This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/s280gYIfz7LLg7UI8DnH_9zZ-nc.roa File: s280gYIfz7LLg7UI8DnH_9zZ-nc.roa (raw, json) Hash identifier: 0XvpQfwjTnUeeYMt2sG5z+LAZnoLxsExJ4JPz1TlC3g= Subject key identifier: B3:6F:34:81:82:1F:CF:B2:CB:83:B5:08:F0:39:C7:FF:DC:D9:FA:77 Certificate issuer: /CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834 Certificate serial: 019B7A5ACB881855F94E5863D92E1A1CC789 Authority key identifier: F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/s280gYIfz7LLg7UI8DnH_9zZ-nc.roa Signing time: Thu 01 Jan 2026 16:18:49 +0000 ROA not before: Thu 01 Jan 2026 16:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211956 IP address blocks: 78.40.22.0/24 maxlen: 24 78.40.23.0/24 maxlen: 24 2a07:4247:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:cb:88:18:55:f9:4e:58:63:d9:2e:1a:1c:c7:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f7a8b70aa10069b5515a9cb3c149b885b7a12834 Validity Not Before: Jan 1 16:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b36f3481821fcfb2cb83b508f039c7ffdcd9fa77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ee:3c:23:68:16:69:3c:18:27:2d:b2:58:35: 29:e5:be:36:4c:5d:72:46:a1:08:9b:1f:c7:25:2a: 39:29:71:e9:93:32:34:1b:63:c9:ab:9d:29:10:f7: ed:82:2d:9a:45:f7:8f:a5:2e:e3:ca:89:72:79:d1: 74:6a:9e:7c:d8:dd:97:9f:94:27:95:24:1e:70:5e: 56:e3:a0:62:36:8c:fc:6c:a0:83:27:6b:98:95:cf: 7e:b8:cd:76:0f:21:15:2a:bf:11:86:b3:d9:d1:39: 9a:65:04:b8:99:cc:ff:5e:b9:7a:b5:6e:f2:00:70: ff:40:6e:22:3a:8c:0f:b6:90:48:37:b9:a2:57:e3: 41:82:96:eb:00:62:a2:88:43:5e:bf:04:23:45:66: 74:28:24:44:e5:56:14:25:e0:f6:05:45:13:0c:8d: 93:d5:5c:db:1e:35:77:03:f0:12:33:29:1c:92:29: d1:b4:3a:a7:c4:06:e9:5d:be:e2:f5:9d:34:08:01: b1:1d:27:23:a6:87:97:ce:de:3b:4e:2f:df:bd:22: 87:fd:3b:3d:14:24:f3:83:7d:4c:e9:f3:af:ad:6c: b2:b8:15:12:6e:9f:ee:42:07:72:31:aa:b2:bc:b3: 85:35:a0:7b:94:3e:8b:95:d4:e0:c3:e9:aa:ee:be: 64:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:6F:34:81:82:1F:CF:B2:CB:83:B5:08:F0:39:C7:FF:DC:D9:FA:77 X509v3 Authority Key Identifier: keyid:F7:A8:B7:0A:A1:00:69:B5:51:5A:9C:B3:C1:49:B8:85:B7:A1:28:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96i3CqEAabVRWpyzwUm4hbehKDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/s280gYIfz7LLg7UI8DnH_9zZ-nc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48aeaf-9545-4d4b-9cda-9d0743370495/1/96i3CqEAabVRWpyzwUm4hbehKDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.22.0/23 IPv6: 2a07:4247:3000::/36 Signature Algorithm: sha256WithRSAEncryption 