This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/x-tD2z3fdr6FYW5SXpTH3H0Udqg.roa File: x-tD2z3fdr6FYW5SXpTH3H0Udqg.roa (raw, json) Hash identifier: 0jG1ZX2ojKVaQu6X2nEDeBL0x9qcWSFAWXwzeHIjezU= Subject key identifier: C7:EB:43:DB:3D:DF:76:BE:85:61:6E:52:5E:94:C7:DC:7D:14:76:A8 Certificate issuer: /CN=ddbe6e0adae8bb478393aab175b638644c74ccb7 Certificate serial: 019B79ED3321524C05A7E06BF61147753E27 Authority key identifier: DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/x-tD2z3fdr6FYW5SXpTH3H0Udqg.roa Signing time: Thu 01 Jan 2026 14:19:06 +0000 ROA not before: Thu 01 Jan 2026 14:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 178.212.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.mft rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:33:21:52:4c:05:a7:e0:6b:f6:11:47:75:3e:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ddbe6e0adae8bb478393aab175b638644c74ccb7 Validity Not Before: Jan 1 14:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7eb43db3ddf76be85616e525e94c7dc7d1476a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e3:33:16:68:36:63:fa:04:27:fa:cc:7f:82: ed:36:06:84:11:d1:a8:de:5a:84:2c:c5:42:43:2f: 6b:96:15:79:3b:44:e0:5a:fa:0e:d0:84:90:65:b8: 28:36:af:53:a7:69:e3:64:ed:e8:48:9c:64:bb:13: f7:dc:55:52:91:11:5e:f7:c1:5f:45:30:e0:15:0c: 1f:0d:10:59:31:82:32:5b:b2:4a:a3:56:3c:23:29: 5a:7f:94:16:3d:6b:53:33:56:42:76:ac:66:30:d5: cf:90:35:a3:b3:21:84:90:f2:b5:c4:55:c9:a7:f8: 40:7f:7a:7b:a3:e2:87:d3:23:62:c4:34:da:06:9b: 5c:13:c3:7b:c6:4e:ed:85:27:ea:57:78:d3:89:2b: 05:e9:0f:90:43:2f:a8:47:79:51:24:4f:fb:d0:25: 1a:0a:c5:37:c7:82:a3:e8:03:20:a8:f3:09:06:e0: 11:bc:3e:6e:5c:e8:46:09:76:30:76:a8:a0:06:d7: cd:3b:2a:fd:86:dd:fa:c2:6c:be:c3:dd:b2:e7:9e: 7f:41:36:80:fb:a0:79:70:e7:77:b8:b7:e1:a2:52: 1c:b8:84:19:6a:84:dd:f7:0d:14:1e:a5:4a:37:4d: 62:f6:5c:a5:31:a5:04:3b:2b:37:7f:2e:00:d0:3d: 5f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:EB:43:DB:3D:DF:76:BE:85:61:6E:52:5E:94:C7:DC:7D:14:76:A8 X509v3 Authority Key Identifier: keyid:DD:BE:6E:0A:DA:E8:BB:47:83:93:AA:B1:75:B6:38:64:4C:74:CC:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b5uCtrou0eDk6qxdbY4ZEx0zLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/x-tD2z3fdr6FYW5SXpTH3H0Udqg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a67b78-58c8-4311-9e69-6baa3b548d23/1/3b5uCtrou0eDk6qxdbY4ZEx0zLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.212.63.0/24 