This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/78RQIm2hWK_jCNBB-A4hrhwHdVw.roa File: 78RQIm2hWK_jCNBB-A4hrhwHdVw.roa (raw, json) Hash identifier: 9kRQiy7/ttDR+b9KGqUe5Uuw2PCKusJx7m3y8ghuMvM= Subject key identifier: EF:C4:50:22:6D:A1:58:AF:E3:08:D0:41:F8:0E:21:AE:1C:07:75:5C Certificate issuer: /CN=48a2e811f00bae16a447423f11e24217142cff7c Certificate serial: 019B7BA5410CBFFD08A707661C04CD4CB060 Authority key identifier: 48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/78RQIm2hWK_jCNBB-A4hrhwHdVw.roa Signing time: Thu 01 Jan 2026 22:19:46 +0000 ROA not before: Thu 01 Jan 2026 22:19:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20473 IP address blocks: 89.37.41.0/24 maxlen: 24 188.241.7.0/24 maxlen: 24 2a14:ac80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.mft rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 16:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:41:0c:bf:fd:08:a7:07:66:1c:04:cd:4c:b0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48a2e811f00bae16a447423f11e24217142cff7c Validity Not Before: Jan 1 22:19:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efc450226da158afe308d041f80e21ae1c07755c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:13:62:96:e9:0b:25:48:e7:ba:b2:0d:bd:8f: 42:8a:77:9a:b8:e7:d0:a1:87:2a:c0:e0:3d:21:db: 1e:43:11:cf:aa:98:c2:f4:86:c0:72:ee:8d:cb:14: a8:e6:b5:1e:15:53:0d:d4:60:75:5a:99:68:0a:4f: 56:4d:35:4a:ed:70:19:a0:5e:fe:df:fd:ab:3f:ec: 39:ed:49:fd:19:f4:65:ca:4a:5c:e4:86:bd:5e:c4: e6:a1:73:e4:99:4a:16:f0:3e:f2:1c:3b:4b:a1:cb: 68:c1:24:25:ba:11:0c:c3:c8:99:f8:8d:35:ef:ed: f6:3d:10:24:f3:2d:fd:01:3f:9f:d5:09:b5:6c:41: e7:62:fa:18:bb:ae:3b:be:48:e3:0a:20:9e:d1:41: f8:b3:2f:af:be:1e:e4:6d:9e:96:6f:49:d3:f0:22: 3f:ca:c6:25:9e:64:8c:da:df:cc:21:ce:b4:10:07: 25:73:d7:91:b9:94:38:e6:66:99:23:f0:8b:b0:48: e0:d9:2c:42:4b:9c:df:bc:da:18:18:44:b4:8d:40: a6:45:b1:36:95:cf:b7:b4:d2:67:80:d6:c4:60:4e: b7:82:c0:bf:af:ca:47:a5:cf:7f:ef:af:b0:70:07: 15:b4:aa:ff:eb:81:33:49:98:06:90:38:41:52:e9: 46:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C4:50:22:6D:A1:58:AF:E3:08:D0:41:F8:0E:21:AE:1C:07:75:5C X509v3 Authority Key Identifier: keyid:48:A2:E8:11:F0:0B:AE:16:A4:47:42:3F:11:E2:42:17:14:2C:FF:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SKLoEfALrhakR0I_EeJCFxQs_3w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/78RQIm2hWK_jCNBB-A4hrhwHdVw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/33444c-0529-4fa9-b712-1abadd1b12d6/1/SKLoEfALrhakR0I_EeJCFxQs_3w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.37.41.0/24 188.241.7.0/24 IPv6: 