This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/jOFltdK9zs-P6zd_1guvVIynQpw.roa File: jOFltdK9zs-P6zd_1guvVIynQpw.roa (raw, json) Hash identifier: Ss8MV+s2+wAfCooosrfLM6jCHQ5fxVHK27NCUalQQz8= Subject key identifier: 8C:E1:65:B5:D2:BD:CE:CF:8F:EB:37:7F:D6:0B:AF:54:8C:A7:42:9C Certificate issuer: /CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec Certificate serial: 019B78A2EC650759EB1066BE194EF14053CB Authority key identifier: D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/jOFltdK9zs-P6zd_1guvVIynQpw.roa Signing time: Thu 01 Jan 2026 08:18:21 +0000 ROA not before: Thu 01 Jan 2026 08:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51665 IP address blocks: 178.237.192.0/21 maxlen: 21 178.237.192.0/24 maxlen: 24 178.237.193.0/24 maxlen: 24 178.237.194.0/24 maxlen: 24 178.237.195.0/24 maxlen: 24 178.237.196.0/24 maxlen: 24 178.237.197.0/24 maxlen: 24 178.237.198.0/24 maxlen: 24 178.237.199.0/24 maxlen: 24 178.237.200.0/22 maxlen: 22 178.237.200.0/24 maxlen: 24 178.237.201.0/24 maxlen: 24 178.237.202.0/24 maxlen: 24 178.237.203.0/24 maxlen: 24 178.237.204.0/24 maxlen: 24 178.237.205.0/24 maxlen: 24 178.237.207.0/24 maxlen: 24 2a04:7e01::/32 maxlen: 32 2a04:7e02::/32 maxlen: 32 2a04:7e03::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ec:65:07:59:eb:10:66:be:19:4e:f1:40:53:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec Validity Not Before: Jan 1 08:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8ce165b5d2bdcecf8feb377fd60baf548ca7429c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:04:dd:8a:fb:9e:e8:f7:93:88:01:97:c6:e6: f4:c4:6d:6d:71:99:8e:cd:d6:51:59:f7:3d:88:f2: 77:8a:e0:ff:86:3c:65:dc:87:db:1a:b6:e9:10:7a: 3b:1d:a5:30:64:a7:5d:7c:9a:12:fe:9d:f0:dc:5a: 76:4b:87:37:35:fc:e7:8b:a5:12:38:d6:bb:5a:1d: 92:4f:63:5a:51:b1:b0:f7:0e:4a:1f:33:b8:ec:72: cd:b6:01:86:ac:ce:83:fe:22:5b:db:1b:b3:b7:a9: 29:5d:84:63:bb:6c:7a:8d:d0:e3:ed:da:d9:20:01: 2c:2e:59:e5:34:f1:f4:83:ef:b3:29:bd:d6:34:9f: 03:ba:0b:a9:0d:10:a5:0d:e6:6b:65:24:e9:d8:ec: 09:7d:6b:94:d2:8c:a2:89:ec:8f:ff:41:16:ec:86: 6e:4a:91:45:0c:cb:cd:14:8e:38:9d:f6:5b:54:94: 6d:29:a3:44:7a:5a:34:d9:d0:98:56:1c:64:d1:33: 39:7e:bf:17:b6:43:60:a1:38:76:3c:2a:82:e1:2c: ae:45:68:81:2b:b8:94:0d:09:07:57:92:bb:26:92: 83:75:20:bc:4b:90:7a:be:66:6b:1a:bc:e7:ff:7e: 25:85:87:64:a9:4e:87:ce:93:38:a8:8c:fd:da:b4: c1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E1:65:B5:D2:BD:CE:CF:8F:EB:37:7F:D6:0B:AF:54:8C:A7:42:9C X509v3 Authority Key Identifier: keyid:D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/jOFltdK9zs-P6zd_1guvVIynQpw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.237.192.0-178.237.205.255 