Signature Algorithm: sha256WithRSAEncryption 61:88:5c:1b:bc:c1:29:c2:0d:ae:7a:9e:6a:46:32:32:7b:41: 0f:77:66:4a:a6:1b:b6:ae:80:98:06:95:93:b4:f9:b8:6c:05: 87:7f:66:e9:30:8c:8a:47:e0:e1:b0:9e:ad:b5:d6:5a:73:e4: 05:2d:cc:ed:fe:f1:5d:62:db:6b:34:47:ab:bf:65:7c:3d:24: a1:13:9d:f8:28:0b:d8:64:92:19:4c:8f:dd:3f:c1:d8:5b:16: a3:ab:8f:42:8f:f5:e0:50:59:62:40:8f:75:4f:90:76:9e:8d: 80:8b:d2:c5:12:50:c6:00:08:5d:83:3a:4b:3f:75:de:02:23: 57:bb:d9:d9:dd:60:1f:e4:0f:86:8f:11:d0:00:5d:4c:19:92: 66:ed:6a:74:ee:ce:a3:97:6f:52:96:32:d8:c2:e7:af:98:37: 85:1d:00:8d:bc:8c:7d:08:b9:54:de:20:14:5e:c0:d9:43:aa: 3e:2a:b0:0e:a8:e1:9e:86:ee:41:49:19:bd:21:32:c4:18:13: 91:7e:79:25:d5:72:ea:99:7a:ae:b2:5d:ef:01:a7:2b:e4:24: 6b:11:5b:99:60:71:63:91:8d:bf:4d:03:e5:81:30:bf:1a:6b: bc:a8:83:97:c8:48:46:88:89:70:34:a9:63:b7:9c:d7:5d:af: 47:6d:97:38 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57TMhUkwFp+Br9hFHdT4nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkYmU2ZTBhZGFlOGJiNDc4MzkzYWFiMTc1YjYzODY0NGM3 NGNjYjcwHhcNMjYwMTAxMTQxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2ViNDNkYjNkZGY3NmJlODU2MTZlNTI1ZTk0YzdkYzdkMTQ3NmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2eMzFmg2Y/oEJ/rMf4LtNgaEEdGo 3lqELMVCQy9rlhV5O0TgWvoO0ISQZbgoNq9Tp2njZO3oSJxkuxP33FVSkRFe98Ff RTDgFQwfDRBZMYIyW7JKo1Y8Iylaf5QWPWtTM1ZCdqxmMNXPkDWjsyGEkPK1xFXJ p/hAf3p7o+KH0yNixDTaBptcE8N7xk7thSfqV3jTiSsF6Q+QQy+oR3lRJE/70CUa CsU3x4Kj6AMgqPMJBuARvD5uXOhGCXYwdqigBtfNOyr9ht36wmy+w92y555/QTaA +6B5cOd3uLfholIcuIQZaoTd9w0UHqVKN01i9lylMaUEOys3fy4A0D1fxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMfrQ9s933a+hWFuUl6Ux9x9FHaoMB8GA1UdIwQY MBaAFN2+bgra6LtHg5OqsXW2OGRMdMy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjkt NmJhYTNiNTQ4ZDIzLzEveC10RDJ6M2ZkcjZGWVc1U1hwVEgzSDBVZHFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9hNjdiNzgtNThjOC00MzExLTllNjktNmJhYTNiNTQ4ZDIz LzEvM2I1dUN0cm91MGVEazZxeGRiWTRaRXgwekxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstQ/MA0G CSqGSIb3DQEBCwUAA4IBAQBhiFwbvMEpwg2uep5qRjIye0EPd2ZKphu2roCYBpWT tPm4bAWHf2bpMIyKR+DhsJ6ttdZac+QFLczt/vFdYttrNEerv2V8PSShE534KAvY ZJIZTI/dP8HYWxajq49Cj/XgUFliQI91T5B2no2Ai9LFElDGAAhdgzpLP3XeAiNX u9nZ3WAf5A+GjxHQAF1MGZJm7Wp07s6jl29SljLYwuevmDeFHQCNvIx9CLlU3iAU XsDZQ6o+KrAOqOGehu5BSRm9ITLEGBORfnkl1XLqmXqusl3vAacr5CRrEVuZYHFj kY2/TQPlgTC/Gmu8qIOXyEhGiIlwNKljt5zXXa9HbZc4 -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:38 2026 by rpki-client