This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/dHldAtNYV4t048YemeLaddoxAKM.roa File: dHldAtNYV4t048YemeLaddoxAKM.roa (raw, json) Hash identifier: tEMIhM30IigRqNGpU/NdvDlUsc/epVuY00PjM4/BZEw= Subject key identifier: 74:79:5D:02:D3:58:57:8B:74:E3:C6:1E:99:E2:DA:75:DA:31:00:A3 Certificate issuer: /CN=b1267a51acb66f2991bea5243fe388068971a1f1 Certificate serial: 019B7C130CB7FE3C8C9AB5D8F769F25745E3 Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/dHldAtNYV4t048YemeLaddoxAKM.roa Signing time: Fri 02 Jan 2026 00:19:41 +0000 ROA not before: Fri 02 Jan 2026 00:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 28709 IP address blocks: 128.140.170.0/24 maxlen: 24 178.237.21.0/24 maxlen: 24 178.237.22.0/24 maxlen: 24 178.237.24.0/24 maxlen: 24 178.237.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:0c:b7:fe:3c:8c:9a:b5:d8:f7:69:f2:57:45:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1 Validity Not Before: Jan 2 00:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74795d02d358578b74e3c61e99e2da75da3100a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1f:88:41:50:34:ba:ed:f2:e5:1d:b8:5b:41: 52:e6:31:96:52:3a:9e:6e:ae:0a:c3:34:21:1e:e9: c5:d6:71:0e:93:63:ee:92:b9:33:bd:8c:0c:21:06: cd:82:01:2e:34:d8:b4:09:54:b1:d3:81:9a:dd:82: f2:60:53:de:21:35:3b:7d:1b:78:fa:d8:b0:76:b2: 29:39:ab:c4:b7:43:01:6a:e3:e5:24:52:a1:18:51: 76:16:ab:eb:b1:07:6d:e0:27:67:84:eb:59:cb:16: ec:0d:f0:60:55:65:d9:9e:7d:a2:1a:6c:25:7a:43: cf:3a:31:c0:10:89:7e:21:8f:08:46:ed:b1:54:9a: f9:4e:21:fb:06:f3:55:e0:ee:2e:98:b1:84:0a:3e: bb:6f:ea:cb:8a:47:9d:9e:94:34:4d:b9:ad:1a:5f: f7:55:a6:8d:c0:55:97:6e:91:e8:23:de:a1:60:ca: 93:fb:61:40:e2:9a:1f:4b:69:2a:31:95:5e:61:40: eb:7c:bf:ce:06:a6:12:95:bc:b3:78:58:21:0b:fd: b7:d6:03:60:ba:75:af:aa:75:7e:58:8d:3d:6e:63: f0:65:84:a5:03:f0:84:9b:50:fd:84:46:5b:8c:00: 10:ee:88:d6:6f:00:58:5f:ce:08:d2:df:b1:b5:9a: 1b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:79:5D:02:D3:58:57:8B:74:E3:C6:1E:99:E2:DA:75:DA:31:00:A3 X509v3 Authority Key Identifier: keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/dHldAtNYV4t048YemeLaddoxAKM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 128.140.170.0/24 178.237.21.0-178.237.22.255 178.237.24.0/24 178.237.28.0/24 Signature Algorithm: sha256WithRSAEncryption 39:88:51:01:7a:91:55:8f:75:38:1d:82:76:80:b6:22:1d:c2: f2:dc:19:84:9a:86:c2:8a:19:9e:b8:9a:67:3c:6e:46:3a:fd: 