This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/RzFwab2bz7rD1X-LudvVbNjO5mU.roa File: RzFwab2bz7rD1X-LudvVbNjO5mU.roa (raw, json) Hash identifier: GwSOH4+cGYHAvcYmYqJUyTbBZaiHkn4iJ0qSxXFV6l4= Subject key identifier: 47:31:70:69:BD:9B:CF:BA:C3:D5:7F:8B:B9:DB:D5:6C:D8:CE:E6:65 Certificate issuer: /CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8 Certificate serial: 019B7B35DB5B758427CA7DF76AADDC81CCEC Authority key identifier: E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/RzFwab2bz7rD1X-LudvVbNjO5mU.roa Signing time: Thu 01 Jan 2026 20:18:05 +0000 ROA not before: Thu 01 Jan 2026 20:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49801 IP address blocks: 78.111.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.mft rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:db:5b:75:84:27:ca:7d:f7:6a:ad:dc:81:cc:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e94978779e930e01fbfe7e0c5fcb41611129d4e8 Validity Not Before: Jan 1 20:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47317069bd9bcfbac3d57f8bb9dbd56cd8cee665 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:86:34:08:92:1c:62:14:d9:70:dd:20:36:58: 38:d3:14:74:33:73:ba:95:88:79:f1:bb:01:d1:d6: ca:81:6e:b2:15:dd:3d:65:c8:93:44:00:dc:b7:85: 62:a8:9b:a0:3b:09:7a:74:1c:90:c2:c1:18:9d:83: 1e:d6:60:0b:3b:db:2a:8e:0a:85:0a:c9:4f:40:9a: 2b:2b:8c:6a:a6:21:65:0f:bf:4a:d8:3e:5a:43:85: 96:53:77:eb:14:49:00:9d:02:93:d7:ee:fa:d4:b5: d1:2e:09:44:0c:50:c9:ce:dd:22:9c:57:d7:4c:cc: ab:d1:98:b6:21:98:31:b6:a7:72:82:c7:58:b7:46: 71:87:67:65:5c:26:76:cb:c9:0c:ca:52:35:64:ef: 03:cb:6c:98:7d:3a:6d:cc:63:86:3e:54:6d:c1:12: a3:c8:d6:60:f4:9f:88:a1:37:b0:f3:ad:ad:e2:0d: 12:bb:d3:e7:dc:02:3d:6f:88:11:13:d8:81:17:f5: bd:83:c3:5c:09:81:22:95:b5:55:9f:c0:cc:52:c6: 46:76:3e:46:05:67:d4:e6:68:32:9c:33:6d:1e:2c: cd:07:cf:d2:d6:6b:bb:03:3e:0b:31:92:9a:ce:67: 8a:76:35:ab:3d:75:c5:91:1e:5d:6c:a9:1a:8d:4f: 8d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:31:70:69:BD:9B:CF:BA:C3:D5:7F:8B:B9:DB:D5:6C:D8:CE:E6:65 X509v3 Authority Key Identifier: keyid:E9:49:78:77:9E:93:0E:01:FB:FE:7E:0C:5F:CB:41:61:11:29:D4:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Ul4d56TDgH7_n4MX8tBYREp1Og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/RzFwab2bz7rD1X-LudvVbNjO5mU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/78db29-e46d-41f4-87c7-95c42e4a84c0/1/6Ul4d56TDgH7_n4MX8tBYREp1Og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.111.0.0/22 Signature Algorithm: sha256WithRSAEncryption 