178.237.207.0/24 IPv6: 2a04:7e01::-2a04:7e03:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 08:3c:e4:5c:90:cc:41:80:dc:22:ae:5a:3c:6e:4f:75:2d:27: 66:46:46:19:6b:5b:ad:a5:59:27:73:0c:79:a7:03:e8:9b:14: c4:8f:6d:b8:f1:c7:89:da:e8:95:c5:32:82:2a:8a:43:41:ac: bd:8c:31:07:5f:ed:c0:eb:ac:0c:f0:f3:3e:a5:14:b0:1f:1f: 8c:cf:7a:a9:6e:df:fd:14:20:0a:6f:ab:d3:33:36:2a:a0:5f: 80:67:17:74:04:c8:ab:46:b7:6c:43:95:99:ef:52:86:7f:12: b4:74:84:e8:b4:f5:c5:1f:73:ba:61:97:d4:86:a0:79:99:fb: 9b:ac:54:ce:52:ca:c8:36:2e:d7:f8:40:34:c9:ee:6a:ec:da: ad:be:96:67:86:da:dc:6e:be:8a:46:75:e9:63:34:8d:2b:bb: 1e:25:e1:d6:71:62:2f:bc:61:27:2d:fc:bf:99:a7:a4:82:1c: 12:ef:f7:f0:1c:05:02:dc:cb:7b:0b:3b:93:9d:ef:6a:4a:8d: 98:13:1b:b0:67:27:ea:99:ca:30:36:b9:9b:1b:30:11:d9:b7: 1e:38:2b:32:95:99:b2:a9:22:06:db:08:42:bc:8d:90:1d:ba: 47:b1:22:c6:56:32:47:f5:8e:c8:6f:7c:46:38:81:84:5c:95: b3:4d:53:6b -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt4ouxlB1nrEGa+GU7xQFPLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OTkyMmNhOGQxMzlhNGQwM2Q2ZDU3Y2JjODE3N2RjMDVm ZWI5ZWMwHhcNMjYwMTAxMDgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2UxNjViNWQyYmRjZWNmOGZlYjM3N2ZkNjBiYWY1NDhjYTc0MjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgTdivue6PeTiAGXxub0xG1tcZmO zdZRWfc9iPJ3iuD/hjxl3IfbGrbpEHo7HaUwZKddfJoS/p3w3Fp2S4c3Nfzni6US ONa7Wh2ST2NaUbGw9w5KHzO47HLNtgGGrM6D/iJb2xuzt6kpXYRju2x6jdDj7drZ IAEsLlnlNPH0g++zKb3WNJ8DugupDRClDeZrZSTp2OwJfWuU0oyiieyP/0EW7IZu SpFFDMvNFI44nfZbVJRtKaNEelo02dCYVhxk0TM5fr8XtkNgoTh2PCqC4SyuRWiB K7iUDQkHV5K7JpKDdSC8S5B6vmZrGrzn/34lhYdkqU6HzpM4qIz92rTB2QIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFIzhZbXSvc7Pj+s3f9YLr1SMp0KcMB8GA1UdIwQY MBaAFNSZIsqNE5pNA9bVfLyBd9wF/rnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUpraXlvMFRtazBEMXRWOHZJRjMzQVgtdWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC81Y2VjYzAtMmE1My00NTAwLTg1YWUt ZThiNjBhMmRkNmI0LzEvak9GbHRkSzl6cy1QNnpkXzFndXZWSXluUXB3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC81Y2VjYzAtMmE1My00NTAwLTg1YWUtZThiNjBhMmRkNmI0 LzEvMUpraXlvMFRtazBEMXRWOHZJRjMzQVgtdWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAaBAIAATAUMAwDBAay7cAD BAGy7cwDBACy7c8wFgQCAAIwEDAOAwUAKgR+AQMFAioEfgAwDQYJKoZIhvcNAQEL BQADggEBAAg85FyQzEGA3CKuWjxuT3UtJ2ZGRhlrW62lWSdzDHmnA+ibFMSPbbjx x4na6JXFMoIqikNBrL2MMQdf7cDrrAzw8z6lFLAfH4zPeqlu3/0UIApvq9MzNiqg X4BnF3QEyKtGt2xDlZnvUoZ/ErR0hOi09cUfc7phl9SGoHmZ+5usVM5Sysg2Ltf4 QDTJ7mrs2q2+lmeG2txuvopGdeljNI0rux4l4dZxYi+8YSct/L+Zp6SCHBLv9/Ac BQLcy3sLO5Od72pKjZgTG7BnJ+qZyjA2uZsbMBHZtx44KzKVmbKpIgbbCEK8jZAd ukexIsZWMkf1jshvfEY4gYRclbNNU2s= -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:43 2026 by rpki-client