This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/78Cs8FmR3BIH_U5LsGqewvTlDV8.roa File: 78Cs8FmR3BIH_U5LsGqewvTlDV8.roa (raw, json) Hash identifier: Z1dE+G16ehwR1QYJ/Luwdk+orufuAf1qVWJAWByx1UU= Subject key identifier: EF:C0:AC:F0:59:91:DC:12:07:FD:4E:4B:B0:6A:9E:C2:F4:E5:0D:5F Certificate issuer: /CN=3a4945e46764029d2581d820c3373fa445855539 Certificate serial: 019B7F840C84F5A67CA0BD2A741BCB838FAE Authority key identifier: 3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/78Cs8FmR3BIH_U5LsGqewvTlDV8.roa Signing time: Fri 02 Jan 2026 16:21:59 +0000 ROA not before: Fri 02 Jan 2026 16:21:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 62.244.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.mft rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 04:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:0c:84:f5:a6:7c:a0:bd:2a:74:1b:cb:83:8f:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a4945e46764029d2581d820c3373fa445855539 Validity Not Before: Jan 2 16:21:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efc0acf05991dc1207fd4e4bb06a9ec2f4e50d5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f3:b1:b0:98:96:ea:7c:cb:5f:ca:d5:00:4c: 15:31:40:19:18:57:4d:bb:9f:23:84:7a:4d:8b:dd: e5:4d:4e:62:e0:c3:d9:42:47:c2:b1:89:11:a6:8d: d3:27:2b:8e:a0:88:75:26:c1:86:a5:eb:f8:33:a8: aa:24:49:8f:bf:00:41:d5:dd:1a:7b:f1:1a:dc:ed: 68:62:30:b6:9f:4f:63:c0:05:44:40:67:92:5a:48: 86:ea:9d:cf:61:3b:b4:13:c0:31:2e:b8:d2:8f:c7: 41:aa:17:72:ad:13:f2:a0:65:ef:9a:9c:62:8c:80: 0a:05:98:37:a3:56:b9:a8:d9:38:f4:5d:47:71:55: d6:61:46:51:22:98:c8:29:6b:46:e3:d5:41:ab:82: 8a:83:c7:04:97:dd:97:63:6d:a3:dd:ca:b0:93:f1: 7f:42:dc:ac:ee:25:44:f6:97:b2:3f:72:b2:37:d2: 74:64:fc:f1:b0:fd:aa:49:e1:8e:08:22:1f:b9:cc: 05:27:e3:d3:e9:4f:17:5d:01:e0:c2:ed:5c:6f:7d: 72:79:00:b3:80:40:00:90:2c:6d:07:f0:51:d5:ee: 5a:11:96:ac:41:fd:ef:4d:84:a3:48:5f:b6:44:8f: 10:64:e1:00:c4:53:7a:50:45:54:02:f5:58:bc:b8: 2b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C0:AC:F0:59:91:DC:12:07:FD:4E:4B:B0:6A:9E:C2:F4:E5:0D:5F X509v3 Authority Key Identifier: keyid:3A:49:45:E4:67:64:02:9D:25:81:D8:20:C3:37:3F:A4:45:85:55:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OklF5GdkAp0lgdggwzc_pEWFVTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/78Cs8FmR3BIH_U5LsGqewvTlDV8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/4ef680-7c55-4a5b-8568-336ac9456464/1/OklF5GdkAp0lgdggwzc_pEWFVTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.244.46.0/24 