This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/j0nGMpaL2l0gt456Mx7Oq0ZumwI.roa File: j0nGMpaL2l0gt456Mx7Oq0ZumwI.roa (raw, json) Hash identifier: vXI+PgmscCifsQpcTdziO7Up6SFJ5pyzxi2gANTTHlg= Subject key identifier: 8F:49:C6:32:96:8B:DA:5D:20:B7:8E:7A:33:1E:CE:AB:46:6E:9B:02 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019AE17F4FF3952A5766759537C0405B8B83 Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/j0nGMpaL2l0gt456Mx7Oq0ZumwI.roa Signing time: Tue 02 Dec 2025 23:56:48 +0000 ROA not before: Tue 02 Dec 2025 23:56:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 52116 IP address blocks: 178.254.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:e1:7f:4f:f3:95:2a:57:66:75:95:37:c0:40:5b:8b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Dec 2 23:56:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=8f49c632968bda5d20b78e7a331eceab466e9b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:4b:88:22:d0:3c:ff:2e:b9:5a:17:82:f7:22: 91:62:cc:ca:f3:3a:53:9c:db:11:c4:4b:34:c0:12: b0:09:d8:be:c7:d0:f0:29:fb:1b:4a:a3:0a:4f:51: e4:55:5c:ff:3e:56:4d:ec:ab:16:2f:64:8f:71:b0: cf:9c:2d:55:48:e5:d5:a3:a6:9e:cf:f0:9a:83:4c: 00:7f:a6:ca:b1:ed:5c:b0:ad:a5:ea:fb:52:cd:6a: 7f:88:42:4d:81:43:1e:8f:ac:ca:87:ef:67:95:0d: 24:32:00:a4:b5:72:97:b3:d6:48:d9:44:cd:c8:7b: 87:78:e9:98:7a:10:42:e4:f1:e6:ff:3b:75:23:ae: 79:12:6e:b9:f4:00:89:81:1c:32:75:81:68:98:af: 13:f7:a9:c4:ce:e0:a5:b8:fb:af:90:b7:4f:74:83: a6:eb:f0:2f:57:7f:69:d4:cf:d3:6e:c8:8e:ef:02: 26:50:48:3c:9b:8d:7e:c2:73:cb:f5:04:c6:73:ac: 12:35:ef:bb:bf:ab:99:35:e0:9b:89:97:54:54:98: d0:50:9d:8c:80:74:6a:1d:2c:57:2d:55:d8:5d:06: ff:30:9f:ad:35:3b:c0:7d:a4:ab:8c:85:2d:38:39: 29:d5:28:a1:e6:c7:da:26:21:de:1a:fd:9d:10:f1: 46:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:49:C6:32:96:8B:DA:5D:20:B7:8E:7A:33:1E:CE:AB:46:6E:9B:02 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/j0nGMpaL2l0gt456Mx7Oq0ZumwI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.254.170.0/24 Signature Algorithm: sha256WithRSAEncryption 23:5e:85:f6:26:b4:07:dc:9b:02:97:e2:8e:b8:0d:32:4f:97: 97:4b:f6:00:cf:48:34:8e:9e:8a:4c:3c:92:1f:3b:cd:da:db: 63:24:22:bf:db:db:84:1d:4a:86:41:d6:45:fe:6f:0e:ae:94: da:7f:ee:7a:b6:d4:a3:fc:06:e8:a0:fb:6a:ff:87:49:e9:f1: d5:7d:ae:fa:a7:4a:41:9f:b9:14:26:65:21:79:1d:8f:c7:4c: 50:5c:3e:1d:78:e0:92:86:04:a2:03:09:95:c6:4f:54:7e:86: cd:a9:e0:77:db:c7:c8:14:20:88:e6:b5:c8:7d:1e:04:72:d9: 5e:62:26:ba:0f:94:ab:4a:91:0c:50:2b:87:f6:60:c9:f4:3b: 14:9c:3f:99:94:27:a3:21:7e:5f:55:2e:9a:6b:bf:ed:d0:e4: a9:2a:ca:92:c0:f7:d5:23:6c:9f:fe:62:9f:07:c9:1e:23:ff: fe:42:93:56:22:67:ad:5f:1a:d2:73:48:ec:17:39:60:55:de: 56:86:6a:58:29:c7:04:87:fa:ab:16:d6:e8:45:e3:0a:05:ca: 8f:c0:55:11:de:9f:b2:b5:ff:6d:03:e5:f9:b2:57:e4:be:91: 0b:e3:6c:50:68:d3:82:6c:a6:aa:44:bb:19:c2:23:15:c4:90: d1:c2:bc:94 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZrhf0/zlSpXZnWVN8BAW4uDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjUxMjAyMjM1NjQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjQ5YzYzMjk2OGJkYTVkMjBiNzhlN2EzMzFlY2VhYjQ2NmU5YjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkuIItA8/y65WheC9yKRYszK8zpT nNsRxEs0wBKwCdi+x9DwKfsbSqMKT1HkVVz/PlZN7KsWL2SPcbDPnC1VSOXVo6ae z/Cag0wAf6bKse1csK2l6vtSzWp/iEJNgUMej6zKh+9nlQ0kMgCktXKXs9ZI2UTN yHuHeOmYehBC5PHm/zt1I655Em659ACJgRwydYFomK8T96nEzuCluPuvkLdPdIOm 6/AvV39p1M/TbsiO7wImUEg8m41+wnPL9QTGc6wSNe+7v6uZNeCbiZdUVJjQUJ2M gHRqHSxXLVXYXQb/MJ+tNTvAfaSrjIUtODkp1Sih5sfaJiHeGv2dEPFGSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFI9JxjKWi9pdILeOejMezqtGbpsCMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvajBuR01wYUwybDBndDQ1Nk14N09xMFp1bXdJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv6qMA0G CSqGSIb3DQEBCwUAA4IBAQAjXoX2JrQH3JsCl+KOuA0yT5eXS/YAz0g0jp6KTDyS HzvN2ttjJCK/29uEHUqGQdZF/m8OrpTaf+56ttSj/AbooPtq/4dJ6fHVfa76p0pB n7kUJmUheR2Px0xQXD4deOCShgSiAwmVxk9UfobNqeB328fIFCCI5rXIfR4Ectle Yia6D5SrSpEMUCuH9mDJ9DsUnD+ZlCejIX5fVS6aa7/t0OSpKsqSwPfVI2yf/mKf B8keI//+QpNWImetXxrSc0jsFzlgVd5WhmpYKccEh/qrFtboReMKBcqPwFUR3p+y tf9tA+X5slfkvpEL42xQaNOCbKaqRLsZwiMVxJDRwryU -----END CERTIFICATE-----Generated at Sat Dec 6 23:57:38 2025 by rpki-client