This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/j5ZbA6yp17PHeDg2AdsUhWWZarw.roa File: j5ZbA6yp17PHeDg2AdsUhWWZarw.roa (raw, json) Hash identifier: r5QzBckgxJMlYZ0Uls+XcMt6Ok6i8cWdycqRKmI/1xk= Subject key identifier: 8F:96:5B:03:AC:A9:D7:B3:C7:78:38:36:01:DB:14:85:65:99:6A:BC Certificate issuer: /CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Certificate serial: 019B76EB97B99CA3743F29C69FEC108E4399 Authority key identifier: B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/j5ZbA6yp17PHeDg2AdsUhWWZarw.roa Signing time: Thu 01 Jan 2026 00:18:29 +0000 ROA not before: Thu 01 Jan 2026 00:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205297 IP address blocks: 178.236.138.0/24 maxlen: 24 193.32.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.mft rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:97:b9:9c:a3:74:3f:29:c6:9f:ec:10:8e:43:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72588c00eef715809eb5fdd6d6717cc28c0dfac Validity Not Before: Jan 1 00:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f965b03aca9d7b3c778383601db148565996abc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0c:43:3b:dc:b9:ca:e3:27:14:2e:e6:96:92: 09:18:2c:c9:08:0a:45:76:6d:a6:bd:f7:31:96:f8: 87:a0:a1:8c:f3:81:f7:62:c0:5d:7b:4c:07:64:53: 2f:b9:b7:7e:0a:38:af:a2:0a:d5:42:3d:2c:a2:d2: 6d:1c:f8:65:f8:4d:eb:62:f5:c7:6c:8d:5b:74:55: cd:d6:d2:da:67:e3:02:14:8b:5f:d8:e4:a4:30:fc: 39:2d:33:11:85:40:25:2f:9d:27:95:8f:cf:4a:f3: 36:e4:7e:76:b1:c7:00:fc:4b:42:49:66:c5:20:6a: f4:58:55:5e:35:22:79:8c:bc:85:be:5b:21:30:52: 5f:2a:8e:84:a8:11:68:a8:bd:a3:57:87:78:3d:53: 01:da:cf:97:ae:d9:4f:25:e6:d1:c2:6a:68:31:f6: d0:55:1b:78:de:e6:48:7e:45:41:c3:ec:ee:be:28: 97:f4:f6:84:9f:7c:54:a3:25:d2:8c:3d:d2:4e:e1: 45:8a:4b:c9:8c:4f:e5:78:77:b5:88:bb:64:88:a9: 42:84:f3:e0:52:aa:46:a5:96:24:0e:36:5a:87:ec: 67:f9:98:cd:68:92:71:49:e7:62:e9:7b:c0:67:39: 36:11:e0:e1:fb:41:2a:3a:de:66:c0:32:22:23:2c: 9f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:96:5B:03:AC:A9:D7:B3:C7:78:38:36:01:DB:14:85:65:99:6A:BC X509v3 Authority Key Identifier: keyid:B7:25:88:C0:0E:EF:71:58:09:EB:5F:DD:6D:67:17:CC:28:C0:DF:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyWIwA7vcVgJ61_dbWcXzCjA36w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/j5ZbA6yp17PHeDg2AdsUhWWZarw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ebbac9-fee7-4f3b-8cd5-7a41254eaaca/1/tyWIwA7vcVgJ61_dbWcXzCjA36w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.236.138.0/24 