This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/1-CMu0p1qNg0e63aYoj_D4LrDxfY.roa File: 1-CMu0p1qNg0e63aYoj_D4LrDxfY.roa (raw, json) Hash identifier: lOabOtnZlG49slymDCg4DYEF9uaLsHuP8kozmEeWWJk= Subject key identifier: F8:23:2E:D2:9D:6A:36:0D:1E:EB:76:98:A2:3F:C3:E0:BA:C3:C5:F6 Certificate issuer: /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6 Certificate serial: 019B7EA691F64039E9346D97942E6876736D Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/1-CMu0p1qNg0e63aYoj_D4LrDxfY.roa Signing time: Fri 02 Jan 2026 12:20:04 +0000 ROA not before: Fri 02 Jan 2026 12:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 54963 IP address blocks: 178.236.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:91:f6:40:39:e9:34:6d:97:94:2e:68:76:73:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6 Validity Not Before: Jan 2 12:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8232ed29d6a360d1eeb7698a23fc3e0bac3c5f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b0:f7:eb:40:3e:c3:16:5c:ef:cb:f6:74:b0: 4f:78:dc:0a:ef:83:79:0b:fe:24:b7:f4:cb:0a:4a: 93:38:f4:6e:f9:79:4c:ca:23:3b:39:5f:62:3f:11: be:28:00:0c:51:9c:47:1f:d4:cd:31:f5:75:ac:3c: 91:9d:44:42:01:f0:7e:1d:35:4c:e0:ae:1b:2e:0e: 53:47:9a:fa:57:ba:ae:85:8c:30:fe:f7:1a:94:13: 4c:87:4c:82:4d:97:83:9e:dd:69:03:44:71:e5:75: f7:e8:09:4e:08:f6:72:98:1e:d4:da:e8:ad:17:db: 51:1c:a7:16:ac:3f:4f:99:34:5f:fc:6a:f7:b7:fa: c0:fc:09:e9:a0:7a:d5:f7:fe:15:c2:5c:32:1b:af: 91:62:10:9e:db:11:14:d6:be:9d:c5:df:d0:00:89: 64:8e:3c:23:b3:65:0f:18:b2:b5:ff:46:54:9b:83: 87:47:b4:60:5b:12:6e:b7:78:4c:aa:1f:19:f5:44: bd:6e:d3:06:26:0b:8a:ad:91:03:55:37:10:8a:ce: 02:2f:d6:b1:3c:0d:0d:4f:47:c7:7e:33:b2:2e:4b: 05:7b:c2:1e:b8:a8:db:cd:83:b3:cd:6a:2d:1c:c6: d4:a1:ed:b9:d9:e4:8b:28:66:ef:59:81:65:3d:e4: 68:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:23:2E:D2:9D:6A:36:0D:1E:EB:76:98:A2:3F:C3:E0:BA:C3:C5:F6 X509v3 Authority Key Identifier: keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/1-CMu0p1qNg0e63aYoj_D4LrDxfY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.236.177.0/24 Signature Algorithm: sha256WithRSAEncryption 73:63:ab:61:f9:d9:bf:f9:61:9c:fb:c5:4c:e6:df:88:a4:db: 99:ba:c6:e3:28:ff:21:d8:e6:07:f5:c7:33:e8:4c:75:be:2c: 97:7f:a3:45:4b:16:7c:53:dc:86:0e:f6:de:78:cc:59:ce:9d: 22:65:66:b6:6a:ff:b9:5c:16:c3:5b:f1:83:76:78:31:bf:34: e5:2c:fa:93:3d:d2:9f:ec:24:db:21:0f:06:0d:d2:60:d0:33: ae:e6:72:90:e8:2e:23:11:78:3a:75:08:c6:f3:46:d6:d9:5c: b5:e9:19:f7:81:99:c3:b8:03:d4:8d:b5:bf:0b:6c:e7:76:75: 03:74:60:87:21:3c:a7:5b:aa:7b:97:d4:8e:86:6b:11:ae:66: 94:87:5b:4f:29:0a:d6:09:f6:7b:68:a7:2a:5b:26:63:4e:21: 7c:05:df:ab:6b:82:7f:03:24:35:71:92:3a:4f:fa:af:02:37: f3:ac:ac:57:a5:67:df:ce:37:32:88:68:88:c1:fb:89:3c:d8: aa:52:bb:4c:a7:8b:26:57:90:bc:e2:10:97:b8:e5:b5:02:8f: 67:14:08:5b:88:92:e3:e0:34:50:7a:33:24:e3:ae:13:b1:d5: b9:e8:99:28:32:b9:eb:13:dd:ad:7f:fa:0c:25:36:90:7f:a7: 3b:93:92:e6 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt+ppH2QDnpNG2XlC5odnNtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMjNmNGNiNGJhYjVjMTA4MDFhNzcwNjU4ZGY4OTFjZmI4 YzY4YzYwHhcNMjYwMTAyMTIyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmODIzMmVkMjlkNmEzNjBkMWVlYjc2OThhMjNmYzNlMGJhYzNjNWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrD360A+wxZc78v2dLBPeNwK74N5 C/4kt/TLCkqTOPRu+XlMyiM7OV9iPxG+KAAMUZxHH9TNMfV1rDyRnURCAfB+HTVM 4K4bLg5TR5r6V7quhYww/vcalBNMh0yCTZeDnt1pA0Rx5XX36AlOCPZymB7U2uit F9tRHKcWrD9PmTRf/Gr3t/rA/AnpoHrV9/4VwlwyG6+RYhCe2xEU1r6dxd/QAIlk jjwjs2UPGLK1/0ZUm4OHR7RgWxJut3hMqh8Z9US9btMGJguKrZEDVTcQis4CL9ax PA0NT0fHfjOyLksFe8IeuKjbzYOzzWotHMbUoe252eSLKGbvWYFlPeRoKwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPgjLtKdajYNHut2mKI/w+C6w8X2MB8GA1UdIwQY MBaAFJ0j9MtLq1wQgBp3BljfiRz7jGjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNQMHkwdXJYQkNBR25jR1dOLUpIUHVNYU1ZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZWNhNGQtM2EyZS00YTg0LWE3ODkt MDE1NzdhOTI3ZmE5LzEvMS1DTXUwcDFxTmcwZTYzYVlval9ENExyRHhmWS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMWEvNGVjYTRkLTNhMmUtNGE4NC1hNzg5LTAxNTc3YTkyN2Zh OS8xL25TUDB5MHVyWEJDQUduY0dXTi1KSFB1TWFNWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALLssTAN BgkqhkiG9w0BAQsFAAOCAQEAc2OrYfnZv/lhnPvFTObfiKTbmbrG4yj/IdjmB/XH M+hMdb4sl3+jRUsWfFPchg723njMWc6dImVmtmr/uVwWw1vxg3Z4Mb805Sz6kz3S n+wk2yEPBg3SYNAzruZykOguIxF4OnUIxvNG1tlctekZ94GZw7gD1I21vwts53Z1 A3RghyE8p1uqe5fUjoZrEa5mlIdbTykK1gn2e2inKlsmY04hfAXfq2uCfwMkNXGS Ok/6rwI386ysV6Vn3843MohoiMH7iTzYqlK7TKeLJleQvOIQl7jltQKPZxQIW4iS 4+A0UHozJOOuE7HVueiZKDK56xPdrX/6DCU2kH+nO5OS5g== -----END CERTIFICATE-----Generated at Sun Jan 25 20:47:29 2026 by rpki-client