This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/7uFtX_Iqs3iX6JSdIm7F1nYVdbQ.roa File: 7uFtX_Iqs3iX6JSdIm7F1nYVdbQ.roa (raw, json) Hash identifier: 9/Cnn9Mz/GVeQ/OrX2MtzdspTFn1KWilYOYP/ODpG8E= Subject key identifier: EE:E1:6D:5F:F2:2A:B3:78:97:E8:94:9D:22:6E:C5:D6:76:15:75:B4 Certificate issuer: /CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5 Certificate serial: 019B78A2127CF32254E809361F41480F6DF4 Authority key identifier: E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/7uFtX_Iqs3iX6JSdIm7F1nYVdbQ.roa Signing time: Thu 01 Jan 2026 08:17:26 +0000 ROA not before: Thu 01 Jan 2026 08:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198268 IP address blocks: 178.175.182.0/23 maxlen: 23 178.175.182.0/24 maxlen: 24 178.175.183.0/24 maxlen: 24 2a14:2b40::/29 maxlen: 29 2a14:2b40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.mft rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:12:7c:f3:22:54:e8:09:36:1f:41:48:0f:6d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8f99cd884fb5cbab3f3b34e17a80a48adec3fe5 Validity Not Before: Jan 1 08:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=eee16d5ff22ab37897e8949d226ec5d6761575b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:be:b9:fc:76:01:4b:f7:a6:a4:7d:d9:dc:de: 29:21:32:68:cb:10:b9:3b:25:1d:98:0b:7a:82:69: 00:fa:cd:28:0d:db:d8:da:b5:95:07:38:19:a8:ec: c0:7e:dd:18:b1:e9:16:7b:33:a1:98:20:27:24:81: 9a:18:bb:61:a5:24:a2:0f:fa:e8:5c:41:e9:1a:19: ef:62:c0:80:0a:e7:c7:a3:ee:23:26:11:7d:ac:cb: 8e:c6:79:c1:f3:c9:d1:3f:9e:f4:fa:d7:4d:3a:db: 4b:77:c1:60:42:3a:7a:5e:a3:6d:eb:69:f8:e4:a9: 9e:a3:db:16:40:31:16:3c:70:7f:32:f6:9d:35:09: 4c:f6:07:0d:11:8f:1a:af:dc:38:25:20:1d:0c:a9: 5b:7e:dc:76:64:a0:e2:75:d9:0b:b6:b0:2d:df:d4: 43:4a:1e:0b:42:16:2c:49:bf:db:99:d7:7f:e5:da: 52:ba:3e:9f:86:63:5b:b4:1c:e4:f3:b3:4c:54:8b: 9e:94:4b:cc:5d:32:4d:54:8d:e6:56:1e:97:f8:f8: cc:c3:d1:f9:04:c8:ac:12:96:76:74:25:7f:67:9e: 77:e4:41:f8:79:33:d2:6f:84:10:c6:c0:04:e7:41: e1:7d:82:c6:52:f0:4d:75:e8:ed:15:cd:48:93:da: f5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:E1:6D:5F:F2:2A:B3:78:97:E8:94:9D:22:6E:C5:D6:76:15:75:B4 X509v3 Authority Key Identifier: keyid:E8:F9:9C:D8:84:FB:5C:BA:B3:F3:B3:4E:17:A8:0A:48:AD:EC:3F:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Pmc2IT7XLqz87NOF6gKSK3sP-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/7uFtX_Iqs3iX6JSdIm7F1nYVdbQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d85bc7-58a6-407a-8acb-7509f7f4c5a6/1/6Pmc2IT7XLqz87NOF6gKSK3sP-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.175.182.0/23 IPv6: 