This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/1-nkqwt04sUMDC9uRx_t8c380GeY.roa File: 1-nkqwt04sUMDC9uRx_t8c380GeY.roa (raw, json) Hash identifier: h9/W+wiBRXLJF6MSGvt9b5FtX9V4UYzPeLihbacnCqo= Subject key identifier: FA:79:2A:C2:DD:38:B1:43:03:0B:DB:91:C7:FB:7C:73:7F:34:19:E6 Certificate issuer: /CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a Certificate serial: 019B79ECEA207889D49BCC884FE5E5BFFFC5 Authority key identifier: 61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/1-nkqwt04sUMDC9uRx_t8c380GeY.roa Signing time: Thu 01 Jan 2026 14:18:48 +0000 ROA not before: Thu 01 Jan 2026 14:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42926 IP address blocks: 178.210.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.mft rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ea:20:78:89:d4:9b:cc:88:4f:e5:e5:bf:ff:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6107e2e2e8171d319da1bc64b36c3c985e646c2a Validity Not Before: Jan 1 14:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa792ac2dd38b143030bdb91c7fb7c737f3419e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8f:df:1c:48:55:9c:36:f6:f5:85:a5:4c:01: 1e:54:28:11:08:9f:3b:a9:15:3e:5e:aa:02:bd:b8: 9e:0b:8f:00:f2:ee:1d:61:d8:f9:a8:60:71:6a:35: a0:6d:62:36:a6:cb:65:0f:82:39:01:3f:0f:9c:cb: 72:51:7d:27:5b:ed:e8:39:fe:db:21:03:46:a2:79: 74:05:e1:5a:e8:f5:8e:b9:95:0f:4f:22:6b:85:98: 27:02:e7:47:b7:09:b4:1d:08:4c:cf:b2:4f:38:2e: e1:ab:1a:b4:f5:ee:19:74:97:b3:28:71:90:31:42: 3d:d7:e7:66:c1:d7:e3:05:f5:03:63:dc:9e:4f:a5: f3:b8:1e:da:45:c0:06:55:28:70:2d:1b:38:ab:75: c0:ad:de:62:29:59:2c:70:41:2e:69:54:1a:09:1f: 15:53:9a:0b:7b:30:b1:31:be:16:c0:cb:ad:de:40: a6:4c:8a:e4:b2:3d:46:41:b8:cc:f5:d9:24:18:66: 80:29:9f:45:29:8f:59:6c:d7:a2:f2:21:70:80:c2: 1a:24:17:d5:21:ee:c5:44:bd:4d:2f:df:e5:a9:97: 7c:3a:d5:76:75:07:0d:83:94:e9:dc:ce:19:b9:62: 70:b6:b8:b3:4d:5f:3d:b2:c7:39:fb:bb:7c:f5:9c: ae:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:79:2A:C2:DD:38:B1:43:03:0B:DB:91:C7:FB:7C:73:7F:34:19:E6 X509v3 Authority Key Identifier: keyid:61:07:E2:E2:E8:17:1D:31:9D:A1:BC:64:B3:6C:3C:98:5E:64:6C:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YQfi4ugXHTGdobxks2w8mF5kbCo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/1-nkqwt04sUMDC9uRx_t8c380GeY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/b07e58-f93a-4d5f-b92d-6016d5c05f30/1/YQfi4ugXHTGdobxks2w8mF5kbCo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.210.169.