This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/DHfgYwZYNDuaF8fGMRZDBR0sjwg.roa File: DHfgYwZYNDuaF8fGMRZDBR0sjwg.roa (raw, json) Hash identifier: 9wENO+3W6HCI88QvgdGHt52ih4jBxI0lCK0+4fmUX70= Subject key identifier: 0C:77:E0:63:06:58:34:3B:9A:17:C7:C6:31:16:43:05:1D:2C:8F:08 Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Certificate serial: 019B7910063BB213AAC74B84EE4D31D73EE2 Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/DHfgYwZYNDuaF8fGMRZDBR0sjwg.roa Signing time: Thu 01 Jan 2026 10:17:31 +0000 ROA not before: Thu 01 Jan 2026 10:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209311 IP address blocks: 178.219.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:06:3b:b2:13:aa:c7:4b:84:ee:4d:31:d7:3e:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e Validity Not Before: Jan 1 10:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0c77e0630658343b9a17c7c6311643051d2c8f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ca:10:17:c4:0c:fa:cf:5c:ce:55:ae:c9:3e: 7f:93:09:57:58:eb:57:16:c8:e9:00:f8:6f:2e:c0: d4:f9:36:cc:09:08:5a:d0:e4:71:52:df:20:fe:8e: af:3f:f8:bb:46:6b:fc:f1:33:a7:a1:16:ec:72:ec: e9:77:f0:0f:f0:32:1c:89:74:7c:08:99:b8:71:a7: 97:55:bc:da:c8:83:09:20:8b:c6:98:25:2e:7e:c1: 9b:28:ef:a7:38:a3:f2:a0:4b:11:b2:ea:3e:bf:d9: 1c:93:70:3f:66:8a:38:7e:08:c9:9f:80:bd:a5:53: 72:57:5e:ef:9b:e7:17:d0:0b:a0:84:6c:7a:37:ec: 88:da:38:5e:73:1d:1d:80:23:12:e8:f8:99:1f:cd: fe:a5:d6:0a:d5:9e:f1:f5:40:f0:ab:72:ec:95:e7: 45:07:46:1d:19:4a:4a:1a:16:e2:8c:fb:81:6c:93: 50:ad:30:2b:ca:bc:b1:2b:d9:d6:a8:53:38:43:f7: 46:72:7d:5b:47:e0:ff:a6:78:18:5f:fc:19:ae:9a: 6c:81:ce:e4:34:76:3b:26:42:df:0e:18:ab:36:48: 91:94:34:6c:7e:43:b7:90:df:da:7d:02:fd:66:3c: a3:67:c4:33:44:d3:44:b8:8a:e9:ba:be:23:63:f9: 3c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:77:E0:63:06:58:34:3B:9A:17:C7:C6:31:16:43:05:1D:2C:8F:08 X509v3 Authority Key Identifier: keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/DHfgYwZYNDuaF8fGMRZDBR0sjwg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.219.154.0/24 Signature Algorithm: sha256WithRSAEncryption 88:e5:9f:5a:32:df:c1:11:87:a7:19:56:cb:bb:4d:1b:5e:ec: 3e:08:50:d3:a6:6d:c5:87:ed:d7:37:3e:b9:8d:22:9c:df:d2: 9e:9f:18:bc:af:1d:7c:01:a1:30:a8:b2:e9:5b:0d:7e:ee:f3: d8:f9:88:3a:ef:6a:dd:18:49:dc:48:db:8f:fd:49:29:90:ab: 12:59:c6:57:74:db:c3:36:71:8c:da:84:f4:1e:53:e8:a2:fd: 3d:b7:e4:26:22:ad:d8:c8:d1:04:f0:c8:7c:0b:ff:78:df:94: 89:c7:c4:7a:aa:99:a7:bc:7b:34:db:7b:17:95:a7:cd:17:14: 8c:82:2d:78:7d:6e:a8:bf:d4:14:00:ff:48:3b:1e:58:f3:80: 28:f8:64:b5:a1:dc:f1:57:5c:aa:c1:01:74:98:c7:15:8c:7a: 51:af:b6:a0:ca:51:6a:b9:a8:73:11:c6:7f:d3:15:5f:82:00: 6b:66:e6:85:7c:53:32:e5:a5:99:59:96:6b:b1:b0:7b:b5:f6: 8c:1a:b0:a8:e0:21:7d:72:30:2d:6d:7c:19:2f:27:80:a8:16: e9:64:33:d9:23:bf:26:94:6c:59:d4:48:c5:0f:c3:0b:e6:eb: 3f:82:70:a4:c7:40:fd:7e:b8:06:45:95:92:f1:b9:b7:c8:e6: f6:be:78:37 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EAY7shOqx0uE7k0x1z7iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmOTNkM2JhMTk3ZjVjZTMwOThiZmE3NzAwYjQzODU0ZWFh ODBlOWUwHhcNMjYwMTAxMTAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYzc3ZTA2MzA2NTgzNDNiOWExN2M3YzYzMTE2NDMwNTFkMmM4ZjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8oQF8QM+s9czlWuyT5/kwlXWOtX FsjpAPhvLsDU+TbMCQha0ORxUt8g/o6vP/i7Rmv88TOnoRbscuzpd/AP8DIciXR8 CJm4caeXVbzayIMJIIvGmCUufsGbKO+nOKPyoEsRsuo+v9kck3A/Zoo4fgjJn4C9 pVNyV17vm+cX0AughGx6N+yI2jhecx0dgCMS6PiZH83+pdYK1Z7x9UDwq3LsledF B0YdGUpKGhbijPuBbJNQrTAryryxK9nWqFM4Q/dGcn1bR+D/pngYX/wZrppsgc7k NHY7JkLfDhirNkiRlDRsfkO3kN/afQL9ZjyjZ8QzRNNEuIrpur4jY/k8QwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAx34GMGWDQ7mhfHxjEWQwUdLI8IMB8GA1UdIwQY MBaAFC+T07oZf1zjCYv6dwC0OFTqqA6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUt OWU3MWRjMjRhNjgzLzEvREhmZ1l3WllORHVhRjhmR01SWkRCUjBzandnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC83YTg3YTAtODAxNC00NjA1LTlmYjUtOWU3MWRjMjRhNjgz LzEvTDVQVHVobF9YT01KaV9wM0FMUTRWT3FvRHA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstuaMA0G CSqGSIb3DQEBCwUAA4IBAQCI5Z9aMt/BEYenGVbLu00bXuw+CFDTpm3Fh+3XNz65 jSKc39Kenxi8rx18AaEwqLLpWw1+7vPY+Yg672rdGEncSNuP/UkpkKsSWcZXdNvD NnGM2oT0HlPoov09t+QmIq3YyNEE8Mh8C/9435SJx8R6qpmnvHs023sXlafNFxSM gi14fW6ov9QUAP9IOx5Y84Ao+GS1odzxV1yqwQF0mMcVjHpRr7agylFquahzEcZ/ 0xVfggBrZuaFfFMy5aWZWZZrsbB7tfaMGrCo4CF9cjAtbXwZLyeAqBbpZDPZI78m lGxZ1EjFD8ML5us/gnCkx0D9frgGRZWS8bm3yOb2vng3 -----END CERTIFICATE-----Generated at Sun Jan 25 15:02:50 2026 by rpki-client