This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/0iH43Q4bdkgLbnsEHNM0XIwWQ5s.roa File: 0iH43Q4bdkgLbnsEHNM0XIwWQ5s.roa (raw, json) Hash identifier: bxo9OIZoi8IN/fQL03vCLDxAyd4172KoQ8X8ciK25Oc= Subject key identifier: D2:21:F8:DD:0E:1B:76:48:0B:6E:7B:04:1C:D3:34:5C:8C:16:43:9B Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1 Certificate serial: 019B79EBF46BC24E14C9AC2BF0F2AAB8DFD5 Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/0iH43Q4bdkgLbnsEHNM0XIwWQ5s.roa Signing time: Thu 01 Jan 2026 14:17:45 +0000 ROA not before: Thu 01 Jan 2026 14:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49091 IP address blocks: 178.172.150.0/24 maxlen: 24 178.172.253.0/24 maxlen: 24 185.70.14.0/24 maxlen: 24 185.70.15.0/24 maxlen: 24 217.21.38.0/24 maxlen: 24 217.21.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:eb:f4:6b:c2:4e:14:c9:ac:2b:f0:f2:aa:b8:df:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1 Validity Not Before: Jan 1 14:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d221f8dd0e1b76480b6e7b041cd3345c8c16439b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c8:c4:da:f5:ee:ad:30:cd:39:d9:e1:b4:f3: 87:ea:5d:67:cb:55:1f:7c:b9:af:f2:e5:da:25:f0: b2:24:2f:9b:4e:27:f1:fb:6d:25:cf:d6:f1:07:28: 61:cf:d7:95:1c:d3:27:7a:53:55:9c:95:ee:73:f1: da:eb:b0:cb:93:62:45:5c:e3:99:6a:b3:0d:f8:ec: e1:ca:8a:d5:db:3e:c5:4e:de:6c:82:1c:57:0b:a8: 22:bc:e8:39:03:69:f0:c0:be:61:c6:3c:13:27:d6: 3b:50:06:9f:04:e0:ca:26:5e:0b:0d:60:74:b7:92: 9c:af:01:e3:69:d4:cf:11:cf:5d:e4:ac:b3:b9:63: 29:ea:1a:05:71:0d:4a:c5:50:2f:b6:c8:3f:62:af: 83:28:ce:ac:74:2e:24:b0:8f:c9:bb:15:62:52:a4: e2:a7:aa:94:25:18:a8:a6:fb:a2:44:05:88:22:22: 68:3e:df:3b:5d:6c:f2:17:d2:db:d2:20:38:d1:43: 47:a1:b3:46:80:cc:2e:2d:22:c7:5c:1f:e1:11:4a: d3:90:0f:e3:21:b5:3f:61:c9:5c:77:f5:81:2d:36: 10:90:51:7b:8c:7a:1d:ab:2d:2f:75:b9:47:bc:72: 71:f3:3f:21:6d:06:c6:ba:f7:b8:60:56:bb:f3:f9: 24:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:21:F8:DD:0E:1B:76:48:0B:6E:7B:04:1C:D3:34:5C:8C:16:43:9B X509v3 Authority Key Identifier: keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/0iH43Q4bdkgLbnsEHNM0XIwWQ5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.172.150.0/24 178.172.253.0/24 185.70.14.0/23 217.21.38.0/23 Signature Algorithm: sha256WithRSAEncryption 09:2c:65:3b:ad:e6:33:e3:a4:98:69:1e:fd:44:68:f9:4e:90: 4f:14:c4:9a:a6:c6:79:e5:27:f2:24:90:e3:13:53:0a:fd:7c: 6d:93:a6:86:3d:c8:b1:e3:1c:b7:0f:a0:21:fc:d8:ae:f6:8f: aa:45:ef:2e:45:ee:c5:33:d7:88:bd:2a:11:6e:ed:12:b6:39: 1d:9b:df:14:7e:e7:7c:45:8f:be:1a:7c:b1:93:0e:33:b0:8d: 5d:94:f8:e9:8a:9f:59:07:4b:eb:90:7e:af:b2:e8:42:2b:9b: ab:7e:31:6e:2f:b3:b8:ae:78:d7:2e:f8:32:6e:2e:03:a0:ae: 08:ac:d0:dc:9a:a2:7f:78:aa:bb:52:00:97:fc:05:1f:ff:7b: 12:8d:69:c5:34:e2:dc:c5:a8:4a:cc:56:18:98:05:19:12:dc: 3b:99:c0:ee:7f:b5:2b:43:a1:a1:c1:c3:94:fc:85:48:f3:66: 9c:2e:96:46:b7:84:f0:ea:c3:91:20:4f:ac:8d:62:fc:d1:96: c5:7d:58:64:5a:c9:03:47:d4:8b:97:5d:4c:ae:3b:54:cd:8e: d5:55:3f:8a:66:ed:be:c9:4a:a6:a5:a3:36:b0:d8:42:54:ff: 21:1e:25:47:24:89:73:d5:a7:30:5c:a7:e2:9e:82:33:09:fb: 19:1f:c2:98 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt56/Rrwk4Uyawr8PKquN/VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj ZmViYzEwHhcNMjYwMTAxMTQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMjIxZjhkZDBlMWI3NjQ4MGI2ZTdiMDQxY2QzMzQ1YzhjMTY0MzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8jE2vXurTDNOdnhtPOH6l1ny1Uf fLmv8uXaJfCyJC+bTifx+20lz9bxByhhz9eVHNMnelNVnJXuc/Ha67DLk2JFXOOZ arMN+OzhyorV2z7FTt5sghxXC6givOg5A2nwwL5hxjwTJ9Y7UAafBODKJl4LDWB0 t5KcrwHjadTPEc9d5KyzuWMp6hoFcQ1KxVAvtsg/Yq+DKM6sdC4ksI/JuxViUqTi p6qUJRiopvuiRAWIIiJoPt87XWzyF9Lb0iA40UNHobNGgMwuLSLHXB/hEUrTkA/j IbU/Yclcd/WBLTYQkFF7jHodqy0vdblHvHJx8z8hbQbGuve4YFa78/kkvwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNIh+N0OG3ZIC257BBzTNFyMFkObMB8GA1UdIwQY MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct YWFiMGU0MTRjYzYzLzEvMGlINDNRNGJka2dMYm5zRUhOTTBYSXdXUTVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAsqyWAwQA sqz9AwQBuUYOAwQB2RUmMA0GCSqGSIb3DQEBCwUAA4IBAQAJLGU7reYz46SYaR79 RGj5TpBPFMSapsZ55SfyJJDjE1MK/Xxtk6aGPcix4xy3D6Ah/Niu9o+qRe8uRe7F M9eIvSoRbu0Stjkdm98Ufud8RY++Gnyxkw4zsI1dlPjpip9ZB0vrkH6vsuhCK5ur fjFuL7O4rnjXLvgybi4DoK4IrNDcmqJ/eKq7UgCX/AUf/3sSjWnFNOLcxahKzFYY mAUZEtw7mcDuf7UrQ6GhwcOU/IVI82acLpZGt4Tw6sORIE+sjWL80ZbFfVhkWskD R9SLl11MrjtUzY7VVT+KZu2+yUqmpaM2sNhCVP8hHiVHJIlz1acwXKfinoIzCfsZ H8KY -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:31 2026 by rpki-client