This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/78GH541y_GC91MG56lJ3e17d5jY.roa File: 78GH541y_GC91MG56lJ3e17d5jY.roa (raw, json) Hash identifier: i45PmY0T64j48BiGwibORCNORjlWsT5N8M4MLmyvoJs= Subject key identifier: EF:C1:87:E7:8D:72:FC:60:BD:D4:C1:B9:EA:52:77:7B:5E:DD:E6:36 Certificate issuer: /CN=02c4913823a319feba2270e1ba2ca09e435bd55b Certificate serial: 019B7F15EDA067F865442149D40F1F2E4B5E Authority key identifier: 02:C4:91:38:23:A3:19:FE:BA:22:70:E1:BA:2C:A0:9E:43:5B:D5:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/78GH541y_GC91MG56lJ3e17d5jY.roa Signing time: Fri 02 Jan 2026 14:21:42 +0000 ROA not before: Fri 02 Jan 2026 14:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48904 IP address blocks: 185.204.8.0/23 maxlen: 23 185.204.10.0/23 maxlen: 23 217.72.16.0/21 maxlen: 21 217.72.24.0/21 maxlen: 21 2a13:ed00::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.mft rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ed:a0:67:f8:65:44:21:49:d4:0f:1f:2e:4b:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02c4913823a319feba2270e1ba2ca09e435bd55b Validity Not Before: Jan 2 14:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efc187e78d72fc60bdd4c1b9ea52777b5edde636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d9:30:bf:01:e9:0b:aa:e8:89:f1:8e:31:ba: 97:41:57:76:7f:fa:fb:f6:00:42:0b:68:5e:24:20: ec:ae:59:37:c2:11:25:35:7a:fc:1b:62:ce:86:89: ad:1b:f3:60:16:33:01:bc:8f:94:e2:7c:29:d0:64: d8:3e:5a:43:39:3d:af:3e:a4:a7:db:f7:4e:7a:91: 97:9e:97:b2:61:e9:33:d9:ba:c3:69:be:1e:2d:c5: c7:f5:bc:14:34:a2:67:87:4a:d1:6c:1d:df:82:a7: 6a:ff:34:f1:3b:01:60:f4:e8:5a:d3:93:dd:21:85: 66:f0:24:8f:c0:1a:3b:f6:b9:96:90:ed:0e:e9:b5: ee:bd:4b:2f:a7:1d:fe:8d:c5:dc:71:88:90:03:c0: 65:16:4b:18:f0:b8:79:0e:05:6a:04:73:b1:c3:f6: 97:7a:28:4d:eb:8d:f8:3f:bc:de:65:76:0b:ba:e7: 97:6e:b9:71:88:38:44:53:bf:7f:ef:1b:ca:b1:35: 86:52:24:b6:75:bd:b4:df:33:d6:99:de:d7:23:33: e0:b3:93:5d:62:aa:0a:5f:d0:9f:7d:ad:4f:21:e3: f6:a6:9f:32:36:56:3d:ce:38:6b:3c:83:81:f7:32: 6d:aa:93:39:b8:74:71:75:fc:46:82:be:f8:19:35: 5f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C1:87:E7:8D:72:FC:60:BD:D4:C1:B9:EA:52:77:7B:5E:DD:E6:36 X509v3 Authority Key Identifier: keyid:02:C4:91:38:23:A3:19:FE:BA:22:70:E1:BA:2C:A0:9E:43:5B:D5:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AsSROCOjGf66InDhuiygnkNb1Vs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/78GH541y_GC91MG56lJ3e17d5jY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b366bb-7220-45f3-b46d-d63a5111fbf7/1/AsSROCOjGf66InDhuiygnkNb1Vs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.204.8.0/22 