This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/gevMbHEcfXcKCEO1f_2KPNmbOdU.roa File: gevMbHEcfXcKCEO1f_2KPNmbOdU.roa (raw, json) Hash identifier: DFIQEnBMCFAFCWvXzdtMNEmyuOvX5dYD/UzJ+deK9CA= Subject key identifier: 81:EB:CC:6C:71:1C:7D:77:0A:08:43:B5:7F:FD:8A:3C:D9:9B:39:D5 Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Certificate serial: 019B7BA39FE08EEAF1B10182FF9E0D771D3A Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/gevMbHEcfXcKCEO1f_2KPNmbOdU.roa Signing time: Thu 01 Jan 2026 22:17:59 +0000 ROA not before: Thu 01 Jan 2026 22:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216074 IP address blocks: 78.158.166.0/24 maxlen: 24 213.195.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:9f:e0:8e:ea:f1:b1:01:82:ff:9e:0d:77:1d:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Validity Not Before: Jan 1 22:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=81ebcc6c711c7d770a0843b57ffd8a3cd99b39d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:6e:d7:24:2f:a9:2c:72:5f:6e:82:33:22:3f: 78:af:72:6a:f5:7a:3a:3a:b2:f8:88:b5:dd:b5:b1: df:b6:32:5a:0d:42:ed:fe:03:f9:c7:f4:03:c1:19: d3:b4:43:22:b7:10:27:27:b7:a1:3a:b9:c7:69:bb: d9:ef:d6:d4:36:20:0a:d1:4a:d4:b7:1e:c2:68:1c: c6:20:48:e5:e8:55:66:1c:49:29:95:18:50:88:52: f5:0d:8e:9f:0e:b9:a3:69:96:ba:04:20:9d:50:1b: d2:0a:f7:5c:bc:29:01:40:58:c3:2c:f8:78:74:d6: 9b:b4:53:c0:3a:38:21:19:37:8b:a5:3e:e4:e2:b8: 05:66:03:b4:cf:b2:d1:92:5d:2b:c3:c3:87:a5:31: 5f:66:c9:f0:cc:ea:1d:c2:33:d9:00:2e:54:68:a8: 4e:d9:7f:f6:bc:83:bd:f6:eb:e1:fa:68:3d:44:27: db:9c:0e:b2:99:29:19:46:2b:af:ac:54:49:36:a7: dc:2e:7c:ff:ca:87:65:ab:b6:84:62:73:92:b7:7a: e8:4b:35:c1:d4:4b:09:97:3d:2b:c9:c4:7f:4f:f1: ce:18:8a:52:f7:9c:ef:78:7a:07:fa:2a:c0:eb:d0: cd:30:35:a2:8b:d6:cd:89:53:24:cd:74:83:21:bf: 50:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:EB:CC:6C:71:1C:7D:77:0A:08:43:B5:7F:FD:8A:3C:D9:9B:39:D5 X509v3 Authority Key Identifier: keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/gevMbHEcfXcKCEO1f_2KPNmbOdU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.158.166.0/24 213.195.23.0/24 Signature Algorithm: sha256WithRSAEncryption 93:84:93:69:8e:d3:f6:d0:6e:9b:9a:03:ca:9f:c7:78:79:44: 1b:bf:c7:dc:05:52:b3:6c:e7:29:17:f6:4f:81:08:7a:7b:c4: c1:6d:8c:4b:d8:0f:dd:72:cc:7b:31:32:4f:01:c7:2e:64:e5: f2:30:96:d9:a5:e1:16:62:ba:64:9c:c1:6d:f0:85:22:06:b2: 3f:40:0b:d2:d8:c1:05:b6:24:1e:33:21:3b:c1:ce:3f:7a:f8: 7d:ee:55:35:51:df:c0:b6:b8:19:2b:62:08:f1:d0:b1:a9:4c: a0:e8:d7:f0:bd:41:c0:a2:08:3d:c6:a0:bc:6d:12:8f:d9:9b: fc:eb:b1:16:93:0b:56:2e:06:0e:65:0f:ff:94:f3:58:98:2d: 5b:0b:2b:31:04:12:7c:a1:f1:b7:0d:15:7b:8b:84:4a:98:b0: 76:9e:1c:be:87:79:8a:98:75:64:20:ff:b7:e0:21:3d:f7:e8: 1e:ac:74:b0:c0:5e:11:75:f4:d5:86:a5:bf:05:1d:fb:39:3f: 8b:9f:78:e4:7a:07:09:10:41:5d:dc:2c:f6:d0:1b:c6:b6:2b: 1d:64:98:10:13:49:33:59:ec:96:23:27:68:1a:8a:e5:ce:2c: 3c:cf:14:0f:36:c6:bb:2f:4c:a5:ef:b2:31:f5:cb:16:2d:b4: 58:08:e3:10 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7o5/gjurxsQGC/54Ndx06MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi YjgwZTEwHhcNMjYwMTAxMjIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MWViY2M2YzcxMWM3ZDc3MGEwODQzYjU3ZmZkOGEzY2Q5OWIzOWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2G7XJC+pLHJfboIzIj94r3Jq9Xo6 OrL4iLXdtbHftjJaDULt/gP5x/QDwRnTtEMitxAnJ7ehOrnHabvZ79bUNiAK0UrU tx7CaBzGIEjl6FVmHEkplRhQiFL1DY6fDrmjaZa6BCCdUBvSCvdcvCkBQFjDLPh4 dNabtFPAOjghGTeLpT7k4rgFZgO0z7LRkl0rw8OHpTFfZsnwzOodwjPZAC5UaKhO 2X/2vIO99uvh+mg9RCfbnA6ymSkZRiuvrFRJNqfcLnz/yodlq7aEYnOSt3roSzXB 1EsJlz0rycR/T/HOGIpS95zveHoH+irA69DNMDWii9bNiVMkzXSDIb9QCwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIHrzGxxHH13CghDtX/9ijzZmznVMB8GA1UdIwQY MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt Y2MyZmFmZTNhOGI0LzEvZ2V2TWJIRWNmWGNLQ0VPMWZfMktQTm1iT2RVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0 LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATp6mAwQA 1cMXMA0GCSqGSIb3DQEBCwUAA4IBAQCThJNpjtP20G6bmgPKn8d4eUQbv8fcBVKz bOcpF/ZPgQh6e8TBbYxL2A/dcsx7MTJPAccuZOXyMJbZpeEWYrpknMFt8IUiBrI/ QAvS2MEFtiQeMyE7wc4/evh97lU1Ud/AtrgZK2II8dCxqUyg6NfwvUHAogg9xqC8 bRKP2Zv867EWkwtWLgYOZQ//lPNYmC1bCysxBBJ8ofG3DRV7i4RKmLB2nhy+h3mK mHVkIP+34CE99+gerHSwwF4RdfTVhqW/BR37OT+Ln3jkegcJEEFd3Cz20BvGtisd ZJgQE0kzWeyWIydoGorlziw8zxQPNsa7L0yl77Ix9csWLbRYCOMQ -----END CERTIFICATE-----Generated at Mon Jan 26 05:30:49 2026 by rpki-client