This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/78EB01J4WgTKHPdcf3EVHTeuc8s.roa File: 78EB01J4WgTKHPdcf3EVHTeuc8s.roa (raw, json) Hash identifier: AEd0Bl1EvO9i526KOfk+4Yr0kpyHuNMccILjVfMb8ds= Subject key identifier: EF:C1:01:D3:52:78:5A:04:CA:1C:F7:5C:7F:71:15:1D:37:AE:73:CB Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Certificate serial: 019B76EB7DA28B5535EC07FD65287E642C6E Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/78EB01J4WgTKHPdcf3EVHTeuc8s.roa Signing time: Thu 01 Jan 2026 00:18:23 +0000 ROA not before: Thu 01 Jan 2026 00:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8708 IP address blocks: 45.67.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:7d:a2:8b:55:35:ec:07:fd:65:28:7e:64:2c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589 Validity Not Before: Jan 1 00:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efc101d352785a04ca1cf75c7f71151d37ae73cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:20:8b:93:b2:e7:88:12:7c:70:6a:1c:02:7d: f8:1a:fd:f6:5b:66:ad:e6:66:b6:e4:3d:6a:b2:90: 8e:2e:59:78:95:b0:59:5c:4c:7f:7c:0a:9e:a3:a9: 50:ed:96:b6:90:e8:e9:9c:3d:50:24:c4:22:5b:b3: 26:19:48:6b:a6:35:c1:da:27:7e:54:f3:fd:8e:4a: 0a:46:95:c0:51:df:f6:89:2d:34:0e:f8:bf:b1:8a: d0:45:f8:e5:07:e5:87:7b:02:f9:5a:de:2d:b2:6a: 63:ad:b6:67:06:f0:64:c8:a7:69:24:52:32:f8:bb: 44:7c:8b:53:a4:02:54:1f:d5:4f:19:23:a2:15:70: 3f:80:db:cc:94:84:d4:d8:4b:2b:df:df:da:7b:56: fa:69:75:e0:de:b2:68:d9:93:e3:b4:78:0f:61:c6: 2e:94:bc:1c:dc:cc:12:02:47:95:eb:3b:d8:3d:80: f8:19:fc:09:4d:48:06:2c:4c:9a:81:32:9f:41:8e: 0c:4e:2b:0a:71:ef:ad:5d:02:fa:90:29:69:71:29: 27:9e:f1:f9:3d:a8:b1:93:52:41:ff:f7:12:89:96: 46:7b:d5:8a:5e:34:ca:25:7c:de:8e:43:71:72:54: 72:6f:02:75:27:36:d9:6f:9d:26:38:00:03:eb:44: ab:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C1:01:D3:52:78:5A:04:CA:1C:F7:5C:7F:71:15:1D:37:AE:73:CB X509v3 Authority Key Identifier: keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/78EB01J4WgTKHPdcf3EVHTeuc8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.67.37.0/24 Signature Algorithm: sha256WithRSAEncryption 64:b0:16:73:4c:4f:5d:61:fe:f2:07:a7:e6:84:ae:4e:ea:18: 13:dd:10:25:80:1f:32:0c:f9:8a:2b:7d:42:5c:80:ad:ee:22: 2d:d3:8d:ce:ad:b3:69:16:d1:9f:58:32:41:c4:35:5c:d8:65: 1e:d1:b5:d1:98:c6:a8:d7:54:2d:32:13:b1:15:ed:7b:66:71: 62:93:ec:f2:b8:f6:51:19:ab:6a:46:6a:df:ee:5a:dd:42:3d: 5c:12:9d:07:27:82:4d:56:14:e3:a1:03:83:67:61:d0:52:14: 3f:71:e9:68:bf:4d:6d:83:9b:5f:2d:e9:12:1d:d4:06:9e:12: 74:80:29:1b:f9:19:f8:aa:c2:19:5f:93:d3:fd:53:69:be:2c: 3e:27:f1:4d:58:fe:42:d8:c1:68:aa:8c:f1:5a:c6:f4:4b:0c: 8a:e8:e1:65:8d:32:38:56:3a:87:b8:d3:e9:98:0e:0b:c9:42: 17:9a:48:14:1d:43:ce:c9:73:e1:2f:f3:71:8c:13:92:98:31: a8:82:f6:fa:b5:7d:d2:8e:8b:25:70:19:ff:a3:68:ea:1f:85: 04:cf:82:76:91:f7:4d:9c:3d:d8:d6:18:f5:8b:d2:93:db:e3: 9d:ae:f1:58:96:bb:7e:38:20:9f:24:86:89:e0:27:15:60:ab: 1b:9a:ac:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt2632ii1U17Af9ZSh+ZCxuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjZWY1OGQ0Y2ZhMzU1NDNmODQ4OGEyNzU2ZTY5MjRlNjQ3 YjQ1ODkwHhcNMjYwMTAxMDAxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmMxMDFkMzUyNzg1YTA0Y2ExY2Y3NWM3ZjcxMTUxZDM3YWU3M2NiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9SCLk7LniBJ8cGocAn34Gv32W2at 5ma25D1qspCOLll4lbBZXEx/fAqeo6lQ7Za2kOjpnD1QJMQiW7MmGUhrpjXB2id+ VPP9jkoKRpXAUd/2iS00Dvi/sYrQRfjlB+WHewL5Wt4tsmpjrbZnBvBkyKdpJFIy +LtEfItTpAJUH9VPGSOiFXA/gNvMlITU2Esr39/ae1b6aXXg3rJo2ZPjtHgPYcYu lLwc3MwSAkeV6zvYPYD4GfwJTUgGLEyagTKfQY4MTisKce+tXQL6kClpcSknnvH5 Paixk1JB//cSiZZGe9WKXjTKJXzejkNxclRybwJ1JzbZb50mOAAD60SrowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO/BAdNSeFoEyhz3XH9xFR03rnPLMB8GA1UdIwQY MBaAFNzvWNTPo1VD+EiKJ1bmkk5ke0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt MmVjZTA0ZTE4NWMyLzEvNzhFQjAxSjRXZ1RLSFBkY2YzRVZIVGV1YzhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy LzEvM085WTFNLWpWVVA0U0lvblZ1YVNUbVI3UllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUMlMA0G CSqGSIb3DQEBCwUAA4IBAQBksBZzTE9dYf7yB6fmhK5O6hgT3RAlgB8yDPmKK31C XICt7iIt043OrbNpFtGfWDJBxDVc2GUe0bXRmMao11QtMhOxFe17ZnFik+zyuPZR GatqRmrf7lrdQj1cEp0HJ4JNVhTjoQODZ2HQUhQ/celov01tg5tfLekSHdQGnhJ0 gCkb+Rn4qsIZX5PT/VNpviw+J/FNWP5C2MFoqozxWsb0SwyK6OFljTI4VjqHuNPp mA4LyUIXmkgUHUPOyXPhL/NxjBOSmDGogvb6tX3SjoslcBn/o2jqH4UEz4J2kfdN nD3Y1hj1i9KT2+OdrvFYlrt+OCCfJIaJ4CcVYKsbmqwV -----END CERTIFICATE-----Generated at Wed Jan 21 11:06:55 2026 by rpki-client