Signature Algorithm: sha256WithRSAEncryption ae:bc:9b:0f:f3:e4:b3:80:24:65:a4:f1:33:af:cd:28:08:c5: bb:0d:ea:eb:09:fa:bf:62:66:20:45:70:7c:84:84:8f:0c:f4: c7:81:ea:06:ed:15:8c:69:3a:2d:b5:e8:1a:f3:2c:5c:d9:4d: 8c:d5:48:35:af:b0:f2:e3:9e:5f:26:e0:d8:0b:eb:83:60:c7: 5e:e8:e5:27:9e:4e:da:ab:cc:1c:5f:4f:94:39:e2:d1:2d:19: 2b:e6:94:e4:4c:8d:a6:2f:d9:2f:a8:b1:f9:e6:df:dd:b5:5e: 29:71:3d:53:13:73:7b:c3:3b:5c:44:cf:b5:b4:d7:6a:0c:7c: 19:d5:64:37:82:e7:87:f3:fc:d3:8a:2e:1a:a9:53:a9:43:85: 2a:d8:00:dc:b5:21:39:aa:b3:ce:d3:01:14:1b:e3:30:80:e1: f5:0d:0c:7c:c4:6d:a4:71:76:fe:96:0f:80:36:fb:40:eb:b7: ea:97:24:08:47:d7:5e:83:05:59:50:9b:20:b0:00:b6:df:8f: 8a:a6:c4:73:36:47:cc:0e:c6:e7:93:98:09:ab:7d:61:ce:27: 21:fb:c9:c9:c5:5a:5a:eb:a8:c4:da:3c:bf:c0:a2:aa:69:27: cc:41:4c:42:a2:54:19:f1:3a:e5:16:02:b9:0d:0c:f5:47:23: 41:a2:ae:df -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hAyE9aZ8oL0qdBvLg4+uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNDk0NWU0Njc2NDAyOWQyNTgxZDgyMGMzMzczZmE0NDU4 NTU1MzkwHhcNMjYwMTAyMTYyMTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmMwYWNmMDU5OTFkYzEyMDdmZDRlNGJiMDZhOWVjMmY0ZTUwZDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfOxsJiW6nzLX8rVAEwVMUAZGFdN u58jhHpNi93lTU5i4MPZQkfCsYkRpo3TJyuOoIh1JsGGpev4M6iqJEmPvwBB1d0a e/Ea3O1oYjC2n09jwAVEQGeSWkiG6p3PYTu0E8AxLrjSj8dBqhdyrRPyoGXvmpxi jIAKBZg3o1a5qNk49F1HcVXWYUZRIpjIKWtG49VBq4KKg8cEl92XY22j3cqwk/F/ Qtys7iVE9peyP3KyN9J0ZPzxsP2qSeGOCCIfucwFJ+PT6U8XXQHgwu1cb31yeQCz gEAAkCxtB/BR1e5aEZasQf3vTYSjSF+2RI8QZOEAxFN6UEVUAvVYvLgrPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO/ArPBZkdwSB/1OS7BqnsL05Q1fMB8GA1UdIwQY MBaAFDpJReRnZAKdJYHYIMM3P6RFhVU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1Njgt MzM2YWM5NDU2NDY0LzEvNzhDczhGbVIzQklIX1U1THNHcWV3dlRsRFY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS80ZWY2ODAtN2M1NS00YTViLTg1NjgtMzM2YWM5NDU2NDY0 LzEvT2tsRjVHZGtBcDBsZ2RnZ3d6Y19wRVdGVlRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPvQuMA0G CSqGSIb3DQEBCwUAA4IBAQCuvJsP8+SzgCRlpPEzr80oCMW7DerrCfq/YmYgRXB8 hISPDPTHgeoG7RWMaTottega8yxc2U2M1Ug1r7Dy455fJuDYC+uDYMde6OUnnk7a q8wcX0+UOeLRLRkr5pTkTI2mL9kvqLH55t/dtV4pcT1TE3N7wztcRM+1tNdqDHwZ 1WQ3gueH8/zTii4aqVOpQ4Uq2ADctSE5qrPO0wEUG+MwgOH1DQx8xG2kcXb+lg+A NvtA67fqlyQIR9degwVZUJsgsAC234+KpsRzNkfMDsbnk5gJq31hzich+8nJxVpa 66jE2jy/wKKqaSfMQUxColQZ8TrlFgK5DQz1RyNBoq7f -----END CERTIFICATE-----Generated at Mon Jan 19 11:50:04 2026 by rpki-client