This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/x5Spo4-FeBNDNeijBeVZFRWlHuk.roa File: x5Spo4-FeBNDNeijBeVZFRWlHuk.roa (raw, json) Hash identifier: 8PshAgwgd0COcwcGY0rg4RaGlhmmQFcQWaE/0hoihqU= Subject key identifier: C7:94:A9:A3:8F:85:78:13:43:35:E8:A3:05:E5:59:15:15:A5:1E:E9 Certificate issuer: /CN=b91b91504983091506a1a944457a4558b94dab7f Certificate serial: 019B7AC927C02CE36F77A4852A3626A3DB50 Authority key identifier: B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/x5Spo4-FeBNDNeijBeVZFRWlHuk.roa Signing time: Thu 01 Jan 2026 18:19:21 +0000 ROA not before: Thu 01 Jan 2026 18:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57776 IP address blocks: 178.175.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.mft rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:27:c0:2c:e3:6f:77:a4:85:2a:36:26:a3:db:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b91b91504983091506a1a944457a4558b94dab7f Validity Not Before: Jan 1 18:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c794a9a38f8578134335e8a305e5591515a51ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:34:7b:60:ca:12:85:86:bf:47:52:49:cf:e6: 5c:75:69:bd:4b:68:aa:19:4a:a7:2f:62:0f:c4:6f: e7:74:05:78:72:a9:76:a3:dc:45:39:d4:61:51:e7: 64:dd:0e:0d:a9:7c:25:61:bd:40:fd:08:ab:a1:08: 60:e5:05:8c:6f:c2:41:2a:06:31:10:fb:17:f3:e2: d7:45:a4:3a:fc:65:04:be:cf:16:58:d6:54:52:06: 98:bc:3e:fb:3e:a8:ba:65:48:d5:39:a8:cf:9f:b3: b6:63:cc:b4:1e:7c:8e:f9:b8:6c:7f:b3:ac:40:69: 64:89:21:2c:26:a9:fc:ce:df:6c:87:4b:bd:2e:41: cb:bd:09:a0:4d:59:37:36:dc:24:45:8e:66:b2:a3: ca:99:9a:e9:42:89:71:c7:6b:a9:a2:8b:67:cd:81: 98:b8:16:54:76:57:a2:82:46:4e:ee:10:a0:6a:41: 99:07:83:d3:96:da:5b:a3:6f:75:b0:f0:e8:78:45: 77:36:42:73:cb:87:21:d2:86:35:7c:fa:62:68:28: c9:6b:77:10:b4:d4:24:26:d4:2a:a9:f0:38:a2:01: cb:d6:dd:0f:5f:0c:cf:3f:73:67:64:09:fb:b3:c6: 28:b5:39:bc:f4:4a:5f:2a:88:38:a2:22:a6:4f:c9: 07:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:94:A9:A3:8F:85:78:13:43:35:E8:A3:05:E5:59:15:15:A5:1E:E9 X509v3 Authority Key Identifier: keyid:B9:1B:91:50:49:83:09:15:06:A1:A9:44:45:7A:45:58:B9:4D:AB:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRuRUEmDCRUGoalERXpFWLlNq38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/x5Spo4-FeBNDNeijBeVZFRWlHuk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/74e17f-f9f4-4789-92b7-9dd6e88fcc8d/1/uRuRUEmDCRUGoalERXpFWLlNq38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.175.156.0/23 