This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/FeRSaI58Ev-Ln_omefqDS1wpOcE.roa File: FeRSaI58Ev-Ln_omefqDS1wpOcE.roa (raw, json) Hash identifier: VtwF2AwRtjXtkXBam50V21xolPQHIDHrw5e0KXt9pQE= Subject key identifier: 15:E4:52:68:8E:7C:12:FF:8B:9F:FA:26:79:FA:83:4B:5C:29:39:C1 Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2 Certificate serial: 019B797E0485B302A365BE4E4BC025C2397F Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/FeRSaI58Ev-Ln_omefqDS1wpOcE.roa Signing time: Thu 01 Jan 2026 12:17:40 +0000 ROA not before: Thu 01 Jan 2026 12:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61108 IP address blocks: 178.238.0.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:04:85:b3:02:a3:65:be:4e:4b:c0:25:c2:39:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2 Validity Not Before: Jan 1 12:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=15e452688e7c12ff8b9ffa2679fa834b5c2939c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:33:c6:ee:47:8f:df:d9:08:ec:b6:a8:e1:d0: 7e:14:9a:b2:00:7e:d4:f6:2c:cf:fa:43:fb:1e:04: a8:5d:b7:bd:d2:e2:d7:e0:a7:c3:96:e3:cb:f4:61: 44:fc:91:1e:e7:81:43:d5:cc:f7:74:f4:23:72:d8: c6:e4:b1:e8:6f:9b:19:20:cf:c0:01:0c:7b:f4:29: 85:87:ce:71:c7:77:8d:e9:1b:6f:fa:3e:02:e2:5d: 6e:d0:9a:81:a1:89:c4:5c:91:3f:43:6a:03:56:78: e0:7e:77:15:cc:c6:36:d1:1c:fd:04:e3:ca:34:4b: 6e:4a:a3:12:f7:f4:ea:5e:42:9c:02:f2:ee:24:ac: e3:c8:c5:5b:10:49:b3:97:a6:a3:3c:3b:c7:2f:3a: b8:63:b1:ae:ef:82:b8:3e:5b:0a:cf:c6:f5:4c:5b: 92:c7:02:b1:00:ef:21:7c:5e:bc:c9:8a:58:17:55: b9:d8:94:83:f2:7b:ba:71:5a:16:9e:8c:44:26:7b: 85:ae:66:73:c7:fb:26:71:71:58:fa:06:0b:53:a5: c9:ca:c8:53:9d:13:bc:4a:b6:8a:4e:a1:99:d1:60: 1d:22:2d:5b:76:4c:cd:25:14:59:1e:04:1c:14:34: f9:27:c9:d6:5b:10:86:7a:88:bd:07:ef:78:7d:4c: f6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E4:52:68:8E:7C:12:FF:8B:9F:FA:26:79:FA:83:4B:5C:29:39:C1 X509v3 Authority Key Identifier: keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/FeRSaI58Ev-Ln_omefqDS1wpOcE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.238.0.0/22 Signature Algorithm: sha256WithRSAEncryption 35:6b:a1:29:27:12:1c:1c:85:14:42:7b:5a:a2:7d:94:ec:7b: 7f:5b:ab:5b:01:24:16:6c:00:4c:dc:27:e5:6b:9a:ba:4e:1e: ac:e8:9d:6d:19:2e:11:e3:d4:99:d7:a8:1b:ce:09:aa:7e:a4: b3:b9:e8:c7:67:bf:f0:d9:09:02:8f:54:ad:64:2e:23:15:38: 2a:e3:da:24:9d:73:77:54:c3:0f:34:85:3e:fd:1d:30:6f:01: 28:46:a7:4a:ac:03:87:ee:bb:b5:4d:d1:b5:ea:d8:29:46:be: 7f:ac:3f:39:14:ab:ab:ad:8a:af:82:da:88:20:47:5a:30:dd: 2c:0a:72:b0:88:d0:76:1d:3d:61:3c:f2:88:68:4a:68:ef:1c: 1c:45:8f:13:db:f2:92:07:8a:d2:3c:8a:76:c9:3f:31:8e:ef: f2:3f:cb:c1:5e:9c:4c:c3:59:3d:96:aa:31:a9:91:ea:69:ff: fc:f8:a4:29:df:d9:4e:a5:12:d6:42:15:a9:91:c5:d7:05:3a: 47:bf:4a:09:54:59:b5:63:03:75:8a:65:d3:19:cc:6b:87:ea: 27:9c:c8:1b:55:55:ec:51:31:3e:01:f6:e2:91:1c:c3:18:af: 39:a4:4a:61:4d:d9:8b:7b:04:49:94:22:46:ac:3d:59:09:ed: f9:3b:c3:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fgSFswKjZb5OS8Alwjl/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZTYzNmZmNTIzZTVmMzczNDIyN2YzM2M0NGMyZTUwZmY4 ZDFlZTIwHhcNMjYwMTAxMTIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxNWU0NTI2ODhlN2MxMmZmOGI5ZmZhMjY3OWZhODM0YjVjMjkzOWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDPG7keP39kI7Lao4dB+FJqyAH7U 9izP+kP7HgSoXbe90uLX4KfDluPL9GFE/JEe54FD1cz3dPQjctjG5LHob5sZIM/A AQx79CmFh85xx3eN6Rtv+j4C4l1u0JqBoYnEXJE/Q2oDVnjgfncVzMY20Rz9BOPK NEtuSqMS9/TqXkKcAvLuJKzjyMVbEEmzl6ajPDvHLzq4Y7Gu74K4PlsKz8b1TFuS xwKxAO8hfF68yYpYF1W52JSD8nu6cVoWnoxEJnuFrmZzx/smcXFY+gYLU6XJyshT nRO8SraKTqGZ0WAdIi1bdkzNJRRZHgQcFDT5J8nWWxCGeoi9B+94fUz2PwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBXkUmiOfBL/i5/6Jnn6g0tcKTnBMB8GA1UdIwQY MBaAFL3mNv9SPl83NCJ/M8RMLlD/jR7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYt N2JmYjQzODFhYjU0LzEvRmVSU2FJNThFdi1Mbl9vbWVmcURTMXdwT2NFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYtN2JmYjQzODFhYjU0 LzEvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsu4AMA0G CSqGSIb3DQEBCwUAA4IBAQA1a6EpJxIcHIUUQntaon2U7Ht/W6tbASQWbABM3Cfl a5q6Th6s6J1tGS4R49SZ16gbzgmqfqSzuejHZ7/w2QkCj1StZC4jFTgq49oknXN3 VMMPNIU+/R0wbwEoRqdKrAOH7ru1TdG16tgpRr5/rD85FKurrYqvgtqIIEdaMN0s CnKwiNB2HT1hPPKIaEpo7xwcRY8T2/KSB4rSPIp2yT8xju/yP8vBXpxMw1k9lqox qZHqaf/8+KQp39lOpRLWQhWpkcXXBTpHv0oJVFm1YwN1imXTGcxrh+onnMgbVVXs UTE+AfbikRzDGK85pEphTdmLewRJlCJGrD1ZCe35O8N1 -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:53 2026 by rpki-client