68:d6:da:d3:af:85:b1:1a:bf:49:38:5c:56:74:73:89:ac:a4: 11:d4:65:84:d2:ef:d3:5f:4f:6a:ad:e6:f9:43:61:53:67:95: bf:3d:df:24:4d:39:5d:e5:1d:a0:b0:ef:02:31:4b:89:e4:bd: 12:6e:ea:b3:8b:69:9a:24:3d:53:8d:45:d0:4e:56:4a:09:f0: 27:18:38:8f:4a:54:3e:80:c7:b2:8c:1e:e2:15:8a:26:01:e6: 7c:36:5e:6a:a8:9f:87:ff:79:2a:74:65:dc:42:e0:de:88:66: 22:6c:e6:07:14:85:39:b1:9f:61:3b:2e:0b:19:11:8f:cc:e6: fa:d3:9d:3d:60:65:f8:40:35:01:d8:be:67:1d:41:a3:dc:20: 6e:ee:3b:a9:ac:22:97:81:b3:75:4f:93:b9:6b:2d:48:b0:67: 9e:57:92:27:78:62:3e:e0:d5:5e:dd:8b:ee:cf:bd:3b:8e:3c: ac:a2:b9:57:a2:2e:21:1b:04:7a:95:99:11:ad:6b:b6:ef:80: 45:b6:16:d5:2e:8a:b0:cc:cc:6d:29:fd:fb:c7:c9:a1:3d:cf: 76:f2:09:7f -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt8Ewy3/jyMmrXY92nyV0XjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxMjY3YTUxYWNiNjZmMjk5MWJlYTUyNDNmZTM4ODA2ODk3 MWExZjEwHhcNMjYwMTAyMDAxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDc5NWQwMmQzNTg1NzhiNzRlM2M2MWU5OWUyZGE3NWRhMzEwMGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx+IQVA0uu3y5R24W0FS5jGWUjqe bq4KwzQhHunF1nEOk2PukrkzvYwMIQbNggEuNNi0CVSx04Ga3YLyYFPeITU7fRt4 +tiwdrIpOavEt0MBauPlJFKhGFF2FqvrsQdt4CdnhOtZyxbsDfBgVWXZnn2iGmwl ekPPOjHAEIl+IY8IRu2xVJr5TiH7BvNV4O4umLGECj67b+rLikednpQ0TbmtGl/3 VaaNwFWXbpHoI96hYMqT+2FA4pofS2kqMZVeYUDrfL/OBqYSlbyzeFghC/231gNg unWvqnV+WI09bmPwZYSlA/CEm1D9hEZbjAAQ7ojWbwBYX84I0t+xtZobfwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFHR5XQLTWFeLdOPGHpni2nXaMQCjMB8GA1UdIwQY MBaAFLEmelGstm8pkb6lJD/jiAaJcaHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1NaNlVheTJieW1SdnFVa1AtT0lCb2x4b2ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kNzRjYTItM2RlNi00YjY5LWEwMDAt OTRkMWI4OWY4Y2IyLzEvZEhsZEF0TllWNHQwNDhZZW1lTGFkZG94QUtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9kNzRjYTItM2RlNi00YjY5LWEwMDAtOTRkMWI4OWY4Y2Iy LzEvc1NaNlVheTJieW1SdnFVa1AtT0lCb2x4b2ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAgIyqMAwD BACy7RUDBACy7RYDBACy7RgDBACy7RwwDQYJKoZIhvcNAQELBQADggEBADmIUQF6 kVWPdTgdgnaAtiIdwvLcGYSahsKKGZ64mmc8bkY6/WjW2tOvhbEav0k4XFZ0c4ms pBHUZYTS79NfT2qt5vlDYVNnlb893yRNOV3lHaCw7wIxS4nkvRJu6rOLaZokPVON RdBOVkoJ8CcYOI9KVD6Ax7KMHuIViiYB5nw2Xmqon4f/eSp0ZdxC4N6IZiJs5gcU hTmxn2E7LgsZEY/M5vrTnT1gZfhANQHYvmcdQaPcIG7uO6msIpeBs3VPk7lrLUiw Z55Xkid4Yj7g1V7di+7PvTuOPKyiuVeiLiEbBHqVmRGta7bvgEW2FtUuirDMzG0p /fvHyaE9z3byCX8= -----END CERTIFICATE-----Generated at Mon Jan 26 12:55:05 2026 by rpki-client