This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/7c8XJTkSpCTznV-oU3ZPXG_WlhY.roa File: 7c8XJTkSpCTznV-oU3ZPXG_WlhY.roa (raw, json) Hash identifier: aeKBeidJN1kX6molxYYw874JX9ke8Btc8rGLZxRwrCI= Subject key identifier: ED:CF:17:25:39:12:A4:24:F3:9D:5F:A8:53:76:4F:5C:6F:D6:96:16 Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8 Certificate serial: 019B7D5B02C676FB98E5EDA4DC3A1F6D5981 Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/7c8XJTkSpCTznV-oU3ZPXG_WlhY.roa Signing time: Fri 02 Jan 2026 06:17:55 +0000 ROA not before: Fri 02 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 401838 IP address blocks: 78.24.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:02:c6:76:fb:98:e5:ed:a4:dc:3a:1f:6d:59:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8 Validity Not Before: Jan 2 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edcf17253912a424f39d5fa853764f5c6fd69616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8f:d3:1c:c1:58:f3:9d:2f:46:36:79:3d:ed: 47:0b:74:14:1b:57:fb:0b:7a:55:90:c4:bc:0c:8d: 9e:79:9f:f5:39:a2:42:d8:f4:31:21:91:d3:58:f7: 99:79:b5:5a:52:38:2f:82:ba:fc:01:0d:e2:a3:6a: fd:87:50:26:85:a2:65:17:82:9d:53:e8:60:db:fd: 09:af:51:c1:63:6e:62:60:a6:6e:6f:ba:f0:94:c8: 51:3e:d1:a8:ba:a7:b9:86:a9:61:cd:d7:c8:29:4c: c6:62:cd:39:cd:4f:a3:94:09:15:2c:f6:20:d2:a3: 81:01:6f:eb:2c:fd:4a:99:c0:84:c8:0f:e7:ae:dd: ec:07:68:02:70:55:2c:24:1d:5c:9e:db:b1:7b:1d: 62:af:36:d9:60:32:17:87:ee:77:29:68:89:dd:79: 8c:4e:c8:8f:1c:fc:af:66:e8:d7:2d:20:b3:81:61: 97:64:cd:86:54:29:33:61:90:5a:46:a8:b2:5f:ef: c0:ba:64:9b:0d:1e:56:4f:f8:35:a6:73:22:12:1a: d7:f4:22:e4:39:20:f0:33:f1:42:5f:9c:a8:4d:5d: ff:0d:51:33:ac:f7:e1:4f:35:67:b4:9d:2d:e5:b6: dd:1e:71:a4:b6:21:a7:68:59:af:62:7f:49:47:37: b6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CF:17:25:39:12:A4:24:F3:9D:5F:A8:53:76:4F:5C:6F:D6:96:16 X509v3 Authority Key Identifier: keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/7c8XJTkSpCTznV-oU3ZPXG_WlhY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.24.123.0/24 Signature Algorithm: sha256WithRSAEncryption 03:79:20:70:ca:56:72:11:c4:29:c5:de:3c:90:14:f4:87:9d: e3:99:6f:7b:1c:90:a8:3a:5e:bf:54:b7:2c:7c:03:02:5f:18: 49:99:00:f9:f4:33:42:f2:41:84:b5:66:b7:f3:2e:0f:4f:9e: d9:ea:39:af:1b:51:a9:4f:6d:4f:fd:3b:77:dd:03:16:e5:71: 7b:e7:8f:25:7e:45:98:49:51:59:3e:18:fa:b6:e5:b5:c6:0d: d6:76:0c:73:ed:fa:e3:84:16:79:bb:3b:65:50:38:aa:5f:20: f3:05:75:54:2b:74:49:3a:d5:72:9f:03:cc:b3:3f:c0:9b:10: 1f:7a:0c:01:f2:59:7e:4f:fc:59:b7:fd:3a:f4:5b:27:bf:a1: 18:91:6c:66:5a:d3:3c:c5:08:a0:e8:47:d4:1a:3b:7a:34:68: 8d:49:e7:b9:91:80:51:64:85:3b:73:2a:43:08:9d:b5:ea:8b: 31:b5:04:67:4a:cb:21:f1:f7:6b:32:8e:74:b3:b8:80:e0:98: 0f:29:47:d4:04:c6:a9:34:2a:27:89:18:95:55:5e:8f:09:87: 25:17:a3:50:1e:a4:fd:64:80:a0:c4:34:84:c2:c5:02:59:29: 38:f1:b7:5c:9c:f4:5b:36:56:e6:e2:47:c0:4f:08:79:bc:69: ef:c7:81:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WwLGdvuY5e2k3DofbVmBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNzhjYWE3NzQxZjk5YjlmYmNhNGY0OTQzYzhiNzlmMDBi ZWJmZjgwHhcNMjYwMTAyMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGNmMTcyNTM5MTJhNDI0ZjM5ZDVmYTg1Mzc2NGY1YzZmZDY5NjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo/THMFY850vRjZ5Pe1HC3QUG1f7 C3pVkMS8DI2eeZ/1OaJC2PQxIZHTWPeZebVaUjgvgrr8AQ3io2r9h1AmhaJlF4Kd U+hg2/0Jr1HBY25iYKZub7rwlMhRPtGouqe5hqlhzdfIKUzGYs05zU+jlAkVLPYg 0qOBAW/rLP1KmcCEyA/nrt3sB2gCcFUsJB1cntuxex1irzbZYDIXh+53KWiJ3XmM TsiPHPyvZujXLSCzgWGXZM2GVCkzYZBaRqiyX+/AumSbDR5WT/g1pnMiEhrX9CLk OSDwM/FCX5yoTV3/DVEzrPfhTzVntJ0t5bbdHnGktiGnaFmvYn9JRze2QwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO3PFyU5EqQk851fqFN2T1xv1pYWMB8GA1UdIwQY MBaAFEt4yqd0H5m5+8pPSUPIt58Avr/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzNqS3AzUWZtYm43eWs5SlE4aTNud0Mtdl9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zYzg4NTQtZDNlNi00NTgxLWFiMzMt NjNjZWQ4NzYyMDQyLzEvN2M4WEpUa1NwQ1R6blYtb1UzWlBYR19XbGhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8zYzg4NTQtZDNlNi00NTgxLWFiMzMtNjNjZWQ4NzYyMDQy LzEvUzNqS3AzUWZtYm43eWs5SlE4aTNud0Mtdl9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAThh7MA0G CSqGSIb3DQEBCwUAA4IBAQADeSBwylZyEcQpxd48kBT0h53jmW97HJCoOl6/VLcs fAMCXxhJmQD59DNC8kGEtWa38y4PT57Z6jmvG1GpT21P/Tt33QMW5XF7548lfkWY SVFZPhj6tuW1xg3Wdgxz7frjhBZ5uztlUDiqXyDzBXVUK3RJOtVynwPMsz/AmxAf egwB8ll+T/xZt/069Fsnv6EYkWxmWtM8xQig6EfUGjt6NGiNSee5kYBRZIU7cypD CJ216osxtQRnSssh8fdrMo50s7iA4JgPKUfUBMapNConiRiVVV6PCYclF6NQHqT9 ZICgxDSEwsUCWSk48bdcnPRbNlbm4kfATwh5vGnvx4FQ -----END CERTIFICATE-----Generated at Wed Jan 21 05:19:21 2026 by rpki-client