This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/nZ9n4tfrfVlBYZ3WFyvOxbqJZNg.roa File: nZ9n4tfrfVlBYZ3WFyvOxbqJZNg.roa (raw, json) Hash identifier: j6smuINy6+6H4mSF1q+F6LH3NMa7JvxjT+vDEw5P5IA= Subject key identifier: 9D:9F:67:E2:D7:EB:7D:59:41:61:9D:D6:17:2B:CE:C5:BA:89:64:D8 Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Certificate serial: 019B7EA6F229C12D46FF30B6287EED1D1705 Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/nZ9n4tfrfVlBYZ3WFyvOxbqJZNg.roa Signing time: Fri 02 Jan 2026 12:20:28 +0000 ROA not before: Fri 02 Jan 2026 12:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199565 IP address blocks: 178.254.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:f2:29:c1:2d:46:ff:30:b6:28:7e:ed:1d:17:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16 Validity Not Before: Jan 2 12:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d9f67e2d7eb7d5941619dd6172bcec5ba8964d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:be:b8:f3:2e:27:cd:64:fb:45:77:40:f2:d5: a5:bd:78:e2:f1:2d:fc:1c:34:f6:47:d4:1b:0d:0b: 41:74:96:84:fd:95:25:82:b8:c0:ff:31:44:16:2e: 6b:ca:7a:cf:30:94:98:bd:1f:a9:ff:43:4a:f6:9c: 51:0b:7f:0b:27:7c:25:14:30:fb:51:f9:f6:39:5d: 47:af:61:60:5f:97:29:71:10:49:a6:39:13:2b:85: 10:07:4e:f8:21:d5:51:2f:56:b9:01:e3:ce:1a:09: fd:e2:e6:4f:56:d8:e3:3e:12:25:0d:e9:57:32:0e: 8a:73:d3:6e:dc:8e:7b:18:33:5e:6d:a6:6e:5f:02: 4b:4a:9b:12:76:5c:2f:b3:7a:ee:14:9f:e8:1a:e8: 0b:af:37:52:09:0c:fc:76:00:98:0f:cb:80:97:8d: 6d:fe:4f:98:c5:9a:15:c5:56:bc:fb:f9:54:36:a7: 28:ee:e4:15:ca:e7:3f:96:8d:9d:e4:75:b4:e9:3d: 7c:2f:b4:4a:f4:17:89:57:c2:12:86:1a:f3:5f:5c: 98:cb:ba:d5:78:e6:e0:4b:0d:18:96:b2:40:46:ec: 50:47:82:0e:a7:0d:2b:02:c5:82:7c:3f:0e:ea:fb: d8:24:ae:f5:67:9c:01:c7:b1:3f:97:17:d7:17:a6: 28:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:9F:67:E2:D7:EB:7D:59:41:61:9D:D6:17:2B:CE:C5:BA:89:64:D8 X509v3 Authority Key Identifier: keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/nZ9n4tfrfVlBYZ3WFyvOxbqJZNg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.254.186.0/24 Signature Algorithm: sha256WithRSAEncryption 29:f2:64:3c:fe:3e:9f:12:a6:8a:43:42:a1:2a:56:7a:d9:23: a1:45:3b:cc:3b:4f:ce:f0:4f:50:c7:c7:1d:03:7f:37:0b:72: 8e:ee:df:1d:10:77:a1:18:2f:2b:39:b9:5a:98:6c:ff:a0:4c: 39:f1:32:52:47:b2:f7:71:bf:cd:2c:15:34:d3:ae:be:05:64: f4:ed:79:14:e1:59:9c:8a:61:a7:97:87:5f:7b:f2:fe:33:f8: 33:97:3d:69:ed:46:7a:e2:e4:7a:47:06:09:71:f1:c6:f8:d8: 8d:c8:ab:f8:72:e2:c1:2d:e3:d5:55:91:ab:b2:fb:d1:e4:95: 69:f2:d2:88:e5:64:0d:87:a9:2e:6b:73:22:df:6f:97:f7:18: 56:27:06:d4:9b:c9:27:c1:7a:68:75:25:18:b7:68:58:65:6e: 13:c5:f7:e1:54:b3:c9:97:b6:b8:8b:3a:15:08:e7:39:98:17: 26:1d:3a:57:3f:f8:33:72:73:c9:1c:9d:18:5a:03:af:3b:d4: ed:b5:00:f4:30:4a:b6:64:4d:90:29:ee:81:4e:1e:f1:2a:92: e8:e8:0d:bd:e8:79:9a:c4:45:cb:04:75:67:2c:98:a2:7b:ab: e6:69:28:b9:83:ed:23:61:e3:88:65:28:1f:3a:98:29:53:d1: fb:af:6b:a5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pvIpwS1G/zC2KH7tHRcFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk OWNlMTYwHhcNMjYwMTAyMTIyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDlmNjdlMmQ3ZWI3ZDU5NDE2MTlkZDYxNzJiY2VjNWJhODk2NGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L648y4nzWT7RXdA8tWlvXji8S38 HDT2R9QbDQtBdJaE/ZUlgrjA/zFEFi5rynrPMJSYvR+p/0NK9pxRC38LJ3wlFDD7 Ufn2OV1Hr2FgX5cpcRBJpjkTK4UQB074IdVRL1a5AePOGgn94uZPVtjjPhIlDelX Mg6Kc9Nu3I57GDNebaZuXwJLSpsSdlwvs3ruFJ/oGugLrzdSCQz8dgCYD8uAl41t /k+YxZoVxVa8+/lUNqco7uQVyuc/lo2d5HW06T18L7RK9BeJV8IShhrzX1yYy7rV eObgSw0YlrJARuxQR4IOpw0rAsWCfD8O6vvYJK71Z5wBx7E/lxfXF6YoQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ2fZ+LX631ZQWGd1hcrzsW6iWTYMB8GA1UdIwQY MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt MGY2NmMxODg3OTE2LzEvblo5bjR0ZnJmVmxCWVozV0Z5dk94YnFKWk5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2 LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv66MA0G CSqGSIb3DQEBCwUAA4IBAQAp8mQ8/j6fEqaKQ0KhKlZ62SOhRTvMO0/O8E9Qx8cd A383C3KO7t8dEHehGC8rOblamGz/oEw58TJSR7L3cb/NLBU0066+BWT07XkU4Vmc imGnl4dfe/L+M/gzlz1p7UZ64uR6RwYJcfHG+NiNyKv4cuLBLePVVZGrsvvR5JVp 8tKI5WQNh6kua3Mi32+X9xhWJwbUm8knwXpodSUYt2hYZW4TxffhVLPJl7a4izoV COc5mBcmHTpXP/gzcnPJHJ0YWgOvO9TttQD0MEq2ZE2QKe6BTh7xKpLo6A296Hma xEXLBHVnLJiie6vmaSi5g+0jYeOIZSgfOpgpU9H7r2ul -----END CERTIFICATE-----Generated at Sun Jan 25 12:22:31 2026 by rpki-client