This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/N_ca2HsoUWR8ka9Wna1fPqfbHr4.roa File: N_ca2HsoUWR8ka9Wna1fPqfbHr4.roa (raw, json) Hash identifier: byrWfo1ZH5Y1FyKu4vOI/ViN8X+7h1tAmf+YhOXuZ/k= Subject key identifier: 37:F7:1A:D8:7B:28:51:64:7C:91:AF:56:9D:AD:5F:3E:A7:DB:1E:BE Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Certificate serial: 019B7CEE4184FEA219E91307620184C40FBF Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/N_ca2HsoUWR8ka9Wna1fPqfbHr4.roa Signing time: Fri 02 Jan 2026 04:19:07 +0000 ROA not before: Fri 02 Jan 2026 04:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213784 IP address blocks: 78.143.232.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 22:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:41:84:fe:a2:19:e9:13:07:62:01:84:c4:0f:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4 Validity Not Before: Jan 2 04:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=37f71ad87b2851647c91af569dad5f3ea7db1ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:79:f3:a4:67:66:a1:5b:0b:84:fb:ac:b8:62: e8:43:c8:ee:fc:db:d7:bb:77:2c:05:7a:97:e7:48: 2d:fa:97:e5:ec:ed:02:97:72:06:86:9f:8d:c9:b7: 7c:69:e8:4e:6e:11:6f:11:12:b0:6f:f9:6a:86:69: 8a:9b:03:13:03:0b:a8:80:d8:ec:b8:2a:04:9a:80: a7:1e:3d:d7:f6:86:0c:1a:62:5e:8e:b0:12:54:26: 58:d8:65:e6:ee:f7:ef:cb:62:94:48:20:03:56:80: 79:d9:ec:df:67:7b:2d:ca:44:a5:95:7f:48:e4:7c: 5e:5d:aa:9a:96:24:b8:39:bb:3c:4c:f8:59:a3:3a: c4:97:1d:69:28:f8:2c:31:32:0c:1f:d2:30:50:f2: dc:4e:81:09:16:e4:5b:76:9b:27:b8:fd:fa:fc:1c: 44:b7:d4:47:de:18:39:95:38:15:61:a4:0c:8a:40: d1:5f:60:1d:d1:08:fc:b9:a9:a3:9d:0d:ec:32:df: b0:e2:2c:a4:2c:f8:6a:b9:0f:a2:7e:df:96:0c:d3: a9:4f:f5:5b:ca:bb:4c:cd:62:2c:da:ca:66:6d:6a: 0a:bb:e4:06:3c:6e:cf:92:4e:eb:14:12:27:80:dc: 71:8e:b9:4f:2d:60:33:c9:86:31:ea:bb:1a:f7:3c: 73:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F7:1A:D8:7B:28:51:64:7C:91:AF:56:9D:AD:5F:3E:A7:DB:1E:BE X509v3 Authority Key Identifier: keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/N_ca2HsoUWR8ka9Wna1fPqfbHr4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.143.232.0/22 Signature Algorithm: sha256WithRSAEncryption 63:cd:dc:68:79:86:33:b0:b1:d2:df:5f:83:e7:95:94:6b:50: d2:7a:0a:c8:fd:c4:c6:cb:e3:7a:ae:05:eb:a6:ef:8f:8d:96: 4c:40:8a:89:0f:e7:93:f4:fc:ef:df:8b:c9:1e:69:fa:a3:ad: 27:ec:bd:24:bd:9a:19:44:12:01:47:40:ab:b0:35:3f:2e:9e: c1:af:cc:a2:a2:12:36:43:4b:81:43:39:a0:6e:bc:1c:df:66: 69:36:61:df:4d:bc:72:8c:c5:b7:70:ed:53:00:86:5a:eb:27: 86:be:ac:2b:3b:09:97:cb:75:22:7e:cc:e5:57:54:29:26:64: 70:61:04:c2:10:00:9b:40:fa:ee:02:6e:f9:d7:44:43:bc:1a: 18:98:20:40:fe:5f:4e:33:da:a7:25:23:52:31:c2:56:52:ed: d3:7c:02:40:78:7e:9e:12:10:8e:74:89:95:94:ac:b4:9b:39: 07:56:94:27:f0:27:d0:cb:35:8e:0c:08:5f:80:32:a9:4a:5d: 52:b5:b6:2e:56:68:c0:7d:29:49:58:b4:56:2d:cd:76:91:81: d5:89:d5:d3:a5:6a:23:06:c1:72:04:7c:24:52:2c:04:ea:48: d1:1c:d6:4b:30:b3:7a:ac:47:f3:11:12:a6:7d:c2:1e:47:df: 73:e6:20:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87kGE/qIZ6RMHYgGExA+/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg2Y2NlMDZlNzBkZjk3MGQ5MGFiZmUzY2JlN2ZhODgyZjQ2 N2IxZTQwHhcNMjYwMTAyMDQxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzN2Y3MWFkODdiMjg1MTY0N2M5MWFmNTY5ZGFkNWYzZWE3ZGIxZWJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXnzpGdmoVsLhPusuGLoQ8ju/NvX u3csBXqX50gt+pfl7O0Cl3IGhp+Nybd8aehObhFvERKwb/lqhmmKmwMTAwuogNjs uCoEmoCnHj3X9oYMGmJejrASVCZY2GXm7vfvy2KUSCADVoB52ezfZ3stykSllX9I 5HxeXaqaliS4Obs8TPhZozrElx1pKPgsMTIMH9IwUPLcToEJFuRbdpsnuP36/BxE t9RH3hg5lTgVYaQMikDRX2Ad0Qj8uamjnQ3sMt+w4iykLPhquQ+ift+WDNOpT/Vb yrtMzWIs2spmbWoKu+QGPG7Pkk7rFBIngNxxjrlPLWAzyYYx6rsa9zxzdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDf3Gth7KFFkfJGvVp2tXz6n2x6+MB8GA1UdIwQY MBaAFIbM4G5w35cNkKv+PL5/qIL0Z7HkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2Ut ODk3MTRhN2U4ZDU4LzEvTl9jYTJIc29VV1I4a2E5V25hMWZQcWZiSHI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC82NmYwNWMtNzQxYy00NzIwLWJjN2UtODk3MTRhN2U4ZDU4 LzEvaHN6Z2JuRGZsdzJRcV80OHZuLW9ndlJuc2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTo/oMA0G CSqGSIb3DQEBCwUAA4IBAQBjzdxoeYYzsLHS31+D55WUa1DSegrI/cTGy+N6rgXr pu+PjZZMQIqJD+eT9Pzv34vJHmn6o60n7L0kvZoZRBIBR0CrsDU/Lp7Br8yiohI2 Q0uBQzmgbrwc32ZpNmHfTbxyjMW3cO1TAIZa6yeGvqwrOwmXy3UifszlV1QpJmRw YQTCEACbQPruAm7510RDvBoYmCBA/l9OM9qnJSNSMcJWUu3TfAJAeH6eEhCOdImV lKy0mzkHVpQn8CfQyzWODAhfgDKpSl1StbYuVmjAfSlJWLRWLc12kYHVidXTpWoj BsFyBHwkUiwE6kjRHNZLMLN6rEfzERKmfcIeR99z5iD5 -----END CERTIFICATE-----Generated at Sun Jan 18 08:53:30 2026 by rpki-client