This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/RraYMVrCuJixNGbRQ0z9NDKek1E.roa File: RraYMVrCuJixNGbRQ0z9NDKek1E.roa (raw, json) Hash identifier: AsevObrrGX9qqWXcQtZtj+F6pyw1NJ4ndfCznJ1rbmc= Subject key identifier: 46:B6:98:31:5A:C2:B8:98:B1:34:66:D1:43:4C:FD:34:32:9E:93:51 Certificate issuer: /CN=ab0a843846156f08e2d8d7bfc91ab350534b9b8a Certificate serial: 019B76EAEA12887320DBC039C76CD66A5235 Authority key identifier: AB:0A:84:38:46:15:6F:08:E2:D8:D7:BF:C9:1A:B3:50:53:4B:9B:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/RraYMVrCuJixNGbRQ0z9NDKek1E.roa Signing time: Thu 01 Jan 2026 00:17:45 +0000 ROA not before: Thu 01 Jan 2026 00:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210393 IP address blocks: 178.211.158.0/24 maxlen: 24 2a12:f480::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.mft rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ea:12:88:73:20:db:c0:39:c7:6c:d6:6a:52:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0a843846156f08e2d8d7bfc91ab350534b9b8a Validity Not Before: Jan 1 00:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46b698315ac2b898b13466d1434cfd34329e9351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1d:45:e6:15:2e:27:2d:0b:ac:8b:6b:e8:71: bf:61:46:7c:ff:b0:57:ad:3e:9f:28:bb:0a:32:fc: ab:ef:f3:b4:ff:57:74:4b:01:8f:93:6e:0d:86:73: 06:55:45:71:a0:9b:be:df:ae:1c:c5:23:65:43:e4: 46:51:a2:48:f7:75:f4:b9:f8:9a:bd:1b:57:d5:77: 8c:c2:5d:48:53:71:fe:06:da:a6:6e:54:bc:7b:64: d1:42:f1:c6:4a:29:24:b6:f3:cb:19:2b:2f:f3:f8: 99:94:b8:5e:3e:0c:0d:49:97:09:49:4b:a3:09:ed: 6c:94:5e:5b:12:7b:5e:b2:4b:5a:68:61:7f:ba:95: b8:de:5c:10:8d:a3:96:83:24:8c:ac:4b:06:5e:fc: d6:b2:a5:3b:b5:b5:c9:76:69:79:85:6b:1f:3f:f4: db:a6:e5:0c:6a:b0:39:85:94:b6:53:b6:de:6f:00: 52:5a:39:17:4d:9e:f6:2a:34:fc:93:87:02:14:86: 80:e3:c3:82:6a:eb:a4:ff:45:48:62:86:e6:87:5a: cf:e0:a2:16:0a:31:21:22:48:21:ce:1c:38:6c:e2: 65:f9:93:b7:c8:93:3c:3d:de:3a:3c:1b:49:fc:93: 6a:30:63:29:32:b9:87:9b:1d:af:a0:21:d3:a3:02: f9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B6:98:31:5A:C2:B8:98:B1:34:66:D1:43:4C:FD:34:32:9E:93:51 X509v3 Authority Key Identifier: keyid:AB:0A:84:38:46:15:6F:08:E2:D8:D7:BF:C9:1A:B3:50:53:4B:9B:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwqEOEYVbwji2Ne_yRqzUFNLm4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/RraYMVrCuJixNGbRQ0z9NDKek1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/b041a6-2911-40dd-b6bb-1d08c267ed9e/1/qwqEOEYVbwji2Ne_yRqzUFNLm4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.211.158.0/24 IPv6: 2a12:f480::/29 