This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/Iq9lD_A_wVuXIGB9_YCE7m3U36k.roa File: Iq9lD_A_wVuXIGB9_YCE7m3U36k.roa (raw, json) Hash identifier: st8orOWixkeCqgnnv2s4K71CFl64bN16idijAh1uNRg= Subject key identifier: 22:AF:65:0F:F0:3F:C1:5B:97:20:60:7D:FD:80:84:EE:6D:D4:DF:A9 Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Certificate serial: 019B77C76AB4A4362540C57FA790BCF2D783 Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/Iq9lD_A_wVuXIGB9_YCE7m3U36k.roa Signing time: Thu 01 Jan 2026 04:18:36 +0000 ROA not before: Thu 01 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213887 IP address blocks: 178.236.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6a:b4:a4:36:25:40:c5:7f:a7:90:bc:f2:d7:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=22af650ff03fc15b9720607dfd8084ee6dd4dfa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d5:62:81:11:47:33:43:a1:eb:88:8a:52:d4: 3c:d4:04:22:c8:3e:cc:bb:d9:5b:c0:0a:bf:3e:c1: f1:b3:f8:1f:40:e6:df:09:d1:b2:8e:f7:a0:0c:48: e1:75:ea:c5:10:c8:64:c4:61:78:56:18:7f:99:f3: 12:dc:75:82:7c:d9:af:fc:62:d8:8e:fb:5a:03:69: 0b:95:20:47:44:79:36:bf:53:33:b6:34:24:2d:22: 6f:f2:c8:bc:5f:43:28:8d:1c:b1:7d:7a:69:d8:e2: e3:25:15:ea:ee:8f:6c:58:3d:69:05:f8:53:56:cb: a3:6d:e7:d3:d6:e3:c9:8d:8a:a0:b1:cf:db:33:36: 09:c2:36:47:f2:e9:a2:2b:3d:18:9e:c0:7e:e8:52: af:38:66:85:86:bb:65:3a:eb:fd:c3:ef:98:97:41: 34:46:75:5f:a8:e2:12:35:7d:cd:d2:a3:90:cb:3f: b8:f3:c9:70:b0:6a:de:ca:f3:95:e8:83:18:45:db: 9e:e6:f3:84:61:2e:00:d6:e6:cb:68:4b:93:25:bc: 3f:ed:48:f4:d1:55:32:b0:35:44:dc:46:d6:bd:53: 67:a1:e6:9e:fe:ae:e9:c9:ac:0e:a6:6a:14:30:aa: 3c:02:b0:4d:6b:42:ad:64:1f:10:6e:b6:d2:1e:c8: 4a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AF:65:0F:F0:3F:C1:5B:97:20:60:7D:FD:80:84:EE:6D:D4:DF:A9 X509v3 Authority Key Identifier: keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/Iq9lD_A_wVuXIGB9_YCE7m3U36k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.236.254.0/24 Signature Algorithm: sha256WithRSAEncryption ba:bf:1f:2d:13:ad:cd:56:79:9c:c5:bc:a5:5a:4a:a5:51:1c: 0e:07:b0:ae:16:7b:1c:ab:79:2b:ab:67:31:0d:24:f0:32:9a: bf:80:18:66:21:14:4e:42:6b:fc:6e:c7:41:a3:8b:aa:d2:77: a0:f6:2c:07:9a:38:09:09:99:59:0d:b4:d0:10:10:6a:66:74: d7:60:ef:c8:b8:4c:67:54:69:1a:db:3d:12:eb:41:ef:9a:48: 0e:65:90:b6:b1:a8:2e:a0:7e:5f:82:7e:25:dd:f6:84:b5:b8: da:ad:ef:c2:66:46:c9:c6:5f:a2:1a:81:08:10:61:ab:e2:a1: ad:42:e4:60:1c:71:95:e1:84:50:30:ae:35:92:b6:57:4c:c8: 50:ba:46:62:7a:79:7c:13:17:0a:59:06:68:c0:69:4e:e6:90: 76:a3:5e:c7:01:d3:dd:af:9f:25:0d:78:7f:a3:ba:1c:48:54: 1d:d7:d8:d6:9d:57:a4:8e:dc:13:41:1f:25:3b:17:20:62:a7: 6f:a5:31:cf:1f:cf:30:82:25:eb:e4:3d:72:e7:6b:c3:a2:7a: ca:6f:6d:5d:64:6f:ce:4b:f5:30:7f:d1:24:69:a7:60:8a:88: 82:08:74:51:a8:40:f3:f6:a1:31:b0:55:f2:f3:7a:c0:e7:09: 05:5a:33:f8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x2q0pDYlQMV/p5C88teDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4 NzUwN2MwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMmFmNjUwZmYwM2ZjMTViOTcyMDYwN2RmZDgwODRlZTZkZDRkZmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9VigRFHM0Oh64iKUtQ81AQiyD7M u9lbwAq/PsHxs/gfQObfCdGyjvegDEjhderFEMhkxGF4Vhh/mfMS3HWCfNmv/GLY jvtaA2kLlSBHRHk2v1MztjQkLSJv8si8X0MojRyxfXpp2OLjJRXq7o9sWD1pBfhT VsujbefT1uPJjYqgsc/bMzYJwjZH8umiKz0YnsB+6FKvOGaFhrtlOuv9w++Yl0E0 RnVfqOISNX3N0qOQyz+488lwsGreyvOV6IMYRdue5vOEYS4A1ubLaEuTJbw/7Uj0 0VUysDVE3EbWvVNnoeae/q7pyawOpmoUMKo8ArBNa0KtZB8QbrbSHshKeQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCKvZQ/wP8FblyBgff2AhO5t1N+pMB8GA1UdIwQY MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt M2ZiYmJhOTI0OWNkLzEvSXE5bERfQV93VnVYSUdCOV9ZQ0U3bTNVMzZrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsuz+MA0G CSqGSIb3DQEBCwUAA4IBAQC6vx8tE63NVnmcxbylWkqlURwOB7CuFnscq3krq2cx DSTwMpq/gBhmIRROQmv8bsdBo4uq0neg9iwHmjgJCZlZDbTQEBBqZnTXYO/IuExn VGka2z0S60HvmkgOZZC2saguoH5fgn4l3faEtbjare/CZkbJxl+iGoEIEGGr4qGt QuRgHHGV4YRQMK41krZXTMhQukZienl8ExcKWQZowGlO5pB2o17HAdPdr58lDXh/ o7ocSFQd19jWnVekjtwTQR8lOxcgYqdvpTHPH88wgiXr5D1y52vDonrKb21dZG/O S/Uwf9EkaadgioiCCHRRqEDz9qExsFXy83rA5wkFWjP4 -----END CERTIFICATE-----Generated at Sun Jan 25 18:08:01 2026 by rpki-client