This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/78HP6hQi1EoBCF0dfLSifGax-uA.roa File: 78HP6hQi1EoBCF0dfLSifGax-uA.roa (raw, json) Hash identifier: ufuQcDrTPgoIXjW21OeudFFjjDUi4TaTymNiqch/4eg= Subject key identifier: EF:C1:CF:EA:14:22:D4:4A:01:08:5D:1D:7C:B4:A2:7C:66:B1:FA:E0 Certificate issuer: /CN=b85631108257b71fe330bc98b3abc146c95b88e0 Certificate serial: 019B7AC8F1F1B4E27CCDDE36271BE04529C7 Authority key identifier: B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/78HP6hQi1EoBCF0dfLSifGax-uA.roa Signing time: Thu 01 Jan 2026 18:19:07 +0000 ROA not before: Thu 01 Jan 2026 18:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205270 IP address blocks: 185.222.148.0/22 maxlen: 22 185.222.148.0/24 maxlen: 24 185.222.149.0/24 maxlen: 24 185.222.150.0/24 maxlen: 24 185.222.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 09:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:f1:f1:b4:e2:7c:cd:de:36:27:1b:e0:45:29:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b85631108257b71fe330bc98b3abc146c95b88e0 Validity Not Before: Jan 1 18:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efc1cfea1422d44a01085d1d7cb4a27c66b1fae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:13:e4:9e:fb:ea:55:a1:60:59:75:1e:8a:f8: a1:2c:f8:06:5b:fa:d0:a7:27:a1:89:db:b4:9e:08: b0:49:84:8a:c5:a7:8b:2d:e8:f8:89:20:59:d4:62: b7:cc:07:c4:5b:fc:0e:d5:8e:0f:2a:dc:78:6f:d5: d1:f6:a9:8a:7a:e7:7b:45:cc:6c:48:08:8a:06:b1: d6:1f:55:44:81:52:6f:5d:80:57:e3:28:b3:cb:81: 45:ea:42:7b:d4:e1:3c:f4:4f:8e:de:84:a9:20:d3: da:49:53:8c:9b:ba:60:25:48:3d:a1:0c:94:4d:09: ea:c0:39:ac:7c:54:45:e7:78:64:f3:12:96:e4:6a: b5:48:f1:79:61:56:0c:0c:2d:d6:89:26:5d:b2:64: ac:50:f8:cd:a6:a1:d8:5b:f2:f4:64:4c:29:7c:79: 1d:85:57:ad:de:af:49:ec:bc:63:e5:93:d0:b8:b3: 2f:ae:cf:6e:2f:bb:cd:28:1b:4f:19:5e:bb:17:36: 7a:07:29:c1:d2:d4:2e:94:03:98:71:bf:90:74:0c: 69:73:00:e3:89:33:81:a8:19:7a:3a:aa:ff:56:42: 51:2b:87:e7:7f:5f:bf:74:1f:84:8f:69:48:35:09: 02:f6:11:f4:4f:50:8a:35:f6:0c:d3:bc:c8:ae:b9: 02:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C1:CF:EA:14:22:D4:4A:01:08:5D:1D:7C:B4:A2:7C:66:B1:FA:E0 X509v3 Authority Key Identifier: keyid:B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/78HP6hQi1EoBCF0dfLSifGax-uA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.222.148.0/22 Signature Algorithm: sha256WithRSAEncryption 41:f8:5d:77:e9:cd:39:1e:93:45:da:8e:bd:ed:1f:7b:ea:23: