This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/SB2qbaOdh7ZnvTo3d9-1rReC-O8.roa File: SB2qbaOdh7ZnvTo3d9-1rReC-O8.roa (raw, json) Hash identifier: K48t7pi0aoEqOYKb47PbaJcr/GnhGXsIRIQ+zbZ9rrg= Subject key identifier: 48:1D:AA:6D:A3:9D:87:B6:67:BD:3A:37:77:DF:B5:AD:17:82:F8:EF Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Certificate serial: 019B77C76C84A5BC30E21258E77F7DB754C3 Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/SB2qbaOdh7ZnvTo3d9-1rReC-O8.roa Signing time: Thu 01 Jan 2026 04:18:36 +0000 ROA not before: Thu 01 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215829 IP address blocks: 178.236.240.0/24 maxlen: 24 178.236.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:6c:84:a5:bc:30:e2:12:58:e7:7f:7d:b7:54:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c Validity Not Before: Jan 1 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=481daa6da39d87b667bd3a3777dfb5ad1782f8ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0b:4b:10:68:69:53:04:e1:a6:1f:ce:0f:b6: 91:35:db:f2:53:f9:f0:31:fd:2a:cb:19:08:e4:aa: 3f:f9:93:63:81:7f:a3:d7:d2:db:3a:fe:fe:ac:77: 46:83:28:51:a8:1e:66:d4:2a:88:d7:80:49:85:07: db:8e:79:00:ea:50:9a:47:c9:de:aa:97:ed:d0:cd: d6:a0:e1:cc:f4:0b:65:ae:0f:5b:65:4e:f0:76:88: c1:2d:c9:c8:97:0d:68:0b:03:63:92:f2:80:be:cd: 7e:99:c6:28:99:2d:84:4f:3f:37:dd:cd:44:f6:fa: 93:97:c5:c4:5a:e6:58:e4:82:3e:2f:ac:53:3b:58: 0a:7d:91:ba:07:7d:d0:78:7c:8f:29:b3:70:2c:97: ef:ef:77:15:1b:f1:30:62:b2:fc:d9:94:eb:8f:e1: a9:ce:b8:1c:d5:a8:fd:5f:e3:df:67:07:1b:07:2b: 30:52:d1:af:c3:8e:c9:46:a6:70:15:ff:9d:05:b8: 5d:61:e0:2f:1c:a9:72:74:0a:62:14:a9:24:ff:2b: a6:16:ec:e2:a0:f4:50:0e:fd:75:e2:c1:0f:ba:04: 04:a0:8b:e9:e0:1b:7e:c0:a7:2b:b0:76:9f:2c:53: 55:20:30:53:e2:86:e1:9f:b4:84:27:0f:f3:f3:dd: 14:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1D:AA:6D:A3:9D:87:B6:67:BD:3A:37:77:DF:B5:AD:17:82:F8:EF X509v3 Authority Key Identifier: keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/SB2qbaOdh7ZnvTo3d9-1rReC-O8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.236.240.0/24 178.236.245.0/24 Signature Algorithm: sha256WithRSAEncryption 44:dd:43:42:7e:06:c9:75:14:e6:32:b8:a2:e7:12:43:b4:a8: b8:d9:cc:5f:56:98:47:e7:a8:23:5b:fc:5d:79:b8:06:0e:77: 5e:80:9f:45:d1:8d:a0:6d:a6:82:74:5b:33:da:78:1a:34:23: f0:19:2d:55:fd:08:d4:3e:c2:be:71:17:1a:26:dd:a0:48:a2: 69:00:46:09:cd:3d:da:4c:89:30:f5:2b:57:04:6f:7d:5e:ec: 38:0f:d8:1f:e4:4b:2e:f7:9f:7d:86:02:41:5a:00:0f:3d:05: b4:a1:74:c9:61:b7:7b:1d:ee:df:98:27:0d:10:a2:a5:89:a7: 10:1a:c9:2a:2d:f2:d0:88:c4:7c:4c:42:22:13:b8:04:95:a4: 99:f4:0e:5c:ca:bf:07:96:23:8d:1b:33:a5:ae:57:ae:e0:48: 17:f0:fb:18:cb:14:37:0b:51:08:71:b8:3f:b3:cd:ac:e2:11: b1:c4:d4:de:c5:a4:09:3d:5d:59:db:08:82:24:b2:ac:a1:b7: a5:6b:32:e8:54:87:5d:cf:23:27:b2:e2:05:97:d7:64:41:69: 32:03:32:0b:5c:32:d6:11:8e:8b:f7:84:e8:7c:2a:76:0e:80: 46:0f:5b:20:c6:ce:b8:81:f8:de:e7:38:6a:43:4c:cf:ac:df: 36:30:14:6f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x2yEpbww4hJY5399t1TDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4 NzUwN2MwHhcNMjYwMTAxMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODFkYWE2ZGEzOWQ4N2I2NjdiZDNhMzc3N2RmYjVhZDE3ODJmOGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AtLEGhpUwThph/OD7aRNdvyU/nw Mf0qyxkI5Ko/+ZNjgX+j19LbOv7+rHdGgyhRqB5m1CqI14BJhQfbjnkA6lCaR8ne qpft0M3WoOHM9Atlrg9bZU7wdojBLcnIlw1oCwNjkvKAvs1+mcYomS2ETz833c1E 9vqTl8XEWuZY5II+L6xTO1gKfZG6B33QeHyPKbNwLJfv73cVG/EwYrL82ZTrj+Gp zrgc1aj9X+PfZwcbByswUtGvw47JRqZwFf+dBbhdYeAvHKlydApiFKkk/yumFuzi oPRQDv114sEPugQEoIvp4Bt+wKcrsHafLFNVIDBT4obhn7SEJw/z890UvQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEgdqm2jnYe2Z706N3ffta0XgvjvMB8GA1UdIwQY MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt M2ZiYmJhOTI0OWNkLzEvU0IycWJhT2RoN1pudlRvM2Q5LTFyUmVDLU84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsuzwAwQA suz1MA0GCSqGSIb3DQEBCwUAA4IBAQBE3UNCfgbJdRTmMrii5xJDtKi42cxfVphH 56gjW/xdebgGDndegJ9F0Y2gbaaCdFsz2ngaNCPwGS1V/QjUPsK+cRcaJt2gSKJp AEYJzT3aTIkw9StXBG99Xuw4D9gf5Esu9599hgJBWgAPPQW0oXTJYbd7He7fmCcN EKKliacQGskqLfLQiMR8TEIiE7gElaSZ9A5cyr8HliONGzOlrleu4EgX8PsYyxQ3 C1EIcbg/s82s4hGxxNTexaQJPV1Z2wiCJLKsobelazLoVIddzyMnsuIFl9dkQWky AzILXDLWEY6L94TofCp2DoBGD1sgxs64gfje5zhqQ0zPrN82MBRv -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:14 2026 by rpki-client