217.72.16.0/20 IPv6: 2a13:ed00::/29 Signature Algorithm: sha256WithRSAEncryption 2d:61:91:a0:79:da:ee:0c:9f:fe:45:48:61:be:ae:b9:f6:0d: 20:ec:12:98:8b:b6:a6:d6:94:9a:ac:02:a9:eb:99:a6:16:66: d5:82:9c:be:4b:96:51:a2:bd:cb:2e:86:de:e4:f4:41:ab:6e: c5:98:2f:ac:f3:fc:c1:3e:2f:dd:d8:3b:c9:d1:70:88:f0:31: 45:62:aa:0a:8b:11:19:46:fe:36:19:bc:d2:20:ea:87:40:4b: 83:dd:02:6e:73:a2:d6:40:49:eb:4e:cc:8a:4f:22:04:ca:6f: cf:39:bc:1c:95:73:df:4e:1b:1f:e6:7b:e5:12:24:99:17:2b: 0b:2c:52:d1:81:58:59:09:d2:c2:a4:10:31:fc:29:9b:00:41: a4:7f:68:c6:a6:c8:92:a3:d0:7d:f4:bb:74:40:ed:6a:96:fd: 66:04:36:89:8b:d6:76:25:f6:79:2d:a3:1d:87:87:86:39:36: dd:44:fe:9f:28:8b:36:43:48:18:c5:b4:25:d6:8e:34:72:c9: ec:04:a7:24:4f:ca:13:78:79:fa:e8:95:c4:39:a4:1e:e1:9e: 10:7a:34:a9:a4:a4:84:d4:33:f0:ed:ef:aa:1f:b7:f1:26:27: 07:c9:2b:5e:ab:61:5f:b1:e8:2e:88:94:4a:bf:cb:5f:7c:b6: af:a5:e2:da -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/Fe2gZ/hlRCFJ1A8fLkteMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyYzQ5MTM4MjNhMzE5ZmViYTIyNzBlMWJhMmNhMDllNDM1 YmQ1NWIwHhcNMjYwMTAyMTQyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmMxODdlNzhkNzJmYzYwYmRkNGMxYjllYTUyNzc3YjVlZGRlNjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4tkwvwHpC6roifGOMbqXQVd2f/r7 9gBCC2heJCDsrlk3whElNXr8G2LOhomtG/NgFjMBvI+U4nwp0GTYPlpDOT2vPqSn 2/dOepGXnpeyYekz2brDab4eLcXH9bwUNKJnh0rRbB3fgqdq/zTxOwFg9Oha05Pd IYVm8CSPwBo79rmWkO0O6bXuvUsvpx3+jcXccYiQA8BlFksY8Lh5DgVqBHOxw/aX eihN6434P7zeZXYLuueXbrlxiDhEU79/7xvKsTWGUiS2db203zPWmd7XIzPgs5Nd YqoKX9Cffa1PIeP2pp8yNlY9zjhrPIOB9zJtqpM5uHRxdfxGgr74GTVfMQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFO/Bh+eNcvxgvdTBuepSd3te3eY2MB8GA1UdIwQY MBaAFALEkTgjoxn+uiJw4bosoJ5DW9VbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXNTUk9DT2pHZjY2SW5EaHVpeWdua05iMVZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9iMzY2YmItNzIyMC00NWYzLWI0NmQt ZDYzYTUxMTFmYmY3LzEvNzhHSDU0MXlfR0M5MU1HNTZsSjNlMTdkNWpZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9iMzY2YmItNzIyMC00NWYzLWI0NmQtZDYzYTUxMTFmYmY3 LzEvQXNTUk9DT2pHZjY2SW5EaHVpeWdua05iMVZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCucwIAwQE 2UgQMA0EAgACMAcDBQMqE+0AMA0GCSqGSIb3DQEBCwUAA4IBAQAtYZGgedruDJ/+ RUhhvq659g0g7BKYi7am1pSarAKp65mmFmbVgpy+S5ZRor3LLobe5PRBq27FmC+s 8/zBPi/d2DvJ0XCI8DFFYqoKixEZRv42GbzSIOqHQEuD3QJuc6LWQEnrTsyKTyIE ym/PObwclXPfThsf5nvlEiSZFysLLFLRgVhZCdLCpBAx/CmbAEGkf2jGpsiSo9B9 9Lt0QO1qlv1mBDaJi9Z2JfZ5LaMdh4eGOTbdRP6fKIs2Q0gYxbQl1o40csnsBKck T8oTeHn66JXEOaQe4Z4QejSppKSE1DPw7e+qH7fxJicHySteq2FfseguiJRKv8tf fLavpeLa -----END CERTIFICATE-----Generated at Tue Feb 10 01:02:05 2026 by rpki-client