2a14:2b40::/29 Signature Algorithm: sha256WithRSAEncryption 5c:2a:42:10:7d:2b:39:8a:93:17:a8:86:3b:9d:95:a2:4d:29: db:39:0a:b1:01:94:3f:07:76:db:ab:45:7b:5e:54:aa:2f:21: 9b:e1:a4:ae:6e:3a:82:87:af:f8:43:11:e2:d8:87:80:02:9a: 3f:8a:ee:4a:d7:e8:4c:10:ef:48:ef:d8:b9:f9:b3:96:f6:b9: 80:cd:62:fe:8f:16:a7:76:03:91:d5:41:39:5a:19:a4:b2:2c: b5:e2:8c:be:65:9c:7d:05:54:4c:6f:7c:e9:9a:9b:46:f6:98: 88:04:c1:b4:d2:5b:9f:11:ac:62:bf:01:1f:cb:37:94:f6:7e: 34:d5:9a:2c:7b:37:09:8d:b3:f7:0a:fb:85:03:18:49:d5:9c: 5c:cf:66:81:d6:b3:c3:c3:91:8e:b6:f7:eb:12:00:a0:e0:c4: 5d:2a:78:60:0d:ad:59:ad:d8:9c:e1:a9:78:c3:1a:ff:94:06: a8:f5:e8:dd:d8:ae:79:50:3e:5e:cc:01:64:9c:a7:c7:a0:d0: 2c:fb:c0:2b:02:1a:df:8b:c0:81:fe:af:78:47:15:f1:37:22: 56:dc:4e:1d:b7:ea:75:7c:57:0f:8f:2e:3d:18:82:38:48:dd: 1c:66:58:de:b7:67:e8:5b:bb:d5:39:a5:9f:76:1f:75:a1:9e: 8f:de:88:99 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4ohJ88yJU6Ak2H0FID230MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4Zjk5Y2Q4ODRmYjVjYmFiM2YzYjM0ZTE3YTgwYTQ4YWRl YzNmZTUwHhcNMjYwMTAxMDgxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZWUxNmQ1ZmYyMmFiMzc4OTdlODk0OWQyMjZlYzVkNjc2MTU3NWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhr65/HYBS/empH3Z3N4pITJoyxC5 OyUdmAt6gmkA+s0oDdvY2rWVBzgZqOzAft0YsekWezOhmCAnJIGaGLthpSSiD/ro XEHpGhnvYsCACufHo+4jJhF9rMuOxnnB88nRP570+tdNOttLd8FgQjp6XqNt62n4 5Kmeo9sWQDEWPHB/MvadNQlM9gcNEY8ar9w4JSAdDKlbftx2ZKDiddkLtrAt39RD Sh4LQhYsSb/bmdd/5dpSuj6fhmNbtBzk87NMVIuelEvMXTJNVI3mVh6X+PjMw9H5 BMisEpZ2dCV/Z5535EH4eTPSb4QQxsAE50HhfYLGUvBNdejtFc1Ik9r1qQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFO7hbV/yKrN4l+iUnSJuxdZ2FXW0MB8GA1UdIwQY MBaAFOj5nNiE+1y6s/OzTheoCkit7D/lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlBtYzJJVDdYTHF6ODdOT0Y2Z0tTSzNzUC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kODViYzctNThhNi00MDdhLThhY2It NzUwOWY3ZjRjNWE2LzEvN3VGdFhfSXFzM2lYNkpTZEltN0YxbllWZGJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9kODViYzctNThhNi00MDdhLThhY2ItNzUwOWY3ZjRjNWE2 LzEvNlBtYzJJVDdYTHF6ODdOT0Y2Z0tTSzNzUC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBsq+2MA0E AgACMAcDBQMqFCtAMA0GCSqGSIb3DQEBCwUAA4IBAQBcKkIQfSs5ipMXqIY7nZWi TSnbOQqxAZQ/B3bbq0V7XlSqLyGb4aSubjqCh6/4QxHi2IeAApo/iu5K1+hMEO9I 79i5+bOW9rmAzWL+jxandgOR1UE5Whmksiy14oy+ZZx9BVRMb3zpmptG9piIBMG0 0lufEaxivwEfyzeU9n401ZosezcJjbP3CvuFAxhJ1Zxcz2aB1rPDw5GOtvfrEgCg 4MRdKnhgDa1Zrdic4al4wxr/lAao9ejd2K55UD5ezAFknKfHoNAs+8ArAhrfi8CB /q94RxXxNyJW3E4dt+p1fFcPjy49GII4SN0cZljet2foW7vVOaWfdh91oZ6P3oiZ -----END CERTIFICATE-----Generated at Sun Jan 25 22:49:28 2026 by rpki-client