This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/bOiCbz9dALfluTYK4_jqGYR0Jz0.roa File: bOiCbz9dALfluTYK4_jqGYR0Jz0.roa (raw, json) Hash identifier: Q/2eSa8vYTTH6Z04ZbFhK/SEUsOgRoPldjQvM2cSbUM= Subject key identifier: 6C:E8:82:6F:3F:5D:00:B7:E5:B9:36:0A:E3:F8:EA:19:84:74:27:3D Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 019B16E69901B6BAB8385926F56098D04DEF Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/bOiCbz9dALfluTYK4_jqGYR0Jz0.roa Signing time: Sat 13 Dec 2025 08:49:29 +0000 ROA not before: Sat 13 Dec 2025 08:49:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 214025 IP address blocks: 178.239.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:16:e6:99:01:b6:ba:b8:38:59:26:f5:60:98:d0:4d:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Dec 13 08:49:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6ce8826f3f5d00b7e5b9360ae3f8ea198474273d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:34:b6:0d:cb:37:4f:d5:71:e4:bb:5a:74:96: 03:95:0c:87:52:78:f7:2a:57:4f:1c:32:50:56:1e: be:04:a3:f4:ca:84:e4:53:e6:3d:9e:6c:e8:51:5c: b0:59:04:8a:51:c3:16:db:e4:34:59:d7:39:2f:a6: e6:00:d3:b3:fa:ff:eb:96:c3:6c:b9:f2:4b:9b:5f: 12:c7:55:07:f0:31:db:bb:37:f6:c0:02:a4:07:fb: 7d:57:5d:02:31:d7:b2:1a:e2:5d:06:e0:f8:d7:17: 31:7f:3e:6c:a7:d8:29:02:82:88:ca:99:b3:b5:14: 92:31:dc:38:24:6d:d0:3c:32:5b:8d:10:ad:ff:f1: 39:d7:de:b6:40:8d:35:c3:e1:89:d1:da:4a:1e:b2: df:05:8f:98:4a:3b:aa:1b:2d:91:8d:95:f9:95:57: 97:ed:50:6c:30:0a:79:49:8d:87:12:9e:a6:e4:ec: 2e:45:3c:f7:1e:e4:cc:24:f2:71:18:6a:bf:10:e4: df:3c:63:2a:0e:a7:19:5f:77:95:97:17:da:d1:ca: fd:20:e1:8f:8f:61:f6:1c:6d:65:57:5e:53:0c:4a: c6:61:e7:f3:9c:86:79:8d:b6:61:0b:8f:39:58:e6: 1f:63:c4:4d:fa:20:75:2c:d4:f2:6c:ef:6b:0b:50: 36:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E8:82:6F:3F:5D:00:B7:E5:B9:36:0A:E3:F8:EA:19:84:74:27:3D X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/bOiCbz9dALfluTYK4_jqGYR0Jz0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.239.119.0/24 Signature Algorithm: sha256WithRSAEncryption b6:21:1b:5b:c5:8b:fa:fe:34:55:b8:1e:37:52:91:5f:1b:b6: b8:5a:a8:ab:ae:29:41:c5:3d:46:88:eb:d3:df:64:86:1d:4c: d0:37:bb:c7:5b:14:ff:6a:69:f1:50:c9:ae:c3:95:5b:3e:90: 2e:87:8a:0e:26:59:98:f5:d4:b7:6a:a8:25:d3:10:ad:9b:2a: 20:ae:c6:cc:b7:8b:8a:05:e3:0c:e2:24:ea:4d:11:fe:d1:56: 4b:4c:aa:ac:df:2a:1c:4d:e5:85:14:4a:af:b3:13:04:86:93: c2:12:b6:73:8a:e4:0c:db:95:a6:ad:c7:b1:86:48:41:aa:bd: 30:85:8f:0a:31:f5:b0:c0:c4:49:59:1a:95:ff:a4:4a:ab:62: 55:ec:4c:90:98:44:d1:45:ef:0d:21:33:c5:27:9b:1d:ea:7d: 3b:af:2b:75:8b:f9:52:99:51:7d:96:cb:c8:59:ac:a7:5d:94: c7:d6:2f:ad:f4:0d:d0:fa:4f:50:58:a6:7e:a7:14:56:ae:f3: 91:1f:ad:04:82:ce:e6:cd:30:d4:95:f4:97:0d:51:58:78:1a: c5:d5:cc:44:79:0d:25:93:4c:da:ec:c2:92:7c:90:ca:c9:59: 86:f2:64:00:fd:7f:d2:92:a7:0d:10:d4:a1:6c:e4:04:9c:02: e4:0c:19:12 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsW5pkBtrq4OFkm9WCY0E3vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjUxMjEzMDg0OTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2U4ODI2ZjNmNWQwMGI3ZTViOTM2MGFlM2Y4ZWExOTg0NzQyNzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzS2Dcs3T9Vx5LtadJYDlQyHUnj3 KldPHDJQVh6+BKP0yoTkU+Y9nmzoUVywWQSKUcMW2+Q0Wdc5L6bmANOz+v/rlsNs ufJLm18Sx1UH8DHbuzf2wAKkB/t9V10CMdeyGuJdBuD41xcxfz5sp9gpAoKIypmz tRSSMdw4JG3QPDJbjRCt//E51962QI01w+GJ0dpKHrLfBY+YSjuqGy2RjZX5lVeX 7VBsMAp5SY2HEp6m5OwuRTz3HuTMJPJxGGq/EOTfPGMqDqcZX3eVlxfa0cr9IOGP j2H2HG1lV15TDErGYefznIZ5jbZhC485WOYfY8RN+iB1LNTybO9rC1A2WwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGzogm8/XQC35bk2CuP46hmEdCc9MB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvYk9pQ2J6OWRBTGZsdVRZSzRfanFHWVIwSnowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu93MA0G CSqGSIb3DQEBCwUAA4IBAQC2IRtbxYv6/jRVuB43UpFfG7a4WqirrilBxT1GiOvT 32SGHUzQN7vHWxT/amnxUMmuw5VbPpAuh4oOJlmY9dS3aqgl0xCtmyogrsbMt4uK BeMM4iTqTRH+0VZLTKqs3yocTeWFFEqvsxMEhpPCErZziuQM25WmrcexhkhBqr0w hY8KMfWwwMRJWRqV/6RKq2JV7EyQmETRRe8NITPFJ5sd6n07ryt1i/lSmVF9lsvI WaynXZTH1i+t9A3Q+k9QWKZ+pxRWrvORH60Egs7mzTDUlfSXDVFYeBrF1cxEeQ0l k0za7MKSfJDKyVmG8mQA/X/SkqcNENShbOQEnALkDBkS -----END CERTIFICATE-----Generated at Wed Dec 17 15:24:19 2025 by rpki-client