This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/RMuTV-vXrFsXAt5l344yDIEdodg.roa File: RMuTV-vXrFsXAt5l344yDIEdodg.roa (raw, json) Hash identifier: 4Y7+XsWOTPcRpIgGXMuxA5FSDFIupn4tgYoKEVmPgqU= Subject key identifier: 44:CB:93:57:EB:D7:AC:5B:17:02:DE:65:DF:8E:32:0C:81:1D:A1:D8 Certificate issuer: /CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0 Certificate serial: 019B7B35E71222AF4168A098F8A6234B69C3 Authority key identifier: 08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/RMuTV-vXrFsXAt5l344yDIEdodg.roa Signing time: Thu 01 Jan 2026 20:18:08 +0000 ROA not before: Thu 01 Jan 2026 20:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203981 IP address blocks: 178.213.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.mft rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e7:12:22:af:41:68:a0:98:f8:a6:23:4b:69:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08a297f8cfa1ce6d3fe2c526911c468a9a6318d0 Validity Not Before: Jan 1 20:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44cb9357ebd7ac5b1702de65df8e320c811da1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:d5:b3:db:91:33:e1:55:50:da:b5:40:0f:7e: 5f:fe:1a:f8:50:9c:82:77:2f:a0:74:85:1b:41:0b: 03:f6:7c:2f:30:71:0b:70:82:c1:e4:5d:40:80:67: 10:cd:24:ec:1c:65:e6:1e:01:ae:4a:0d:fc:03:2c: 0a:f9:e0:88:27:04:64:65:a1:88:a7:d7:e9:00:82: 1d:3a:22:5e:66:5e:35:ec:f3:55:bb:0b:cd:05:d1: 4f:fd:11:c0:ae:22:2f:47:e5:2f:7b:d3:25:3a:46: c6:95:fa:bd:13:3f:03:85:f0:4d:41:cb:55:a7:fa: 92:71:9e:95:b6:00:b7:38:58:5c:72:66:37:a5:07: 39:98:3b:48:50:07:13:44:c5:68:86:2c:26:38:17: df:e4:a6:63:3d:f0:00:85:f9:a8:b1:e6:67:c1:d4: 0a:40:ce:02:3a:bb:1f:c1:fd:0c:c1:6b:12:73:96: bc:61:18:9e:2e:a6:6a:e9:16:59:da:06:eb:00:87: c2:98:a8:61:7b:04:20:cf:61:94:68:cc:51:4e:dd: d1:5d:3e:0d:ed:f7:f1:cc:72:c9:0f:3c:12:9a:17: e1:17:4c:36:24:f6:6d:dc:f3:a3:95:88:a2:d3:80: b8:af:11:ab:51:e8:d8:dc:11:a7:bd:cc:32:2c:b0: 5d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CB:93:57:EB:D7:AC:5B:17:02:DE:65:DF:8E:32:0C:81:1D:A1:D8 X509v3 Authority Key Identifier: keyid:08:A2:97:F8:CF:A1:CE:6D:3F:E2:C5:26:91:1C:46:8A:9A:63:18:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKKX-M-hzm0_4sUmkRxGippjGNA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/RMuTV-vXrFsXAt5l344yDIEdodg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5f153d-71d9-470a-ba27-971139514bb1/1/CKKX-M-hzm0_4sUmkRxGippjGNA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.213.75.0/24 Signature Algorithm: sha256WithRSAEncryption 