This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/JciEJIGTlcBIQFyaMf4k2cUulG0.roa File: JciEJIGTlcBIQFyaMf4k2cUulG0.roa (raw, json) Hash identifier: PsuB426mDHmj/nCSN0DLQAoyVz9KEoXVW/4qNh6n7rE= Subject key identifier: 25:C8:84:24:81:93:95:C0:48:40:5C:9A:31:FE:24:D9:C5:2E:94:6D Certificate issuer: /CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f Certificate serial: 019B7835112EE67B432D2AEF53C8EBC47412 Authority key identifier: B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/JciEJIGTlcBIQFyaMf4k2cUulG0.roa Signing time: Thu 01 Jan 2026 06:18:22 +0000 ROA not before: Thu 01 Jan 2026 06:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200409 IP address blocks: 185.156.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.mft rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:11:2e:e6:7b:43:2d:2a:ef:53:c8:eb:c4:74:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b8e0f79841c0210d95b4ef56ff68441c2aa9fc0f Validity Not Before: Jan 1 06:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=25c88424819395c048405c9a31fe24d9c52e946d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:6c:d1:06:0f:72:be:5e:79:37:19:af:77:c6: a7:64:d0:b2:4a:96:cd:b3:84:f8:2f:fa:6f:6d:ae: 64:0c:9f:7a:a5:ca:63:d8:6d:b3:cf:e9:4f:47:ef: 26:75:dd:6c:32:61:c6:06:9f:6f:78:b3:40:03:db: b9:f2:3f:8b:d4:d7:14:51:8d:52:46:85:b8:10:08: d8:17:68:b4:0b:b4:7b:c8:41:bd:f7:29:54:2f:b8: 3c:57:c5:ab:41:a0:25:f3:bc:54:bf:71:0f:05:69: 50:92:96:de:15:21:39:3c:37:a7:5e:fa:d2:29:e3: ab:2e:dc:24:ad:0b:29:4f:1c:66:27:a3:22:42:63: e8:b5:a5:ce:cb:e4:b6:4b:db:ba:12:65:5e:42:d7: 3b:55:d5:1d:a5:16:bb:fb:b0:d1:e4:ad:39:48:c4: 65:f7:d4:8e:11:af:07:10:16:1e:c3:fd:86:37:1a: e7:fd:3c:4a:2e:c8:28:b7:da:23:42:f2:96:79:c9: 82:64:2c:7a:32:0f:0a:b0:5a:e3:0b:68:fa:6c:e4: d8:39:9e:24:f7:68:19:b8:cc:e6:f3:7a:8f:02:3a: b5:c5:75:e2:23:f4:50:c8:bc:f9:0d:e1:20:30:da: 72:21:33:46:ed:fb:06:08:72:97:12:df:29:82:ba: c3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C8:84:24:81:93:95:C0:48:40:5C:9A:31:FE:24:D9:C5:2E:94:6D X509v3 Authority Key Identifier: keyid:B8:E0:F7:98:41:C0:21:0D:95:B4:EF:56:FF:68:44:1C:2A:A9:FC:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/JciEJIGTlcBIQFyaMf4k2cUulG0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c9e704-958d-413f-8acc-6ea3cbfd3a84/1/uOD3mEHAIQ2VtO9W_2hEHCqp_A8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.156.151.0/24 Signature Algorithm: sha256WithRSAEncryption 77:96:46:86:90:b2:b5:9a:69:16:c0:35:7f:27:8a:0e:a3:0c: