This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/78P8bg4fhDC941Z-sCKZX9vKz5c.roa File: 78P8bg4fhDC941Z-sCKZX9vKz5c.roa (raw, json) Hash identifier: 95blh8AcNCpkNeCFXQto2YGidkNS7zNlYdkmjlG4aOU= Subject key identifier: EF:C3:FC:6E:0E:1F:84:30:BD:E3:56:7E:B0:22:99:5F:DB:CA:CF:97 Certificate issuer: /CN=101287927ad7b1db479ae5ab92ab87c4a4faf496 Certificate serial: 019B797EC9896A5AAA56AD377A5EF62BA4B2 Authority key identifier: 10:12:87:92:7A:D7:B1:DB:47:9A:E5:AB:92:AB:87:C4:A4:FA:F4:96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/78P8bg4fhDC941Z-sCKZX9vKz5c.roa Signing time: Thu 01 Jan 2026 12:18:30 +0000 ROA not before: Thu 01 Jan 2026 12:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 81.14.0.0/17 maxlen: 24 95.176.0.0/17 maxlen: 24 185.147.220.0/22 maxlen: 24 2a00:be80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.crl rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.mft rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 12:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:c9:89:6a:5a:aa:56:ad:37:7a:5e:f6:2b:a4:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=101287927ad7b1db479ae5ab92ab87c4a4faf496 Validity Not Before: Jan 1 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efc3fc6e0e1f8430bde3567eb022995fdbcacf97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:13:2e:8f:bc:8c:f9:a8:31:6e:5c:7b:09:e2: e8:30:63:e9:fe:fc:bb:e1:0d:09:ff:1a:8e:8c:23: 3a:cc:4b:98:7a:d3:24:74:ff:6b:33:46:f2:71:ed: fd:ec:a3:4a:78:b4:60:5c:17:2f:5f:d5:e8:b5:01: 8a:cb:63:4e:95:4e:00:2d:90:95:c5:ff:de:2a:7d: e3:09:1a:92:f6:d6:d8:c9:13:ab:28:68:ea:18:7d: 82:dd:3a:bf:66:07:21:fb:4f:07:f6:21:5b:3b:7d: 39:18:29:7f:95:98:b1:51:5e:5c:d1:b6:0a:dd:69: 13:b7:19:4c:f5:96:93:7a:67:ab:00:bc:db:31:73: 92:27:fe:d1:89:da:ae:0e:b5:17:73:f1:ed:cc:d3: 64:c2:36:ce:3e:d8:1f:05:0b:51:ef:3c:25:7a:61: bd:16:10:e5:5a:de:69:4b:92:05:72:10:8e:ac:7a: e8:fa:4f:b7:aa:22:14:3c:07:be:a5:28:ba:cd:19: ef:10:e4:50:d9:b6:8b:d5:53:57:e5:a7:3c:01:fd: c3:33:8c:46:9d:74:ab:34:0b:d2:90:2e:54:47:bc: ad:93:e5:0b:ad:b3:7c:a0:4a:e3:fa:6c:d6:38:e8: 7f:80:a5:d1:93:c4:62:31:dc:ce:f1:81:27:e5:70: 1a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C3:FC:6E:0E:1F:84:30:BD:E3:56:7E:B0:22:99:5F:DB:CA:CF:97 X509v3 Authority Key Identifier: keyid:10:12:87:92:7A:D7:B1:DB:47:9A:E5:AB:92:AB:87:C4:A4:FA:F4:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EBKHknrXsdtHmuWrkquHxKT69JY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/78P8bg4fhDC941Z-sCKZX9vKz5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/12391d-5fb6-4dea-a713-73a452bafb46/1/EBKHknrXsdtHmuWrkquHxKT69JY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.14.0.0/17 