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:6f:95:91:33:e4:85:b8:b5:85:8a:79:67:1d:9d:bc:3c:cc: e8:92:be:d7:f8:bc:0a:63:a9:43:0e:4e:12:3a:75:7b:d9:f9: b6:76:88:d5:30:0e:90:55:09:4f:85:a9:28:7b:c0:85:e3:b9: ad:77:60:d5:12:aa:19:18:24:b8:29:f5:2a:83:e9:a6:c9:50: 69:66:9b:dc:b0:85:46:16:8f:f9:d0:8e:b4:1b:74:7c:44:b3: 29:5c:98:88:f4:ae:6f:61:bb:e4:a7:fc:87:34:a5:bc:8d:7e: 22:63:dc:c0:03:3b:9e:0d:7d:72:d0:27:67:bd:c5:43:11:9f: c9:95:20:c2:c6:c5:da:e4:05:b7:8b:52:0c:be:51:a4:c8:55: 5c:62:65:25:10:2b:7e:fa:23:3a:2d:18:bb:fd:aa:47:5c:f9: 7e:02:f7:7b:6d:23:e9:2e:2a:57:93:f4:08:74:93:dc:fa:92: 9a:2e:3f:75:4d:0c:29:c2:f6:d6:4d:9c:0f:b7:87:c0:50:7f: 3d:9a:fb:18:8f:a1:b7:a8:4d:d7:69:c5:cd:ae:43:37:c0:81: 12:b7:7b:b2:cc:2c:b9:6c:3d:c9:99:de:f4:1f:da:e0:cf:1e: 2a:0c:2d:dd:9e:1f:cd:15:02:2b:65:9e:37:54:c1:da:9e:7f: 72:2c:a5:91 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57OogeInUm8yIT+Xlv//FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxMDdlMmUyZTgxNzFkMzE5ZGExYmM2NGIzNmMzYzk4NWU2 NDZjMmEwHhcNMjYwMTAxMTQxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTc5MmFjMmRkMzhiMTQzMDMwYmRiOTFjN2ZiN2M3MzdmMzQxOWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno/fHEhVnDb29YWlTAEeVCgRCJ87 qRU+XqoCvbieC48A8u4dYdj5qGBxajWgbWI2pstlD4I5AT8PnMtyUX0nW+3oOf7b IQNGonl0BeFa6PWOuZUPTyJrhZgnAudHtwm0HQhMz7JPOC7hqxq09e4ZdJezKHGQ MUI91+dmwdfjBfUDY9yeT6XzuB7aRcAGVShwLRs4q3XArd5iKVkscEEuaVQaCR8V U5oLezCxMb4WwMut3kCmTIrksj1GQbjM9dkkGGaAKZ9FKY9ZbNei8iFwgMIaJBfV Ie7FRL1NL9/lqZd8OtV2dQcNg5Tp3M4ZuWJwtrizTV89ssc5+7t89ZyucwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPp5KsLdOLFDAwvbkcf7fHN/NBnmMB8GA1UdIwQY MBaAFGEH4uLoFx0xnaG8ZLNsPJheZGwqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWVFmaTR1Z1hIVEdkb2J4a3MydzhtRjVrYkNvLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9iMDdlNTgtZjkzYS00ZDVmLWI5MmQt NjAxNmQ1YzA1ZjMwLzEvMS1ua3F3dDA0c1VNREM5dVJ4X3Q4YzM4MEdlWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMTIvYjA3ZTU4LWY5M2EtNGQ1Zi1iOTJkLTYwMTZkNWMwNWYz MC8xL1lRZmk0dWdYSFRHZG9ieGtzMnc4bUY1a2JDby5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALLSqTAN BgkqhkiG9w0BAQsFAAOCAQEALW+VkTPkhbi1hYp5Zx2dvDzM6JK+1/i8CmOpQw5O Ejp1e9n5tnaI1TAOkFUJT4WpKHvAheO5rXdg1RKqGRgkuCn1KoPppslQaWab3LCF RhaP+dCOtBt0fESzKVyYiPSub2G75Kf8hzSlvI1+ImPcwAM7ng19ctAnZ73FQxGf yZUgwsbF2uQFt4tSDL5RpMhVXGJlJRArfvojOi0Yu/2qR1z5fgL3e20j6S4qV5P0 CHST3PqSmi4/dU0MKcL21k2cD7eHwFB/PZr7GI+ht6hN12nFza5DN8CBErd7ssws uWw9yZne9B/a4M8eKgwt3Z4fzRUCK2WeN1TB2p5/ciylkQ== -----END CERTIFICATE-----Generated at Mon Jan 26 11:43:09 2026 by rpki-client