c2:32:9b:f4:1f:28:f4:0a:60:e7:9f:39:12:50:38:49:d3:21: 7a:e8:d2:3f:e5:4e:4f:d8:63:ee:a5:4a:35:ff:18:c5:13:32: e2:03:7b:8b:8a:c4:d1:06:e6:1e:38:37:c3:a2:52:4b:53:ad: c5:78:fe:d1:9c:4e:6f:40:76:34:51:5e:ae:55:ba:5a:d8:57: 67:a8:e2:c6:67:b1:aa:f9:34:11:7c:a3:29:be:32:81:64:de: bd:30:51:91:78:4a:dc:8d:19:48:e8:8e:94:79:7e:2c:d9:ed: cf:2e:26:15:9e:a0:6c:72:3d:20:19:f3:1b:51:05:18:d7:1a: 7b:24:a7:fb:ef:dd:0c:69:21:f6:c5:99:77:cb:c2:b2:8b:96: 75:48:be:22:9e:7b:3c:8a:70:21:f4:e4:ab:ac:2a:f1:e4:64: 7b:44:a9:33:bc:9f:aa:1a:48:d9:ff:60:60:63:64:2a:3d:04: 3a:9f:77:ff:e4:d9:83:e8:05:05:79:d7:0d:bb:55:2b:ee:88: 2e:74:d7:1e:52:73:f8:28:91:e3:5b:7b:83:d6:d2:c7:77:56: 2a:f3:32:cc:cb:02:12:2c:76:c1:b8:db:e2:2e:46:b5:4e:f2: df:8f:b0:21 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yPHxtOJ8zd42JxvgRSnHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4NTYzMTEwODI1N2I3MWZlMzMwYmM5OGIzYWJjMTQ2Yzk1 Yjg4ZTAwHhcNMjYwMTAxMTgxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmMxY2ZlYTE0MjJkNDRhMDEwODVkMWQ3Y2I0YTI3YzY2YjFmYWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRPknvvqVaFgWXUeivihLPgGW/rQ pyehidu0ngiwSYSKxaeLLej4iSBZ1GK3zAfEW/wO1Y4PKtx4b9XR9qmKeud7Rcxs SAiKBrHWH1VEgVJvXYBX4yizy4FF6kJ71OE89E+O3oSpINPaSVOMm7pgJUg9oQyU TQnqwDmsfFRF53hk8xKW5Gq1SPF5YVYMDC3WiSZdsmSsUPjNpqHYW/L0ZEwpfHkd hVet3q9J7Lxj5ZPQuLMvrs9uL7vNKBtPGV67FzZ6BynB0tQulAOYcb+QdAxpcwDj iTOBqBl6Oqr/VkJRK4fnf1+/dB+Ej2lINQkC9hH0T1CKNfYM07zIrrkCtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO/Bz+oUItRKAQhdHXy0onxmsfrgMB8GA1UdIwQY MBaAFLhWMRCCV7cf4zC8mLOrwUbJW4jgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdUZZeEVJSlh0eF9qTUx5WXM2dkJSc2xiaU9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81NDg3ZGUtNjc4NC00MDJhLTg3YWEt YTJlY2JhOGU0OTlkLzEvNzhIUDZoUWkxRW9CQ0YwZGZMU2lmR2F4LXVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81NDg3ZGUtNjc4NC00MDJhLTg3YWEtYTJlY2JhOGU0OTlk LzEvdUZZeEVJSlh0eF9qTUx5WXM2dkJSc2xiaU9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCud6UMA0G CSqGSIb3DQEBCwUAA4IBAQBB+F136c05HpNF2o697R976iPCMpv0Hyj0CmDnnzkS UDhJ0yF66NI/5U5P2GPupUo1/xjFEzLiA3uLisTRBuYeODfDolJLU63FeP7RnE5v QHY0UV6uVbpa2FdnqOLGZ7Gq+TQRfKMpvjKBZN69MFGReErcjRlI6I6UeX4s2e3P LiYVnqBscj0gGfMbUQUY1xp7JKf7790MaSH2xZl3y8Kyi5Z1SL4inns8inAh9OSr rCrx5GR7RKkzvJ+qGkjZ/2BgY2QqPQQ6n3f/5NmD6AUFedcNu1Ur7ogudNceUnP4 KJHjW3uD1tLHd1Yq8zLMywISLHbBuNviLka1TvLfj7Ah -----END CERTIFICATE-----Generated at Sat Jan 10 18:08:13 2026 by rpki-client