04:a5:e4:b4:2e:fa:7a:ed:7d:70:c2:d3:ad:a2:8b:04:83:fd: 0f:23:80:5a:6d:9c:71:c4:11:e0:65:a5:3d:0f:bd:fe:ea:ac: 57:df:7f:57:22:42:bc:2e:ed:01:23:2d:8a:ce:68:8f:d6:26: ef:1a:76:e5:56:24:65:c0:cb:13:54:99:35:01:e1:b3:d2:e6: e9:d1:59:59:ea:af:e9:63:b4:91:dc:d5:7c:ba:bb:96:91:af: 09:8b:cf:83:98:78:53:98:7e:a5:29:f7:5d:07:99:c7:80:3f: 9d:28:63:bf:76:53:06:69:27:81:b9:1b:9e:05:89:3c:7a:0e: 88:52:c3:c2:31:4a:c2:7e:c2:c1:ff:8e:70:22:d1:b0:25:0f: ce:6d:4e:fa:8f:2b:34:cf:c9:2e:c5:31:23:17:db:99:5c:0d: cd:2f:1f:88:79:db:76:a4:58:92:66:77:00:39:26:05:96:ce: 1c:fa:15:a3:e8:8e:6d:b8:b5:d7:98:df:8f:00:e0:56:36:b3: 47:7a:2e:65:3a:5c:40:4c:e6:0d:d1:7d:43:e4:fa:a3:80:5a: bd:3f:9e:2d:a1:8b:02:77:0b:bc:79:fc:9a:57:0b:16:56:ba: eb:f9:c9:0f:ea:8e:14:bc:d8:55:ad:73:75:c2:b5:db:fe:48: 42:41:3c:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NdtbdYQnyn33aq3cgczsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NDk3ODc3OWU5MzBlMDFmYmZlN2UwYzVmY2I0MTYxMTEy OWQ0ZTgwHhcNMjYwMTAxMjAxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzMxNzA2OWJkOWJjZmJhYzNkNTdmOGJiOWRiZDU2Y2Q4Y2VlNjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoY0CJIcYhTZcN0gNlg40xR0M3O6 lYh58bsB0dbKgW6yFd09ZciTRADct4ViqJugOwl6dByQwsEYnYMe1mALO9sqjgqF CslPQJorK4xqpiFlD79K2D5aQ4WWU3frFEkAnQKT1+761LXRLglEDFDJzt0inFfX TMyr0Zi2IZgxtqdygsdYt0Zxh2dlXCZ2y8kMylI1ZO8Dy2yYfTptzGOGPlRtwRKj yNZg9J+IoTew862t4g0Su9Pn3AI9b4gRE9iBF/W9g8NcCYEilbVVn8DMUsZGdj5G BWfU5mgynDNtHizNB8/S1mu7Az4LMZKazmeKdjWrPXXFkR5dbKkajU+N9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEcxcGm9m8+6w9V/i7nb1WzYzuZlMB8GA1UdIwQY MBaAFOlJeHeekw4B+/5+DF/LQWERKdToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlVsNGQ1NlREZ0g3X240TVg4dEJZUkVwMU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83OGRiMjktZTQ2ZC00MWY0LTg3Yzct OTVjNDJlNGE4NGMwLzEvUnpGd2FiMmJ6N3JEMVgtTHVkdlZiTmpPNW1VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS83OGRiMjktZTQ2ZC00MWY0LTg3YzctOTVjNDJlNGE4NGMw LzEvNlVsNGQ1NlREZ0g3X240TVg4dEJZUkVwMU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTm8AMA0G CSqGSIb3DQEBCwUAA4IBAQAEpeS0Lvp67X1wwtOtoosEg/0PI4BabZxxxBHgZaU9 D73+6qxX339XIkK8Lu0BIy2KzmiP1ibvGnblViRlwMsTVJk1AeGz0ubp0VlZ6q/p Y7SR3NV8uruWka8Ji8+DmHhTmH6lKfddB5nHgD+dKGO/dlMGaSeBuRueBYk8eg6I UsPCMUrCfsLB/45wItGwJQ/ObU76jys0z8kuxTEjF9uZXA3NLx+Iedt2pFiSZncA OSYFls4c+hWj6I5tuLXXmN+PAOBWNrNHei5lOlxATOYN0X1D5PqjgFq9P54toYsC dwu8efyaVwsWVrrr+ckP6o4UvNhVrXN1wrXb/khCQTxA -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:44 2026 by rpki-client