This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/SOof68gdgSTczI_uQV673uF4Cb0.roa File: SOof68gdgSTczI_uQV673uF4Cb0.roa (raw, json) Hash identifier: Hr0tUJM0+JDGQQ8+iqx7PAB6O78jSVwToEN9B6dj4IE= Subject key identifier: 48:EA:1F:EB:C8:1D:81:24:DC:CC:8F:EE:41:5E:BB:DE:E1:78:09:BD Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 019B7EA53123D7592EBBF9EA6501578735A0 Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/SOof68gdgSTczI_uQV673uF4Cb0.roa Signing time: Fri 02 Jan 2026 12:18:33 +0000 ROA not before: Fri 02 Jan 2026 12:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44967 IP address blocks: 78.108.253.0/24 maxlen: 24 78.108.254.0/24 maxlen: 24 78.108.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:31:23:d7:59:2e:bb:f9:ea:65:01:57:87:35:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Jan 2 12:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=48ea1febc81d8124dccc8fee415ebbdee17809bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:06:fa:27:fc:5d:6b:82:bd:7e:ea:fb:70:eb: 05:c1:58:1d:47:06:4f:87:e4:e4:bf:c8:9b:00:8f: 83:46:9b:16:b4:46:ce:37:6a:73:23:82:42:a9:54: 39:6c:01:54:cf:27:43:7c:61:8a:ae:98:1b:e3:59: 2a:c5:dc:86:e4:4b:64:71:ce:0c:da:38:86:f6:f5: 37:75:85:c7:da:30:45:06:40:a6:7c:46:b6:c1:88: de:2a:e4:b1:7b:93:14:c9:80:68:0b:8e:5e:d9:d0: 98:c2:ad:01:b3:d3:48:d4:42:30:94:94:65:1e:4e: 5f:f9:6b:04:13:39:f8:f8:d6:35:fa:2a:a4:88:ae: ec:37:1a:77:80:d6:b8:d0:d0:e4:ab:e0:60:a6:d9: f5:78:87:d9:c8:01:83:c0:d7:87:5a:0a:33:2d:14: 76:b6:00:6c:86:e6:f7:aa:65:01:0c:bb:e4:3f:f0: 40:e7:99:ed:c6:0c:04:bb:b6:c8:f7:90:2c:53:6e: 7a:20:e8:d5:1e:09:69:92:be:72:c0:49:9b:d2:8a: d9:c2:b7:75:77:b3:d0:0d:bf:39:99:1b:0d:02:33: d2:38:76:d8:d5:76:fe:1c:b3:74:60:6c:09:a8:94: 11:58:1c:8b:21:03:29:05:23:a3:9a:73:bd:ad:bc: 94:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EA:1F:EB:C8:1D:81:24:DC:CC:8F:EE:41:5E:BB:DE:E1:78:09:BD X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/SOof68gdgSTczI_uQV673uF4Cb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.108.253.0-78.108.255.255 Signature Algorithm: sha256WithRSAEncryption 99:ae:a5:c5:3b:6f:86:38:b5:cd:95:7f:08:1e:5b:d9:02:e6: 20:1d:43:4c:ec:5d:62:d4:33:a3:46:49:fc:ac:a2:65:74:53: 95:02:92:6d:a9:48:49:8d:11:c5:0a:d4:56:e0:66:3c:5f:69: 60:8c:44:03:9c:42:66:6b:2d:f9:1f:bb:13:c7:7f:96:e1:18: 2e:90:ff:de:5d:aa:16:50:59:a3:e4:dd:4a:97:db:d4:46:7a: 51:ab:64:30:3a:7d:f4:df:f8:7a:56:df:d2:fd:e9:2a:cb:76: f9:32:41:c3:ed:6e:14:51:88:1f:67:bd:a2:99:13:da:90:a5: 7c:6f:58:95:00:41:09:24:db:c5:74:aa:7b:80:45:d5:62:78: 65:89:c7:c0:83:0e:4b:48:d2:a4:7b:b2:cf:cb:2d:5b:f8:56: 89:1c:3b:60:75:07:f1:97:8a:e5:ba:1e:58:97:dc:a4:98:88: e2:d6:18:85:d1:ed:03:a3:1b:ad:85:bd:81:bb:eb:39:b9:67: 1e:b3:24:dd:40:ec:b1:a9:0f:a3:e5:6f:76:a7:37:63:71:72: 0a:e2:4e:a4:90:43:fe:da:d6:6c:fe:2d:e9:e3:f9:85:7d:21: c0:c4:3e:cc:27:d3:f8:de:c7:45:b0:d9:4f:f6:89:eb:b0:8c: ba:20:5e:c1 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt+pTEj11kuu/nqZQFXhzWgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjYwMTAyMTIxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OGVhMWZlYmM4MWQ4MTI0ZGNjYzhmZWU0MTVlYmJkZWUxNzgwOWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAb6J/xda4K9fur7cOsFwVgdRwZP h+Tkv8ibAI+DRpsWtEbON2pzI4JCqVQ5bAFUzydDfGGKrpgb41kqxdyG5Etkcc4M 2jiG9vU3dYXH2jBFBkCmfEa2wYjeKuSxe5MUyYBoC45e2dCYwq0Bs9NI1EIwlJRl Hk5f+WsEEzn4+NY1+iqkiK7sNxp3gNa40NDkq+Bgptn1eIfZyAGDwNeHWgozLRR2 tgBshub3qmUBDLvkP/BA55ntxgwEu7bI95AsU256IOjVHglpkr5ywEmb0orZwrd1 d7PQDb85mRsNAjPSOHbY1Xb+HLN0YGwJqJQRWByLIQMpBSOjmnO9rbyUQwIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFEjqH+vIHYEk3MyP7kFeu97heAm9MB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvU09vZjY4Z2RnU1RjeklfdVFWNjczdUY0Q2IwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDBABObP0D AwBObDANBgkqhkiG9w0BAQsFAAOCAQEAma6lxTtvhji1zZV/CB5b2QLmIB1DTOxd YtQzo0ZJ/KyiZXRTlQKSbalISY0RxQrUVuBmPF9pYIxEA5xCZmst+R+7E8d/luEY LpD/3l2qFlBZo+TdSpfb1EZ6UatkMDp99N/4elbf0v3pKst2+TJBw+1uFFGIH2e9 opkT2pClfG9YlQBBCSTbxXSqe4BF1WJ4ZYnHwIMOS0jSpHuyz8stW/hWiRw7YHUH 8ZeK5boeWJfcpJiI4tYYhdHtA6MbrYW9gbvrOblnHrMk3UDssakPo+Vvdqc3Y3Fy CuJOpJBD/trWbP4t6eP5hX0hwMQ+zCfT+N7HRbDZT/aJ67CMuiBewQ== -----END CERTIFICATE-----Generated at Tue Jan 20 03:35:15 2026 by rpki-client