52:85:42:ff:11:c1:a7:bd:1d:ef:3a:d9:c1:4b:55:6a:07:f4: 1f:eb:e3:17:55:35:dd:2f:05:b2:77:bf:9c:11:9e:5a:44:82: 1d:57:65:08:81:ce:3a:89:18:f6:47:60:57:81:ea:02:1b:23: 02:e7:a6:54:2e:7e:7c:80:64:8c:c4:e9:98:e3:45:a1:f6:60: d1:d8:8f:8c:fa:51:d2:d7:3c:1d:27:5b:49:cb:83:39:5d:58: 2f:54:7c:1c:5f:b0:1b:10:72:a4:91:c5:f4:11:38:66:ad:32: 1b:20:fd:5d:00:00:48:15:6d:21:34:a9:1c:a0:1b:dd:30:4f: 2b:cb:8a:6e:37:26:bb:18:52:12:9c:ad:29:90:c1:ad:6b:0a: bf:65:1c:c4:90:ba:9c:05:ae:ba:c9:a0:1f:95:ba:a1:1b:bd: 8c:15:05:2c:eb:88:7d:f5:38:24:60:7f:82:3e:11:6c:b2:5e: 97:63:c5:ab:29:28:5b:8d:7a:9d:b2:bc:03:d1:39:af:ce:6c: 87:3c:8a:b2:38:c8:2d:57:5b:b6:2b:32:24:df:0f:77:57:c4: b9:4b:13:b1:f2:5d:cf:5d:61:63:de:a4:62:0a:3c:91:48:6b: ac:a5:f6:db:aa:80:a5:63:ea:0a:29:f5:54:c0:b2:d5:e8:84: df:78:55:bc -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt6WsuIGFX5Tlhj2S4aHMeJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3YThiNzBhYTEwMDY5YjU1MTVhOWNiM2MxNDliODg1Yjdh MTI4MzQwHhcNMjYwMTAxMTYxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzZmMzQ4MTgyMWZjZmIyY2I4M2I1MDhmMDM5YzdmZmRjZDlmYTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e48I2gWaTwYJy2yWDUp5b42TF1y RqEImx/HJSo5KXHpkzI0G2PJq50pEPftgi2aRfePpS7jyolyedF0ap582N2Xn5Qn lSQecF5W46BiNoz8bKCDJ2uYlc9+uM12DyEVKr8RhrPZ0TmaZQS4mcz/Xrl6tW7y AHD/QG4iOowPtpBIN7miV+NBgpbrAGKiiENevwQjRWZ0KCRE5VYUJeD2BUUTDI2T 1VzbHjV3A/ASMykckinRtDqnxAbpXb7i9Z00CAGxHScjpoeXzt47Ti/fvSKH/Ts9 FCTzg31M6fOvrWyyuBUSbp/uQgdyMaqyvLOFNaB7lD6LldTgw+mq7r5kAwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFLNvNIGCH8+yy4O1CPA5x//c2fp3MB8GA1UdIwQY MBaAFPeotwqhAGm1UVqcs8FJuIW3oSg0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOTZpM0NxRUFhYlZSV3B5endVbTRoYmVoS0RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80OGFlYWYtOTU0NS00ZDRiLTljZGEt OWQwNzQzMzcwNDk1LzEvczI4MGdZSWZ6N0xMZzdVSThEbkhfOXpaLW5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80OGFlYWYtOTU0NS00ZDRiLTljZGEtOWQwNzQzMzcwNDk1 LzEvOTZpM0NxRUFhYlZSV3B5endVbTRoYmVoS0RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBTigWMA4E AgACMAgDBgQqB0JHMDANBgkqhkiG9w0BAQsFAAOCAQEAUoVC/xHBp70d7zrZwUtV agf0H+vjF1U13S8Fsne/nBGeWkSCHVdlCIHOOokY9kdgV4HqAhsjAuemVC5+fIBk jMTpmONFofZg0diPjPpR0tc8HSdbScuDOV1YL1R8HF+wGxBypJHF9BE4Zq0yGyD9 XQAASBVtITSpHKAb3TBPK8uKbjcmuxhSEpytKZDBrWsKv2UcxJC6nAWuusmgH5W6 oRu9jBUFLOuIffU4JGB/gj4RbLJel2PFqykoW416nbK8A9E5r85shzyKsjjILVdb tisyJN8Pd1fEuUsTsfJdz11hY96kYgo8kUhrrKX226qApWPqCin1VMCy1eiE33hV vA== -----END CERTIFICATE-----Generated at Thu Jan 8 13:19:29 2026 by rpki-client