f0:3b:51:28: 53:cf:f8:fb:12:ee:ba:77:80:ee:e6:2b:20:14:c6:5c:32:95: c7:24:42:67:22:fa:af:4c:35:48:f5:6d:37:0f:7a:95:14:8a: 80:81:5d:80:a4:51:69:5e:54:c8:1f:8f:0d:c3:37:b9:e6:94: 6b:1a:01:86 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/E9B4VsUMn1LbhXIfpkUyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYjE5NDMwODdjZTY5NjIzZTc2YjIxNDViMzQ3OWFjMjA0 YmExYzkwHhcNMjYwMTAyMTQxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmNiZjg1NDkxMWZjMzkzZDUzOWRlZjExY2Y1ZTgyMzI3Y2RhNzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkEV4goIYDrYaJTKU02p+qsRVZfH nlp4OwkjFsN6vIfO9u+3t6N195l8zJamhMpCwA+pQuG0bSPLI5YAu4NnjqlqRazA Br7k4zFc3gWQ+9ez4ozUpn3334YGlzfgzyPXeD4kIyNTDUfWPLF2lHOrG5ql3QYQ wwV1DLgGj3cegLxPXnIJ6LKBYAvKeR0XOsa7aPU1/fiQ/R4A+PGv+FpArg24QWRt jUz9sqM1HtqIhamUFV23iAJUqGYg/kGvs4Xk4RssXFFja9KQbAumlsUtbPQeB+74 rb3N0r2NFxQqQUU3nW9lDmXMOwpiYIMZav0sjpgqpJ+pgdlvys/GUtoUHwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFO/L+FSRH8OT1Tne8Rz16CMnzaePMB8GA1UdIwQY MBaAFCOxlDCHzmliPnayFFs0eawgS6HJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTdHVU1JZk9hV0ktZHJJVVd6UjVyQ0JMb2NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83M2YxYzktODJiMC00ZWRlLWI4OTkt Zjc0MmYzOTVhYWY5LzEvNzh2NFZKRWZ3NVBWT2Q3eEhQWG9JeWZOcDQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC83M2YxYzktODJiMC00ZWRlLWI4OTktZjc0MmYzOTVhYWY5 LzEvSTdHVU1JZk9hV0ktZHJJVVd6UjVyQ0JMb2NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBV+xAAwQB V+xGMA0GCSqGSIb3DQEBCwUAA4IBAQDZVeI2pz/SbSkkagKwgj6G53GwGW430g/f Po2oxVBQ3D0CSeZVWao0ziE/K5aG0TIGB/5fa/GALx7yRir6Yl8b/nDC/bB8EvkZ XDRWjGWNKh3eaBR1xMusQvEQA4Flq1/W3nEH+l56xnS7VY9FBHcIyoVB+s1x6qye zBvrVHTJ7llmXTnHR6zkNeDsdSqZtRYvfFInosknIYFjpIS9d0v4PHXdhQef+np1 Xrm6W/SArdmbIg8aaggA52cBMDXxIeXdTvA7UShTz/j7Eu66d4Du5isgFMZcMpXH JEJnIvqvTDVI9W03D3qVFIqAgV2ApFFpXlTIH48Nwze55pRrGgGG -----END CERTIFICATE-----Generated at Fri Jan 2 18:07:20 2026 by rpki-client