This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/FwzuZcj6cf-_xmTr39W8PDhrwq4.roa File: FwzuZcj6cf-_xmTr39W8PDhrwq4.roa (raw, json) Hash identifier: K2taNSCkxbN7KWn4lvWBQu24pN+Ml+Z1H8IIcb4cANo= Subject key identifier: 17:0C:EE:65:C8:FA:71:FF:BF:C6:64:EB:DF:D5:BC:3C:38:6B:C2:AE Certificate issuer: /CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8 Certificate serial: 019A90CF047E36D8D1ACDD76CD93A1F39B7D Authority key identifier: 4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/FwzuZcj6cf-_xmTr39W8PDhrwq4.roa Signing time: Mon 17 Nov 2025 07:54:37 +0000 ROA not before: Mon 17 Nov 2025 07:54:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 7018 IP address blocks: 78.24.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.mft rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:90:cf:04:7e:36:d8:d1:ac:dd:76:cd:93:a1:f3:9b:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b78caa7741f99b9fbca4f4943c8b79f00bebff8 Validity Not Before: Nov 17 07:54:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=170cee65c8fa71ffbfc664ebdfd5bc3c386bc2ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9a:e5:b3:2e:2b:a5:6e:3d:b9:67:77:15:4a: 0b:44:4a:a3:8f:58:b7:1f:b2:d5:4e:ef:95:48:be: e7:e5:a3:7b:7d:79:31:25:67:45:3f:33:dd:ff:38: 79:8b:95:1a:45:fc:74:08:70:b3:e9:34:ea:34:46: 27:e8:20:31:5a:d6:f9:d8:61:45:4c:9b:0e:4b:3c: 59:f3:26:73:80:86:ee:87:ea:9e:9b:e9:cf:fe:b0: aa:84:e5:71:26:a6:cf:a1:34:e3:c6:56:01:ce:1a: 97:94:4f:90:7d:e2:fc:ab:17:ec:76:31:08:8e:5d: 6e:d8:0b:40:91:76:d8:3e:e5:5c:2f:86:31:8d:d7: 00:dc:31:a4:19:c8:98:0d:ca:bc:87:1a:35:ed:09: 6d:31:18:b6:65:07:d8:82:ad:73:23:57:3a:39:9e: e2:ce:17:0c:5b:c5:7e:0c:42:c5:58:11:aa:e4:3a: 3c:b1:b6:16:08:cb:3f:99:ec:14:a0:54:53:9f:70: 8d:a9:d5:06:fe:0f:29:30:7a:d7:ba:79:48:6b:fc: 11:9f:7b:b9:43:98:f5:35:95:a1:42:7b:23:a0:41: 9e:f5:c7:ed:1c:7c:16:b4:81:32:24:1e:5e:cf:17: b0:21:12:c2:40:e4:16:32:44:5c:31:ce:0b:6a:26: b5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:0C:EE:65:C8:FA:71:FF:BF:C6:64:EB:DF:D5:BC:3C:38:6B:C2:AE X509v3 Authority Key Identifier: keyid:4B:78:CA:A7:74:1F:99:B9:FB:CA:4F:49:43:C8:B7:9F:00:BE:BF:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/FwzuZcj6cf-_xmTr39W8PDhrwq4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/3c8854-d3e6-4581-ab33-63ced8762042/1/S3jKp3Qfmbn7yk9JQ8i3nwC-v_g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.24.123.