Signature Algorithm: sha256WithRSAEncryption 27:c9:4f:c2:a4:94:c9:73:3b:3b:fc:f2:18:25:fd:26:18:9e: 3a:24:b3:67:e3:42:ba:b8:71:b3:ac:c4:f1:69:41:0b:f4:3e: 86:59:56:4e:17:3b:87:24:e8:54:df:f9:57:c3:16:4d:db:be: 67:0a:dd:7f:35:d6:83:0b:2a:d8:68:8d:2b:15:71:d8:1a:68: ae:ae:19:23:1b:38:08:0b:04:1b:44:af:36:8e:cf:56:48:af: 59:68:9c:5c:74:3a:b3:86:23:2f:33:95:7b:47:da:f0:46:bc: 65:0a:45:0d:0f:de:42:2c:48:ae:1d:58:02:59:8b:53:1f:7a: 4f:7f:9c:ec:a2:87:c9:8c:4a:3a:50:ba:67:73:7f:6b:1c:8f: 1e:98:48:af:0c:0d:bc:83:55:f6:53:ec:b6:21:23:bd:0c:91: c6:c7:37:7d:fb:f4:81:e0:56:4f:ca:59:1a:a4:dd:d5:5e:25: 67:50:38:52:3e:3c:05:0c:19:e0:2f:cb:e5:f2:e0:f4:e2:07: 98:cb:8d:89:f8:64:a6:9d:c9:95:6a:02:dd:1a:b4:d0:b0:40: c8:a4:ce:3e:d6:7c:a7:7b:d3:42:33:4a:e1:40:22:ca:b0:77: 4f:d4:a9:55:34:87:90:94:84:f4:31:64:ea:88:90:8a:71:00: 3c:f8:a8:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6ySfALONvd6SFKjYmo9tQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI5MWI5MTUwNDk4MzA5MTUwNmExYTk0NDQ1N2E0NTU4Yjk0 ZGFiN2YwHhcNMjYwMTAxMTgxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzk0YTlhMzhmODU3ODEzNDMzNWU4YTMwNWU1NTkxNTE1YTUxZWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTR7YMoShYa/R1JJz+ZcdWm9S2iq GUqnL2IPxG/ndAV4cql2o9xFOdRhUedk3Q4NqXwlYb1A/QiroQhg5QWMb8JBKgYx EPsX8+LXRaQ6/GUEvs8WWNZUUgaYvD77Pqi6ZUjVOajPn7O2Y8y0HnyO+bhsf7Os QGlkiSEsJqn8zt9sh0u9LkHLvQmgTVk3NtwkRY5msqPKmZrpQolxx2upootnzYGY uBZUdleigkZO7hCgakGZB4PTltpbo291sPDoeEV3NkJzy4ch0oY1fPpiaCjJa3cQ tNQkJtQqqfA4ogHL1t0PXwzPP3NnZAn7s8YotTm89EpfKog4oiKmT8kHcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMeUqaOPhXgTQzXoowXlWRUVpR7pMB8GA1UdIwQY MBaAFLkbkVBJgwkVBqGpREV6RVi5Tat/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjct OWRkNmU4OGZjYzhkLzEveDVTcG80LUZlQk5ETmVpakJlVlpGUldsSHVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83NGUxN2YtZjlmNC00Nzg5LTkyYjctOWRkNmU4OGZjYzhk LzEvdVJ1UlVFbURDUlVHb2FsRVJYcEZXTGxOcTM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsq+cMA0G CSqGSIb3DQEBCwUAA4IBAQAnyU/CpJTJczs7/PIYJf0mGJ46JLNn40K6uHGzrMTx aUEL9D6GWVZOFzuHJOhU3/lXwxZN275nCt1/NdaDCyrYaI0rFXHYGmiurhkjGzgI CwQbRK82js9WSK9ZaJxcdDqzhiMvM5V7R9rwRrxlCkUND95CLEiuHVgCWYtTH3pP f5zsoofJjEo6ULpnc39rHI8emEivDA28g1X2U+y2ISO9DJHGxzd9+/SB4FZPylka pN3VXiVnUDhSPjwFDBngL8vl8uD04geYy42J+GSmncmVagLdGrTQsEDIpM4+1nyn e9NCM0rhQCLKsHdP1KlVNIeQlIT0MWTqiJCKcQA8+KgB -----END CERTIFICATE-----Generated at Mon Jan 26 04:42:02 2026 by rpki-client