95.176.0.0/17 185.147.220.0/22 IPv6: 2a00:be80::/32 Signature Algorithm: sha256WithRSAEncryption 75:93:81:1d:68:39:c3:cf:6b:c4:f8:7e:44:1b:31:f4:44:5b: 9d:33:4a:42:1a:65:01:50:cd:23:40:14:1a:4b:31:ed:f5:38: 0a:d4:cd:5e:10:ae:fc:37:af:87:66:6e:5a:fb:f7:7e:1d:a4: 83:62:df:3d:94:91:48:d0:9f:ed:99:a6:b5:f2:d5:b5:12:9f: 21:1b:20:b8:a9:a3:df:e3:57:6f:94:b3:18:bf:2c:74:cf:aa: 64:a2:da:0f:16:3e:41:50:c4:33:f9:1c:32:ba:82:f8:d2:d2: 65:ad:8f:2e:c9:3b:17:0b:2f:4e:03:6b:43:c7:6c:6d:02:ee: e9:c7:cd:be:65:16:9d:48:7a:e1:69:70:e5:02:fd:62:81:d4: 05:fe:6d:e8:ba:b0:b8:4b:94:ce:e5:a8:11:d2:12:fb:5a:ee: 8d:07:38:5f:d2:e0:c0:79:12:f1:9c:32:b4:3a:77:e0:2e:57: 11:e6:d9:04:cd:0f:3c:6f:4e:f2:dd:6d:8f:72:14:6a:eb:7a: 39:51:43:12:90:31:45:69:8f:1d:b3:38:70:56:10:2c:6c:15: 9d:94:bf:f5:da:c1:f4:65:ab:19:66:d6:4a:9d:f6:c9:34:e6: d2:98:67:7c:96:f0:fa:1a:aa:9b:6e:47:ab:5b:fc:58:f0:b1: 99:cd:78:11 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt5fsmJalqqVq03el72K6SyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMTI4NzkyN2FkN2IxZGI0NzlhZTVhYjkyYWI4N2M0YTRm YWY0OTYwHhcNMjYwMTAxMTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmMzZmM2ZTBlMWY4NDMwYmRlMzU2N2ViMDIyOTk1ZmRiY2FjZjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBMuj7yM+agxblx7CeLoMGPp/vy7 4Q0J/xqOjCM6zEuYetMkdP9rM0byce397KNKeLRgXBcvX9XotQGKy2NOlU4ALZCV xf/eKn3jCRqS9tbYyROrKGjqGH2C3Tq/Zgch+08H9iFbO305GCl/lZixUV5c0bYK 3WkTtxlM9ZaTemerALzbMXOSJ/7RidquDrUXc/HtzNNkwjbOPtgfBQtR7zwlemG9 FhDlWt5pS5IFchCOrHro+k+3qiIUPAe+pSi6zRnvEORQ2baL1VNX5ac8Af3DM4xG nXSrNAvSkC5UR7ytk+ULrbN8oErj+mzWOOh/gKXRk8RiMdzO8YEn5XAatQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFO/D/G4OH4QwveNWfrAimV/bys+XMB8GA1UdIwQY MBaAFBASh5J617HbR5rlq5Krh8Sk+vSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUJLSGtuclhzZHRIbXVXcmtxdUh4S1Q2OUpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xMjM5MWQtNWZiNi00ZGVhLWE3MTMt NzNhNDUyYmFmYjQ2LzEvNzhQOGJnNGZoREM5NDFaLXNDS1pYOXZLejVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC8xMjM5MWQtNWZiNi00ZGVhLWE3MTMtNzNhNDUyYmFmYjQ2 LzEvRUJLSGtuclhzZHRIbXVXcmtxdUh4S1Q2OUpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQHUQ4AAwQH X7AAAwQCuZPcMA0EAgACMAcDBQAqAL6AMA0GCSqGSIb3DQEBCwUAA4IBAQB1k4Ed aDnDz2vE+H5EGzH0RFudM0pCGmUBUM0jQBQaSzHt9TgK1M1eEK78N6+HZm5a+/d+ HaSDYt89lJFI0J/tmaa18tW1Ep8hGyC4qaPf41dvlLMYvyx0z6pkotoPFj5BUMQz +RwyuoL40tJlrY8uyTsXCy9OA2tDx2xtAu7px82+ZRadSHrhaXDlAv1igdQF/m3o urC4S5TO5agR0hL7Wu6NBzhf0uDAeRLxnDK0OnfgLlcR5tkEzQ88b07y3W2PchRq 63o5UUMSkDFFaY8dszhwVhAsbBWdlL/12sH0ZasZZtZKnfbJNObSmGd8lvD6Gqqb bkerW/xY8LGZzXgR -----END CERTIFICATE-----Generated at Wed Jan 7 22:29:40 2026 by rpki-client