This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/_rHEyFhBMkve8XY-2u_0M5SvUEY.roa File: _rHEyFhBMkve8XY-2u_0M5SvUEY.roa (raw, json) Hash identifier: 3MBR6pVJ71rnlILr1LVMBWKjPMEZiQ66W90KvCwSbpo= Subject key identifier: FE:B1:C4:C8:58:41:32:4B:DE:F1:76:3E:DA:EF:F4:33:94:AF:50:46 Certificate issuer: /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2 Certificate serial: 019B797E044581850CAF3778DA61F3DDAC5B Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/_rHEyFhBMkve8XY-2u_0M5SvUEY.roa Signing time: Thu 01 Jan 2026 12:17:40 +0000 ROA not before: Thu 01 Jan 2026 12:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60284 IP address blocks: 178.238.0.0/22 maxlen: 24 193.9.27.0/24 maxlen: 24 193.135.96.0/22 maxlen: 24 193.135.96.0/23 maxlen: 23 193.135.98.0/24 maxlen: 24 193.135.99.0/24 maxlen: 32 193.228.197.0/24 maxlen: 24 193.228.198.0/24 maxlen: 24 2a13:a200::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:04:45:81:85:0c:af:37:78:da:61:f3:dd:ac:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2 Validity Not Before: Jan 1 12:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=feb1c4c85841324bdef1763edaeff43394af5046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cf:d2:fc:53:1b:d5:c1:7c:59:ab:2c:10:ba: d6:e5:63:3e:04:dd:e9:5a:70:22:f5:9e:52:0a:85: 95:61:00:2f:4d:96:ca:b5:57:b3:7f:c9:71:ae:c3: d9:be:01:cc:0d:79:4e:75:6d:19:e0:eb:fc:8b:fb: 63:10:6a:94:15:b7:59:dd:eb:74:41:29:f3:1c:06: f6:d0:af:70:03:c3:c8:8a:a9:76:7d:f4:85:1f:24: 2e:d0:1f:bf:84:05:2b:fe:9f:24:be:df:32:1e:2b: 72:55:6b:9a:2e:84:9a:3c:48:45:20:db:a0:93:85: 89:ca:11:d2:42:a6:97:00:8a:a6:8d:9f:8b:a5:2f: 32:94:44:7d:8a:8c:ae:d8:2e:5a:da:25:97:9b:31: 02:fa:40:25:e8:96:ac:9e:f1:9a:41:ed:4f:1e:3a: 88:19:00:58:07:0e:5c:6f:5e:d8:70:8e:35:df:ca: 76:6e:7f:6b:9c:9a:bf:94:99:e9:0b:24:c8:d9:0d: 7d:06:bf:5e:18:cf:12:85:ba:a7:4f:bd:06:80:6d: 1d:f4:74:91:90:5f:b5:35:cf:eb:8a:40:80:06:35: 1e:f7:5e:e3:d2:af:9f:8f:b9:9d:8b:6d:a4:29:20: 04:87:ae:ff:56:89:b9:f7:3a:46:f5:79:06:4e:77: c5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B1:C4:C8:58:41:32:4B:DE:F1:76:3E:DA:EF:F4:33:94:AF:50:46 X509v3 Authority Key Identifier: keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/_rHEyFhBMkve8XY-2u_0M5SvUEY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.238.0.0/22 193.9.27.0/24 193.135.96.0/22 193.228.197.0-193.228.198.255 IPv6: 2a13:a200::/29 Signature Algorithm: sha256WithRSAEncryption 