2a14:ac80::/48 Signature Algorithm: sha256WithRSAEncryption 55:79:62:5d:8a:60:af:25:68:52:dd:d9:74:3d:a6:b4:94:37: 1f:56:6b:5f:fc:1b:4d:84:fb:2d:f8:db:f4:b3:a6:bb:87:b8: 14:5e:e9:3e:c7:2a:39:bc:71:99:9d:91:e8:24:45:57:5b:59: a4:a5:d7:f5:55:12:b4:9c:35:d6:27:77:00:19:2d:40:ac:a2: a1:fb:4f:06:da:b9:b7:46:08:ac:8a:31:71:0a:93:c2:8b:de: db:06:fd:51:dc:68:55:0c:f2:18:ec:c9:89:d5:74:04:10:82: 3e:96:5f:b4:a1:41:38:6f:c3:7c:73:3a:13:5b:79:57:8a:dd: 52:1f:03:f2:2e:ff:e0:49:95:63:0e:a0:c9:13:33:5e:63:ea: 28:50:12:52:5b:16:29:8e:b7:73:09:a9:63:45:2f:fb:4d:61: bf:89:de:00:e3:a9:2b:b5:ec:6f:69:bc:22:ce:7b:f5:ac:19: 2f:de:af:34:5f:3e:58:1e:6a:fb:9e:c9:a3:3b:1e:44:41:64: a9:3e:29:22:43:ae:4e:47:34:1c:76:82:70:f3:52:44:85:2b: 3f:e9:53:4f:55:5b:bf:cf:8b:5e:47:8c:86:43:2c:97:b7:56: a2:a4:c0:ba:b9:bf:9a:31:f1:db:6e:8b:15:f5:7b:ec:b9:b5: ba:7d:57:43 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt7pUEMv/0IpwdmHATNTLBgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4YTJlODExZjAwYmFlMTZhNDQ3NDIzZjExZTI0MjE3MTQy Y2ZmN2MwHhcNMjYwMTAxMjIxOTQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmM0NTAyMjZkYTE1OGFmZTMwOGQwNDFmODBlMjFhZTFjMDc3NTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBNilukLJUjnurINvY9CineauOfQ oYcqwOA9IdseQxHPqpjC9IbAcu6NyxSo5rUeFVMN1GB1WploCk9WTTVK7XAZoF7+ 3/2rP+w57Un9GfRlykpc5Ia9XsTmoXPkmUoW8D7yHDtLoctowSQluhEMw8iZ+I01 7+32PRAk8y39AT+f1Qm1bEHnYvoYu647vkjjCiCe0UH4sy+vvh7kbZ6Wb0nT8CI/ ysYlnmSM2t/MIc60EAclc9eRuZQ45maZI/CLsEjg2SxCS5zfvNoYGES0jUCmRbE2 lc+3tNJngNbEYE63gsC/r8pHpc9/76+wcAcVtKr/64EzSZgGkDhBUulG4QIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFO/EUCJtoViv4wjQQfgOIa4cB3VcMB8GA1UdIwQY MBaAFEii6BHwC64WpEdCPxHiQhcULP98MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0tMb0VmQUxyaGFrUjBJX0VlSkNGeFFzXzN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8zMzQ0NGMtMDUyOS00ZmE5LWI3MTIt MWFiYWRkMWIxMmQ2LzEvNzhSUUltMmhXS19qQ05CQi1BNGhyaHdIZFZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8zMzQ0NGMtMDUyOS00ZmE5LWI3MTItMWFiYWRkMWIxMmQ2 LzEvU0tMb0VmQUxyaGFrUjBJX0VlSkNGeFFzXzN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAWSUpAwQA vPEHMA8EAgACMAkDBwAqFKyAAAAwDQYJKoZIhvcNAQELBQADggEBAFV5Yl2KYK8l aFLd2XQ9prSUNx9Wa1/8G02E+y342/SzpruHuBRe6T7HKjm8cZmdkegkRVdbWaSl 1/VVErScNdYndwAZLUCsoqH7TwbaubdGCKyKMXEKk8KL3tsG/VHcaFUM8hjsyYnV dAQQgj6WX7ShQThvw3xzOhNbeVeK3VIfA/Iu/+BJlWMOoMkTM15j6ihQElJbFimO t3MJqWNFL/tNYb+J3gDjqSu17G9pvCLOe/WsGS/erzRfPlgeavueyaM7HkRBZKk+ KSJDrk5HNBx2gnDzUkSFKz/pU09VW7/Pi15HjIZDLJe3VqKkwLq5v5ox8dtuixX1 e+y5tbp9V0M= -----END CERTIFICATE-----Generated at Tue Jan 27 02:50:43 2026 by rpki-client