f2:72:01:7c:72:01:af:ee:f5:91:a7:4a:9e:96:4d:1a:17:96: 2f:fd:c7:bf:df:6b:10:f3:1e:08:4c:4c:fb:d1:7a:49:27:ec: b9:cf:c2:bf:b7:03:c8:7a:7c:bf:79:da:4b:ac:04:eb:b9:e8: 30:1a:04:97:1a:b5:31:75:5c:91:15:25:58:34:d0:f2:f8:ce: d4:f1:53:11:31:c6:c4:b2:cb:a0:81:a6:d1:29:6b:95:86:5a: ed:29:54:8a:b6:46:0d:d5:18:9a:00:63:79:70:0b:75:fd:f4: 16:bc:66:c6:1e:fe:32:b7:2c:9c:12:18:85:ff:07:31:69:67: c4:c7:df:ad:71:d3:b3:e8:23:11:5d:34:90:4d:3d:58:b5:c3: 43:8a:60:31:d0:06:cb:00:9b:48:42:47:68:08:43:e6:76:20: 67:b4:95:46:f7:34:42:72:ff:18:b4:2a:6e:1d:3b:1e:96:3d: c6:5e:87:85:ab:82:20:f9:44:e4:72:6a:39:64:20:cf:4d:47: 95:74:c1:4d:13:7c:7d:d8:03:67:0d:21:3c:61:66:df:f9:b9: 1b:c6:8b:46:47:17:3d:a7:07:e5:da:48:f0:27:f2:e0:0b:94: e2:53:2f:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NREu5ntDLSrvU8jrxHQSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI4ZTBmNzk4NDFjMDIxMGQ5NWI0ZWY1NmZmNjg0NDFjMmFh OWZjMGYwHhcNMjYwMTAxMDYxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNWM4ODQyNDgxOTM5NWMwNDg0MDVjOWEzMWZlMjRkOWM1MmU5NDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mzRBg9yvl55Nxmvd8anZNCySpbN s4T4L/pvba5kDJ96pcpj2G2zz+lPR+8mdd1sMmHGBp9veLNAA9u58j+L1NcUUY1S RoW4EAjYF2i0C7R7yEG99ylUL7g8V8WrQaAl87xUv3EPBWlQkpbeFSE5PDenXvrS KeOrLtwkrQspTxxmJ6MiQmPotaXOy+S2S9u6EmVeQtc7VdUdpRa7+7DR5K05SMRl 99SOEa8HEBYew/2GNxrn/TxKLsgot9ojQvKWecmCZCx6Mg8KsFrjC2j6bOTYOZ4k 92gZuMzm83qPAjq1xXXiI/RQyLz5DeEgMNpyITNG7fsGCHKXEt8pgrrDkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCXIhCSBk5XASEBcmjH+JNnFLpRtMB8GA1UdIwQY MBaAFLjg95hBwCENlbTvVv9oRBwqqfwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdU9EM21FSEFJUTJWdE85V18yaEVIQ3FwX0E4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9jOWU3MDQtOTU4ZC00MTNmLThhY2Mt NmVhM2NiZmQzYTg0LzEvSmNpRUpJR1RsY0JJUUZ5YU1mNGsyY1V1bEcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9jOWU3MDQtOTU4ZC00MTNmLThhY2MtNmVhM2NiZmQzYTg0 LzEvdU9EM21FSEFJUTJWdE85V18yaEVIQ3FwX0E4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZyXMA0G CSqGSIb3DQEBCwUAA4IBAQB3lkaGkLK1mmkWwDV/J4oOowzycgF8cgGv7vWRp0qe lk0aF5Yv/ce/32sQ8x4ITEz70XpJJ+y5z8K/twPIeny/edpLrATruegwGgSXGrUx dVyRFSVYNNDy+M7U8VMRMcbEssuggabRKWuVhlrtKVSKtkYN1RiaAGN5cAt1/fQW vGbGHv4ytyycEhiF/wcxaWfEx9+tcdOz6CMRXTSQTT1YtcNDimAx0AbLAJtIQkdo CEPmdiBntJVG9zRCcv8YtCpuHTselj3GXoeFq4Ig+UTkcmo5ZCDPTUeVdMFNE3x9 2ANnDSE8YWbf+bkbxotGRxc9pwfl2kjwJ/LgC5TiUy99 -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:49 2026 by rpki-client