79:5c:b7:d7:14:05:a6:21:92:f8:88:13:a7:c5:4b:43:e1:ee: 46:06:ce:1c:30:5a:65:98:49:27:ec:86:00:c7:bb:ed:79:62: 0b:bb:8d:e1:22:e2:16:00:e3:2d:76:8b:76:fe:e3:01:57:65: d3:9b:62:0b:0a:c6:cb:27:8a:f4:33:2d:52:51:60:fd:7e:ad: 1f:5c:32:66:b4:ef:5a:73:a3:cb:ab:8b:16:56:cd:58:06:1c: d4:c8:c8:f8:28:71:80:a4:ed:fb:24:c0:86:77:ba:55:20:d0: c0:ac:5b:ef:61:83:ac:28:fc:c2:3a:f4:b4:1e:d1:a6:44:5a: 8d:f3:38:6f:c4:cf:8a:2b:a1:de:d5:59:4a:d0:3d:fc:27:65: 53:63:08:71:65:c2:cc:74:b7:33:4f:69:94:3c:15:9b:ef:8e: 4c:8b:dc:f0:e9:c5:f5:f7:03:7c:9d:f3:ad:65:92:a2:27:50: d3:10:0a:45:0c:6e:40:f8:d6:a1:2c:15:42:b3:9e:a0:ee:93: 9d:1a:57:a6:a5:69:fb:58:0e:12:6d:2b:db:9f:89:31:66:1d: 14:54:25:03:85:de:37:6f:51:67:d1:c0:25:6b:5f:ab:61:27: 62:85:7b:07:d2:d5:f1:d1:9a:17:1f:b2:e2:b4:05:2a:29:81: ad:a2:7d:1e -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt5fgRFgYUMrzd42mHz3axbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZTYzNmZmNTIzZTVmMzczNDIyN2YzM2M0NGMyZTUwZmY4 ZDFlZTIwHhcNMjYwMTAxMTIxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZWIxYzRjODU4NDEzMjRiZGVmMTc2M2VkYWVmZjQzMzk0YWY1MDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc/S/FMb1cF8WassELrW5WM+BN3p WnAi9Z5SCoWVYQAvTZbKtVezf8lxrsPZvgHMDXlOdW0Z4Ov8i/tjEGqUFbdZ3et0 QSnzHAb20K9wA8PIiql2ffSFHyQu0B+/hAUr/p8kvt8yHityVWuaLoSaPEhFINug k4WJyhHSQqaXAIqmjZ+LpS8ylER9ioyu2C5a2iWXmzEC+kAl6JasnvGaQe1PHjqI GQBYBw5cb17YcI4138p2bn9rnJq/lJnpCyTI2Q19Br9eGM8ShbqnT70GgG0d9HSR kF+1Nc/rikCABjUe917j0q+fj7mdi22kKSAEh67/Vom59zpG9XkGTnfFywIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFP6xxMhYQTJL3vF2Ptrv9DOUr1BGMB8GA1UdIwQY MBaAFL3mNv9SPl83NCJ/M8RMLlD/jR7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYt N2JmYjQzODFhYjU0LzEvX3JIRXlGaEJNa3ZlOFhZLTJ1XzBNNVN2VUVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wYzQzOTItMjc1NC00ZTMzLWEwMmYtN2JmYjQzODFhYjU0 LzEvdmVZMl8xSS1YemMwSW44enhFd3VVUC1OSHVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQCsu4AAwQA wQkbAwQCwYdgMAwDBADB5MUDBADB5MYwDQQCAAIwBwMFAyoTogAwDQYJKoZIhvcN AQELBQADggEBAHlct9cUBaYhkviIE6fFS0Ph7kYGzhwwWmWYSSfshgDHu+15Ygu7 jeEi4hYA4y12i3b+4wFXZdObYgsKxssnivQzLVJRYP1+rR9cMma071pzo8urixZW zVgGHNTIyPgocYCk7fskwIZ3ulUg0MCsW+9hg6wo/MI69LQe0aZEWo3zOG/Ez4or od7VWUrQPfwnZVNjCHFlwsx0tzNPaZQ8FZvvjkyL3PDpxfX3A3yd861lkqInUNMQ CkUMbkD41qEsFUKznqDuk50aV6alaftYDhJtK9ufiTFmHRRUJQOF3jdvUWfRwCVr X6thJ2KFewfS1fHRmhcfsuK0BSopga2ifR4= -----END CERTIFICATE-----Generated at Mon Jan 26 11:27:00 2026 by rpki-client