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:e0:5a:64:82:8a:17:25:f2:9c:47:2c:bf:33:2c:64:2f:d6: 72:db:78:93:68:1d:2c:d5:50:31:5d:f2:2f:7f:a5:e9:01:74: 4e:68:05:36:fc:56:00:7d:ac:8e:8e:0d:08:95:25:da:de:0d: dd:42:72:11:de:37:29:6e:8c:e2:63:27:26:d3:06:6d:5c:f7: 2f:21:c0:51:82:4f:48:8d:c7:e4:20:9c:51:03:98:ef:d6:62: dd:42:ae:20:3b:a6:05:a8:dc:c1:74:ce:c8:ad:3b:6a:6a:09: cf:fb:76:76:cd:ef:b0:e3:88:ff:e3:9c:c6:12:fc:cb:55:01: 95:16:d3:de:64:98:89:d8:57:1d:c1:3f:76:6f:dd:02:e9:57: bb:e7:59:11:58:43:64:e0:70:77:26:37:d1:3c:dc:48:0f:7f: cb:89:16:cf:54:83:45:da:3c:86:29:e1:d7:cf:93:7a:5c:1c: 5a:2c:b8:b3:a4:49:27:2c:af:a7:a4:00:8b:91:fc:08:b3:d3: ef:24:be:d9:33:eb:78:b8:97:1a:ea:fe:43:57:0c:a9:53:87: 83:94:d1:64:b1:0c:32:7d:49:50:88:dd:d4:3c:f2:97:84:24: 3f:9b:c4:9e:47:21:82:7f:0b:05:ee:e9:1c:5d:86:c2:70:0b: 38:a7:ae:9d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqQzwR+NtjRrN12zZOh85t9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiNzhjYWE3NzQxZjk5YjlmYmNhNGY0OTQzYzhiNzlmMDBi ZWJmZjgwHhcNMjUxMTE3MDc1NDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNzBjZWU2NWM4ZmE3MWZmYmZjNjY0ZWJkZmQ1YmMzYzM4NmJjMmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkprlsy4rpW49uWd3FUoLREqjj1i3 H7LVTu+VSL7n5aN7fXkxJWdFPzPd/zh5i5UaRfx0CHCz6TTqNEYn6CAxWtb52GFF TJsOSzxZ8yZzgIbuh+qem+nP/rCqhOVxJqbPoTTjxlYBzhqXlE+QfeL8qxfsdjEI jl1u2AtAkXbYPuVcL4YxjdcA3DGkGciYDcq8hxo17QltMRi2ZQfYgq1zI1c6OZ7i zhcMW8V+DELFWBGq5Do8sbYWCMs/mewUoFRTn3CNqdUG/g8pMHrXunlIa/wRn3u5 Q5j1NZWhQnsjoEGe9cftHHwWtIEyJB5ezxewIRLCQOQWMkRcMc4Laia19wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBcM7mXI+nH/v8Zk69/VvDw4a8KuMB8GA1UdIwQY MBaAFEt4yqd0H5m5+8pPSUPIt58Avr/4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUzNqS3AzUWZtYm43eWs5SlE4aTNud0Mtdl9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8zYzg4NTQtZDNlNi00NTgxLWFiMzMt NjNjZWQ4NzYyMDQyLzEvRnd6dVpjajZjZi1feG1UcjM5VzhQRGhyd3E0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8zYzg4NTQtZDNlNi00NTgxLWFiMzMtNjNjZWQ4NzYyMDQy LzEvUzNqS3AzUWZtYm43eWs5SlE4aTNud0Mtdl9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAThh7MA0G CSqGSIb3DQEBCwUAA4IBAQA+4FpkgooXJfKcRyy/MyxkL9Zy23iTaB0s1VAxXfIv f6XpAXROaAU2/FYAfayOjg0IlSXa3g3dQnIR3jcpboziYycm0wZtXPcvIcBRgk9I jcfkIJxRA5jv1mLdQq4gO6YFqNzBdM7IrTtqagnP+3Z2ze+w44j/45zGEvzLVQGV FtPeZJiJ2FcdwT92b90C6Ve751kRWENk4HB3JjfRPNxID3/LiRbPVINF2jyGKeHX z5N6XBxaLLizpEknLK+npACLkfwIs9PvJL7ZM+t4uJca6v5DVwypU4eDlNFksQwy fUlQiN3UPPKXhCQ/m8SeRyGCfwsF7ukcXYbCcAs4p66d -----END CERTIFICATE-----Generated at Thu Dec 4 05:53:51 2025 by rpki-client