71:48:ff:4c:ee:0a:8c:4a:1e:d4:b1:36:77:68:e2:36:8d:85: ea:80:dd:e0:bf:d6:4d:09:ca:1a:36:e7:b5:15:15:1c:ac:51: ab:41:27:46:3d:86:79:b8:5e:25:cf:c2:81:57:0a:24:10:08: 29:b9:24:22:b9:93:51:40:a6:63:08:96:7b:3a:9b:09:f7:ad: 16:07:2a:3c:a0:1d:d7:a2:cb:0b:dd:60:aa:93:4d:ef:91:d3: 30:98:37:16:1e:48:49:41:b9:e9:6c:2f:9c:82:ef:79:63:0b: d2:47:50:4f:35:d0:51:d9:60:77:66:73:8a:d2:e2:bf:af:8f: 63:14:ae:fa:a4:ac:f6:47:4d:49:ee:84:ae:4f:f3:ec:76:17: fe:da:36:45:6a:8b:88:24:60:37:5d:38:b4:f0:57:f6:9c:48: c4:0f:b2:d6:46:6e:ec:8d:20:5e:3f:ed:47:60:32:b0:76:5c: b8:e7:e6:73:7c:d3:96:49:62:54:58:f4:09:da:c7:d7:29:08: 09:a8:95:8f:fc:53:93:1d:21:15:a8:68:17:05:13:ad:5e:89: ad:d2:e8:1a:bb:22:8c:fe:7f:15:66:72:3d:80:5c:3a:bf:c4: 53:2f:f3:ce:4c:f1:6b:98:2b:64:43:58:3d:05:95:e4:dd:f4: 9d:2a:71:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NecSIq9BaKCY+KYjS2nDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YTI5N2Y4Y2ZhMWNlNmQzZmUyYzUyNjkxMWM0NjhhOWE2 MzE4ZDAwHhcNMjYwMTAxMjAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGNiOTM1N2ViZDdhYzViMTcwMmRlNjVkZjhlMzIwYzgxMWRhMWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49Wz25Ez4VVQ2rVAD35f/hr4UJyC dy+gdIUbQQsD9nwvMHELcILB5F1AgGcQzSTsHGXmHgGuSg38AywK+eCIJwRkZaGI p9fpAIIdOiJeZl417PNVuwvNBdFP/RHAriIvR+Uve9MlOkbGlfq9Ez8DhfBNQctV p/qScZ6VtgC3OFhccmY3pQc5mDtIUAcTRMVohiwmOBff5KZjPfAAhfmoseZnwdQK QM4COrsfwf0MwWsSc5a8YRieLqZq6RZZ2gbrAIfCmKhhewQgz2GUaMxRTt3RXT4N 7ffxzHLJDzwSmhfhF0w2JPZt3POjlYii04C4rxGrUejY3BGnvcwyLLBdSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFETLk1fr16xbFwLeZd+OMgyBHaHYMB8GA1UdIwQY MBaAFAiil/jPoc5tP+LFJpEcRoqaYxjQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0tLWC1NLWh6bTBfNHNVbWtSeEdpcHBqR05BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS81ZjE1M2QtNzFkOS00NzBhLWJhMjct OTcxMTM5NTE0YmIxLzEvUk11VFYtdlhyRnNYQXQ1bDM0NHlESUVkb2RnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS81ZjE1M2QtNzFkOS00NzBhLWJhMjctOTcxMTM5NTE0YmIx LzEvQ0tLWC1NLWh6bTBfNHNVbWtSeEdpcHBqR05BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAstVLMA0G CSqGSIb3DQEBCwUAA4IBAQBxSP9M7gqMSh7UsTZ3aOI2jYXqgN3gv9ZNCcoaNue1 FRUcrFGrQSdGPYZ5uF4lz8KBVwokEAgpuSQiuZNRQKZjCJZ7OpsJ960WByo8oB3X ossL3WCqk03vkdMwmDcWHkhJQbnpbC+cgu95YwvSR1BPNdBR2WB3ZnOK0uK/r49j FK76pKz2R01J7oSuT/Psdhf+2jZFaouIJGA3XTi08Ff2nEjED7LWRm7sjSBeP+1H YDKwdly45+ZzfNOWSWJUWPQJ2sfXKQgJqJWP/FOTHSEVqGgXBROtXomt0ugauyKM /n8VZnI9gFw6v8RTL/POTPFrmCtkQ1g9BZXk3fSdKnFE -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:57 2026 by rpki-client