This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/RfwinOHzalLF3nqeVUn7pJqKZzw.roa File: RfwinOHzalLF3nqeVUn7pJqKZzw.roa (raw, json) Hash identifier: fJfHYnqpQ6E1zT38hGEb3xb9EUxe0gvjSVN8q7zxuzU= Subject key identifier: 45:FC:22:9C:E1:F3:6A:52:C5:DE:7A:9E:55:49:FB:A4:9A:8A:67:3C Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Certificate serial: 019B77C767226EB5B8BADC2A74A63C7A6838 Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/RfwinOHzalLF3nqeVUn7pJqKZzw.roa Signing time: Thu 01 Jan 2026 04:18:35 +0000 ROA not before: Thu 01 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199785 IP address blocks: 178.236.253.0/24 maxlen: 24 178.236.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:67:22:6e:b5:b8:ba:dc:2a:74:a6:3c:7a:68:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Validity Not Before: Jan 1 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45fc229ce1f36a52c5de7a9e5549fba49a8a673c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:14:43:1d:c3:97:f4:3e:75:fe:e4:0f:c3:32: 93:92:f6:dd:54:1d:67:53:75:f4:44:14:a1:5a:ea: bd:cd:48:b0:66:17:62:d1:89:31:ce:b3:5a:cc:42: 36:e2:d1:f8:58:70:33:ba:b3:7d:01:5a:04:ea:a7: 48:eb:ec:c8:64:8e:e5:32:4a:10:99:62:87:24:b7: c6:6b:77:60:17:a4:d0:b0:ee:3e:45:55:8f:3f:7f: e5:b2:0b:c4:38:21:35:d3:b1:08:c8:92:7d:71:f2: fa:8f:cc:ba:77:70:2a:20:fb:f7:f0:eb:cc:f6:4a: b9:28:03:db:ed:d5:8d:c8:86:c6:e4:d2:00:b4:a6: a1:dd:15:6b:3c:db:60:0e:dc:23:d4:0b:a4:75:a3: 54:85:b1:39:f0:ef:74:4c:2b:3e:f3:de:a2:73:cd: 77:ff:a0:60:bf:24:39:59:2d:86:ba:4f:7a:29:8a: ea:7d:0f:89:4c:23:97:e7:aa:cc:ef:c0:dd:9e:78: fa:55:5b:37:c9:c3:ec:56:ba:7d:b2:53:3e:64:fd: b0:70:19:b2:55:41:ab:36:af:ef:bf:cf:56:65:c0: fd:d8:9d:34:3f:8b:a5:ea:28:6b:a2:0f:21:25:cc: 89:b6:59:b5:f3:1d:c6:6b:e3:4a:00:81:ab:93:b4: ae:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FC:22:9C:E1:F3:6A:52:C5:DE:7A:9E:55:49:FB:A4:9A:8A:67:3C X509v3 Authority Key Identifier: keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/RfwinOHzalLF3nqeVUn7pJqKZzw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.236.253.0-178.236.254.255 Signature Algorithm: sha256WithRSAEncryption a1:cb:06:ab:8e:cf:7f:c9:23:25:ac:7d:c6:66:7c:d6:37:e8: a0:24:c0:f3:e6:32:bd:73:b0:19:cf:af:1a:b1:e7:cb:a2:d8: 96:d7:5d:15:2f:fe:cf:a3:1e:39:78:99:cd:d6:92:7f:36:6b: 42:06:9d:4a:70:73:d0:f5:82:fd:b9:99:d0:83:ba:cd:7e:e4: 44:66:32:62:b2:f4:b3:bd:67:46:df:a1:32:e1:d5:e7:96:ea: 14:9e:ed:6c:69:95:93:3e:19:95:8b:f6:a0:22:f7:1f:04:ba: a3:e9:5d:12:05:d8:f4:e9:4d:c3:37:cd:d2:d0:a6:0d:21:16: e7:4d:26:c0:cf:fd:b8:dc:ca:b2:49:72:81:87:ce:d0:c8:f0: e7:7d:bc:91:d3:61:13:d1:2d:c7:30:18:89:b1:db:9b:d7:a5: fa:3a:5d:c5:16:d5:e1:19:dc:50:20:29:36:6f:7d:35:18:e5: 6d:b0:a6:55:ce:ea:87:52:1b:4d:92:24:94:f5:c7:44:ba:98: ea:89:a8:26:ef:d8:d3:51:a2:e5:7c:a7:0e:a0:b9:b6:c9:50: b3:5e:49:3c:e6:f1:04:d9:1c:e0:cd:56:e5:b8:a8:cd:e1:12: fa:9d:e6:e9:24:43:66:30:81:b8:9c:06:ff:96:49:45:86:80: f1:62:1b:50 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3x2cibrW4utwqdKY8emg4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4 NzUwN2MwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWZjMjI5Y2UxZjM2YTUyYzVkZTdhOWU1NTQ5ZmJhNDlhOGE2NzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBRDHcOX9D51/uQPwzKTkvbdVB1n U3X0RBShWuq9zUiwZhdi0YkxzrNazEI24tH4WHAzurN9AVoE6qdI6+zIZI7lMkoQ mWKHJLfGa3dgF6TQsO4+RVWPP3/lsgvEOCE107EIyJJ9cfL6j8y6d3AqIPv38OvM 9kq5KAPb7dWNyIbG5NIAtKah3RVrPNtgDtwj1AukdaNUhbE58O90TCs+896ic813 /6BgvyQ5WS2Guk96KYrqfQ+JTCOX56rM78Ddnnj6VVs3ycPsVrp9slM+ZP2wcBmy VUGrNq/vv89WZcD92J00P4ul6ihrog8hJcyJtlm18x3Ga+NKAIGrk7SuJwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFEX8Ipzh82pSxd56nlVJ+6Saimc8MB8GA1UdIwQY MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt M2ZiYmJhOTI0OWNkLzEvUmZ3aW5PSHphbExGM25xZVZVbjdwSnFLWnp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACy7P0D BACy7P4wDQYJKoZIhvcNAQELBQADggEBAKHLBquOz3/JIyWsfcZmfNY36KAkwPPm Mr1zsBnPrxqx58ui2JbXXRUv/s+jHjl4mc3Wkn82a0IGnUpwc9D1gv25mdCDus1+ 5ERmMmKy9LO9Z0bfoTLh1eeW6hSe7WxplZM+GZWL9qAi9x8EuqPpXRIF2PTpTcM3 zdLQpg0hFudNJsDP/bjcyrJJcoGHztDI8Od9vJHTYRPRLccwGImx25vXpfo6XcUW 1eEZ3FAgKTZvfTUY5W2wplXO6odSG02SJJT1x0S6mOqJqCbv2NNRouV8pw6gubbJ ULNeSTzm8QTZHODNVuW4qM3hEvqd5ukkQ2YwgbicBv+WSUWGgPFiG1A= -----END CERTIFICATE-----Generated at Sun Jan 25 17:33:57 2026 by rpki-client