This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/1-giefGyj1KuYknbyzEq3Mc3S06k.roa File: 1-giefGyj1KuYknbyzEq3Mc3S06k.roa (raw, json) Hash identifier: S29lHU/CyW6rr6v+NvS0kI3FW8a2f4Z+NEDuXzyG9cA= Subject key identifier: FA:08:9E:7C:6C:A3:D4:AB:98:92:76:F2:CC:4A:B7:31:CD:D2:D3:A9 Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Certificate serial: 019B7DC88ADA2AFB5786B61FBBFCE39BF25F Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/1-giefGyj1KuYknbyzEq3Mc3S06k.roa Signing time: Fri 02 Jan 2026 08:17:33 +0000 ROA not before: Fri 02 Jan 2026 08:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212914 IP address blocks: 178.18.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c8:8a:da:2a:fb:57:86:b6:1f:bb:fc:e3:9b:f2:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8 Validity Not Before: Jan 2 08:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa089e7c6ca3d4ab989276f2cc4ab731cdd2d3a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9d:72:e3:6d:3e:3c:1f:3b:d2:64:db:4c:13: 32:ad:4b:56:de:36:25:4f:b1:bd:62:82:8e:17:d7: dc:86:68:0b:51:e0:39:ee:58:72:2b:eb:0d:e6:7f: 2a:94:64:bc:8b:74:99:87:76:41:ee:96:1d:1c:d9: 22:5f:43:09:cf:93:f3:17:c1:0e:aa:59:70:a5:5d: 24:74:e4:29:43:db:02:6b:b0:e4:39:ee:95:02:07: 9f:82:03:a6:4e:81:f1:41:bf:6c:f6:99:a1:63:ba: 0b:e1:b3:d0:a2:3e:f1:d6:f4:75:84:f0:32:c0:10: fe:f2:28:d2:47:74:ee:3c:af:40:5b:f0:32:95:4f: 84:6f:0d:02:8f:bc:1b:e5:34:17:e8:d0:fc:9d:97: dc:02:dd:ca:c7:29:72:44:21:57:95:29:23:4d:ca: c9:24:cc:84:db:b2:f5:d1:ec:3e:f2:15:0b:dd:1c: d9:fc:49:89:e4:04:36:96:8e:1c:12:1c:78:39:8c: 78:21:5f:6b:30:3d:a0:f3:36:4d:af:4f:40:0c:4c: 74:a0:00:51:fa:37:b6:10:4a:8a:db:60:90:56:61: a4:14:27:1d:cc:aa:76:a9:04:24:b0:c4:7e:9c:93: 03:50:4e:6a:00:8f:7e:85:53:4c:3c:48:f1:60:d2: e6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:08:9E:7C:6C:A3:D4:AB:98:92:76:F2:CC:4A:B7:31:CD:D2:D3:A9 X509v3 Authority Key Identifier: keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/1-giefGyj1KuYknbyzEq3Mc3S06k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.18.230.0/24 Signature Algorithm: sha256WithRSAEncryption 75:6f:d9:f0:8f:06:3c:8f:ea:f4:f3:98:fa:8b:1a:6e:46:ce: 98:01:c0:fe:79:9f:87:7b:fd:61:e2:f8:d9:ab:5c:13:1f:b6: e2:d1:1f:c4:8e:00:9a:4d:4b:82:b5:ba:3d:f3:44:c9:a3:7c: 0f:6d:8b:fc:be:7c:89:b6:9c:08:9b:82:ee:36:f7:55:bc:9a: e0:8f:b2:82:95:94:f5:5c:a7:e1:d2:6c:c6:72:ce:90:89:c7: 9c:5a:db:c1:52:d3:d2:c8:c6:bf:8a:00:f0:52:70:96:63:1d: 5a:b5:fb:34:01:b1:fa:13:4a:c5:64:a8:09:d1:51:83:ca:de: 2c:72:95:db:41:b2:51:ba:7d:ea:ec:53:9d:5a:25:59:11:ef: 81:97:df:88:81:40:8c:c1:77:b9:1e:11:ef:a2:14:82:08:ef: 4c:df:b4:61:a6:2e:74:58:5a:f6:41:ec:c2:c8:c5:42:76:8d: a4:be:bd:ff:9c:ef:9b:69:68:77:82:43:00:97:cd:c4:89:6c: 3b:4c:71:1b:0c:ac:48:a2:52:1e:a0:40:e2:da:04:65:28:07: 2e:46:0a:5c:d9:76:55:24:2f:85:49:8c:50:95:79:81:14:3d: c1:27:73:ad:28:47:ed:90:53:b0:16:1c:c7:99:17:12:5d:ea: 9a:8e:04:94 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt9yIraKvtXhrYfu/zjm/JfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx YTUxYjgwHhcNMjYwMTAyMDgxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTA4OWU3YzZjYTNkNGFiOTg5Mjc2ZjJjYzRhYjczMWNkZDJkM2E5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo51y420+PB870mTbTBMyrUtW3jYl T7G9YoKOF9fchmgLUeA57lhyK+sN5n8qlGS8i3SZh3ZB7pYdHNkiX0MJz5PzF8EO qllwpV0kdOQpQ9sCa7DkOe6VAgefggOmToHxQb9s9pmhY7oL4bPQoj7x1vR1hPAy wBD+8ijSR3TuPK9AW/AylU+Ebw0Cj7wb5TQX6ND8nZfcAt3KxylyRCFXlSkjTcrJ JMyE27L10ew+8hUL3RzZ/EmJ5AQ2lo4cEhx4OYx4IV9rMD2g8zZNr09ADEx0oABR +je2EEqK22CQVmGkFCcdzKp2qQQksMR+nJMDUE5qAI9+hVNMPEjxYNLmYwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPoInnxso9SrmJJ28sxKtzHN0tOpMB8GA1UdIwQY MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt NzY3NDE2NTI1MTBkLzEvMS1naWVmR3lqMUt1WWtuYnl6RXEzTWMzUzA2ay5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGUvYmFhZmYzLWFlYjQtNDYxNi04ZmI1LTc2NzQxNjUyNTEw ZC8xL1lpam40Qi10cEp3YVV2b1Q4MkpzUWJRYVViZy5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALIS5jAN BgkqhkiG9w0BAQsFAAOCAQEAdW/Z8I8GPI/q9POY+osabkbOmAHA/nmfh3v9YeL4 2atcEx+24tEfxI4Amk1LgrW6PfNEyaN8D22L/L58ibacCJuC7jb3Vbya4I+ygpWU 9Vyn4dJsxnLOkInHnFrbwVLT0sjGv4oA8FJwlmMdWrX7NAGx+hNKxWSoCdFRg8re LHKV20GyUbp96uxTnVolWRHvgZffiIFAjMF3uR4R76IUggjvTN+0YaYudFha9kHs wsjFQnaNpL69/5zvm2lod4JDAJfNxIlsO0xxGwysSKJSHqBA4toEZSgHLkYKXNl2 VSQvhUmMUJV5gRQ9wSdzrShH7ZBTsBYcx5kXEl3qmo4ElA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:09:21 2026 by rpki-client