193.32.200.0/24 Signature Algorithm: sha256WithRSAEncryption 39:6e:d4:da:96:4f:7e:43:e2:21:74:45:00:1e:ab:5f:c3:e4: 1a:3a:80:cb:30:f2:67:4c:b9:43:80:61:f2:d9:20:4a:72:46: c8:51:c7:5c:64:43:53:61:e3:d6:f5:37:1d:00:1a:b7:bc:c6: b8:c5:81:71:52:11:99:b0:ee:07:1d:5c:05:c7:a9:ed:29:36: 87:1e:24:d4:dd:5d:16:da:22:c2:5a:ee:c4:f3:e0:94:37:f9: 85:c9:65:cf:e0:b0:3f:21:42:a0:d3:54:56:48:2d:68:35:66: 41:c5:30:89:fc:08:69:e8:22:f2:b7:a1:9c:6c:ed:bf:27:0e: 52:ca:4d:f7:a3:a5:46:a6:8e:e5:2c:f2:09:d8:6e:e7:34:eb: 21:28:6e:5c:38:ed:d8:a2:3c:72:8c:49:f7:35:c9:17:d8:64: ff:ce:69:b6:0a:00:13:ab:7a:98:d0:10:65:17:d8:8f:de:eb: 41:14:82:f5:7d:12:91:d9:81:61:85:31:14:35:99:5a:27:42: 7d:a2:08:7e:53:57:f9:ff:e4:ac:ec:aa:cc:bb:07:e3:9b:7f: 9b:03:5e:76:28:c9:1c:ab:6b:ff:a4:26:a0:b8:3d:80:6b:8c: 0f:97:d5:f2:76:30:a0:ab:3b:57:33:7e:58:eb:c9:6e:a4:0a: 09:87:cf:c8 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt265e5nKN0PynGn+wQjkOZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MjU4OGMwMGVlZjcxNTgwOWViNWZkZDZkNjcxN2NjMjhj MGRmYWMwHhcNMjYwMTAxMDAxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Zjk2NWIwM2FjYTlkN2IzYzc3ODM4MzYwMWRiMTQ4NTY1OTk2YWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQxDO9y5yuMnFC7mlpIJGCzJCApF dm2mvfcxlviHoKGM84H3YsBde0wHZFMvubd+CjivogrVQj0sotJtHPhl+E3rYvXH bI1bdFXN1tLaZ+MCFItf2OSkMPw5LTMRhUAlL50nlY/PSvM25H52sccA/EtCSWbF IGr0WFVeNSJ5jLyFvlshMFJfKo6EqBFoqL2jV4d4PVMB2s+XrtlPJebRwmpoMfbQ VRt43uZIfkVBw+zuviiX9PaEn3xUoyXSjD3STuFFikvJjE/leHe1iLtkiKlChPPg UqpGpZYkDjZah+xn+ZjNaJJxSedi6XvAZzk2EeDh+0EqOt5mwDIiIyyfewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFI+WWwOsqdezx3g4NgHbFIVlmWq8MB8GA1UdIwQY MBaAFLcliMAO73FYCetf3W1nF8wowN+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUt N2E0MTI1NGVhYWNhLzEvajVaYkE2eXAxN1BIZURnMkFkc1VoV1daYXJ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9lYmJhYzktZmVlNy00ZjNiLThjZDUtN2E0MTI1NGVhYWNh LzEvdHlXSXdBN3ZjVmdKNjFfZGJXY1h6Q2pBMzZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsuyKAwQA wSDIMA0GCSqGSIb3DQEBCwUAA4IBAQA5btTalk9+Q+IhdEUAHqtfw+QaOoDLMPJn TLlDgGHy2SBKckbIUcdcZENTYePW9TcdABq3vMa4xYFxUhGZsO4HHVwFx6ntKTaH HiTU3V0W2iLCWu7E8+CUN/mFyWXP4LA/IUKg01RWSC1oNWZBxTCJ/Ahp6CLyt6Gc bO2/Jw5Syk33o6VGpo7lLPIJ2G7nNOshKG5cOO3YojxyjEn3NckX2GT/zmm2CgAT q3qY0BBlF9iP3utBFIL1fRKR2YFhhTEUNZlaJ0J9ogh+U1f5/+Ss7KrMuwfjm3+b A152KMkcq2v/pCaguD2Aa4wPl9XydjCgqztXM35Y68lupAoJh8/I -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:26 2026 by rpki-client