This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/1-Pe2TnywVmfaP-WemWu9F6D1uY.roa File: 1-Pe2TnywVmfaP-WemWu9F6D1uY.roa (raw, json) Hash identifier: TO2cGriDwgxNlyLdj4bg8MbV1G1jK45ogoJF4793fSo= Subject key identifier: D7:E3:DE:D9:39:F2:C1:59:9F:68:FF:96:7A:65:AE:F4:5E:83:D6:E6 Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Certificate serial: 019B76EB22BA9EB008CBCDBD86279AF3A4CE Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/1-Pe2TnywVmfaP-WemWu9F6D1uY.roa Signing time: Thu 01 Jan 2026 00:17:59 +0000 ROA not before: Thu 01 Jan 2026 00:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134408 IP address blocks: 178.237.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:22:ba:9e:b0:08:cb:cd:bd:86:27:9a:f3:a4:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Validity Not Before: Jan 1 00:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7e3ded939f2c1599f68ff967a65aef45e83d6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:cf:34:d4:fd:41:18:30:39:20:b7:d6:ee:2e: 35:1a:9c:cf:4a:c5:b3:73:d0:a2:45:e4:96:07:1f: 70:72:71:f7:88:dc:09:b2:53:3e:05:ac:8b:34:c1: ce:80:60:7c:a9:f7:e6:a8:b8:2b:8b:68:80:cb:48: 12:1c:08:36:6b:12:6e:c1:93:5e:c9:59:44:05:a2: 42:88:58:f4:bd:c7:7e:a1:ee:7e:e9:14:ad:4e:ca: b6:90:69:e3:10:e9:47:b6:27:70:55:fa:5b:a4:18: 61:ac:58:35:89:cc:59:03:2e:b5:f7:d4:7e:20:33: 50:ce:34:bb:1b:ee:5d:f5:31:24:ff:fb:ee:6c:83: 8a:dd:13:6b:68:60:d4:87:60:33:3e:fa:d4:cc:28: 13:ae:ff:85:36:5c:c8:42:55:8e:a3:81:28:59:f7: 9d:f8:8a:22:e2:25:b1:35:e3:16:6f:02:a5:bd:fc: 71:cf:08:f8:82:e6:85:d6:67:a1:52:77:64:b1:8e: eb:a8:b9:e0:89:68:b8:60:5e:e4:b4:1b:48:a0:ba: 08:fa:7a:6e:bb:29:69:03:a2:c7:e9:98:8f:60:1f: 78:19:b2:9c:f6:ef:99:3b:9c:7f:c6:03:fb:a3:3b: 19:d4:dd:57:aa:69:02:15:58:58:99:dc:d7:73:54: c4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E3:DE:D9:39:F2:C1:59:9F:68:FF:96:7A:65:AE:F4:5E:83:D6:E6 X509v3 Authority Key Identifier: keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/1-Pe2TnywVmfaP-WemWu9F6D1uY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.237.171.0/24 Signature Algorithm: sha256WithRSAEncryption 19:69:94:14:33:bf:a1:0c:7b:3e:d8:1e:c3:26:f9:01:5c:13: 8b:82:d0:b1:06:c0:80:cf:d0:9a:1a:98:46:07:45:e2:4c:54: e3:9e:d0:50:17:21:14:a7:bb:b0:57:cd:23:ee:2e:9d:9c:7a: 84:b5:50:a1:36:63:24:80:4a:b4:61:7c:76:66:01:6d:f5:31: 6e:d2:96:32:10:c1:c2:aa:06:60:4d:64:25:18:20:88:98:ac: ec:04:e0:45:e6:4a:ef:77:14:c2:93:36:f9:60:02:e0:13:60: bf:ea:d6:e7:ce:85:ca:7d:85:40:2a:75:31:c7:58:a5:5a:32: 6c:c4:77:af:51:71:56:b0:77:20:cc:f0:fb:ef:8e:0f:fb:48: 25:74:16:c9:6e:3c:21:2e:68:f3:1a:d5:b3:4d:30:7e:15:7a: fb:56:49:c3:63:42:33:6d:49:ab:54:7a:5e:1c:93:f3:62:98: 93:52:65:a5:7d:9b:eb:58:33:c6:3e:de:f4:cf:c3:f4:ef:ce: f1:0f:4d:3a:68:0e:e3:2e:48:32:46:7a:29:df:00:ae:fc:39: df:b2:9f:3d:13:ac:78:c4:fc:f3:6e:db:d4:e8:cf:7f:47:ea: a6:b3:a2:ab:e8:c4:4d:05:5b:cb:6f:c7:b6:83:ba:b9:ec:cb: 38:6e:0c:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26yK6nrAIy829hiea86TOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjY2ZWM1ZThmMjQwNWY2ZjhkNDg2ZTczZmI4MmI4ZGUw ZGVlMGYwHhcNMjYwMTAxMDAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2UzZGVkOTM5ZjJjMTU5OWY2OGZmOTY3YTY1YWVmNDVlODNkNmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3M801P1BGDA5ILfW7i41GpzPSsWz c9CiReSWBx9wcnH3iNwJslM+BayLNMHOgGB8qffmqLgri2iAy0gSHAg2axJuwZNe yVlEBaJCiFj0vcd+oe5+6RStTsq2kGnjEOlHtidwVfpbpBhhrFg1icxZAy6199R+ IDNQzjS7G+5d9TEk//vubIOK3RNraGDUh2AzPvrUzCgTrv+FNlzIQlWOo4EoWfed +Ioi4iWxNeMWbwKlvfxxzwj4guaF1mehUndksY7rqLngiWi4YF7ktBtIoLoI+npu uylpA6LH6ZiPYB94GbKc9u+ZO5x/xgP7ozsZ1N1XqmkCFVhYmdzXc1TEMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNfj3tk58sFZn2j/lnplrvReg9bmMB8GA1UdIwQY MBaAFK62bsXo8kBfb41IbnP7grjeDe4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUt NmFlYTkwNTdjODAwLzEvMS1QZTJUbnl3Vm1mYVAtV2VtV3U5RjZEMXVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUtNmFlYTkwNTdjODAw LzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsu2rMA0G CSqGSIb3DQEBCwUAA4IBAQAZaZQUM7+hDHs+2B7DJvkBXBOLgtCxBsCAz9CaGphG B0XiTFTjntBQFyEUp7uwV80j7i6dnHqEtVChNmMkgEq0YXx2ZgFt9TFu0pYyEMHC qgZgTWQlGCCImKzsBOBF5krvdxTCkzb5YALgE2C/6tbnzoXKfYVAKnUxx1ilWjJs xHevUXFWsHcgzPD7744P+0gldBbJbjwhLmjzGtWzTTB+FXr7VknDY0IzbUmrVHpe HJPzYpiTUmWlfZvrWDPGPt70z8P0787xD006aA7jLkgyRnop3wCu/Dnfsp89E6x4 xPzzbtvU6M9/R+qms6Kr6MRNBVvLb8e2g7q57Ms4bgzQ -----END CERTIFICATE-----Generated at Sun Jan 25 20:34:50 2026 by rpki-client