Signature Algorithm: sha256WithRSAEncryption 22:74:9e:6f:e0:31:97:f5:b5:31:cc:30:de:54:e6:66:98:70: 38:f3:a8:27:87:b7:b3:06:76:e1:b7:a5:1a:64:f3:42:63:be: 99:bc:b1:6b:70:7b:91:40:da:de:85:f2:aa:72:3e:24:60:b1: 41:0a:2a:f1:f6:31:f0:30:2f:ab:3c:d3:49:c0:41:23:89:74: 66:bc:16:3c:ab:80:92:91:f1:53:f5:dc:c8:51:46:10:a3:67: 56:9c:fa:ab:d4:37:2f:50:33:2b:46:e0:50:65:eb:33:f4:08: 0d:3b:e4:dc:f3:75:d3:b6:bd:7f:b3:f9:25:2f:eb:c8:0f:8e: 5a:81:0c:24:03:60:b8:39:65:74:87:77:95:8f:68:ea:1e:8b: 02:f6:09:10:43:33:bf:97:64:93:6d:cb:f1:78:04:35:3f:32: 0f:5e:41:11:e7:ef:44:16:1a:f0:82:b0:2f:73:3a:1e:dc:2a: 0b:0c:b5:0d:8f:fe:c6:1a:56:64:9f:da:87:01:3c:e9:76:4b: ae:42:7b:a1:b6:9c:ac:7d:69:60:95:82:2f:97:f0:7b:38:2c: 6a:ce:8a:75:23:58:06:73:5d:93:2e:99:cf:f9:f9:3d:0d:88: 49:fa:22:8e:9f:42:a4:a7:46:20:fc:a1:60:19:57:b6:66:d3: 93:81:62:b4 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt26uoSiHMg28A5x2zWalI1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMGE4NDM4NDYxNTZmMDhlMmQ4ZDdiZmM5MWFiMzUwNTM0 YjliOGEwHhcNMjYwMTAxMDAxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmI2OTgzMTVhYzJiODk4YjEzNDY2ZDE0MzRjZmQzNDMyOWU5MzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh1F5hUuJy0LrItr6HG/YUZ8/7BX rT6fKLsKMvyr7/O0/1d0SwGPk24NhnMGVUVxoJu+364cxSNlQ+RGUaJI93X0ufia vRtX1XeMwl1IU3H+BtqmblS8e2TRQvHGSikktvPLGSsv8/iZlLhePgwNSZcJSUuj Ce1slF5bEntesktaaGF/upW43lwQjaOWgySMrEsGXvzWsqU7tbXJdml5hWsfP/Tb puUMarA5hZS2U7bebwBSWjkXTZ72KjT8k4cCFIaA48OCauuk/0VIYobmh1rP4KIW CjEhIkghzhw4bOJl+ZO3yJM8Pd46PBtJ/JNqMGMpMrmHmx2voCHTowL5DQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEa2mDFawriYsTRm0UNM/TQynpNRMB8GA1UdIwQY MBaAFKsKhDhGFW8I4tjXv8kas1BTS5uKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdxRU9FWVZid2ppMk5lX3lScXpVRk5MbTRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iMDQxYTYtMjkxMS00MGRkLWI2YmIt MWQwOGMyNjdlZDllLzEvUnJhWU1WckN1Sml4TkdiUlEwejlOREtlazFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9iMDQxYTYtMjkxMS00MGRkLWI2YmItMWQwOGMyNjdlZDll LzEvcXdxRU9FWVZid2ppMk5lX3lScXpVRk5MbTRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAstOeMA0E AgACMAcDBQMqEvSAMA0GCSqGSIb3DQEBCwUAA4IBAQAidJ5v4DGX9bUxzDDeVOZm mHA486gnh7ezBnbht6UaZPNCY76ZvLFrcHuRQNrehfKqcj4kYLFBCirx9jHwMC+r PNNJwEEjiXRmvBY8q4CSkfFT9dzIUUYQo2dWnPqr1DcvUDMrRuBQZesz9AgNO+Tc 83XTtr1/s/klL+vID45agQwkA2C4OWV0h3eVj2jqHosC9gkQQzO/l2STbcvxeAQ1 PzIPXkER5+9EFhrwgrAvczoe3CoLDLUNj/7GGlZkn9qHATzpdkuuQnuhtpysfWlg lYIvl/B7OCxqzop1I1gGc12TLpnP+fk9DYhJ+iKOn0Kkp0Yg/KFgGVe2ZtOTgWK0 -----END CERTIFICATE-----Generated at Tue Jan 27 03:54:02 2026 by rpki-client